1/* 2 * Copyright (c) 1993, 1994, 1995, 1996, 1997 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that: (1) source code distributions 7 * retain the above copyright notice and this paragraph in its entirety, (2) 8 * distributions including binary code include the above copyright notice and 9 * this paragraph in its entirety in the documentation or other materials 10 * provided with the distribution, and (3) all advertising materials mentioning 11 * features or use of this software display the following acknowledgement: 12 * ``This product includes software developed by the University of California, 13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 14 * the University nor the names of its contributors may be used to endorse 15 * or promote products derived from this software without specific prior 16 * written permission. 17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 20 * 21 * This code contributed by Atanu Ghosh (atanu@cs.ucl.ac.uk), 22 * University College London, and subsequently modified by 23 * Guy Harris (guy@alum.mit.edu), Mark Pizzolato 24 * <List-tcpdump-workers@subscriptions.pizzolato.net>, 25 * Mark C. Brown (mbrown@hp.com), and Sagun Shakya <Sagun.Shakya@Sun.COM>. 26 */ 27 28/* 29 * Packet capture routine for DLPI under SunOS 5, HP-UX 9/10/11, and AIX. 30 * 31 * Notes: 32 * 33 * - The DLIOCRAW ioctl() is specific to SunOS. 34 * 35 * - There is a bug in bufmod(7) such that setting the snapshot 36 * length results in data being left of the front of the packet. 37 * 38 * - It might be desirable to use pfmod(7) to filter packets in the 39 * kernel when possible. 40 * 41 * - An older version of the HP-UX DLPI Programmer's Guide, which 42 * I think was advertised as the 10.20 version, used to be available 43 * at 44 * 45 * http://docs.hp.com/hpux/onlinedocs/B2355-90093/B2355-90093.html 46 * 47 * but is no longer available; it can still be found at 48 * 49 * http://h21007.www2.hp.com/dspp/files/unprotected/Drivers/Docs/Refs/B2355-90093.pdf 50 * 51 * in PDF form. 52 * 53 * - The HP-UX 10.x, 11.0, and 11i v1.6 version of the HP-UX DLPI 54 * Programmer's Guide, which I think was once advertised as the 55 * 11.00 version is available at 56 * 57 * http://docs.hp.com/en/B2355-90139/index.html 58 * 59 * - The HP-UX 11i v2 version of the HP-UX DLPI Programmer's Guide 60 * is available at 61 * 62 * http://docs.hp.com/en/B2355-90871/index.html 63 * 64 * - All of the HP documents describe raw-mode services, which are 65 * what we use if DL_HP_RAWDLS is defined. XXX - we use __hpux 66 * in some places to test for HP-UX, but use DL_HP_RAWDLS in 67 * other places; do we support any versions of HP-UX without 68 * DL_HP_RAWDLS? 69 */ 70 71#ifdef HAVE_CONFIG_H 72#include <config.h> 73#endif 74 75#include <sys/types.h> 76#include <sys/time.h> 77#ifdef HAVE_SYS_BUFMOD_H 78#include <sys/bufmod.h> 79#endif 80#include <sys/dlpi.h> 81#ifdef HAVE_SYS_DLPI_EXT_H 82#include <sys/dlpi_ext.h> 83#endif 84#ifdef HAVE_HPUX9 85#include <sys/socket.h> 86#endif 87#ifdef DL_HP_PPA_REQ 88#include <sys/stat.h> 89#endif 90#include <sys/stream.h> 91#if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H) 92#include <sys/systeminfo.h> 93#endif 94 95#ifdef HAVE_HPUX9 96#include <net/if.h> 97#endif 98 99#include <ctype.h> 100#ifdef HAVE_HPUX9 101#include <nlist.h> 102#endif 103#include <errno.h> 104#include <fcntl.h> 105#include <memory.h> 106#include <stdio.h> 107#include <stdlib.h> 108#include <string.h> 109#include <stropts.h> 110#include <unistd.h> 111 112#ifdef HAVE_LIMITS_H 113#include <limits.h> 114#else 115#define INT_MAX 2147483647 116#endif 117 118#include "pcap-int.h" 119#include "dlpisubs.h" 120 121#ifdef HAVE_OS_PROTO_H 122#include "os-proto.h" 123#endif 124 125#if defined(__hpux) 126 /* 127 * HP-UX has a /dev/dlpi device; you open it and set the PPA of the actual 128 * network device you want. 129 */ 130 #define HAVE_DEV_DLPI 131#elif defined(_AIX) 132 /* 133 * AIX has a /dev/dlpi directory, with devices named after the interfaces 134 * underneath it. 135 */ 136 #define PCAP_DEV_PREFIX "/dev/dlpi" 137#elif defined(HAVE_SOLARIS) 138 /* 139 * Solaris has devices named after the interfaces underneath /dev. 140 */ 141 #define PCAP_DEV_PREFIX "/dev" 142#endif 143 144#define MAXDLBUF 8192 145 146/* Forwards */ 147static char *split_dname(char *, u_int *, char *); 148static int dl_doattach(int, int, char *); 149#ifdef DL_HP_RAWDLS 150static int dl_dohpuxbind(int, char *); 151#endif 152static int dlpromiscon(pcap_t *, bpf_u_int32); 153static int dlbindreq(int, bpf_u_int32, char *); 154static int dlbindack(int, char *, char *, int *); 155static int dlokack(int, const char *, char *, char *); 156static int dlinforeq(int, char *); 157static int dlinfoack(int, char *, char *); 158 159#ifdef HAVE_DL_PASSIVE_REQ_T 160static void dlpassive(int, char *); 161#endif 162 163#ifdef DL_HP_RAWDLS 164static int dlrawdatareq(int, const u_char *, int); 165#endif 166static int recv_ack(int, int, const char *, char *, char *, int *); 167static char *dlstrerror(char *, size_t, bpf_u_int32); 168static char *dlprim(char *, size_t, bpf_u_int32); 169#if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H) 170#define GET_RELEASE_BUFSIZE 32 171static void get_release(char *, size_t, bpf_u_int32 *, bpf_u_int32 *, 172 bpf_u_int32 *); 173#endif 174static int send_request(int, char *, int, char *, char *); 175#ifdef HAVE_HPUX9 176static int dlpi_kread(int, off_t, void *, u_int, char *); 177#endif 178#ifdef HAVE_DEV_DLPI 179static int get_dlpi_ppa(int, const char *, u_int, u_int *, char *); 180#endif 181 182/* 183 * Cast a buffer to "union DL_primitives" without provoking warnings 184 * from the compiler. 185 */ 186#define MAKE_DL_PRIMITIVES(ptr) ((union DL_primitives *)(void *)(ptr)) 187 188static int 189pcap_read_dlpi(pcap_t *p, int cnt, pcap_handler callback, u_char *user) 190{ 191 int cc; 192 u_char *bp; 193 int flags; 194 bpf_u_int32 ctlbuf[MAXDLBUF]; 195 struct strbuf ctl = { 196 MAXDLBUF, 197 0, 198 (char *)ctlbuf 199 }; 200 struct strbuf data; 201 202 flags = 0; 203 cc = p->cc; 204 if (cc == 0) { 205 data.buf = (char *)p->buffer + p->offset; 206 data.maxlen = p->bufsize; 207 data.len = 0; 208 do { 209 /* 210 * Has "pcap_breakloop()" been called? 