xref: /minix/sbin/ping/ping.c (revision ebfedea0)
1 /*	$NetBSD: ping.c,v 1.107 2013/10/19 01:08:25 christos Exp $	*/
2 
3 /*
4  * Copyright (c) 1989, 1993
5  *	The Regents of the University of California.  All rights reserved.
6  *
7  * This code is derived from software contributed to Berkeley by
8  * Mike Muuss.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  * 3. Neither the name of the University nor the names of its contributors
19  *    may be used to endorse or promote products derived from this software
20  *    without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  */
34 
35 /*
36  *			P I N G . C
37  *
38  * Using the InterNet Control Message Protocol (ICMP) "ECHO" facility,
39  * measure round-trip-delays and packet loss across network paths.
40  *
41  * Author -
42  *	Mike Muuss
43  *	U. S. Army Ballistic Research Laboratory
44  *	December, 1983
45  * Modified at Uc Berkeley
46  * Record Route and verbose headers - Phil Dykstra, BRL, March 1988.
47  * Multicast options (ttl, if, loop) - Steve Deering, Stanford, August 1988.
48  * ttl, duplicate detection - Cliff Frost, UCB, April 1989
49  * Pad pattern - Cliff Frost (from Tom Ferrin, UCSF), April 1989
50  *
51  * Status -
52  *	Public Domain.  Distribution Unlimited.
53  *
54  * Bugs -
55  *	More statistics could always be gathered.
56  *	This program has to run SUID to ROOT to access the ICMP socket.
57  */
58 
59 #include <sys/cdefs.h>
60 #ifndef lint
61 __RCSID("$NetBSD: ping.c,v 1.107 2013/10/19 01:08:25 christos Exp $");
62 #endif
63 
64 #include <stdio.h>
65 #include <stddef.h>
66 #include <errno.h>
67 #include <signal.h>
68 #include <sys/time.h>
69 #include <sys/types.h>
70 #include <sys/param.h>
71 #include <sys/socket.h>
72 #include <sys/file.h>
73 #include <termios.h>
74 #include <stdlib.h>
75 #include <unistd.h>
76 #include <poll.h>
77 #include <limits.h>
78 #include <math.h>
79 #include <string.h>
80 #include <err.h>
81 
82 #include <netinet/in_systm.h>
83 #include <netinet/in.h>
84 #include <netinet/ip.h>
85 #include <netinet/ip_icmp.h>
86 #include <netinet/ip_var.h>
87 #include <arpa/inet.h>
88 #include <ctype.h>
89 #include <netdb.h>
90 
91 #ifdef IPSEC
92 #include <netipsec/ipsec.h>
93 #endif /*IPSEC*/
94 
95 #include "prog_ops.h"
96 
97 #define FLOOD_INTVL	0.01		/* default flood output interval */
98 #define	MAXPACKET	(IP_MAXPACKET-60-8)	/* max packet size */
99 
100 #define F_VERBOSE	0x0001
101 #define F_QUIET		0x0002		/* minimize all output */
102 #define F_SEMI_QUIET	0x0004		/* ignore our ICMP errors */
103 #define F_FLOOD		0x0008		/* flood-ping */
104 #define	F_RECORD_ROUTE	0x0010		/* record route */
105 #define F_SOURCE_ROUTE	0x0020		/* loose source route */
106 #define F_PING_FILLED	0x0040		/* is buffer filled with user data? */
107 #define F_PING_RANDOM	0x0080		/* use random data */
108 #define	F_NUMERIC	0x0100		/* do not do gethostbyaddr() calls */
109 #define F_TIMING	0x0200		/* room for a timestamp */
110 #define F_DF		0x0400		/* set IP DF bit */
111 #define F_SOURCE_ADDR	0x0800		/* set source IP address/interface */
112 #define F_ONCE		0x1000		/* exit(0) after receiving 1 reply */
113 #define F_MCAST		0x2000		/* multicast target */
114 #define F_MCAST_NOLOOP	0x4000		/* no multicast loopback */
115 #define F_AUDIBLE	0x8000		/* audible output */
116 #define F_TIMING64	0x10000		/* 64 bit time, nanoseconds */
117 #ifdef IPSEC
118 #ifdef IPSEC_POLICY_IPSEC
119 #define F_POLICY	0x20000
120 #else
121 #define	F_AUTHHDR	0x20000
122 #define	F_ENCRYPT	0x40000
123 #endif /*IPSEC_POLICY_IPSEC*/
124 #endif /*IPSEC*/
125 
126 
127 /* MAX_DUP_CHK is the number of bits in received table, the
128  *	maximum number of received sequence numbers we can track to check
129  *	for duplicates.
130  */
131 #define MAX_DUP_CHK     (8 * 2048)
132 static u_char	rcvd_tbl[MAX_DUP_CHK/8];
133 static int     nrepeats = 0;
134 #define A(seq)	rcvd_tbl[(seq/8)%sizeof(rcvd_tbl)]  /* byte in array */
135 #define B(seq)	(1 << (seq & 0x07))	/* bit in byte */
136 #define SET(seq) (A(seq) |= B(seq))
137 #define CLR(seq) (A(seq) &= (~B(seq)))
138 #define TST(seq) (A(seq) & B(seq))
139 
140 struct tv32 {
141 	int32_t tv32_sec;
142 	int32_t tv32_usec;
143 };
144 
145 
146 static u_char	*packet;
147 static int	packlen;
148 static int	pingflags = 0, options;
149 static int	pongflags = 0;
150 static char	*fill_pat;
151 
152 static int s;					/* Socket file descriptor */
153 static int sloop;				/* Socket file descriptor/loopback */
154 
155 #define PHDR_LEN sizeof(struct tv32)		/* size of timestamp header */
156 #define PHDR64_LEN sizeof(struct timespec)	/* size of timestamp header */
157 static struct sockaddr_in whereto, send_addr;	/* Who to ping */
158 static struct sockaddr_in src_addr;		/* from where */
159 static struct sockaddr_in loc_addr;		/* 127.1 */
160 static int datalen;				/* How much data */
161 static int phdrlen;
162 
163 #ifndef __NetBSD__
164 static char *progname;
165 #define	getprogname()		(progname)
166 #define	setprogname(name)	((void)(progname = (name)))
167 #endif
168 
169 static char hostname[MAXHOSTNAMELEN];
170 
171 static struct {
172 	struct ip	o_ip;
173 	char		o_opt[MAX_IPOPTLEN];
174 	union {
175 		u_char	    u_buf[MAXPACKET+offsetof(struct icmp, icmp_data)];
176 		struct icmp u_icmp;
177 	} o_u;
178 } out_pack;
179 #define	opack_icmp	out_pack.o_u.u_icmp
180 static struct ip *opack_ip;
181 
182 static char optspace[MAX_IPOPTLEN];		/* record route space */
183 static int optlen;
184 
185 static int npackets;				/* total packets to send */
186 static int preload;				/* number of packets to "preload" */
187 static int ntransmitted;			/* output sequence # = #sent */
188 static int ident;				/* our ID, in network byte order */
189 
190 static int nreceived;				/* # of packets we got back */
191 
192 static double interval;			/* interval between packets */
193 static struct timespec interval_tv;
194 static double tmin = 999999999.0;
195 static double tmax = 0.0;
196 static double tsum = 0.0;			/* sum of all times */
197 static double tsumsq = 0.0;
198 static double maxwait = 0.0;
199 
200 #ifndef __minix
201 static int bufspace = IP_MAXPACKET;
202 #endif
203 
204 static struct timespec now, clear_cache, last_tx, next_tx, first_tx;
205 static struct timespec last_rx, first_rx;
206 static int lastrcvd = 1;			/* last ping sent has been received */
207 
208 static struct timespec jiggle_time;
209 static int jiggle_cnt, total_jiggled, jiggle_direction = -1;
210 
211 __dead static void doit(void);
212 static void prefinish(int);
213 static void prtsig(int);
214 __dead static void finish(int);
215 static void summary(int);
216 static void pinger(void);
217 static void fill(void);
218 static void rnd_fill(void);
219 static double diffsec(struct timespec *, struct timespec *);
220 #if 0
221 static void timespecadd(struct timespec *, struct timespec *);
222 #endif
223 static void sec_to_timespec(const double, struct timespec *);
224 static double timespec_to_sec(const struct timespec *);
225 static void pr_pack(u_char *, int, struct sockaddr_in *);
226 static u_int16_t in_cksum(u_int16_t *, u_int);
227 static void pr_saddr(u_char *);
228 static char *pr_addr(struct in_addr *);
229 static void pr_iph(struct icmp *, int);
230 static void pr_retip(struct icmp *, int);
231 static int pr_icmph(struct icmp *, struct sockaddr_in *, int);
232 static void jiggle(int), jiggle_flush(int);
233 static void gethost(const char *, const char *,
234 		    struct sockaddr_in *, char *, int);
235 __dead static void usage(void);
236 
237 int
238 main(int argc, char *argv[])
239 {
240 	int c, i, on = 1, hostind = 0;
241 	long l;
242 	int len = -1, compat = 0;
243 	u_char ttl = 0;
244 	u_long tos = 0;
245 	char *p;
246 #ifdef IPSEC
247 #ifdef IPSEC_POLICY_IPSEC
248 	char *policy_in = NULL;
249 	char *policy_out = NULL;
250 #endif
251 #endif
252 #ifdef SIGINFO
253 	struct sigaction sa;
254 #endif
255 
256 	if (prog_init && prog_init() == -1)
257 		err(1, "init failed");
258 
259 	if ((s = prog_socket(AF_INET, SOCK_RAW, IPPROTO_ICMP)) < 0)
260 		err(1, "Cannot create socket");
261 	if ((sloop = prog_socket(AF_INET, SOCK_RAW, IPPROTO_ICMP)) < 0)
262 		err(1, "Cannot create socket");
263 
264 #ifndef __minix
265 	/*
266 	 * sloop is never read on.  This prevents packets from
267 	 * queueing in its recv buffer.
