1 /* $OpenBSD: main.c,v 1.124 2022/12/23 07:18:46 jmc Exp $ */
2 /* $NetBSD: main.c,v 1.9 1996/05/07 02:55:02 thorpej Exp $ */
3
4 /*
5 * Copyright (c) 1983, 1988, 1993
6 * Regents of the University of California. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the University nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 */
32
33 #include <sys/types.h>
34 #include <sys/protosw.h>
35 #include <sys/socket.h>
36 #include <sys/sysctl.h>
37
38 #include <net/route.h>
39 #include <netinet/in.h>
40
41 #include <ctype.h>
42 #include <err.h>
43 #include <errno.h>
44 #include <fcntl.h>
45 #include <kvm.h>
46 #include <limits.h>
47 #include <netdb.h>
48 #include <nlist.h>
49 #include <paths.h>
50 #include <stdio.h>
51 #include <stdlib.h>
52 #include <string.h>
53 #include <unistd.h>
54 #include "netstat.h"
55
56 struct nlist nl[] = {
57 #define N_AFMAP 0
58 { "_afmap"},
59 #define N_AF2IDX 1
60 { "_af2idx" },
61 #define N_AF2IDXMAX 2
62 { "_af2idx_max" },
63
64 { "" }
65 };
66
67 struct protox {
68 void (*pr_stats)(char *); /* statistics printing routine */
69 char *pr_name; /* well-known name */
70 int pr_proto; /* protocol number */
71 } protox[] = {
72 { ip_stats, "ip", IPPROTO_IPV4 },
73 { icmp_stats, "icmp", 0 },
74 { igmp_stats, "igmp", 0 },
75 { ipip_stats, "ipencap", 0 },
76 { tcp_stats, "tcp", IPPROTO_TCP },
77 { udp_stats, "udp", IPPROTO_UDP },
78 { ipsec_stats, "ipsec", 0 },
79 { esp_stats, "esp", 0 },
80 { ah_stats, "ah", 0 },
81 { etherip_stats,"etherip", 0 },
82 { ipcomp_stats, "ipcomp", 0 },
83 { carp_stats, "carp", 0 },
84 { pfsync_stats, "pfsync", 0 },
85 { div_stats, "divert", IPPROTO_DIVERT },
86 { pflow_stats, "pflow", 0 },
87 { NULL, NULL, 0 }
88 };
89
90 struct protox ip6protox[] = {
91 { ip6_stats, "ip6", IPPROTO_IPV6 },
92 { div6_stats, "divert6", IPPROTO_DIVERT },
93 { icmp6_stats, "icmp6", 0 },
94 { rip6_stats, "rip6", 0 },
95 { NULL, NULL, 0 }
96 };
97
98 struct protox *protoprotox[] = {
99 protox, ip6protox, NULL
100 };
101
102 static void usage(void);
103 static struct protox *name2protox(char *);
104 static struct protox *knownname(char *);
105 void gettable(u_int);
106
107 kvm_t *kvmd;
108
109 int Aflag; /* show addresses of protocol control block */
110 int aflag; /* show all sockets (including servers) */
111 int Bflag; /* show TCP send and receive buffer sizes */
112 int bflag; /* show bytes instead of packets */
113 int dflag; /* show i/f dropped packets */
114 int Fflag; /* show routes whose gateways are in specified AF */
115 int gflag; /* show group (multicast) routing or stats */
116 int hflag; /* print human numbers */
117 int iflag; /* show interfaces */
118 int lflag; /* show only listening sockets (only servers), */
119 /* with -g, show routing table with use and ref */
120 int mflag; /* show memory stats */
121 int nflag; /* show addresses numerically */
122 int pflag; /* show given protocol */
123 int Pflag; /* show given PCB */
124 int qflag; /* only display non-zero values for output */