211 */ 212 if (p->break_loop) { 213 /* 214 * Yes - clear the flag that indicates 215 * that it has, and return -2 to 216 * indicate that we were told to 217 * break out of the loop. 218 */ 219 p->break_loop = 0; 220 return (-2); 221 } 222 /* 223 * XXX - check for the DLPI primitive, which 224 * would be DL_HP_RAWDATA_IND on HP-UX 225 * if we're in raw mode? 226 */ 227 ctl.buf = (char *)ctlbuf; 228 ctl.maxlen = MAXDLBUF; 229 ctl.len = 0; 230 if (getmsg(p->fd, &ctl, &data, &flags) < 0) { 231 /* Don't choke when we get ptraced */ 232 switch (errno) { 233 234 case EINTR: 235 cc = 0; 236 continue; 237 238 case EAGAIN: 239 return (0); 240 } 241 pcap_fmt_errmsg_for_errno(p->errbuf, 242 sizeof(p->errbuf), errno, "getmsg"); 243 return (-1); 244 } 245 cc = data.len; 246 } while (cc == 0); 247 bp = (u_char *)p->buffer + p->offset; 248 } else 249 bp = p->bp; 250 251 return (pcap_process_pkts(p, callback, user, cnt, bp, cc)); 252} 253 254static int 255pcap_inject_dlpi(pcap_t *p, const void *buf, size_t size) 256{ 257#ifdef DL_HP_RAWDLS 258 struct pcap_dlpi *pd = p->priv; 259#endif 260 int ret; 261 262#if defined(DLIOCRAW) 263 ret = write(p->fd, buf, size); 264 if (ret == -1) { 265 pcap_fmt_errmsg_for_errno(p->errbuf, PCAP_ERRBUF_SIZE, 266 errno, "send"); 267 return (-1); 268 } 269#elif defined(DL_HP_RAWDLS) 270 if (pd->send_fd < 0) { 271 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, 272 "send: Output FD couldn't be opened"); 273 return (-1); 274 } 275 ret = dlrawdatareq(pd->send_fd, buf, size); 276 if (ret == -1) { 277 pcap_fmt_errmsg_for_errno(p->errbuf, PCAP_ERRBUF_SIZE, 278 errno, "send"); 279 return (-1); 280 } 281 /* 282 * putmsg() returns either 0 or -1; it doesn't indicate how 283 * many bytes were written (presumably they were all written 284 * or none of them were written). OpenBSD's pcap_inject() 285 * returns the number of bytes written, so, for API compatibility, 286 * we return the number of bytes we were told to write. 287 */ 288 ret = size; 289#else /* no raw mode */ 290 /* 291 * XXX - this is a pain, because you might have to extract 292 * the address from the packet and use it in a DL_UNITDATA_REQ 293 * request. That would be dependent on the link-layer type. 294 * 295 * I also don't know what SAP you'd have to bind the descriptor 296 * to, or whether you'd need separate "receive" and "send" FDs, 297 * nor do I know whether you'd need different bindings for 298 * D/I/X Ethernet and 802.3, or for {FDDI,Token Ring} plus 299 * 802.2 and {FDDI,Token Ring} plus 802.2 plus SNAP. 300 * 301 * So, for now, we just return a "you can't send" indication, 302 * and leave it up to somebody with a DLPI-based system lacking 303 * both DLIOCRAW and DL_HP_RAWDLS to supply code to implement 304 * packet transmission on that system. If they do, they should 305 * send it to us - but should not send us code that assumes 306 * Ethernet; if the code doesn't work on non-Ethernet interfaces, 307 * it should check "p->linktype" and reject the send request if 308 * it's anything other than DLT_EN10MB. 309 */ 310 pcap_strlcpy(p->errbuf, "send: Not supported on this version of this OS", 311 PCAP_ERRBUF_SIZE); 312 ret = -1; 313#endif /* raw mode */ 314 return (ret); 315} 316 317#ifndef DL_IPATM 318#define DL_IPATM 0x12 /* ATM Classical IP interface */ 319#endif 320 321#ifdef HAVE_SOLARIS 322/* 323 * For SunATM. 324 */ 325#ifndef A_GET_UNITS 326#define A_GET_UNITS (('A'<<8)|118) 327#endif /* A_GET_UNITS */ 328#ifndef A_PROMISCON_REQ 329#define A_PROMISCON_REQ (('A'<<8)|121) 330#endif /* A_PROMISCON_REQ */ 331#endif /* HAVE_SOLARIS */ 332 333static void 334pcap_cleanup_dlpi(pcap_t *p) 335{ 336#ifdef DL_HP_RAWDLS 337 struct pcap_dlpi *pd = p->priv; 338 339 if (pd->send_fd >= 0) { 340 close(pd->send_fd); 341 pd->send_fd = -1; 342 } 343#endif 344 pcap_cleanup_live_common(p); 345} 346 347static int 348open_dlpi_device(const char *name, u_int *ppa, char *errbuf) 349{ 350 int status; 351 char dname[100]; 352 char *cp; 353 int fd; 354#ifdef HAVE_DEV_DLPI 355 u_int unit; 356#else 357 char dname2[100]; 358#endif 359 360#ifdef HAVE_DEV_DLPI 361 /* 362 ** Remove any "/dev/" on the front of the device. 363 */ 364 cp = strrchr(name, '/'); 365 if (cp == NULL) 366 pcap_strlcpy(dname, name, sizeof(dname)); 367 else 368 pcap_strlcpy(dname, cp + 1, sizeof(dname)); 369 370 /* 371 * Split the device name into a device type name and a unit number; 372 * chop off the unit number, so "dname" is just a device type name. 373 */ 374 cp = split_dname(dname, &unit, errbuf); 375 if (cp == NULL) 376 return (PCAP_ERROR_NO_SUCH_DEVICE); 377 *cp = '\0'; 378 379 /* 380 * Use "/dev/dlpi" as the device. 381 * 382 * XXX - HP's DLPI Programmer's Guide for HP-UX 11.00 says that 383 * the "dl_mjr_num" field is for the "major number of interface 384 * driver"; that's the major of "/dev/dlpi" on the system on 385 * which I tried this, but there may be DLPI devices that 386 * use a different driver, in which case we may need to 387 * search "/dev" for the appropriate device with that major 388 * device number, rather than hardwiring "/dev/dlpi". 389 */ 390 cp = "/dev/dlpi"; 391 if ((fd = open(cp, O_RDWR)) < 0) { 392 if (errno == EPERM || errno == EACCES) 393 status = PCAP_ERROR_PERM_DENIED; 394 else 395 status = PCAP_ERROR; 396 pcap_fmt_errmsg_for_errno(errbuf, PCAP_ERRBUF_SIZE, 397 errno, "%s", cp); 398 return (status); 399 } 400 401 /* 402 * Get a table of all PPAs for that device, and search that 403 * table for the specified device type name and unit number. 404 */ 405 status = get_dlpi_ppa(fd, dname, unit, ppa, errbuf); 406 if (status < 0) { 407 close(fd); 408 return (status); 409 } 410#else 411 /* 412 * If the device name begins with "/", assume it begins with 413 * the pathname of the directory containing the device to open; 414 * otherwise, concatenate the device directory name and the 415 * device name. 416 */ 417 if (*name == '/') 418 pcap_strlcpy(dname, name, sizeof(dname)); 419 else 420 pcap_snprintf(dname, sizeof(dname), "%s/%s", PCAP_DEV_PREFIX, 421 name); 422 423 /* 424 * Get the unit number, and a pointer to the end of the device 425 * type name. 426 */ 427 cp = split_dname(dname, ppa, errbuf); 428 if (cp == NULL) 429 return (PCAP_ERROR_NO_SUCH_DEVICE); 430 431 /* 432 * Make a copy of the device pathname, and then remove the unit 433 * number from the device pathname. 434 */ 435 pcap_strlcpy(dname2, dname, sizeof(dname)); 436 *cp = '\0'; 437 438 /* Try device without unit number */ 439 if ((fd = open(dname, O_RDWR)) < 0) { 440 if (errno != ENOENT) { 441 if (errno == EPERM || errno == EACCES) 442 status = PCAP_ERROR_PERM_DENIED; 443 else 444 status = PCAP_ERROR; 445 pcap_fmt_errmsg_for_errno(errbuf, PCAP_ERRBUF_SIZE, 446 errno, "%s", dname); 447 return (status); 448 } 449 450 /* Try again with unit number */ 451 if ((fd = open(dname2, O_RDWR)) < 0) { 452 if (errno == ENOENT) { 453 status = PCAP_ERROR_NO_SUCH_DEVICE; 454 455 /* 456 * We provide an error message even 457 * for this error, for diagnostic 458 * purposes (so that, for example, 459 * the app can show the message if the 460 * user requests it). 