268 	 */
269 	if (prog_shutdown(sloop, SHUT_RD) == -1)
270 		warn("Cannot shutdown for read");
271 #endif
272 
273 	if (prog_setuid(prog_getuid()) == -1)
274 		err(1, "setuid");
275 
276 	setprogname(argv[0]);
277 
278 #ifndef IPSEC
279 #define IPSECOPT
280 #else
281 #ifdef IPSEC_POLICY_IPSEC
282 #define IPSECOPT	"E:"
283 #else
284 #define IPSECOPT	"AE"
285 #endif /*IPSEC_POLICY_IPSEC*/
286 #endif
287 	while ((c = getopt(argc, argv,
288 			   "ac:CdDfg:h:i:I:l:Lnop:PqQrRs:t:T:vw:" IPSECOPT)) != -1) {
289 #undef IPSECOPT
290 		switch (c) {
291 		case 'a':
292 			pingflags |= F_AUDIBLE;
293 			break;
294 		case 'C':
295 			compat = 1;
296 			break;
297 		case 'c':
298 			npackets = strtol(optarg, &p, 0);
299 			if (*p != '\0' || npackets <= 0)
300 				errx(1, "Bad/invalid number of packets");
301 			break;
302 		case 'D':
303 			pingflags |= F_DF;
304 			break;
305 		case 'd':
306 			options |= SO_DEBUG;
307 			break;
308 		case 'f':
309 			pingflags |= F_FLOOD;
310 			break;
311 		case 'h':
312 			hostind = optind-1;
313 			break;
314 		case 'i':		/* wait between sending packets */
315 			interval = strtod(optarg, &p);
316 			if (*p != '\0' || interval <= 0)
317 				errx(1, "Bad/invalid interval %s", optarg);
318 			break;
319 		case 'l':
320 			preload = strtol(optarg, &p, 0);
321 			if (*p != '\0' || preload < 0)
322 				errx(1, "Bad/invalid preload value %s",
323 				     optarg);
324 			break;
325 		case 'n':
326 			pingflags |= F_NUMERIC;
327 			break;
328 		case 'o':
329 			pingflags |= F_ONCE;
330 			break;
331 		case 'p':		/* fill buffer with user pattern */
332 			if (pingflags & F_PING_RANDOM)
333 				errx(1, "Only one of -P and -p allowed");
334 			pingflags |= F_PING_FILLED;
335 			fill_pat = optarg;
336 			break;
337 		case 'P':
338 			if (pingflags & F_PING_FILLED)
339 				errx(1, "Only one of -P and -p allowed");
340 			pingflags |= F_PING_RANDOM;
341 			break;
342 		case 'q':
343 			pingflags |= F_QUIET;
344 			break;
345 		case 'Q':
346 			pingflags |= F_SEMI_QUIET;
347 			break;
348 		case 'r':
349 			options |= SO_DONTROUTE;
350 			break;
351 		case 's':		/* size of packet to send */
352 			l = strtol(optarg, &p, 0);
353 			if (*p != '\0' || l < 0)
354 				errx(1, "Bad/invalid packet size %s", optarg);
355 			if (l > MAXPACKET)
356 				errx(1, "packet size is too large");
357 			len = (int)l;
358 			break;
359 		case 'v':
360 			pingflags |= F_VERBOSE;
361 			break;
362 		case 'R':
363 			pingflags |= F_RECORD_ROUTE;
364 			break;
365 		case 'L':
366 			pingflags |= F_MCAST_NOLOOP;
367 			break;
368 		case 't':
369 			tos = strtoul(optarg, &p, 0);
370 			if (*p != '\0' ||  tos > 0xFF)
371 				errx(1, "bad tos value: %s", optarg);
372 			break;
373 		case 'T':
374 			l = strtol(optarg, &p, 0);
375 			if (*p != '\0' || l > 255 || l <= 0)
376 				errx(1, "ttl out of range");
377 			ttl = (u_char)l;    /* cannot check >255 otherwise */
378 			break;
379 		case 'I':
380 			pingflags |= F_SOURCE_ADDR;
381 			gethost("-I", optarg, &src_addr, 0, 0);
382 			break;
383 		case 'g':
384 			pingflags |= F_SOURCE_ROUTE;
385 			gethost("-g", optarg, &send_addr, 0, 0);
386 			break;
387 		case 'w':
388 			maxwait = strtod(optarg, &p);
389 			if (*p != '\0' || maxwait <= 0)
390 				errx(1, "Bad/invalid maxwait time %s", optarg);
391 			break;
392 #ifdef IPSEC
393 #ifdef IPSEC_POLICY_IPSEC
394 		case 'E':
395 			pingflags |= F_POLICY;
396 			if (!strncmp("in", optarg, 2)) {
397 				policy_in = strdup(optarg);
398 				if (!policy_in)
399 					err(1, "strdup");
400 			} else if (!strncmp("out", optarg, 3)) {
401 				policy_out = strdup(optarg);
402 				if (!policy_out)
403 					err(1, "strdup");
404 			} else
405 				errx(1, "invalid security policy");
406 			break;
407 #else
408 		case 'A':
409 			pingflags |= F_AUTHHDR;
410 			break;
411 		case 'E':
412 			pingflags |= F_ENCRYPT;
413 			break;
414 #endif /*IPSEC_POLICY_IPSEC*/
415 #endif /*IPSEC*/
416 		default:
417 			usage();
418 			break;
419 		}
420 	}
421 
422 	if (interval == 0)
423 		interval = (pingflags & F_FLOOD) ? FLOOD_INTVL : 1.0;
424 #ifndef sgi
425 	if (pingflags & F_FLOOD && prog_getuid())
426 		errx(1, "Must be superuser to use -f");
427 	if (interval < 1.0 && prog_getuid())
428 		errx(1, "Must be superuser to use < 1 sec ping interval");
429 	if (preload > 0 && prog_getuid())
430 		errx(1, "Must be superuser to use -l");
431 #endif
432 	sec_to_timespec(interval, &interval_tv);
433 
434 	if ((pingflags & (F_AUDIBLE|F_FLOOD)) == (F_AUDIBLE|F_FLOOD))
435 		warnx("Sorry, no audible output for flood pings");
436 
437 	if (npackets != 0) {
438 		npackets += preload;
439 	} else {
440 		npackets = INT_MAX;
441 	}
442 
443 	if (hostind == 0) {
444 		if (optind != argc-1)
445 			usage();
446 		else
447 			hostind = optind;
448 	}
449 	else if (hostind >= argc - 1)
450 		usage();
451 
452 	gethost("", argv[hostind], &whereto, hostname, sizeof(hostname));
453 	if (IN_MULTICAST(ntohl(whereto.sin_addr.s_addr)))
454 		pingflags |= F_MCAST;
455 	if (!(pingflags & F_SOURCE_ROUTE))
456 		(void) memcpy(&send_addr, &whereto, sizeof(send_addr));
457 
458 	loc_addr.sin_family = AF_INET;
459 	loc_addr.sin_len = sizeof(struct sockaddr_in);
460 	loc_addr.sin_addr.s_addr = htonl((127 << 24) + 1);
461 
462 	if (len != -1)
463 		datalen = len;
464 	else
465 		datalen = 64;
466 	if (!compat && datalen >= (int)PHDR64_LEN) { /* can we time them? */
467 		pingflags |= F_TIMING64;
468 		phdrlen = PHDR64_LEN;
469 	} else if (datalen >= (int)PHDR_LEN) {	/* can we time them? */
470 		pingflags |= F_TIMING;
471 		phdrlen = PHDR_LEN;
472 	} else
473 		phdrlen = 0;
474 
475 	packlen = datalen + 60 + 76;	/* MAXIP + MAXICMP */
476 	datalen -= phdrlen;
477 	if ((packet = malloc(packlen)) == NULL)
478 		err(1, "Out of memory");
479 
480 	if (pingflags & F_PING_FILLED) {
481 		fill();
482 	} else if (pingflags & F_PING_RANDOM) {
483 		rnd_fill();
484 	} else {
485 		for (i = phdrlen; i < datalen; i++)
486 			opack_icmp.icmp_data[i] = i;