125 int rflag; /* show routing tables (or routing stats) */
126 int Rflag; /* show rdomain and rtable summary */
127 int sflag; /* show protocol statistics */
128 int vflag; /* be verbose */
129 int Wflag; /* show net80211 protocol statistics */
130
131 int interval; /* repeat interval for i/f stats */
132
133 char *interface; /* desired i/f for stats, or NULL for all i/fs */
134
135 int af; /* address family */
136
137 int
main(int argc,char * argv[])138 main(int argc, char *argv[])
139 {
140 extern char *optarg;
141 extern int optind;
142 const char *errstr;
143 struct protox *tp = NULL; /* for printing cblocks & stats */
144 int ch;
145 char *nlistf = NULL, *memf = NULL, *ep;
146 char buf[_POSIX2_LINE_MAX];
147 u_long pcbaddr = 0;
148 u_int tableid;
149 int Tflag = 0;
150 int repeatcount = 0;
151 int proto = 0;
152 int need_nlist, kvm_flags = O_RDONLY;
153
154 af = AF_UNSPEC;
155 tableid = getrtable();
156
157 while ((ch = getopt(argc, argv,
158 "AaBbc:deFf:ghI:iLlM:mN:np:P:qRrsT:uvW:w:")) != -1)
159 switch (ch) {
160 case 'A':
161 Aflag = 1;
162 break;
163 case 'a':
164 aflag = 1;
165 break;
166 case 'B':
167 Bflag = 1;
168 break;
169 case 'b':
170 bflag = 1;
171 break;
172 case 'c':
173 repeatcount = strtonum(optarg, 1, INT_MAX, &errstr);
174 if (errstr)
175 errx(1, "count is %s", errstr);
176 break;
177 case 'd':
178 dflag = IF_SHOW_DROP;
179 break;
180 case 'e':
181 dflag = IF_SHOW_ERRS;
182 break;
183 case 'F':
184 Fflag = 1;
185 break;
186 case 'f':
187 if (strcmp(optarg, "inet") == 0)
188 af = AF_INET;
189 else if (strcmp(optarg, "inet6") == 0)
190 af = AF_INET6;
191 else if (strcmp(optarg, "local") == 0)
192 af = AF_LOCAL;
193 else if (strcmp(optarg, "unix") == 0)
194 af = AF_UNIX;
195 else if (strcmp(optarg, "mpls") == 0)
196 af = AF_MPLS;
197 else {
198 (void)fprintf(stderr,
199 "%s: %s: unknown address family\n",
200 __progname, optarg);
201 exit(1);
202 }
203 break;
204 case 'g':
205 gflag = 1;
206 break;
207 case 'h':
208 hflag = 1;
209 break;
210 case 'I':
211 iflag = 1;
212 interface = optarg;
213 break;
214 case 'i':
215 iflag = 1;
216 break;
217 case 'l':
218 lflag = 1;
219 break;
220 case 'M':
221 memf = optarg;
222 break;
223 case 'm':
224 mflag = 1;
225 break;
226 case 'N':
227 nlistf = optarg;
228 break;
229 case 'n':
230 nflag = 1;
231 break;
232 case 'p':
233 if ((tp = name2protox(optarg)) == NULL) {
234 (void)fprintf(stderr,
235 "%s: %s: unknown protocol\n",
236 __progname, optarg);
237 exit(1);
238 }
239 pflag = 1;
240 break;
241 case 'P':
242 errno = 0;
243 pcbaddr = strtoul(optarg, &ep, 16);
244 if (optarg[0] == '\0' || *ep != '\0' ||
245 errno == ERANGE) {
246 (void)fprintf(stderr,
247 "%s: %s: invalid PCB address\n",
248 __progname, optarg);
249 exit(1);
250 }
251 Pflag = 1;
252 break;
253 case 'q':
254 qflag = 1;
255 break;
256 case 'R':
257 Rflag = 1;
258 break;
259 case 'r':
260 rflag = 1;
261 break;
262 case 's':
263 ++sflag;
264 break;
265 case 'T':