461 * 462 * In it, we just report "No DLPI device 463 * found" with the device name, so people 464 * don't get confused and think, for example, 465 * that if they can't capture on "lo0" 466 * on Solaris prior to Solaris 11 the fix 467 * is to change libpcap (or the application 468 * that uses it) to look for something other 469 * than "/dev/lo0", as the fix is to use 470 * Solaris 11 or some operating system 471 * other than Solaris - you just *can't* 472 * capture on a loopback interface 473 * on Solaris prior to Solaris 11, the lack 474 * of a DLPI device for the loopback 475 * interface is just a symptom of that 476 * inability. 477 */ 478 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, 479 "%s: No DLPI device found", name); 480 } else { 481 if (errno == EPERM || errno == EACCES) 482 status = PCAP_ERROR_PERM_DENIED; 483 else 484 status = PCAP_ERROR; 485 pcap_fmt_errmsg_for_errno(errbuf, 486 PCAP_ERRBUF_SIZE, errno, "%s", dname2); 487 } 488 return (status); 489 } 490 /* XXX Assume unit zero */ 491 *ppa = 0; 492 } 493#endif 494 return (fd); 495} 496 497static int 498pcap_activate_dlpi(pcap_t *p) 499{ 500#ifdef DL_HP_RAWDLS 501 struct pcap_dlpi *pd = p->priv; 502#endif 503 int status = 0; 504 int retv; 505 u_int ppa; 506#ifdef HAVE_SOLARIS 507 int isatm = 0; 508#endif 509 register dl_info_ack_t *infop; 510#ifdef HAVE_SYS_BUFMOD_H 511 bpf_u_int32 ss; 512#ifdef HAVE_SOLARIS 513 char release[GET_RELEASE_BUFSIZE]; 514 bpf_u_int32 osmajor, osminor, osmicro; 515#endif 516#endif 517 bpf_u_int32 buf[MAXDLBUF]; 518 519 p->fd = open_dlpi_device(p->opt.device, &ppa, p->errbuf); 520 if (p->fd < 0) { 521 status = p->fd; 522 goto bad; 523 } 524 525#ifdef DL_HP_RAWDLS 526 /* 527 * XXX - HP-UX 10.20 and 11.xx don't appear to support sending and 528 * receiving packets on the same descriptor - you need separate 529 * descriptors for sending and receiving, bound to different SAPs. 530 * 531 * If the open fails, we just leave -1 in "pd->send_fd" and reject 532 * attempts to send packets, just as if, in pcap-bpf.c, we fail 533 * to open the BPF device for reading and writing, we just try 534 * to open it for reading only and, if that succeeds, just let 535 * the send attempts fail. 536 */ 537 pd->send_fd = open("/dev/dlpi", O_RDWR); 538#endif 539 540 /* 541 ** Attach if "style 2" provider 542 */ 543 if (dlinforeq(p->fd, p->errbuf) < 0 || 544 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0) { 545 status = PCAP_ERROR; 546 goto bad; 547 } 548 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack; 549#ifdef HAVE_SOLARIS 550 if (infop->dl_mac_type == DL_IPATM) 551 isatm = 1; 552#endif 553 if (infop->dl_provider_style == DL_STYLE2) { 554 retv = dl_doattach(p->fd, ppa, p->errbuf); 555 if (retv < 0) { 556 status = retv; 557 goto bad; 558 } 559#ifdef DL_HP_RAWDLS 560 if (pd->send_fd >= 0) { 561 retv = dl_doattach(pd->send_fd, ppa, p->errbuf); 562 if (retv < 0) { 563 status = retv; 564 goto bad; 565 } 566 } 567#endif 568 } 569 570 if (p->opt.rfmon) { 571 /* 572 * This device exists, but we don't support monitor mode 573 * any platforms that support DLPI. 574 */ 575 status = PCAP_ERROR_RFMON_NOTSUP; 576 goto bad; 577 } 578 579#ifdef HAVE_DL_PASSIVE_REQ_T 580 /* 581 * Enable Passive mode to be able to capture on aggregated link. 582 * Not supported in all Solaris versions. 583 */ 584 dlpassive(p->fd, p->errbuf); 585#endif 586 /* 587 ** Bind (defer if using HP-UX 9 or HP-UX 10.20 or later, totally 588 ** skip if using SINIX) 589 */ 590#if !defined(HAVE_HPUX9) && !defined(HAVE_HPUX10_20_OR_LATER) && !defined(sinix) 591#ifdef _AIX 592 /* 593 ** AIX. 594 ** According to IBM's AIX Support Line, the dl_sap value 595 ** should not be less than 0x600 (1536) for standard Ethernet. 596 ** However, we seem to get DL_BADADDR - "DLSAP addr in improper 597 ** format or invalid" - errors if we use 1537 on the "tr0" 598 ** device, which, given that its name starts with "tr" and that 599 ** it's IBM, probably means a Token Ring device. (Perhaps we 600 ** need to use 1537 on "/dev/dlpi/en" because that device is for 601 ** D/I/X Ethernet, the "SAP" is actually an Ethernet type, and 602 ** it rejects invalid Ethernet types.) 603 ** 604 ** So if 1537 fails, we try 2, as Hyung Sik Yoon of IBM Korea 605 ** says that works on Token Ring (he says that 0 does *not* 606 ** work; perhaps that's considered an invalid LLC SAP value - I 607 ** assume the SAP value in a DLPI bind is an LLC SAP for network 608 ** types that use 802.2 LLC). 609 */ 610 if ((dlbindreq(p->fd, 1537, p->errbuf) < 0 && 611 dlbindreq(p->fd, 2, p->errbuf) < 0) || 612 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0) { 613 status = PCAP_ERROR; 614 goto bad; 615 } 616#elif defined(DL_HP_RAWDLS) 617 /* 618 ** HP-UX 10.0x and 10.1x. 619 */ 620 if (dl_dohpuxbind(p->fd, p->errbuf) < 0) { 621 status = PCAP_ERROR; 622 goto bad; 623 } 624 if (pd->send_fd >= 0) { 625 /* 626 ** XXX - if this fails, just close send_fd and 627 ** set it to -1, so that you can't send but can 628 ** still receive? 629 */ 630 if (dl_dohpuxbind(pd->send_fd, p->errbuf) < 0) { 631 status = PCAP_ERROR; 632 goto bad; 633 } 634 } 635#else /* neither AIX nor HP-UX */ 636 /* 637 ** Not Sinix, and neither AIX nor HP-UX - Solaris, and any other 638 ** OS using DLPI. 639 **/ 640 if (dlbindreq(p->fd, 0, p->errbuf) < 0 || 641 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0) { 642 status = PCAP_ERROR; 643 goto bad; 644 } 645#endif /* AIX vs. HP-UX vs. other */ 646#endif /* !HP-UX 9 and !HP-UX 10.20 or later and !SINIX */ 647 648 /* 649 * Turn a negative snapshot value (invalid), a snapshot value of 650 * 0 (unspecified), or a value bigger than the normal maximum 651 * value, into the maximum allowed value. 652 * 653 * If some application really *needs* a bigger snapshot 654 * length, we should just increase MAXIMUM_SNAPLEN. 655 */ 656 if (p->snapshot <= 0 || p->snapshot > MAXIMUM_SNAPLEN) 657 p->snapshot = MAXIMUM_SNAPLEN; 658 659#ifdef HAVE_SOLARIS 660 if (isatm) { 661 /* 662 ** Have to turn on some special ATM promiscuous mode 663 ** for SunATM. 664 ** Do *NOT* turn regular promiscuous mode on; it doesn't 665 ** help, and may break things. 