487 	}
488 
489 	ident = arc4random() & 0xFFFF;
490 
491 	if (options & SO_DEBUG) {
492 		if (prog_setsockopt(s, SOL_SOCKET, SO_DEBUG,
493 			       (char *)&on, sizeof(on)) == -1)
494 			warn("Can't turn on socket debugging");
495 	}
496 	if (options & SO_DONTROUTE) {
497 		if (prog_setsockopt(s, SOL_SOCKET, SO_DONTROUTE,
498 			       (char *)&on, sizeof(on)) == -1)
499 			warn("SO_DONTROUTE");
500 	}
501 
502 	if (options & SO_DEBUG) {
503 		if (prog_setsockopt(sloop, SOL_SOCKET, SO_DEBUG,
504 			       (char *)&on, sizeof(on)) == -1)
505 			warn("Can't turn on socket debugging");
506 	}
507 	if (options & SO_DONTROUTE) {
508 		if (prog_setsockopt(sloop, SOL_SOCKET, SO_DONTROUTE,
509 			       (char *)&on, sizeof(on)) == -1)
510 			warn("SO_DONTROUTE");
511 	}
512 
513 	if (pingflags & F_SOURCE_ROUTE) {
514 		optspace[IPOPT_OPTVAL] = IPOPT_LSRR;
515 		optspace[IPOPT_OLEN] = optlen = 7;
516 		optspace[IPOPT_OFFSET] = IPOPT_MINOFF;
517 		(void)memcpy(&optspace[IPOPT_MINOFF-1], &whereto.sin_addr,
518 			     sizeof(whereto.sin_addr));
519 		optspace[optlen++] = IPOPT_NOP;
520 	}
521 	if (pingflags & F_RECORD_ROUTE) {
522 		optspace[optlen+IPOPT_OPTVAL] = IPOPT_RR;
523 		optspace[optlen+IPOPT_OLEN] = (MAX_IPOPTLEN -1-optlen);
524 		optspace[optlen+IPOPT_OFFSET] = IPOPT_MINOFF;
525 		optlen = MAX_IPOPTLEN;
526 	}
527 	/* this leaves opack_ip 0(mod 4) aligned */
528 	opack_ip = (struct ip *)((char *)&out_pack.o_ip
529 				 + sizeof(out_pack.o_opt)
530 				 - optlen);
531 	(void) memcpy(opack_ip + 1, optspace, optlen);
532 
533 #ifndef __minix
534 	if (prog_setsockopt(s,IPPROTO_IP,IP_HDRINCL,
535 	    (char *) &on, sizeof(on)) < 0)
536 		err(1, "Can't set special IP header");
537 #endif
538 
539 	opack_ip->ip_v = IPVERSION;
540 	opack_ip->ip_hl = (sizeof(struct ip)+optlen) >> 2;
541 	opack_ip->ip_tos = tos;
542 	opack_ip->ip_off = (pingflags & F_DF) ? IP_DF : 0;
543 	opack_ip->ip_ttl = ttl ? ttl : MAXTTL;
544 	opack_ip->ip_p = IPPROTO_ICMP;
545 	opack_ip->ip_src = src_addr.sin_addr;
546 	opack_ip->ip_dst = send_addr.sin_addr;
547 
548 	if (pingflags & F_MCAST) {
549 		if (pingflags & F_MCAST_NOLOOP) {
550 			u_char loop = 0;
551 			if (prog_setsockopt(s, IPPROTO_IP,
552 			    IP_MULTICAST_LOOP,
553 			    (char *) &loop, 1) < 0)
554 				err(1, "Can't disable multicast loopback");
555 		}
556 
557 		if (ttl != 0
558 		    && prog_setsockopt(s, IPPROTO_IP, IP_MULTICAST_TTL,
559 		    (char *) &ttl, 1) < 0)
560 			err(1, "Can't set multicast time-to-live");
561 
562 		if ((pingflags & F_SOURCE_ADDR)
563 		    && prog_setsockopt(s, IPPROTO_IP, IP_MULTICAST_IF,
564 				  (char *) &src_addr.sin_addr,
565 				  sizeof(src_addr.sin_addr)) < 0)
566 			err(1, "Can't set multicast source interface");
567 
568 	} else if (pingflags & F_SOURCE_ADDR) {
569 		if (prog_setsockopt(s, IPPROTO_IP, IP_MULTICAST_IF,
570 			       (char *) &src_addr.sin_addr,
571 			       sizeof(src_addr.sin_addr)) < 0)
572 			err(1, "Can't set source interface/address");
573 	}
574 #ifdef IPSEC
575 #ifdef IPSEC_POLICY_IPSEC
576     {
577 	char *buf;
578 	if (pingflags & F_POLICY) {
579 		if (policy_in != NULL) {
580 			buf = ipsec_set_policy(policy_in, strlen(policy_in));
581 			if (buf == NULL)
582 				errx(1, "%s", ipsec_strerror());
583 			if (prog_setsockopt(s, IPPROTO_IP, IP_IPSEC_POLICY,
584 					buf, ipsec_get_policylen(buf)) < 0) {
585 				err(1, "ipsec policy cannot be configured");
586 			}
587 			free(buf);
588 		}
589 		if (policy_out != NULL) {
590 			buf = ipsec_set_policy(policy_out, strlen(policy_out));
591 			if (buf == NULL)
592 				errx(1, "%s", ipsec_strerror());
593 			if (prog_setsockopt(s, IPPROTO_IP, IP_IPSEC_POLICY,
594 					buf, ipsec_get_policylen(buf)) < 0) {
595 				err(1, "ipsec policy cannot be configured");
596 			}
597 			free(buf);
598 		}
599 	}
600 	buf = ipsec_set_policy("out bypass", strlen("out bypass"));
601 	if (buf == NULL)
602 		errx(1, "%s", ipsec_strerror());
603 	if (prog_setsockopt(sloop, IPPROTO_IP, IP_IPSEC_POLICY,
604 			buf, ipsec_get_policylen(buf)) < 0) {
605 #if 0
606 		warnx("ipsec is not configured");
607 #else
608 		/* ignore it, should be okay */
609 #endif
610 	}
611 	free(buf);
612     }
613 #else
614     {
615 	int optval;
616 	if (pingflags & F_AUTHHDR) {
617 		optval = IPSEC_LEVEL_REQUIRE;
618 #ifdef IP_AUTH_TRANS_LEVEL
619 		(void)prog_setsockopt(s, IPPROTO_IP, IP_AUTH_TRANS_LEVEL,
620 			(char *)&optval, sizeof(optval));
621 #else
622 		(void)prog_setsockopt(s, IPPROTO_IP, IP_AUTH_LEVEL,
623 			(char *)&optval, sizeof(optval));
624 #endif
625 	}
626 	if (pingflags & F_ENCRYPT) {
627 		optval = IPSEC_LEVEL_REQUIRE;
628 		(void)prog_setsockopt(s, IPPROTO_IP, IP_ESP_TRANS_LEVEL,
629 			(char *)&optval, sizeof(optval));
630 	}
631 	optval = IPSEC_LEVEL_BYPASS;
632 #ifdef IP_AUTH_TRANS_LEVEL
633 	(void)prog_setsockopt(sloop, IPPROTO_IP, IP_AUTH_TRANS_LEVEL,
634 		(char *)&optval, sizeof(optval));
635 #else
636 	(void)prog_setsockopt(sloop, IPPROTO_IP, IP_AUTH_LEVEL,
637 		(char *)&optval, sizeof(optval));
638 #endif
639 	(void)prog_setsockopt(sloop, IPPROTO_IP, IP_ESP_TRANS_LEVEL,
640 		(char *)&optval, sizeof(optval));
641     }
642 #endif /*IPSEC_POLICY_IPSEC*/
643 #endif /*IPSEC*/
644 
645 	(void)printf("PING %s (%s): %d data bytes\n", hostname,
646 		     inet_ntoa(whereto.sin_addr), datalen + phdrlen);
647 
648 #ifndef __minix
649 	/* When pinging the broadcast address, you can get a lot
650 	 * of answers.  Doing something so evil is useful if you
651 	 * are trying to stress the ethernet, or just want to
652 	 * fill the arp cache to get some stuff for /etc/ethers.
653 	 */
654 	while (0 > prog_setsockopt(s, SOL_SOCKET, SO_RCVBUF,
655 			      (char*)&bufspace, sizeof(bufspace))) {
656 		if ((bufspace -= 4096) <= 0)
657 			err(1, "Cannot set the receive buffer size");
658 	}
659 
660 	/* make it possible to send giant probes, but do not worry now
661 	 * if it fails, since we probably won't send giant probes.