266 tableid = strtonum(optarg, 0, RT_TABLEID_MAX, &errstr);
267 if (errstr)
268 errx(1, "invalid table id: %s", errstr);
269 Tflag = 1;
270 break;
271 case 'u':
272 af = AF_UNIX;
273 break;
274 case 'v':
275 vflag = 1;
276 break;
277 case 'W':
278 Wflag = 1;
279 interface = optarg;
280 break;
281 case 'w':
282 interval = strtonum(optarg, 1, INT_MAX, &errstr);
283 if (errstr)
284 errx(1, "interval is %s", errstr);
285 iflag = 1;
286 break;
287 default:
288 usage();
289 }
290 argv += optind;
291 argc -= optind;
292
293 if (argc) {
294 interval = strtonum(*argv, 1, INT_MAX, &errstr);
295 if (errstr)
296 errx(1, "interval is %s", errstr);
297 ++argv;
298 --argc;
299 iflag = 1;
300 }
301 if (argc)
302 usage();
303
304 /*
305 * Show per-interface statistics which don't need access to
306 * kernel memory (they're using IOCTLs)
307 */
308 if (Wflag) {
309 if (interface == NULL)
310 usage();
311 net80211_ifstats(interface);
312 exit(0);
313 }
314
315 if (mflag) {
316 mbpr();
317 exit(0);
318 }
319 if (iflag) {
320 intpr(interval, repeatcount);
321 exit(0);
322 }
323 if (sflag) {
324 if (rflag) {
325 rt_stats();
326 } else if (gflag) {
327 if (af == AF_INET || af == AF_UNSPEC)
328 mrt_stats();
329 if (af == AF_INET6 || af == AF_UNSPEC)
330 mrt6_stats();
331 } else if (pflag && tp->pr_name) {
332 (*tp->pr_stats)(tp->pr_name);
333 } else {
334 if (af == AF_INET || af == AF_UNSPEC)
335 for (tp = protox; tp->pr_name; tp++)
336 (*tp->pr_stats)(tp->pr_name);
337 if (af == AF_INET6 || af == AF_UNSPEC)
338 for (tp = ip6protox; tp->pr_name; tp++)
339 (*tp->pr_stats)(tp->pr_name);
340 }
341 exit(0);
342 }
343 if (gflag) {
344 if (af == AF_INET || af == AF_UNSPEC)
345 mroutepr();
346 if (af == AF_INET6 || af == AF_UNSPEC)
347 mroute6pr();
348 exit(0);
349 }
350
351 if (Rflag) {
352 rdomainpr();
353 exit(0);
354 }
355
356 /*
357 * The remaining code may need kvm so lets try to open it.
358 * -r and -P are the only bits left that actually can use this.
359 */
360 need_nlist = (nlistf != NULL) || (memf != NULL) || (Aflag && rflag);
361 if (!need_nlist && !Pflag)
362 kvm_flags |= KVM_NO_FILES;
363
364 if ((kvmd = kvm_openfiles(nlistf, memf, NULL, kvm_flags, buf)) == NULL)
365 errx(1, "kvm_openfiles: %s", buf);
366
367 if (need_nlist && (kvm_nlist(kvmd, nl) < 0 || nl[0].n_type == 0)) {
368 if (nlistf)
369 errx(1, "%s: no namelist", nlistf);
370 else
371 errx(1, "no namelist");
372 }
373
374 if (!need_nlist && Tflag)
375 gettable(tableid);
376
377 if (rflag) {
378 if (Aflag || nlistf != NULL || memf != NULL)
379 routepr(nl[N_AFMAP].n_value, nl[N_AF2IDX].n_value,
380 nl[N_AF2IDXMAX].n_value, tableid);
381 else
382 p_rttables(af, tableid);
383 exit(0);
384 }
385
386 if (pflag) {
387 if (tp->pr_proto == 0)
388 errx(1, "no protocol handler for protocol %s",
389 tp->pr_name);
390 else
391 proto = tp->pr_proto;
392 }
393
394 protopr(kvmd, pcbaddr, tableid, proto);
395 exit(0);
396 }
397
398 /*
399 * Read kernel memory, return 0 on success.