666 */ 667 if (strioctl(p->fd, A_PROMISCON_REQ, 0, NULL) < 0) { 668 status = PCAP_ERROR; 669 pcap_fmt_errmsg_for_errno(p->errbuf, PCAP_ERRBUF_SIZE, 670 errno, "A_PROMISCON_REQ"); 671 goto bad; 672 } 673 } else 674#endif 675 if (p->opt.promisc) { 676 /* 677 ** Enable promiscuous (not necessary on send FD) 678 */ 679 retv = dlpromiscon(p, DL_PROMISC_PHYS); 680 if (retv < 0) { 681 if (retv == PCAP_ERROR_PERM_DENIED) 682 status = PCAP_ERROR_PROMISC_PERM_DENIED; 683 else 684 status = retv; 685 goto bad; 686 } 687 688 /* 689 ** Try to enable multicast (you would have thought 690 ** promiscuous would be sufficient). (Skip if using 691 ** HP-UX or SINIX) (Not necessary on send FD) 692 */ 693#if !defined(__hpux) && !defined(sinix) 694 retv = dlpromiscon(p, DL_PROMISC_MULTI); 695 if (retv < 0) 696 status = PCAP_WARNING; 697#endif 698 } 699 /* 700 ** Try to enable SAP promiscuity (when not in promiscuous mode 701 ** when using HP-UX, when not doing SunATM on Solaris, and never 702 ** under SINIX) (Not necessary on send FD) 703 */ 704#ifndef sinix 705#if defined(__hpux) 706 /* HP-UX - only do this when not in promiscuous mode */ 707 if (!p->opt.promisc) { 708#elif defined(HAVE_SOLARIS) 709 /* Solaris - don't do this on SunATM devices */ 710 if (!isatm) { 711#else 712 /* Everything else (except for SINIX) - always do this */ 713 { 714#endif 715 retv = dlpromiscon(p, DL_PROMISC_SAP); 716 if (retv < 0) { 717 if (p->opt.promisc) { 718 /* 719 * Not fatal, since the DL_PROMISC_PHYS mode 720 * worked. 721 * 722 * Report it as a warning, however. 723 */ 724 status = PCAP_WARNING; 725 } else { 726 /* 727 * Fatal. 728 */ 729 status = retv; 730 goto bad; 731 } 732 } 733 } 734#endif /* sinix */ 735 736 /* 737 ** HP-UX 9, and HP-UX 10.20 or later, must bind after setting 738 ** promiscuous options. 739 */ 740#if defined(HAVE_HPUX9) || defined(HAVE_HPUX10_20_OR_LATER) 741 if (dl_dohpuxbind(p->fd, p->errbuf) < 0) { 742 status = PCAP_ERROR; 743 goto bad; 744 } 745 /* 746 ** We don't set promiscuous mode on the send FD, but we'll defer 747 ** binding it anyway, just to keep the HP-UX 9/10.20 or later 748 ** code together. 749 */ 750 if (pd->send_fd >= 0) { 751 /* 752 ** XXX - if this fails, just close send_fd and 753 ** set it to -1, so that you can't send but can 754 ** still receive? 755 */ 756 if (dl_dohpuxbind(pd->send_fd, p->errbuf) < 0) { 757 status = PCAP_ERROR; 758 goto bad; 759 } 760 } 761#endif 762 763 /* 764 ** Determine link type 765 ** XXX - get SAP length and address length as well, for use 766 ** when sending packets. 767 */ 768 if (dlinforeq(p->fd, p->errbuf) < 0 || 769 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0) { 770 status = PCAP_ERROR; 771 goto bad; 772 } 773 774 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack; 775 if (pcap_process_mactype(p, infop->dl_mac_type) != 0) { 776 status = PCAP_ERROR; 777 goto bad; 778 } 779 780#ifdef DLIOCRAW 781 /* 782 ** This is a non standard SunOS hack to get the full raw link-layer 783 ** header. 784 */ 785 if (strioctl(p->fd, DLIOCRAW, 0, NULL) < 0) { 786 status = PCAP_ERROR; 787 pcap_fmt_errmsg_for_errno(p->errbuf, PCAP_ERRBUF_SIZE, 788 errno, "DLIOCRAW"); 789 goto bad; 790 } 791#endif 792 793#ifdef HAVE_SYS_BUFMOD_H 794 ss = p->snapshot; 795 796 /* 797 ** There is a bug in bufmod(7). When dealing with messages of 798 ** less than snaplen size it strips data from the beginning not 799 ** the end. 800 ** 801 ** This bug is fixed in 5.3.2. Also, there is a patch available. 802 ** Ask for bugid 1149065. 803 */ 804#ifdef HAVE_SOLARIS 805 get_release(release, sizeof (release), &osmajor, &osminor, &osmicro); 806 if (osmajor == 5 && (osminor <= 2 || (osminor == 3 && osmicro < 2)) && 807 getenv("BUFMOD_FIXED") == NULL) { 808 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, 809 "WARNING: bufmod is broken in SunOS %s; ignoring snaplen.", 810 release); 811 ss = 0; 812 status = PCAP_WARNING; 813 } 814#endif 815 816 /* Push and configure bufmod. */ 817 if (pcap_conf_bufmod(p, ss) != 0) { 818 status = PCAP_ERROR; 819 goto bad; 820 } 821#endif 822 823 /* 824 ** As the last operation flush the read side. 825 */ 826 if (ioctl(p->fd, I_FLUSH, FLUSHR) != 0) { 827 status = PCAP_ERROR; 828 pcap_fmt_errmsg_for_errno(p->errbuf, PCAP_ERRBUF_SIZE, 829 errno, "FLUSHR"); 830 goto bad; 831 } 832 833 /* Allocate data buffer. */ 834 if (pcap_alloc_databuf(p) != 0) { 835 status = PCAP_ERROR; 836 goto bad; 837 } 838 839 /* 840 * Success. 841 * 842 * "p->fd" is an FD for a STREAMS device, so "select()" and 843 * "poll()" should work on it. 844 */ 845 p->selectable_fd = p->fd; 846 847 p->read_op = pcap_read_dlpi; 848 p->inject_op = pcap_inject_dlpi; 849 p->setfilter_op = install_bpf_program; /* no kernel filtering */ 850 p->setdirection_op = NULL; /* Not implemented.*/ 851 p->set_datalink_op = NULL; /* can't change data link type */ 852 p->getnonblock_op = pcap_getnonblock_fd; 853 p->setnonblock_op = pcap_setnonblock_fd; 854 p->stats_op = pcap_stats_dlpi; 855 p->cleanup_op = pcap_cleanup_dlpi; 856 857 return (status); 858bad: 859 pcap_cleanup_dlpi(p); 860 return (status); 861} 862 863/* 864 * Split a device name into a device type name and a unit number; 865 * return the a pointer to the beginning of the unit number, which 866 * is the end of the device type name, and set "*unitp" to the unit 867 * number. 868 * 869 * Returns NULL on error, and fills "ebuf" with an error message. 870 */ 871static char * 872split_dname(char *device, u_int *unitp, char *ebuf) 873{ 874 char *cp; 875 char *eos; 876 long unit; 877 878 /* 879 * Look for a number at the end of the device name string. 880 */ 881 cp = device + strlen(device) - 1; 882 if (*cp < '0' || *cp > '9') { 883 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s missing unit number", 884 device); 885 return (NULL); 886 } 887 888 /* Digits at end of string are unit number */ 889 while (cp-1 >= device && *(cp-1) >= '0' && *(cp-1) <= '9') 890 cp--; 891 892 errno = 0; 893 unit = strtol(cp, &eos, 10); 894 if (*eos != '\0') { 895 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s bad unit number", device); 896 return (NULL); 897 } 898 if (errno == ERANGE || unit > INT_MAX) { 899 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number too large", 900 device); 901 return (NULL); 902 } 903 if (unit < 0) { 904 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number is negative", 905 device); 906 return (NULL); 907 } 908 *unitp = (u_int)unit; 909 return (cp); 910} 911 912static int 913dl_doattach(int fd, int ppa, char *ebuf) 914{ 915 dl_attach_req_t req; 916 bpf_u_int32 buf[MAXDLBUF]; 917 int err; 918 919 req.dl_primitive = DL_ATTACH_REQ; 920 req.dl_ppa = ppa; 921 if (send_request(fd, (char *)&req, sizeof(req), "attach", ebuf) < 0) 922 return (PCAP_ERROR); 923 924 err = dlokack(fd, "attach", (char *)buf, ebuf); 925 if (err < 0) 926 return (err); 927 return (0); 928} 929 930#ifdef DL_HP_RAWDLS 931static int 932dl_dohpuxbind(int fd, char *ebuf) 933{ 934 int hpsap; 935 int uerror; 936 bpf_u_int32 buf[MAXDLBUF]; 937 938 /* 939 * XXX - we start at 22 because we used to use only 22, but 940 * that was just because that was the value used in some 941 * sample code from HP. With what value *should* we start? 