662 	 */
663 	(void)prog_setsockopt(s, SOL_SOCKET, SO_SNDBUF,
664 			 (char*)&bufspace, sizeof(bufspace));
665 #endif
666 
667 	(void)signal(SIGINT, prefinish);
668 
669 #ifdef SIGINFO
670 	sa.sa_handler = prtsig;
671 	sa.sa_flags = SA_NOKERNINFO;
672 	sigemptyset(&sa.sa_mask);
673 	(void)sigaction(SIGINFO, &sa, NULL);
674 #else
675 	(void)signal(SIGQUIT, prtsig);
676 #endif
677 	(void)signal(SIGCONT, prtsig);
678 
679 	/* fire off them quickies */
680 	for (i = 0; i < preload; i++) {
681 		clock_gettime(CLOCK_MONOTONIC, &now);
682 		pinger();
683 	}
684 
685 	doit();
686 	return 0;
687 }
688 
689 
690 static void
691 doit(void)
692 {
693 	int cc;
694 	struct sockaddr_in from;
695 	socklen_t fromlen;
696 	double sec, last, d_last;
697 	struct pollfd fdmaskp[1];
698 
699 	(void)clock_gettime(CLOCK_MONOTONIC, &clear_cache);
700 	if (maxwait != 0) {
701 		last = timespec_to_sec(&clear_cache) + maxwait;
702 		d_last = 0;
703 	} else {
704 		last = 0;
705 		d_last = 365*24*60*60;
706 	}
707 
708 	do {
709 		clock_gettime(CLOCK_MONOTONIC, &now);
710 
711 		if (last != 0)
712 			d_last = last - timespec_to_sec(&now);
713 
714 		if (ntransmitted < npackets && d_last > 0) {
715 			/* send if within 100 usec or late for next packet */
716 			sec = diffsec(&next_tx, &now);
717 			if (sec <= 0.0001 ||
718 			    (lastrcvd && (pingflags & F_FLOOD))) {
719 				pinger();
720 				sec = diffsec(&next_tx, &now);
721 			}
722 			if (sec < 0.0)
723 				sec = 0.0;
724 			if (d_last < sec)
725 				sec = d_last;
726 
727 		} else {
728 			/* For the last response, wait twice as long as the
729 			 * worst case seen, or 10 times as long as the
730 			 * maximum interpacket interval, whichever is longer.
731 			 */
732 			sec = MAX(2 * tmax, 10 * interval) -
733 			    diffsec(&now, &last_tx);
734 			if (d_last < sec)
735 				sec = d_last;
736 			if (sec <= 0)
737 				break;
738 		}
739 
740 		fdmaskp[0].fd = s;
741 		fdmaskp[0].events = POLLIN;
742 		cc = prog_poll(fdmaskp, 1, (int)(sec * 1000));
743 		if (cc <= 0) {
744 			if (cc < 0) {
745 				if (errno == EINTR)
746 					continue;
747 				jiggle_flush(1);
748 				err(1, "poll");
749 			}
750 			continue;
751 		}
752 
753 		fromlen  = sizeof(from);
754 		cc = prog_recvfrom(s, (char *) packet, packlen,
755 			      0, (struct sockaddr *)&from,
756 			      &fromlen);
757 		if (cc < 0) {
758 			perror("recvfrom failed");
759 			if (errno != EINTR) {
760 				jiggle_flush(1);
761 				warn("recvfrom");
762 				(void)fflush(stderr);
763 			}
764 			continue;
765 		}
766 		clock_gettime(CLOCK_MONOTONIC, &now);
767 		pr_pack(packet, cc, &from);
768 
769 	} while (nreceived < npackets
770 		 && (nreceived == 0 || !(pingflags & F_ONCE)));
771 
772 	finish(0);
773 }
774 
775 
776 static void
777 jiggle_flush(int nl)			/* new line if there are dots */
778 {
779 	int serrno = errno;
780 
781 	if (jiggle_cnt > 0) {
782 		total_jiggled += jiggle_cnt;
783 		jiggle_direction = 1;
784 		do {
785 			(void)putchar('.');
786 		} while (--jiggle_cnt > 0);
787 
788 	} else if (jiggle_cnt < 0) {
789 		total_jiggled -= jiggle_cnt;
790 		jiggle_direction = -1;
791 		do {
792 			(void)putchar('\b');
793 		} while (++jiggle_cnt < 0);
794 	}
795 
796 	if (nl) {
797 		if (total_jiggled != 0)
798 			(void)putchar('\n');
799 		total_jiggled = 0;
800 		jiggle_direction = -1;
801 	}
802 
803 	(void)fflush(stdout);
804 	(void)fflush(stderr);
805 	jiggle_time = now;
806 	errno = serrno;
807 }
808 
809 
810 /* jiggle the cursor for flood-ping
811  */
812 static void
813 jiggle(int delta)
814 {
815 	double dt;
816 
817 	if (pingflags & F_QUIET)
818 		return;
819 
820 	/* do not back up into messages */
821 	if (total_jiggled+jiggle_cnt+delta < 0)
822 		return;
823 
824 	jiggle_cnt += delta;
825 
826 	/* flush the FLOOD dots when things are quiet
827 	 * or occassionally to make the cursor jiggle.
828 	 */
829 	dt = diffsec(&last_tx, &jiggle_time);
830 	if (dt > 0.2 || (dt >= 0.15 && delta*jiggle_direction < 0))
831 		jiggle_flush(0);
832 }
833 
834 
835 /*
836  * Compose and transmit an ICMP ECHO REQUEST packet.  The IP packet
837  * will be added on by the kernel.  The ID field is our UNIX process ID,
838  * and the sequence number is an ascending integer.  The first phdrlen bytes
839  * of the data portion are used to hold a UNIX "timeval" struct in VAX
840  * byte-order, to compute the round-trip time, or a UNIX "timespec" in native
841  * format.
842  */
843 static void
844 pinger(void)
845 {
846 	struct tv32 tv32;
847 #ifndef __minix
848 	int i, cc, sw;
849 #else
850 	int i, cc;
851 #endif
852 
853 	opack_icmp.icmp_code = 0;
854 	opack_icmp.icmp_seq = htons((u_int16_t)(ntransmitted));
855 
856 #ifndef __minix
857 	/* clear the cached route in the kernel after an ICMP
858 	 * response such as a Redirect is seen to stop causing
859 	 * more such packets.  Also clear the cached route
860 	 * periodically in case of routing changes that make
861 	 * black holes come and go.
862 	 */
863 	if (clear_cache.tv_sec != now.tv_sec) {
864 		opack_icmp.icmp_type = ICMP_ECHOREPLY;
865 		opack_icmp.icmp_id = ~ident;
866 		opack_icmp.icmp_cksum = 0;
867 		opack_icmp.icmp_cksum = in_cksum((u_int16_t *)&opack_icmp,
868 		    phdrlen);
869 		sw = 0;
870 		if (prog_setsockopt(sloop,IPPROTO_IP,IP_HDRINCL,
871 			       (char *)&sw,sizeof(sw)) < 0)
872 			err(1, "Can't turn off special IP header");
873 		if (prog_sendto(sloop, (char *) &opack_icmp,
874 			   ICMP_MINLEN, MSG_DONTROUTE,
875 			   (struct sockaddr *)&loc_addr,
876 			   sizeof(struct sockaddr_in)) < 0) {
877 			/*
878 			 * XXX: we only report this as a warning in verbose
879 			 * mode because people get confused when they see
880 			 * this error when they are running in single user
881 			 * mode and they have not configured lo0
882 			 */
883 			if (pingflags & F_VERBOSE)
884 				warn("failed to clear cached route");
885 		}
886 		sw = 1;
887 		if (prog_setsockopt(sloop,IPPROTO_IP,IP_HDRINCL,
888 			       (char *)&sw, sizeof(sw)) < 0)
889 			err(1, "Can't set special IP header");
890 
891 		(void)clock_gettime(CLOCK_MONOTONIC, &clear_cache);
892 	}
893 #endif
894 
895 	opack_icmp.icmp_type = ICMP_ECHO;
896 	opack_icmp.icmp_id = ident;
897 
898 	if (pingflags & F_TIMING) {
899 		tv32.tv32_sec = (uint32_t)htonl(now.tv_sec);
900 		tv32.tv32_usec = htonl(now.tv_nsec / 1000);
901 		(void) memcpy(&opack_icmp.icmp_data[0], &tv32, sizeof(tv32));
902 	} else if (pingflags & F_TIMING64)
903 		(void) memcpy(&opack_icmp.icmp_data[0], &now, sizeof(now));
904 
905 	cc = MAX(datalen, ICMP_MINLEN) + phdrlen;
906 	opack_icmp.icmp_cksum = 0;
907 	opack_icmp.icmp_cksum = in_cksum((u_int16_t *)&opack_icmp, cc);
908 
909 	cc += opack_ip->ip_hl<<2;
910 	opack_ip->ip_len = cc;
911 	i = prog_sendto(s, (char *) opack_ip, cc, 0,
912 		   (struct sockaddr *)&send_addr, sizeof(struct sockaddr_in));
913 
914 	if (i != cc) {
915 		jiggle_flush(1);
916 		if (i < 0)
917 			warn("sendto");
918 		else
919 			warnx("wrote %s %d chars, ret=%d", hostname, cc, i);
920 		(void)fflush(stderr);
921 	}
922 	lastrcvd = 0;
923 
924 	CLR(ntransmitted);
925 	ntransmitted++;
926 
927 	last_tx = now;
928 	if (next_tx.tv_sec == 0) {
929 		first_tx = now;
930 		next_tx = now;
931 	}
932 
933 	/* Transmit regularly, at always the same microsecond in the
934 	 * second when going at one packet per second.
935 	 * If we are at most 100 ms behind, send extras to get caught up.
936 	 * Otherwise, skip packets we were too slow to send.