400 */
401 int
kread(u_long addr,void * buf,int size)402 kread(u_long addr, void *buf, int size)
403 {
404
405 if (kvm_read(kvmd, addr, buf, size) != size) {
406 (void)fprintf(stderr, "%s: %s\n", __progname,
407 kvm_geterr(kvmd));
408 return (-1);
409 }
410 return (0);
411 }
412
413 char *
plural(u_int64_t n)414 plural(u_int64_t n)
415 {
416 return (n != 1 ? "s" : "");
417 }
418
419 char *
plurales(u_int64_t n)420 plurales(u_int64_t n)
421 {
422 return (n != 1 ? "es" : "");
423 }
424
425 char *
pluralys(u_int64_t n)426 pluralys(u_int64_t n)
427 {
428 return (n != 1 ? "ies" : "y");
429 }
430
431 /*
432 * Find the protox for the given "well-known" name.
433 */
434 static struct protox *
knownname(char * name)435 knownname(char *name)
436 {
437 struct protox **tpp, *tp;
438
439 for (tpp = protoprotox; *tpp; tpp++)
440 for (tp = *tpp; tp->pr_name; tp++)
441 if (strcmp(tp->pr_name, name) == 0)
442 return (tp);
443 return (NULL);
444 }
445
446 /*
447 * Find the protox corresponding to name.
448 */
449 static struct protox *
name2protox(char * name)450 name2protox(char *name)
451 {
452 struct protox *tp;
453 char **alias; /* alias from p->aliases */
454 struct protoent *p;
455
456 /*
457 * Try to find the name in the list of "well-known" names. If that
458 * fails, check if name is an alias for an Internet protocol.
459 */
460 if ((tp = knownname(name)))
461 return (tp);
462
463 setprotoent(1); /* make protocol lookup cheaper */
464 while ((p = getprotoent())) {
465 /* assert: name not same as p->name */
466 for (alias = p->p_aliases; *alias; alias++)
467 if (strcmp(name, *alias) == 0) {
468 endprotoent();
469 return (knownname(p->p_name));
470 }
471 }
472 endprotoent();
473 return (NULL);
474 }
475
476 static void
usage(void)477 usage(void)
478 {
479 (void)fprintf(stderr,
480 "usage: netstat [-AaBln] [-M core] [-N system] [-p protocol] [-T rtable]\n"
481 " netstat -W interface\n"
482 " netstat -m\n"
483 " netstat -I interface | -i [-bdehnq]\n"
484 " netstat -w wait [-bdehnq] [-c count] [-I interface]\n"
485 " netstat -s [-gru] [-f address_family] [-p protocol]\n"
486 " netstat -g [-lnu] [-f address_family]\n"
487 " netstat -R\n"
488 " netstat -r [-AFu] [-f address_family] [-M core] [-N system] [-T rtable]\n"
489 " netstat -P pcbaddr [-v] [-M core] [-N system]\n");
490 exit(1);
491 }
492
493 void
gettable(u_int tableid)494 gettable(u_int tableid)
495 {
496 struct rt_tableinfo info;
497 int mib[6];
498 size_t len;
499
500 mib[0] = CTL_NET;
501 mib[1] = PF_ROUTE;
502 mib[2] = 0;
503 mib[3] = 0;
504 mib[4] = NET_RT_TABLE;
505 mib[5] = tableid;
506
507 len = sizeof(info);
508 if (sysctl(mib, 6, &info, &len, NULL, 0) == -1)
509 err(1, "routing table %d", tableid);
510 }
511