942 * Does it matter, given that we're enabling SAP promiscuity 943 * on the input FD? 944 */ 945 hpsap = 22; 946 for (;;) { 947 if (dlbindreq(fd, hpsap, ebuf) < 0) 948 return (-1); 949 if (dlbindack(fd, (char *)buf, ebuf, &uerror) >= 0) 950 break; 951 /* 952 * For any error other than a UNIX EBUSY, give up. 953 */ 954 if (uerror != EBUSY) { 955 /* 956 * dlbindack() has already filled in ebuf for 957 * this error. 958 */ 959 return (-1); 960 } 961 962 /* 963 * For EBUSY, try the next SAP value; that means that 964 * somebody else is using that SAP. Clear ebuf so 965 * that application doesn't report the "Device busy" 966 * error as a warning. 967 */ 968 *ebuf = '\0'; 969 hpsap++; 970 if (hpsap > 100) { 971 pcap_strlcpy(ebuf, 972 "All SAPs from 22 through 100 are in use", 973 PCAP_ERRBUF_SIZE); 974 return (-1); 975 } 976 } 977 return (0); 978} 979#endif 980 981#define STRINGIFY(n) #n 982 983static int 984dlpromiscon(pcap_t *p, bpf_u_int32 level) 985{ 986 dl_promiscon_req_t req; 987 bpf_u_int32 buf[MAXDLBUF]; 988 int err; 989 990 req.dl_primitive = DL_PROMISCON_REQ; 991 req.dl_level = level; 992 if (send_request(p->fd, (char *)&req, sizeof(req), "promiscon", 993 p->errbuf) < 0) 994 return (PCAP_ERROR); 995 err = dlokack(p->fd, "promiscon" STRINGIFY(level), (char *)buf, 996 p->errbuf); 997 if (err < 0) 998 return (err); 999 return (0); 1000} 1001 1002/* 1003 * Not all interfaces are DLPI interfaces, and thus not all interfaces 1004 * can be opened with DLPI (for example, the loopback interface is not 1005 * a DLPI interface on Solaris prior to Solaris 11), so try to open 1006 * the specified interface; return 0 if we fail with PCAP_ERROR_NO_SUCH_DEVICE 1007 * and 1 otherwise. 1008 */ 1009static int 1010is_dlpi_interface(const char *name) 1011{ 1012 int fd; 1013 u_int ppa; 1014 char errbuf[PCAP_ERRBUF_SIZE]; 1015 1016 fd = open_dlpi_device(name, &ppa, errbuf); 1017 if (fd < 0) { 1018 /* 1019 * Error - was it PCAP_ERROR_NO_SUCH_DEVICE? 1020 */ 1021 if (fd == PCAP_ERROR_NO_SUCH_DEVICE) { 1022 /* 1023 * Yes, so we can't open this because it's 1024 * not a DLPI interface. 1025 */ 1026 return (0); 1027 } 1028 /* 1029 * No, so, in the case where there's a single DLPI 1030 * device for all interfaces of this type ("style 1031 * 2" providers?), we don't know whether it's a DLPI 1032 * interface or not, as we didn't try an attach. 1033 * Say it is a DLPI device, so that the user can at 1034 * least try to open it and report the error (which 1035 * is probably "you don't have permission to open that 1036 * DLPI device"; reporting those interfaces means 1037 * users will ask "why am I getting a permissions error 1038 * when I try to capture" rather than "why am I not 1039 * seeing any interfaces", making the underlying problem 1040 * clearer). 1041 */ 1042 return (1); 1043 } 1044 1045 /* 1046 * Success. 1047 */ 1048 close(fd); 1049 return (1); 1050} 1051 1052static int 1053get_if_flags(const char *name _U_, bpf_u_int32 *flags _U_, char *errbuf _U_) 1054{ 1055 /* 1056 * Nothing we can do other than mark loopback devices as "the 1057 * connected/disconnected status doesn't apply". 1058 * 1059 * XXX - on Solaris, can we do what the dladm command does, 1060 * i.e. get a connected/disconnected indication from a kstat? 1061 * (Note that you can also get the link speed, and possibly 1062 * other information, from a kstat as well.) 1063 */ 1064 if (*flags & PCAP_IF_LOOPBACK) { 1065 /* 1066 * Loopback devices aren't wireless, and "connected"/ 1067 * "disconnected" doesn't apply to them. 1068 */ 1069 *flags |= PCAP_IF_CONNECTION_STATUS_NOT_APPLICABLE; 1070 return (0); 1071 } 1072 return (0); 1073} 1074 1075int 1076pcap_platform_finddevs(pcap_if_list_t *devlistp, char *errbuf) 1077{ 1078#ifdef HAVE_SOLARIS 1079 int fd; 1080 union { 1081 u_int nunits; 1082 char pad[516]; /* XXX - must be at least 513; is 516 1083 in "atmgetunits" */ 1084 } buf; 1085 char baname[2+1+1]; 1086 u_int i; 1087#endif 1088 1089 /* 1090 * Get the list of regular interfaces first. 1091 */ 1092 if (pcap_findalldevs_interfaces(devlistp, errbuf, is_dlpi_interface, 1093 get_if_flags) == -1) 1094 return (-1); /* failure */ 1095 1096#ifdef HAVE_SOLARIS 1097 /* 1098 * We may have to do special magic to get ATM devices. 1099 */ 1100 if ((fd = open("/dev/ba", O_RDWR)) < 0) { 1101 /* 1102 * We couldn't open the "ba" device. 1103 * For now, just give up; perhaps we should 1104 * return an error if the problem is neither 1105 * a "that device doesn't exist" error (ENOENT, 1106 * ENXIO, etc.) or a "you're not allowed to do 1107 * that" error (EPERM, EACCES). 1108 */ 1109 return (0); 1110 } 1111 1112 if (strioctl(fd, A_GET_UNITS, sizeof(buf), (char *)&buf) < 0) { 1113 pcap_fmt_errmsg_for_errno(errbuf, PCAP_ERRBUF_SIZE, 1114 errno, "A_GET_UNITS"); 1115 return (-1); 1116 } 1117 for (i = 0; i < buf.nunits; i++) { 1118 pcap_snprintf(baname, sizeof baname, "ba%u", i); 1119 /* 1120 * XXX - is there a notion of "up" and "running"? 1121 * And is there a way to determine whether the 1122 * interface is plugged into a network? 1123 */ 1124 if (add_dev(devlistp, baname, 0, NULL, errbuf) == NULL) 1125 return (-1); 1126 } 1127#endif 1128 1129 return (0); 1130} 1131 1132static int 1133send_request(int fd, char *ptr, int len, char *what, char *ebuf) 1134{ 1135 struct strbuf ctl; 1136 int flags; 1137 1138 ctl.maxlen = 0; 1139 ctl.len = len; 1140 ctl.buf = ptr; 1141 1142 flags = 0; 1143 if (putmsg(fd, &ctl, (struct strbuf *) NULL, flags) < 0) { 1144 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1145 errno, "send_request: putmsg \"%s\"", what); 1146 return (-1); 1147 } 1148 return (0); 1149} 1150 1151static int 1152recv_ack(int fd, int size, const char *what, char *bufp, char *ebuf, int *uerror) 1153{ 1154 union DL_primitives *dlp; 1155 struct strbuf ctl; 1156 int flags; 1157 char errmsgbuf[PCAP_ERRBUF_SIZE]; 1158 char dlprimbuf[64]; 1159 1160 /* 1161 * Clear out "*uerror", so it's only set for DL_ERROR_ACK/DL_SYSERR, 1162 * making that the only place where EBUSY is treated specially. 