937 	 */
938 	if (diffsec(&next_tx, &now) <= interval) {
939 		do {
940 			timespecadd(&next_tx, &interval_tv, &next_tx);
941 		} while (diffsec(&next_tx, &now) < -0.1);
942 	}
943 
944 	if (pingflags & F_FLOOD)
945 		jiggle(1);
946 
947 	/* While the packet is going out, ready buffer for the next
948 	 * packet. Use a fast but not very good random number generator.
949 	 */
950 	if (pingflags & F_PING_RANDOM)
951 		rnd_fill();
952 }
953 
954 
955 static void
956 pr_pack_sub(int cc,
957 	    char *addr,
958 	    int seqno,
959 	    int dupflag,
960 	    int ttl,
961 	    double triptime)
962 {
963 	jiggle_flush(1);
964 
965 	if (pingflags & F_FLOOD)
966 		return;
967 
968 	(void)printf("%d bytes from %s: icmp_seq=%u", cc, addr, seqno);
969 	if (dupflag)
970 		(void)printf(" DUP!");
971 	(void)printf(" ttl=%d", ttl);
972 	if (pingflags & (F_TIMING|F_TIMING64)) {
973 		const unsigned int prec = (pingflags & F_TIMING64) != 0 ? 6 : 3;
974 
975 		(void)printf(" time=%.*f ms", prec, triptime*1000.0);
976 	}
977 
978 	/*
979 	 * Send beep to stderr, since that's more likely than stdout
980 	 * to go to a terminal..
981 	 */
982 	if (pingflags & F_AUDIBLE && !dupflag)
983 		(void)fprintf(stderr,"\a");
984 }
985 
986 
987 /*
988  * Print out the packet, if it came from us.  This logic is necessary
989  * because ALL readers of the ICMP socket get a copy of ALL ICMP packets
990  * which arrive ('tis only fair).  This permits multiple copies of this
991  * program to be run without having intermingled output (or statistics!).
992  */
993 static void
994 pr_pack(u_char *buf,
995 	int tot_len,
996 	struct sockaddr_in *from)
997 {
998 	struct ip *ip;
999 	struct icmp *icp;
1000 	int i, j, net_len;
1001 	u_char *cp;
1002 	static int old_rrlen;
1003 	static char old_rr[MAX_IPOPTLEN];
1004 	int hlen, dupflag = 0, dumped;
1005 	double triptime = 0.0;
1006 #define PR_PACK_SUB() {if (!dumped) {			\
1007 	dumped = 1;					\
1008 	pr_pack_sub(net_len, inet_ntoa(from->sin_addr),	\
1009 		    ntohs((u_int16_t)icp->icmp_seq),	\
1010 		    dupflag, ip->ip_ttl, triptime);}}
1011 
1012 	/* Check the IP header */
1013 	ip = (struct ip *) buf;
1014 	hlen = ip->ip_hl << 2;
1015 	if (tot_len < hlen + ICMP_MINLEN) {
1016 		if (pingflags & F_VERBOSE) {
1017 			jiggle_flush(1);
1018 			(void)printf("packet too short (%d bytes) from %s\n",
1019 				     tot_len, inet_ntoa(from->sin_addr));
1020 		}
1021 		return;
1022 	}
1023 
1024 	/* Now the ICMP part */
1025 	dumped = 0;
1026 	net_len = tot_len - hlen;
1027 	icp = (struct icmp *)(buf + hlen);
1028 	if (icp->icmp_type == ICMP_ECHOREPLY
1029 	    && icp->icmp_id == ident) {
1030 
1031 		if (icp->icmp_seq == htons((u_int16_t)(ntransmitted-1)))
1032 			lastrcvd = 1;
1033 		last_rx = now;
1034 		if (first_rx.tv_sec == 0)
1035 			first_rx = last_rx;
1036 		nreceived++;
1037 		if (pingflags & (F_TIMING|F_TIMING64)) {
1038 			struct timespec tv;
1039 
1040 			if (pingflags & F_TIMING) {
1041 				struct tv32 tv32;
1042 
1043 				(void)memcpy(&tv32, icp->icmp_data, sizeof(tv32));
1044 				tv.tv_sec = (uint32_t)ntohl(tv32.tv32_sec);
1045 				tv.tv_nsec = ntohl(tv32.tv32_usec) * 1000;
1046 			} else if (pingflags & F_TIMING64)
1047 				(void)memcpy(&tv, icp->icmp_data, sizeof(tv));
1048 			else
1049 				memset(&tv, 0, sizeof(tv));	/* XXX: gcc */
1050 
1051 			triptime = diffsec(&last_rx, &tv);
1052 			tsum += triptime;
1053 			tsumsq += triptime * triptime;
1054 			if (triptime < tmin)
1055 				tmin = triptime;
1056 			if (triptime > tmax)
1057 				tmax = triptime;
1058 		}
1059 
1060 		if (TST(ntohs((u_int16_t)icp->icmp_seq))) {
1061 			nrepeats++, nreceived--;
1062 			dupflag=1;
1063 		} else {
1064 			SET(ntohs((u_int16_t)icp->icmp_seq));
1065 		}
1066 
1067 		if (tot_len != opack_ip->ip_len) {
1068 			PR_PACK_SUB();
1069 			switch (opack_ip->ip_len - tot_len) {
1070 			case MAX_IPOPTLEN:
1071 				if ((pongflags & F_RECORD_ROUTE) != 0)
1072 					break;
1073 				if ((pingflags & F_RECORD_ROUTE) == 0)
1074 					goto out;
1075 				pongflags |= F_RECORD_ROUTE;
1076 				(void)printf("\nremote host does not "
1077 				    "support record route");
1078 				break;
1079 			case 8:
1080 				if ((pongflags & F_SOURCE_ROUTE) != 0)
1081 					break;
1082 				if ((pingflags & F_SOURCE_ROUTE) == 0)
1083 					goto out;
1084 				pongflags |= F_SOURCE_ROUTE;
1085 				(void)printf("\nremote host does not "
1086 				    "support source route");
1087 				break;
1088 			default:
1089 			out:
1090 				(void)printf("\nwrong total length %d "
1091 				    "instead of %d", tot_len, opack_ip->ip_len);
1092 				break;
1093 			}
1094 		}
1095 
1096 		if (!dupflag) {
1097 			static u_int16_t last_seqno = 0xffff;
1098 			u_int16_t seqno = ntohs((u_int16_t)icp->icmp_seq);
1099 			u_int16_t gap = seqno - (last_seqno + 1);
1100 			if (gap > 0 && gap < 0x8000 &&
1101 			    (pingflags & F_VERBOSE)) {
1102 				(void)printf("[*** sequence gap of %u "
1103 				    "packets from %u ... %u ***]\n", gap,
1104 				    (u_int16_t) (last_seqno + 1),
1105 				    (u_int16_t) (seqno - 1));
1106 				if (pingflags & F_QUIET)
1107 					summary(0);
1108 			}
1109 
1110 			if (gap < 0x8000)
1111 				last_seqno = seqno;
1112 		}
1113 
1114 		if (pingflags & F_QUIET)
1115 			return;
1116 
1117 		if (!(pingflags & F_FLOOD))
1118 			PR_PACK_SUB();
1119 
1120 		/* check the data */
1121 		if ((size_t)(tot_len - hlen) >
1122 		    offsetof(struct icmp, icmp_data) + datalen
1123 		    && !(pingflags & F_PING_RANDOM)
1124 		    && memcmp(icp->icmp_data + phdrlen,
1125 			    opack_icmp.icmp_data + phdrlen,
1126 			    datalen - phdrlen)) {
1127 			for (i = phdrlen; i < datalen; i++) {
1128 				if (icp->icmp_data[i] !=
1129 				    opack_icmp.icmp_data[i])
1130 					break;
1131 			}
1132 			PR_PACK_SUB();
1133 			(void)printf("\nwrong data byte #%d should have been"
1134 				     " %#x but was %#x", i,
1135 				     (u_char)opack_icmp.icmp_data[i],
1136 				     (u_char)icp->icmp_data[i]);
1137 			for (i = phdrlen; i < datalen; i++) {
1138 				if ((i % 16) == 0)
1139 					(void)printf("\n\t");
1140 				(void)printf("%2x ",(u_char)icp->icmp_data[i]);
1141 			}
1142 		}
1143 
1144 	} else {
1145 		if (!pr_icmph(icp, from, net_len))
1146 			return;
1147 		dumped = 2;
1148 	}
1149 
1150 	/* Display any IP options */
1151 	cp = buf + sizeof(struct ip);
1152 	while (hlen > (int)sizeof(struct ip)) {
1153 		switch (*cp) {
1154 		case IPOPT_EOL:
1155 			hlen = 0;
1156 			break;
1157 		case IPOPT_LSRR:
1158 			hlen -= 2;
1159 			j = *++cp;
1160 			++cp;
1161 			j -= IPOPT_MINOFF;
1162 			if (j <= 0)
1163 				continue;
1164 			if (dumped <= 1) {
1165 				j = ((j+3)/4)*4;
1166 				hlen -= j;
1167 				cp += j;
1168 				break;
1169 			}
1170 			PR_PACK_SUB();
1171 			(void)printf("\nLSRR: ");
1172 			for (;;) {
1173 				pr_saddr(cp);
1174 				cp += 4;
1175 				hlen -= 4;
1176 				j -= 4;
1177 				if (j <= 0)
1178 					break;
1179 				(void)putchar('\n');
1180 			}
1181 			break;
1182 		case IPOPT_RR:
1183 			j = *++cp;	/* get length */
1184 			i = *++cp;	/* and pointer */
1185 			hlen -= 2;
1186 			if (i > j)
1187 				i = j;
1188 			i -= IPOPT_MINOFF;
1189 			if (i <= 0)
1190 				continue;
1191 			if (dumped <= 1) {
1192 				if (i == old_rrlen
1193 				    && !memcmp(cp, old_rr, i)) {
1194 					if (dumped)
1195 					    (void)printf("\t(same route)");
1196 					j = ((i+3)/4)*4;
1197 					hlen -= j;
1198 					cp += j;
1199 					break;
1200 				}
1201 				old_rrlen = i;
1202 				(void) memcpy(old_rr, cp, i);
1203 			}
1204 			if (!dumped) {
1205 				jiggle_flush(1);
1206 				(void)printf("RR: ");
1207 				dumped = 1;
1208 			} else {
1209 				(void)printf("\nRR: ");
1210 			}
1211 			for (;;) {
1212 				pr_saddr(cp);
1213 				cp += 4;
1214 				hlen -= 4;
1215 				i -= 4;
1216 				if (i <= 0)
1217 					break;
1218 				(void)putchar('\n');
1219 			}
1220 			break;
1221 		case IPOPT_NOP:
1222 			if (dumped <= 1)
1223 				break;
1224 			PR_PACK_SUB();
1225 			(void)printf("\nNOP");
1226 			break;
1227 #ifdef sgi
1228 		case IPOPT_SECURITY:	/* RFC 1108 RIPSO BSO */
1229 		case IPOPT_ESO:		/* RFC 1108 RIPSO ESO */
1230 		case IPOPT_CIPSO:	/* Commercial IPSO */
1231 			if ((sysconf(_SC_IP_SECOPTS)) > 0) {
1232 				i = (unsigned)cp[1];
1233 				hlen -= i - 1;
1234 				PR_PACK_SUB();
1235 				(void)printf("\nSEC:");
1236 				while (i--) {
1237 					(void)printf(" %02x", *cp++);
1238 				}
1239 				cp--;
1240 				break;
1241 			}
1242 #endif
1243 		default:
1244 			PR_PACK_SUB();
1245 			(void)printf("\nunknown option 0x%x", *cp);
1246 			break;
1247 		}
1248 		hlen--;
1249 		cp++;
1250 	}
1251 
1252 	if (dumped) {
1253 		(void)putchar('\n');
1254 		(void)fflush(stdout);
1255 	} else {
1256 		jiggle(-1);
1257 	}
1258 }
1259 
1260 
1261 /* Compute the IP checksum
1262  *	This assumes the packet is less than 32K long.