1163 */ 1164 if (uerror != NULL) 1165 *uerror = 0; 1166 1167 ctl.maxlen = MAXDLBUF; 1168 ctl.len = 0; 1169 ctl.buf = bufp; 1170 1171 flags = 0; 1172 if (getmsg(fd, &ctl, (struct strbuf*)NULL, &flags) < 0) { 1173 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1174 errno, "recv_ack: %s getmsg", what); 1175 return (PCAP_ERROR); 1176 } 1177 1178 dlp = MAKE_DL_PRIMITIVES(ctl.buf); 1179 switch (dlp->dl_primitive) { 1180 1181 case DL_INFO_ACK: 1182 case DL_BIND_ACK: 1183 case DL_OK_ACK: 1184#ifdef DL_HP_PPA_ACK 1185 case DL_HP_PPA_ACK: 1186#endif 1187 /* These are OK */ 1188 break; 1189 1190 case DL_ERROR_ACK: 1191 switch (dlp->error_ack.dl_errno) { 1192 1193 case DL_SYSERR: 1194 if (uerror != NULL) 1195 *uerror = dlp->error_ack.dl_unix_errno; 1196 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1197 dlp->error_ack.dl_unix_errno, 1198 "recv_ack: %s: UNIX error", what); 1199 if (dlp->error_ack.dl_unix_errno == EPERM || 1200 dlp->error_ack.dl_unix_errno == EACCES) 1201 return (PCAP_ERROR_PERM_DENIED); 1202 break; 1203 1204 default: 1205 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1206 "recv_ack: %s: %s", what, 1207 dlstrerror(errmsgbuf, sizeof (errmsgbuf), dlp->error_ack.dl_errno)); 1208 if (dlp->error_ack.dl_errno == DL_BADPPA) 1209 return (PCAP_ERROR_NO_SUCH_DEVICE); 1210 else if (dlp->error_ack.dl_errno == DL_ACCESS) 1211 return (PCAP_ERROR_PERM_DENIED); 1212 break; 1213 } 1214 return (PCAP_ERROR); 1215 1216 default: 1217 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1218 "recv_ack: %s: Unexpected primitive ack %s", 1219 what, dlprim(dlprimbuf, sizeof (dlprimbuf), dlp->dl_primitive)); 1220 return (PCAP_ERROR); 1221 } 1222 1223 if (ctl.len < size) { 1224 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1225 "recv_ack: %s: Ack too small (%d < %d)", 1226 what, ctl.len, size); 1227 return (PCAP_ERROR); 1228 } 1229 return (ctl.len); 1230} 1231 1232static char * 1233dlstrerror(char *errbuf, size_t errbufsize, bpf_u_int32 dl_errno) 1234{ 1235 switch (dl_errno) { 1236 1237 case DL_ACCESS: 1238 return ("Improper permissions for request"); 1239 1240 case DL_BADADDR: 1241 return ("DLSAP addr in improper format or invalid"); 1242 1243 case DL_BADCORR: 1244 return ("Seq number not from outstand DL_CONN_IND"); 1245 1246 case DL_BADDATA: 1247 return ("User data exceeded provider limit"); 1248 1249 case DL_BADPPA: 1250#ifdef HAVE_DEV_DLPI 1251 /* 1252 * With a single "/dev/dlpi" device used for all 1253 * DLPI providers, PPAs have nothing to do with 1254 * unit numbers. 1255 */ 1256 return ("Specified PPA was invalid"); 1257#else 1258 /* 1259 * We have separate devices for separate devices; 1260 * the PPA is just the unit number. 1261 */ 1262 return ("Specified PPA (device unit) was invalid"); 1263#endif 1264 1265 case DL_BADPRIM: 1266 return ("Primitive received not known by provider"); 1267 1268 case DL_BADQOSPARAM: 1269 return ("QOS parameters contained invalid values"); 1270 1271 case DL_BADQOSTYPE: 1272 return ("QOS structure type is unknown/unsupported"); 1273 1274 case DL_BADSAP: 1275 return ("Bad LSAP selector"); 1276 1277 case DL_BADTOKEN: 1278 return ("Token used not an active stream"); 1279 1280 case DL_BOUND: 1281 return ("Attempted second bind with dl_max_conind"); 1282 1283 case DL_INITFAILED: 1284 return ("Physical link initialization failed"); 1285 1286 case DL_NOADDR: 1287 return ("Provider couldn't allocate alternate address"); 1288 1289 case DL_NOTINIT: 1290 return ("Physical link not initialized"); 1291 1292 case DL_OUTSTATE: 1293 return ("Primitive issued in improper state"); 1294 1295 case DL_SYSERR: 1296 return ("UNIX system error occurred"); 1297 1298 case DL_UNSUPPORTED: 1299 return ("Requested service not supplied by provider"); 1300 1301 case DL_UNDELIVERABLE: 1302 return ("Previous data unit could not be delivered"); 1303 1304 case DL_NOTSUPPORTED: 1305 return ("Primitive is known but not supported"); 1306 1307 case DL_TOOMANY: 1308 return ("Limit exceeded"); 1309 1310 case DL_NOTENAB: 1311 return ("Promiscuous mode not enabled"); 1312 1313 case DL_BUSY: 1314 return ("Other streams for PPA in post-attached"); 1315 1316 case DL_NOAUTO: 1317 return ("Automatic handling XID&TEST not supported"); 1318 1319 case DL_NOXIDAUTO: 1320 return ("Automatic handling of XID not supported"); 1321 1322 case DL_NOTESTAUTO: 1323 return ("Automatic handling of TEST not supported"); 1324 1325 case DL_XIDAUTO: 1326 return ("Automatic handling of XID response"); 1327 1328 case DL_TESTAUTO: 1329 return ("Automatic handling of TEST response"); 1330 1331 case DL_PENDING: 1332 return ("Pending outstanding connect indications"); 1333 1334 default: 1335 pcap_snprintf(errbuf, errbufsize, "Error %02x", dl_errno); 1336 return (errbuf); 1337 } 1338} 1339 1340static char * 1341dlprim(char *primbuf, size_t primbufsize, bpf_u_int32 prim) 1342{ 1343 switch (prim) { 1344 1345 case DL_INFO_REQ: 1346 return ("DL_INFO_REQ"); 1347 1348 case DL_INFO_ACK: 1349 return ("DL_INFO_ACK"); 1350 1351 case DL_ATTACH_REQ: 1352 return ("DL_ATTACH_REQ"); 1353 1354 case DL_DETACH_REQ: 1355 return ("DL_DETACH_REQ"); 1356 1357 case DL_BIND_REQ: 1358 return ("DL_BIND_REQ"); 1359 1360 case DL_BIND_ACK: 1361 return ("DL_BIND_ACK"); 1362 1363 case DL_UNBIND_REQ: 1364 return ("DL_UNBIND_REQ"); 1365 1366 case DL_OK_ACK: 1367 return ("DL_OK_ACK"); 1368 1369 case DL_ERROR_ACK: 1370 return ("DL_ERROR_ACK"); 1371 1372 case DL_SUBS_BIND_REQ: 1373 return ("DL_SUBS_BIND_REQ"); 1374 1375 case DL_SUBS_BIND_ACK: 1376 return ("DL_SUBS_BIND_ACK"); 1377 1378 case DL_UNITDATA_REQ: 1379 return ("DL_UNITDATA_REQ"); 1380 1381 case DL_UNITDATA_IND: 1382 return ("DL_UNITDATA_IND"); 1383 1384 case DL_UDERROR_IND: 1385 return ("DL_UDERROR_IND"); 1386 1387 case DL_UDQOS_REQ: 1388 return ("DL_UDQOS_REQ"); 1389 1390 case DL_CONNECT_REQ: 1391 return ("DL_CONNECT_REQ"); 1392 1393 case DL_CONNECT_IND: 1394 return ("DL_CONNECT_IND"); 1395 1396 case DL_CONNECT_RES: 1397 return ("DL_CONNECT_RES"); 1398 1399 case DL_CONNECT_CON: 1400 return ("DL_CONNECT_CON"); 1401 1402 case DL_TOKEN_REQ: 1403 return ("DL_TOKEN_REQ"); 1404 1405 case DL_TOKEN_ACK: 1406 return ("DL_TOKEN_ACK"); 1407 1408 case DL_DISCONNECT_REQ: 1409 return ("DL_DISCONNECT_REQ"); 1410 1411 case DL_DISCONNECT_IND: 1412 return ("DL_DISCONNECT_IND"); 1413 1414 case DL_RESET_REQ: 1415 return ("DL_RESET_REQ"); 1416 1417 case DL_RESET_IND: 1418 return ("DL_RESET_IND"); 1419 1420 case DL_RESET_RES: 1421 return ("DL_RESET_RES"); 1422 1423 case DL_RESET_CON: 1424 return ("DL_RESET_CON"); 1425 1426 default: 1427 pcap_snprintf(primbuf, primbufsize, "unknown primitive 0x%x", 1428 prim); 1429 return (primbuf); 1430 } 1431} 1432 1433static int 1434dlbindreq(int fd, bpf_u_int32 sap, char *ebuf) 1435{ 1436 1437 dl_bind_req_t req; 1438 1439 memset((char *)&req, 0, sizeof(req)); 1440 req.dl_primitive = DL_BIND_REQ; 1441 /* XXX - what if neither of these are defined? */ 1442#if defined(DL_HP_RAWDLS) 1443 req.dl_max_conind = 1; /* XXX magic number */ 1444 req.dl_service_mode = DL_HP_RAWDLS; 1445#elif defined(DL_CLDLS) 1446 req.dl_service_mode = DL_CLDLS; 1447#endif 1448 req.dl_sap = sap; 1449 1450 return (send_request(fd, (char *)&req, sizeof(req), "bind", ebuf)); 1451} 1452 1453static int 1454dlbindack(int fd, char *bufp, char *ebuf, int *uerror) 1455{ 1456 1457 return (recv_ack(fd, DL_BIND_ACK_SIZE, "bind", bufp, ebuf, uerror)); 1458} 1459 1460static int 1461dlokack(int fd, const char *what, char *bufp, char *ebuf) 1462{ 1463 1464 return (recv_ack(fd, DL_OK_ACK_SIZE, what, bufp, ebuf, NULL)); 1465} 1466 1467 1468static int 1469dlinforeq(int fd, char *ebuf) 1470{ 1471 dl_info_req_t req; 1472 1473 req.dl_primitive = DL_INFO_REQ; 1474 1475 return (send_request(fd, (char *)&req, sizeof(req), "info", ebuf)); 1476} 1477 1478static int 1479dlinfoack(int fd, char *bufp, char *ebuf) 1480{ 1481 1482 return (recv_ack(fd, DL_INFO_ACK_SIZE, "info", bufp, ebuf, NULL)); 1483} 1484 1485#ifdef HAVE_DL_PASSIVE_REQ_T 1486/* 1487 * Enable DLPI passive mode. We do not care if this request fails, as this 1488 * indicates the underlying DLPI device does not support link aggregation. 