1263  */
1264 static u_int16_t
1265 in_cksum(u_int16_t *p, u_int len)
1266 {
1267 	u_int32_t sum = 0;
1268 	int nwords = len >> 1;
1269 
1270 	while (nwords-- != 0)
1271 		sum += *p++;
1272 
1273 	if (len & 1) {
1274 		union {
1275 			u_int16_t w;
1276 			u_int8_t c[2];
1277 		} u;
1278 		u.c[0] = *(u_char *)p;
1279 		u.c[1] = 0;
1280 		sum += u.w;
1281 	}
1282 
1283 	/* end-around-carry */
1284 	sum = (sum >> 16) + (sum & 0xffff);
1285 	sum += (sum >> 16);
1286 	return (~sum);
1287 }
1288 
1289 
1290 /*
1291  * compute the difference of two timespecs in seconds
1292  */
1293 static double
1294 diffsec(struct timespec *timenow,
1295 	struct timespec *then)
1296 {
1297 	if (timenow->tv_sec == 0)
1298 		return -1;
1299 	return (timenow->tv_sec - then->tv_sec)
1300 	    * 1.0 + (timenow->tv_nsec - then->tv_nsec) / 1000000000.0;
1301 }
1302 
1303 
1304 #if 0
1305 static void
1306 timespecadd(struct timespec *t1,
1307 	   struct timespec *t2)
1308 {
1309 
1310 	t1->tv_sec += t2->tv_sec;
1311 	if ((t1->tv_nsec += t2->tv_nsec) >= 1000000000) {
1312 		t1->tv_sec++;
1313 		t1->tv_nsec -= 1000000000;
1314 	}
1315 }
1316 #endif
1317 
1318 
1319 static void
1320 sec_to_timespec(const double sec, struct timespec *tp)
1321 {
1322 	tp->tv_sec = sec;
1323 	tp->tv_nsec = (sec - tp->tv_sec) * 1000000000.0;
1324 }
1325 
1326 
1327 static double
1328 timespec_to_sec(const struct timespec *tp)
1329 {
1330 	return tp->tv_sec + tp->tv_nsec / 1000000000.0;
1331 }
1332 
1333 
1334 /*
1335  * Print statistics.
1336  * Heavily buffered STDIO is used here, so that all the statistics
1337  * will be written with 1 sys-write call.  This is nice when more
1338  * than one copy of the program is running on a terminal;  it prevents
1339  * the statistics output from becomming intermingled.
1340  */
1341 static void
1342 summary(int header)
1343 {
1344 	jiggle_flush(1);
1345 
1346 	if (header)
1347 		(void)printf("\n----%s PING Statistics----\n", hostname);
1348 	(void)printf("%d packets transmitted, ", ntransmitted);
1349 	(void)printf("%d packets received, ", nreceived);
1350 	if (nrepeats)
1351 		(void)printf("+%d duplicates, ", nrepeats);
1352 	if (ntransmitted) {
1353 		if (nreceived > ntransmitted)
1354 			(void)printf("-- somebody's duplicating packets!");
1355 		else
1356 			(void)printf("%.1f%% packet loss",
1357 				     (((ntransmitted-nreceived)*100.0) /
1358 					    ntransmitted));
1359 	}
1360 	(void)printf("\n");
1361 	if (nreceived && (pingflags & (F_TIMING|F_TIMING64))) {
1362 		double n = nreceived + nrepeats;
1363 		double avg = (tsum / n);
1364 		double variance = 0.0;
1365 		const unsigned int prec = (pingflags & F_TIMING64) != 0 ? 6 : 3;
1366 		if (n>1)
1367 			variance = (tsumsq - n*avg*avg) /(n-1);
1368 
1369 		printf("round-trip min/avg/max/stddev = "
1370 			"%.*f/%.*f/%.*f/%.*f ms\n",
1371 			prec, tmin * 1000.0,
1372 			prec, avg * 1000.0,
1373 			prec, tmax * 1000.0,
1374 			prec, sqrt(variance) * 1000.0);
1375 		if (pingflags & F_FLOOD) {
1376 			double r = diffsec(&last_rx, &first_rx);
1377 			double t = diffsec(&last_tx, &first_tx);
1378 			if (r == 0)
1379 				r = 0.0001;
1380 			if (t == 0)
1381 				t = 0.0001;
1382 			(void)printf("  %.1f packets/sec sent, "
1383 				     " %.1f packets/sec received\n",
1384 				     ntransmitted/t, nreceived/r);
1385 		}
1386 	}
1387 }
1388 
1389 
1390 /*
1391  * Print statistics when SIGINFO is received.
1392  */
1393 /* ARGSUSED */
1394 static void
1395 prtsig(int dummy)
1396 {
1397 
1398 	summary(0);
1399 #ifndef SIGINFO
1400 	(void)signal(SIGQUIT, prtsig);
1401 #endif
1402 }
1403 
1404 
1405 /*
1406  * On the first SIGINT, allow any outstanding packets to dribble in
1407  */
1408 static void
1409 prefinish(int dummy)
1410 {
1411 	if (lastrcvd			/* quit now if caught up */
1412 	    || nreceived == 0)		/* or if remote is dead */
1413 		finish(0);
1414 
1415 	(void)signal(dummy, finish);	/* do this only the 1st time */
1416 
1417 	if (npackets > ntransmitted)	/* let the normal limit work */
1418 		npackets = ntransmitted;
1419 }
1420 
1421 /*
1422  * Print statistics and give up.
1423  */
1424 /* ARGSUSED */
1425 static void
1426 finish(int dummy)
1427 {
1428 #ifdef SIGINFO
1429 	(void)signal(SIGINFO, SIG_DFL);
1430 #else
1431 	(void)signal(SIGQUIT, SIG_DFL);
1432 #endif
1433 
1434 	summary(1);
1435 	exit(nreceived > 0 ? 0 : 2);
1436 }
1437 
1438 
1439 static int				/* 0=do not print it */
1440 ck_pr_icmph(struct icmp *icp,
1441 	    struct sockaddr_in *from,
1442 	    int cc,
1443 	    int override)		/* 1=override VERBOSE if interesting */
1444 {
1445 	int	hlen;
1446 	struct ip ipb, *ip = &ipb;
1447 	struct icmp icp2b, *icp2 = &icp2b;
1448 	int res;
1449 
1450 	if (pingflags & F_VERBOSE) {
1451 		res = 1;
1452 		jiggle_flush(1);
1453 	} else {
1454 		res = 0;
1455 	}
1456 
1457 	(void) memcpy(ip, icp->icmp_data, sizeof(*ip));
1458 	hlen = ip->ip_hl << 2;
1459 	if (ip->ip_p == IPPROTO_ICMP
1460 	    && hlen + 6 <= cc) {
1461 		(void) memcpy(icp2, &icp->icmp_data[hlen], sizeof(*icp2));
1462 		if (icp2->icmp_id == ident) {
1463 			/* remember to clear route cached in kernel
1464 			 * if this non-Echo-Reply ICMP message was for one
1465 			 * of our packets.