1489 */ 1490static void 1491dlpassive(int fd, char *ebuf) 1492{ 1493 dl_passive_req_t req; 1494 bpf_u_int32 buf[MAXDLBUF]; 1495 1496 req.dl_primitive = DL_PASSIVE_REQ; 1497 1498 if (send_request(fd, (char *)&req, sizeof(req), "dlpassive", ebuf) == 0) 1499 (void) dlokack(fd, "dlpassive", (char *)buf, ebuf); 1500} 1501#endif 1502 1503#ifdef DL_HP_RAWDLS 1504/* 1505 * There's an ack *if* there's an error. 1506 */ 1507static int 1508dlrawdatareq(int fd, const u_char *datap, int datalen) 1509{ 1510 struct strbuf ctl, data; 1511 long buf[MAXDLBUF]; /* XXX - char? */ 1512 union DL_primitives *dlp; 1513 int dlen; 1514 1515 dlp = MAKE_DL_PRIMITIVES(buf); 1516 1517 dlp->dl_primitive = DL_HP_RAWDATA_REQ; 1518 dlen = DL_HP_RAWDATA_REQ_SIZE; 1519 1520 /* 1521 * HP's documentation doesn't appear to show us supplying any 1522 * address pointed to by the control part of the message. 1523 * I think that's what raw mode means - you just send the raw 1524 * packet, you don't specify where to send it to, as that's 1525 * implied by the destination address. 1526 */ 1527 ctl.maxlen = 0; 1528 ctl.len = dlen; 1529 ctl.buf = (void *)buf; 1530 1531 data.maxlen = 0; 1532 data.len = datalen; 1533 data.buf = (void *)datap; 1534 1535 return (putmsg(fd, &ctl, &data, 0)); 1536} 1537#endif /* DL_HP_RAWDLS */ 1538 1539#if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H) 1540static void 1541get_release(char *buf, size_t bufsize, bpf_u_int32 *majorp, 1542 bpf_u_int32 *minorp, bpf_u_int32 *microp) 1543{ 1544 char *cp; 1545 1546 *majorp = 0; 1547 *minorp = 0; 1548 *microp = 0; 1549 if (sysinfo(SI_RELEASE, buf, bufsize) < 0) { 1550 pcap_strlcpy(buf, "?", bufsize); 1551 return; 1552 } 1553 cp = buf; 1554 if (!isdigit((unsigned char)*cp)) 1555 return; 1556 *majorp = strtol(cp, &cp, 10); 1557 if (*cp++ != '.') 1558 return; 1559 *minorp = strtol(cp, &cp, 10); 1560 if (*cp++ != '.') 1561 return; 1562 *microp = strtol(cp, &cp, 10); 1563} 1564#endif 1565 1566#ifdef DL_HP_PPA_REQ 1567/* 1568 * Under HP-UX 10 and HP-UX 11, we can ask for the ppa 1569 */ 1570 1571 1572/* 1573 * Determine ppa number that specifies ifname. 1574 * 1575 * If the "dl_hp_ppa_info_t" doesn't have a "dl_module_id_1" member, 1576 * the code that's used here is the old code for HP-UX 10.x. 1577 * 1578 * However, HP-UX 10.20, at least, appears to have such a member 1579 * in its "dl_hp_ppa_info_t" structure, so the new code is used. 1580 * The new code didn't work on an old 10.20 system on which Rick 1581 * Jones of HP tried it, but with later patches installed, it 1582 * worked - it appears that the older system had those members but 1583 * didn't put anything in them, so, if the search by name fails, we 1584 * do the old search. 1585 * 1586 * Rick suggests that making sure your system is "up on the latest 1587 * lancommon/DLPI/driver patches" is probably a good idea; it'd fix 1588 * that problem, as well as allowing libpcap to see packets sent 1589 * from the system on which the libpcap application is being run. 1590 * (On 10.20, in addition to getting the latest patches, you need 1591 * to turn the kernel "lanc_outbound_promisc_flag" flag on with ADB; 1592 * a posting to "comp.sys.hp.hpux" at 1593 * 1594 * http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=558092266 1595 * 1596 * says that, to see the machine's outgoing traffic, you'd need to 1597 * apply the right patches to your system, and also set that variable 1598 * with: 1599 1600echo 'lanc_outbound_promisc_flag/W1' | /usr/bin/adb -w /stand/vmunix /dev/kmem 1601 1602 * which could be put in, for example, "/sbin/init.d/lan". 1603 * 1604 * Setting the variable is not necessary on HP-UX 11.x. 1605 */ 1606static int 1607get_dlpi_ppa(register int fd, register const char *device, register u_int unit, 1608 u_int *ppa, register char *ebuf) 1609{ 1610 register dl_hp_ppa_ack_t *ap; 1611 register dl_hp_ppa_info_t *ipstart, *ip; 1612 register u_int i; 1613 char dname[100]; 1614 register u_long majdev; 1615 struct stat statbuf; 1616 dl_hp_ppa_req_t req; 1617 char buf[MAXDLBUF]; 1618 char *ppa_data_buf; 1619 dl_hp_ppa_ack_t *dlp; 1620 struct strbuf ctl; 1621 int flags; 1622 1623 memset((char *)&req, 0, sizeof(req)); 1624 req.dl_primitive = DL_HP_PPA_REQ; 1625 1626 memset((char *)buf, 0, sizeof(buf)); 1627 if (send_request(fd, (char *)&req, sizeof(req), "hpppa", ebuf) < 0) 1628 return (PCAP_ERROR); 1629 1630 ctl.maxlen = DL_HP_PPA_ACK_SIZE; 1631 ctl.len = 0; 1632 ctl.buf = (char *)buf; 1633 1634 flags = 0; 1635 /* 1636 * DLPI may return a big chunk of data for a DL_HP_PPA_REQ. The normal 1637 * recv_ack will fail because it set the maxlen to MAXDLBUF (8192) 1638 * which is NOT big enough for a DL_HP_PPA_REQ. 1639 * 1640 * This causes libpcap applications to fail on a system with HP-APA 1641 * installed. 1642 * 1643 * To figure out how big the returned data is, we first call getmsg 1644 * to get the small head and peek at the head to get the actual data 1645 * length, and then issue another getmsg to get the actual PPA data. 1646 */ 1647 /* get the head first */ 1648 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) { 1649 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1650 errno, "get_dlpi_ppa: hpppa getmsg"); 1651 return (PCAP_ERROR); 1652 } 1653 if (ctl.len == -1) { 1654 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1655 "get_dlpi_ppa: hpppa getmsg: control buffer has no data"); 1656 return (PCAP_ERROR); 1657 } 1658 1659 dlp = (dl_hp_ppa_ack_t *)ctl.buf; 1660 if (dlp->dl_primitive != DL_HP_PPA_ACK) { 1661 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1662 "get_dlpi_ppa: hpppa unexpected primitive ack 0x%x", 1663 (bpf_u_int32)dlp->dl_primitive); 1664 return (PCAP_ERROR); 1665 } 1666 1667 if ((size_t)ctl.len < DL_HP_PPA_ACK_SIZE) { 1668 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1669 "get_dlpi_ppa: hpppa ack too small (%d < %lu)", 1670 ctl.len, (unsigned long)DL_HP_PPA_ACK_SIZE); 1671 return (PCAP_ERROR); 1672 } 1673 1674 /* allocate buffer */ 1675 if ((ppa_data_buf = (char *)malloc(dlp->dl_length)) == NULL) { 1676 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1677 errno, "get_dlpi_ppa: hpppa malloc"); 1678 return (PCAP_ERROR); 1679 } 1680 ctl.maxlen = dlp->dl_length; 1681 ctl.len = 0; 1682 ctl.buf = (char *)ppa_data_buf; 1683 /* get the data */ 1684 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) { 1685 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1686 errno, "get_dlpi_ppa: hpppa getmsg"); 1687 free(ppa_data_buf); 1688 return (PCAP_ERROR); 1689 } 1690 if (ctl.len == -1) { 1691 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1692 "get_dlpi_ppa: hpppa getmsg: control buffer has no data"); 1693 return (PCAP_ERROR); 1694 } 1695 if ((u_int)ctl.len < dlp->dl_length) { 1696 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1697 "get_dlpi_ppa: hpppa ack too small (%d < %lu)", 1698 ctl.len, (unsigned long)dlp->dl_length); 1699 free(ppa_data_buf); 1700 return (PCAP_ERROR); 1701 } 1702 1703 ap = (dl_hp_ppa_ack_t *)buf; 1704 ipstart = (dl_hp_ppa_info_t *)ppa_data_buf; 1705 ip = ipstart; 1706 1707#ifdef HAVE_DL_HP_PPA_INFO_T_DL_MODULE_ID_1 1708 /* 1709 * The "dl_hp_ppa_info_t" structure has a "dl_module_id_1" 1710 * member that should, in theory, contain the part of the 1711 * name for the device that comes before the unit number, 1712 * and should also have a "dl_module_id_2" member that may 1713 * contain an alternate name (e.g., I think Ethernet devices 1714 * have both "lan", for "lanN", and "snap", for "snapN", with 1715 * the former being for Ethernet packets and the latter being 1716 * for 802.3/802.2 packets). 1717 * 1718 * Search for the device that has the specified name and 1719 * instance number. 1720 */ 1721 for (i = 0; i < ap->dl_count; i++) { 1722 if ((strcmp((const char *)ip->dl_module_id_1, device) == 0 || 1723 strcmp((const char *)ip->dl_module_id_2, device) == 0) && 1724 ip->dl_instance_num == unit) 1725 break; 1726 1727 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset); 1728 } 1729#else 1730 /* 1731 * We don't have that member, so the search is impossible; make it 1732 * look as if the search failed. 1733 */ 1734 i = ap->dl_count; 1735#endif 1736 1737 if (i == ap->dl_count) { 1738 /* 1739 * Well, we didn't, or can't, find the device by name. 1740 * 1741 * HP-UX 10.20, whilst it has "dl_module_id_1" and 1742 * "dl_module_id_2" fields in the "dl_hp_ppa_info_t", 1743 * doesn't seem to fill them in unless the system is 1744 * at a reasonably up-to-date patch level. 1745 * 1746 * Older HP-UX 10.x systems might not have those fields 1747 * at all. 1748 * 1749 * Therefore, we'll search for the entry with the major 1750 * device number of a device with the name "/dev/<dev><unit>", 1751 * if such a device exists, as the old code did. 1752 */ 1753 pcap_snprintf(dname, sizeof(dname), "/dev/%s%u", device, unit); 1754 if (stat(dname, &statbuf) < 0) { 1755 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1756 errno, "stat: %s", dname); 1757 return (PCAP_ERROR); 1758 } 1759 majdev = major(statbuf.st_rdev); 1760 1761 ip = ipstart; 1762 1763 for (i = 0; i < ap->dl_count; i++) { 1764 if (ip->dl_mjr_num == majdev && 1765 ip->dl_instance_num == unit) 1766 break; 1767 1768 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset); 1769 } 1770 } 1771 if (i == ap->dl_count) { 1772 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1773 "can't find /dev/dlpi PPA for %s%u", device, unit); 1774 return (PCAP_ERROR_NO_SUCH_DEVICE); 1775 } 1776 if (ip->dl_hdw_state == HDW_DEAD) { 1777 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1778 "%s%d: hardware state: DOWN\n", device, unit); 1779 free(ppa_data_buf); 1780 return (PCAP_ERROR); 1781 } 1782 *ppa = ip->dl_ppa; 1783 free(ppa_data_buf); 1784 return (0); 1785} 1786#endif 1787 1788#ifdef HAVE_HPUX9 1789/* 1790 * Under HP-UX 9, there is no good way to determine the ppa. 1791 * So punt and read it from /dev/kmem. 1792 */ 1793static struct nlist nl[] = { 1794#define NL_IFNET 0 1795 { "ifnet" }, 1796 { "" } 1797}; 1798 1799static char path_vmunix[] = "/hp-ux"; 1800 1801/* Determine ppa number that specifies ifname */ 1802static int 1803get_dlpi_ppa(register int fd, register const char *ifname, register u_int unit, 1804 u_int *ppa, register char *ebuf) 1805{ 1806 register const char *cp; 1807 register int kd; 1808 void *addr; 1809 struct ifnet ifnet; 1810 char if_name[sizeof(ifnet.if_name) + 1]; 1811 1812 cp = strrchr(ifname, '/'); 1813 if (cp != NULL) 1814 ifname = cp + 1; 1815 if (nlist(path_vmunix, &nl) < 0) { 1816 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "nlist %s failed", 1817 path_vmunix); 1818 return (PCAP_ERROR); 1819 } 1820 if (nl[NL_IFNET].n_value == 0) { 1821 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, 1822 "could't find %s kernel symbol", 1823 nl[NL_IFNET].n_name); 1824 return (PCAP_ERROR); 1825 } 1826 kd = open("/dev/kmem", O_RDONLY); 1827 if (kd < 0) { 1828 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1829 errno, "kmem open"); 1830 return (PCAP_ERROR); 1831 } 1832 if (dlpi_kread(kd, nl[NL_IFNET].n_value, 1833 &addr, sizeof(addr), ebuf) < 0) { 1834 close(kd); 1835 return (PCAP_ERROR); 1836 } 1837 for (; addr != NULL; addr = ifnet.if_next) { 1838 if (dlpi_kread(kd, (off_t)addr, 1839 &ifnet, sizeof(ifnet), ebuf) < 0 || 1840 dlpi_kread(kd, (off_t)ifnet.if_name, 1841 if_name, sizeof(ifnet.if_name), ebuf) < 0) { 1842 (void)close(kd); 1843 return (PCAP_ERROR); 1844 } 1845 if_name[sizeof(ifnet.if_name)] = '\0'; 1846 if (strcmp(if_name, ifname) == 0 && ifnet.if_unit == unit) { 1847 *ppa = ifnet.if_index; 1848 return (0); 1849 } 1850 } 1851 1852 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "Can't find %s", ifname); 1853 return (PCAP_ERROR_NO_SUCH_DEVICE); 1854} 1855 1856static int 1857dlpi_kread(register int fd, register off_t addr, 1858 register void *buf, register u_int len, register char *ebuf) 1859{ 1860 register int cc; 1861 1862 if (lseek(fd, addr, SEEK_SET) < 0) { 1863 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1864 errno, "lseek"); 1865 return (-1); 1866 } 1867 cc = read(fd, buf, len); 1868 if (cc < 0) { 1869 pcap_fmt_errmsg_for_errno(ebuf, PCAP_ERRBUF_SIZE, 1870 errno, "read"); 1871 return (-1); 1872 } else if (cc != len) { 1873 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "short read (%d != %d)", cc, 1874 len); 1875 return (-1); 1876 } 1877 return (cc); 1878} 1879#endif 1880 1881pcap_t * 1882pcap_create_interface(const char *device _U_, char *ebuf) 1883{ 1884 pcap_t *p; 1885#ifdef DL_HP_RAWDLS 1886 struct pcap_dlpi *pd; 1887#endif 1888 1889 p = pcap_create_common(ebuf, sizeof (struct pcap_dlpi)); 1890 if (p == NULL) 1891 return (NULL); 1892 1893#ifdef DL_HP_RAWDLS 1894 pd = p->priv; 1895 pd->send_fd = -1; /* it hasn't been opened yet */ 1896#endif 1897 1898 p->activate_op = pcap_activate_dlpi; 1899 return (p); 1900} 1901 1902/* 1903 * Libpcap version string. 1904 */ 1905const char * 1906pcap_lib_version(void) 1907{ 1908 return (PCAP_VERSION_STRING); 1909} 1910