1466 			 */
1467 			clear_cache.tv_sec = 0;
1468 
1469 			if (!res && override
1470 			    && (pingflags & (F_QUIET|F_SEMI_QUIET)) == 0) {
1471 				jiggle_flush(1);
1472 				(void)printf("%d bytes from %s: ",
1473 					     cc, pr_addr(&from->sin_addr));
1474 				res = 1;
1475 			}
1476 		}
1477 	}
1478 
1479 	return res;
1480 }
1481 
1482 
1483 /*
1484  *  Print a descriptive string about an ICMP header other than an echo reply.
1485  */
1486 static int				/* 0=printed nothing */
1487 pr_icmph(struct icmp *icp,
1488 	 struct sockaddr_in *from,
1489 	 int cc)
1490 {
1491 	switch (icp->icmp_type ) {
1492 	case ICMP_UNREACH:
1493 		if (!ck_pr_icmph(icp, from, cc, 1))
1494 			return 0;
1495 		switch (icp->icmp_code) {
1496 		case ICMP_UNREACH_NET:
1497 			(void)printf("Destination Net Unreachable");
1498 			break;
1499 		case ICMP_UNREACH_HOST:
1500 			(void)printf("Destination Host Unreachable");
1501 			break;
1502 		case ICMP_UNREACH_PROTOCOL:
1503 			(void)printf("Destination Protocol Unreachable");
1504 			break;
1505 		case ICMP_UNREACH_PORT:
1506 			(void)printf("Destination Port Unreachable");
1507 			break;
1508 		case ICMP_UNREACH_NEEDFRAG:
1509 			(void)printf("frag needed and DF set.  Next MTU=%d",
1510 			       ntohs(icp->icmp_nextmtu));
1511 			break;
1512 		case ICMP_UNREACH_SRCFAIL:
1513 			(void)printf("Source Route Failed");
1514 			break;
1515 		case ICMP_UNREACH_NET_UNKNOWN:
1516 			(void)printf("Unreachable unknown net");
1517 			break;
1518 		case ICMP_UNREACH_HOST_UNKNOWN:
1519 			(void)printf("Unreachable unknown host");
1520 			break;
1521 		case ICMP_UNREACH_ISOLATED:
1522 			(void)printf("Unreachable host isolated");
1523 			break;
1524 		case ICMP_UNREACH_NET_PROHIB:
1525 			(void)printf("Net prohibited access");
1526 			break;
1527 		case ICMP_UNREACH_HOST_PROHIB:
1528 			(void)printf("Host prohibited access");
1529 			break;
1530 		case ICMP_UNREACH_TOSNET:
1531 			(void)printf("Bad TOS for net");
1532 			break;
1533 		case ICMP_UNREACH_TOSHOST:
1534 			(void)printf("Bad TOS for host");
1535 			break;
1536 		case 13:
1537 			(void)printf("Communication prohibited");
1538 			break;
1539 		case 14:
1540 			(void)printf("Host precedence violation");
1541 			break;
1542 		case 15:
1543 			(void)printf("Precedence cutoff");
1544 			break;
1545 		default:
1546 			(void)printf("Bad Destination Unreachable Code: %d",
1547 				     icp->icmp_code);
1548 			break;
1549 		}
1550 		/* Print returned IP header information */
1551 		pr_retip(icp, cc);
1552 		break;
1553 
1554 	case ICMP_SOURCEQUENCH:
1555 		if (!ck_pr_icmph(icp, from, cc, 1))
1556 			return 0;
1557 		(void)printf("Source Quench");
1558 		pr_retip(icp, cc);
1559 		break;
1560 
1561 	case ICMP_REDIRECT:
1562 		if (!ck_pr_icmph(icp, from, cc, 1))
1563 			return 0;
1564 		switch (icp->icmp_code) {
1565 		case ICMP_REDIRECT_NET:
1566 			(void)printf("Redirect Network");
1567 			break;
1568 		case ICMP_REDIRECT_HOST:
1569 			(void)printf("Redirect Host");
1570 			break;
1571 		case ICMP_REDIRECT_TOSNET:
1572 			(void)printf("Redirect Type of Service and Network");
1573 			break;
1574 		case ICMP_REDIRECT_TOSHOST:
1575 			(void)printf("Redirect Type of Service and Host");
1576 			break;
1577 		default:
1578 			(void)printf("Redirect--Bad Code: %d", icp->icmp_code);
1579 			break;
1580 		}
1581 		(void)printf(" New router addr: %s",
1582 			     pr_addr(&icp->icmp_hun.ih_gwaddr));
1583 		pr_retip(icp, cc);
1584 		break;
1585 
1586 	case ICMP_ECHO:
1587 		if (!ck_pr_icmph(icp, from, cc, 0))
1588 			return 0;
1589 		(void)printf("Echo Request: ID=%d seq=%d",
1590 			     ntohs(icp->icmp_id), ntohs(icp->icmp_seq));
1591 		break;
1592 
1593 	case ICMP_ECHOREPLY:
1594 		/* displaying other's pings is too noisey */
1595 #if 0
1596 		if (!ck_pr_icmph(icp, from, cc, 0))
1597 			return 0;
1598 		(void)printf("Echo Reply: ID=%d seq=%d",
1599 			     ntohs(icp->icmp_id), ntohs(icp->icmp_seq));
1600 		break;
1601 #else
1602 		return 0;
1603 #endif
1604 
1605 	case ICMP_ROUTERADVERT:
1606 		if (!ck_pr_icmph(icp, from, cc, 0))
1607 			return 0;
1608 		(void)printf("Router Discovery Advert");
1609 		break;
1610 
1611 	case ICMP_ROUTERSOLICIT:
1612 		if (!ck_pr_icmph(icp, from, cc, 0))
1613 			return 0;
1614 		(void)printf("Router Discovery Solicit");
1615 		break;
1616 
1617 	case ICMP_TIMXCEED:
1618 		if (!ck_pr_icmph(icp, from, cc, 1))
1619 			return 0;
1620 		switch (icp->icmp_code ) {
1621 		case ICMP_TIMXCEED_INTRANS:
1622 			(void)printf("Time To Live exceeded");
1623 			break;
1624 		case ICMP_TIMXCEED_REASS:
1625 			(void)printf("Frag reassembly time exceeded");
1626 			break;
1627 		default:
1628 			(void)printf("Time exceeded, Bad Code: %d",
1629 				     icp->icmp_code);
1630 			break;
1631 		}
1632 		pr_retip(icp, cc);
1633 		break;
1634 
1635 	case ICMP_PARAMPROB:
1636 		if (!ck_pr_icmph(icp, from, cc, 1))
1637 			return 0;
1638 		(void)printf("Parameter problem: pointer = 0x%02x",
1639 			     icp->icmp_hun.ih_pptr);
1640 		pr_retip(icp, cc);
1641 		break;
1642 
1643 	case ICMP_TSTAMP:
1644 		if (!ck_pr_icmph(icp, from, cc, 0))
1645 			return 0;
1646 		(void)printf("Timestamp");
1647 		break;
1648 
1649 	case ICMP_TSTAMPREPLY:
1650 		if (!ck_pr_icmph(icp, from, cc, 0))
1651 			return 0;
1652 		(void)printf("Timestamp Reply");
1653 		break;
1654 
1655 	case ICMP_IREQ:
1656 		if (!ck_pr_icmph(icp, from, cc, 0))
1657 			return 0;
1658 		(void)printf("Information Request");
1659 		break;
1660 
1661 	case ICMP_IREQREPLY:
1662 		if (!ck_pr_icmph(icp, from, cc, 0))
1663 			return 0;
1664 		(void)printf("Information Reply");
1665 		break;
1666 
1667 	case ICMP_MASKREQ:
1668 		if (!ck_pr_icmph(icp, from, cc, 0))
1669 			return 0;
1670 		(void)printf("Address Mask Request");
1671 		break;
1672 
1673 	case ICMP_MASKREPLY:
1674 		if (!ck_pr_icmph(icp, from, cc, 0))
1675 			return 0;
1676 		(void)printf("Address Mask Reply");
1677 		break;
1678 
1679 	default:
1680 		if (!ck_pr_icmph(icp, from, cc, 0))
1681 			return 0;
1682 		(void)printf("Bad ICMP type: %d", icp->icmp_type);
1683 		if (pingflags & F_VERBOSE)
1684 			pr_iph(icp, cc);
1685 	}
1686 
1687 	return 1;
1688 }
1689 
1690 
1691 /*
1692  *  Print an IP header with options.
1693  */
1694 static void
1695 pr_iph(struct icmp *icp,
1696        int cc)
1697 {
1698 	int	hlen;
1699 	u_char	*cp;
1700 	struct ip ipb, *ip = &ipb;
1701 
1702 	(void) memcpy(ip, icp->icmp_data, sizeof(*ip));
1703 
1704 	hlen = ip->ip_hl << 2;
1705 	cp = (u_char *) &icp->icmp_data[20];	/* point to options */
1706 
1707 	(void)printf("\n Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src	     Dst\n");
1708 	(void)printf("  %1x  %1x  %02x %04x %04x",
1709 		     ip->ip_v, ip->ip_hl, ip->ip_tos, ip->ip_len, ip->ip_id);
1710 	(void)printf("   %1x %04x",
1711 		     ((ip->ip_off)&0xe000)>>13, (ip->ip_off)&0x1fff);
1712 	(void)printf("  %02x  %02x %04x",
1713 		     ip->ip_ttl, ip->ip_p, ip->ip_sum);
1714 	(void)printf(" %15s ",
1715 		     inet_ntoa(*(struct in_addr *)&ip->ip_src.s_addr));
1716 	(void)printf(" %s ", inet_ntoa(*(struct in_addr *)&ip->ip_dst.s_addr));
1717 	/* dump any option bytes */
1718 	while (hlen-- > 20 && cp < (u_char*)icp+cc) {
1719 		(void)printf("%02x", *cp++);
1720 	}
1721 }
1722 
1723 /*
1724  * Print an ASCII host address starting from a string of bytes.
1725  */
1726 static void
1727 pr_saddr(u_char *cp)
1728 {
1729 	n_long l;
1730 	struct in_addr addr;
1731 
1732 	l = (u_char)*++cp;
1733 	l = (l<<8) + (u_char)*++cp;
1734 	l = (l<<8) + (u_char)*++cp;
1735 	l = (l<<8) + (u_char)*++cp;
1736 	addr.s_addr = htonl(l);
1737 	(void)printf("\t%s", (l == 0) ? "0.0.0.0" : pr_addr(&addr));
1738 }
1739 
1740 
1741 /*
1742  *  Return an ASCII host address
1743  *  as a dotted quad and optionally with a hostname
1744  */
1745 static char *
1746 pr_addr(struct in_addr *addr)		/* in network order */
1747 {
1748 	struct	hostent	*hp;
1749 	static	char buf[MAXHOSTNAMELEN+4+16+1];
1750 
1751 	if ((pingflags & F_NUMERIC)
1752 	    || !(hp = gethostbyaddr((char *)addr, sizeof(*addr), AF_INET))) {
1753 		(void)snprintf(buf, sizeof(buf), "%s", inet_ntoa(*addr));
1754 	} else {
1755 		(void)snprintf(buf, sizeof(buf), "%s (%s)", hp->h_name,
1756 		    inet_ntoa(*addr));
1757 	}
1758 
1759 	return buf;
1760 }
1761 
1762 /*
1763  *  Dump some info on a returned (via ICMP) IP packet.
1764  */
1765 static void
1766 pr_retip(struct icmp *icp,
1767 	 int cc)
1768 {
1769 	int	hlen;
1770 	u_char	*cp;
1771 	struct ip ipb, *ip = &ipb;
1772 
1773 	(void) memcpy(ip, icp->icmp_data, sizeof(*ip));
1774 
1775 	if (pingflags & F_VERBOSE)
1776 		pr_iph(icp, cc);
1777 
1778 	hlen = ip->ip_hl << 2;
1779 	cp = (u_char *) &icp->icmp_data[hlen];
1780 
1781 	if (ip->ip_p == IPPROTO_TCP) {
1782 		if (pingflags & F_VERBOSE)
1783 			(void)printf("\n  TCP: from port %u, to port %u",
1784 				     (*cp*256+*(cp+1)), (*(cp+2)*256+*(cp+3)));
1785 	} else if (ip->ip_p == IPPROTO_UDP) {
1786 		if (pingflags & F_VERBOSE)
1787 			(void)printf("\n  UDP: from port %u, to port %u",
1788 				     (*cp*256+*(cp+1)), (*(cp+2)*256+*(cp+3)));
1789 	} else if (ip->ip_p == IPPROTO_ICMP) {
1790 		struct icmp icp2;
1791 		(void) memcpy(&icp2, cp, sizeof(icp2));
1792 		if (icp2.icmp_type == ICMP_ECHO) {
1793 			if (pingflags & F_VERBOSE)
1794 				(void)printf("\n  ID=%u icmp_seq=%u",
1795 					     ntohs((u_int16_t)icp2.icmp_id),
1796 					     ntohs((u_int16_t)icp2.icmp_seq));
1797 			else
1798 				(void)printf(" for icmp_seq=%u",
1799 					     ntohs((u_int16_t)icp2.icmp_seq));
1800 		}
1801 	}
1802 }
1803 
1804 static void
1805 fill(void)
1806 {
1807 	int i, j, k;
1808 	char *cp;
1809 	int pat[16];
1810 
1811 	for (cp = fill_pat; *cp != '\0'; cp++) {
1812 		if (!isxdigit((unsigned char)*cp))
1813 			break;
1814 	}
1815 	if (cp == fill_pat || *cp != '\0' || (cp-fill_pat) > 16*2) {
1816 		(void)fflush(stdout);
1817 		errx(1, "\"-p %s\": patterns must be specified with"
1818 		     " 1-32 hex digits\n",
1819 		     fill_pat);
1820 	}
1821 
1822 	i = sscanf(fill_pat,
1823 		   "%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x",
1824 		    &pat[0], &pat[1], &pat[2], &pat[3],
1825 		    &pat[4], &pat[5], &pat[6], &pat[7],
1826 		    &pat[8], &pat[9], &pat[10], &pat[11],
1827 		    &pat[12], &pat[13], &pat[14], &pat[15]);
1828 
1829 	for (k = phdrlen, j = 0; k <= datalen; k++) {
1830 		opack_icmp.icmp_data[k] = pat[j];
1831 		if (++j >= i)
1832 			j = 0;
1833 	}
1834 
1835 	if (!(pingflags & F_QUIET)) {
1836 		(void)printf("PATTERN: 0x");
1837 		for (j=0; j<i; j++)
1838 			(void)printf("%02x",
1839 				     (u_char)opack_icmp.icmp_data[phdrlen + j]);
1840 		(void)printf("\n");
1841 	}
1842 
1843 }
1844 
1845 
1846 static void
1847 rnd_fill(void)
1848 {
1849 	static u_int32_t rnd;
1850 	int i;
1851 
1852 	for (i = phdrlen; i < datalen; i++) {
1853 		rnd = (3141592621U * rnd + 663896637U);
1854 		opack_icmp.icmp_data[i] = rnd>>24;
1855 	}
1856 }
1857 
1858 
1859 static void
1860 gethost(const char *arg,
1861 	const char *name,
1862 	struct sockaddr_in *sa,
1863 	char *realname,
1864 	int realname_len)
1865 {
1866 	struct hostent *hp;
1867 
1868 	(void)memset(sa, 0, sizeof(*sa));
1869 	sa->sin_family = AF_INET;
1870 	sa->sin_len = sizeof(struct sockaddr_in);
1871 
1872 	/* If it is an IP address, try to convert it to a name to
1873 	 * have something nice to display.
1874 	 */
1875 	if (inet_aton(name, &sa->sin_addr) != 0) {
1876 		if (realname) {
1877 			if (pingflags & F_NUMERIC)
1878 				hp = 0;
1879 			else
1880 				hp = gethostbyaddr((char *)&sa->sin_addr,
1881 						   sizeof(sa->sin_addr),
1882 						   AF_INET);
1883 			(void)strlcpy(realname, hp ? hp->h_name : name,
1884 			    realname_len);
1885 		}
1886 		return;
1887 	}
1888 
1889 	hp = gethostbyname(name);
1890 	if (!hp)
1891 		errx(1, "Cannot resolve \"%s\" (%s)",name,hstrerror(h_errno));
1892 
1893 	if (hp->h_addrtype != AF_INET)
1894 		errx(1, "%s only supported with IP", arg);
1895 
1896 	(void)memcpy(&sa->sin_addr, hp->h_addr, sizeof(sa->sin_addr));
1897 
1898 	if (realname)
1899 		(void)strlcpy(realname, hp->h_name, realname_len);
1900 }
1901 
1902 
1903 static void
1904 usage(void)
1905 {
1906 #ifdef IPSEC
1907 #ifdef IPSEC_POLICY_IPSEC
1908 #define IPSECOPT	"\n     [-E policy] "
1909 #else
1910 #define IPSECOPT	"\n     [-AE] "
1911 #endif /*IPSEC_POLICY_IPSEC*/
1912 #else
1913 #define IPSECOPT	""
1914 #endif /*IPSEC*/
1915 
1916 	(void)fprintf(stderr, "usage: \n"
1917 	    "%s [-aCDdfLnoPQqRrv] [-c count] [-g gateway] [-h host]"
1918 	    " [-I addr] [-i interval]\n"
1919 	    "     [-l preload] [-p pattern] [-s size] [-T ttl] [-t tos]"
1920 	    " [-w maxwait] " IPSECOPT "host\n",
1921 	    getprogname());
1922 	exit(1);
1923 }
1924