1 /*- 2 * Copyright (c) 1988, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of the University nor the names of its contributors 14 * may be used to endorse or promote products derived from this software 15 * without specific prior written permission. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 * 29 * @(#) Copyright (c) 1988, 1993 The Regents of the University of California. All rights reserved. 30 * @(#)fstat.c 8.3 (Berkeley) 5/2/95 31 * $FreeBSD: src/usr.bin/fstat/fstat.c,v 1.21.2.7 2001/11/21 10:49:37 dwmalone Exp $ 32 */ 33 34 #include <sys/user.h> 35 #include <sys/param.h> 36 #include <sys/time.h> 37 #include <sys/stat.h> 38 #include <sys/vnode.h> 39 #include <sys/socket.h> 40 #include <sys/socketvar.h> 41 #include <sys/domain.h> 42 #include <sys/protosw.h> 43 #include <sys/un.h> 44 #include <sys/unpcb.h> 45 #include <sys/sysctl.h> 46 #include <sys/filedesc.h> 47 #include <sys/queue.h> 48 #include <sys/pipe.h> 49 #include <sys/conf.h> 50 #include <sys/file.h> 51 #include <sys/ktrace.h> 52 #include <vfs/ufs/quota.h> 53 #include <vfs/ufs/inode.h> 54 #include <sys/mount.h> 55 #include <sys/namecache.h> 56 #include <nfs/nfsproto.h> 57 #include <nfs/rpcv2.h> 58 #include <nfs/nfs.h> 59 #include <nfs/nfsnode.h> 60 #include <sys/devfs.h> 61 62 #include <vm/vm.h> 63 #include <vm/vm_map.h> 64 #include <vm/vm_object.h> 65 66 #include <net/route.h> 67 #include <netinet/in.h> 68 #include <netinet/in_systm.h> 69 #include <netinet/ip.h> 70 #include <netinet/in_pcb.h> 71 72 #include <ctype.h> 73 #include <err.h> 74 #include <fcntl.h> 75 #include <kvm.h> 76 #include <limits.h> 77 #include <nlist.h> 78 #include <paths.h> 79 #include <pwd.h> 80 #include <stdio.h> 81 #include <stdlib.h> 82 #include <string.h> 83 #include <unistd.h> 84 #include <netdb.h> 85 86 #include "fstat.h" 87 88 #define TEXT -1 89 #define CDIR -2 90 #define RDIR -3 91 #define TRACE -4 92 #define MMAP -5 93 94 DEVS *devs; 95 96 static void make_printable(char *buf, int len); 97 98 #ifdef notdef 99 struct nlist nl[] = { 100 { "" }, 101 }; 102 #endif 103 104 int fsflg, /* show files on same filesystem as file(s) argument */ 105 pflg, /* show files open by a particular pid */ 106 uflg; /* show files open by a particular (effective) user */ 107 int checkfile; /* true if restricting to particular files or filesystems */ 108 int nflg; /* (numerical) display f.s. and rdev as dev_t */ 109 int vflg; /* display errors in locating kernel data objects etc... */ 110 int mflg; /* include memory-mapped files */ 111 int wflg_mnt = 16; 112 int wflg_cmd = 10; 113 int pid_width = 5; 114 int ino_width = 6; 115 116 struct fdnode *ofiles; /* buffer of pointers to file structures */ 117 int maxfiles; 118 119 #define ALLOC_OFILES(d) \ 120 if ((d) > maxfiles) { \ 121 free(ofiles); \ 122 ofiles = malloc((d) * sizeof(struct fdnode)); \ 123 if (ofiles == NULL) { \ 124 err(1, NULL); \ 125 } \ 126 maxfiles = (d); \ 127 } 128 129 kvm_t *kd; 130 131 static void dofiles(struct kinfo_proc *, struct proc *); 132 static void dommap(struct proc *); 133 static void vtrans(struct vnode *, struct nchandle *, int, int, off_t); 134 static int ufs_filestat(struct vnode *, struct filestat *); 135 static int nfs_filestat(struct vnode *, struct filestat *); 136 static int devfs_filestat(struct vnode *, struct filestat *); 137 static char *getmnton(struct mount *, struct namecache_list *, struct nchandle *); 138 static void pipetrans(struct pipe *, int, int); 139 static void socktrans(struct socket *, int); 140 static void getinetproto(int); 141 static int getfname(const char *); 142 static void usage(void) __dead2; 143 144 145 int 146 main(int argc, char **argv) 147 { 148 struct passwd *passwd; 149 struct kinfo_proc *p, *plast; 150 struct proc proc; 151 int arg, ch, what; 152 char *memf, *nlistf; 153 char buf[_POSIX2_LINE_MAX]; 154 int cnt; 155 156 arg = 0; 157 what = KERN_PROC_ALL; 158 nlistf = memf = NULL; 159 while ((ch = getopt(argc, argv, "fmnp:u:vwN:M:")) != -1) 160 switch((char)ch) { 161 case 'f': 162 fsflg = 1; 163 break; 164 case 'M': 165 memf = optarg; 166 break; 167 case 'N': 168 nlistf = optarg; 169 break; 170 case 'm': 171 mflg = 1; 172 break; 173 case 'n': 174 nflg = 1; 175 break; 176 case 'p': 177 if (pflg++) 178 usage(); 179 if (!isdigit(*optarg)) { 180 warnx("-p requires a process id"); 181 usage(); 182 } 183 what = KERN_PROC_PID; 184 arg = atoi(optarg); 185 break; 186 case 'u': 187 if (uflg++) 188 usage(); 189 if (!(passwd = getpwnam(optarg))) 190 errx(1, "%s: unknown uid", optarg); 191 what = KERN_PROC_UID; 192 arg = passwd->pw_uid; 193 break; 194 case 'v': 195 vflg = 1; 196 break; 197 case 'w': 198 wflg_mnt = 40; 199 wflg_cmd = 16; 200 break; 201 case '?': 202 default: 203 usage(); 204 } 205 206 if (*(argv += optind)) { 207 for (; *argv; ++argv) { 208 if (getfname(*argv)) 209 checkfile = 1; 210 } 211 if (!checkfile) /* file(s) specified, but none accessable */ 212 exit(1); 213 } 214 215 ALLOC_OFILES(256); /* reserve space for file pointers */ 216 217 if (fsflg && !checkfile) { 218 /* -f with no files means use wd */ 219 if (getfname(".") == 0) 220 exit(1); 221 checkfile = 1; 222 } 223 224 /* 225 * Discard setgid privileges if not the running kernel so that bad 226 * guys can't print interesting stuff from kernel memory. 227 */ 228 if (nlistf != NULL || memf != NULL) 229 setgid(getgid()); 230 231 if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL) 232 errx(1, "%s", buf); 233 #ifdef notdef 234 if (kvm_nlist(kd, nl) != 0) 235 errx(1, "no namelist: %s", kvm_geterr(kd)); 236 #endif 237 if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL) 238 errx(1, "%s", kvm_geterr(kd)); 239 if (nflg) 240 printf("USER %-*.*s %*.*s FD DEV %*.*s MODE SZ|DV R/W", 241 wflg_cmd, wflg_cmd, "CMD", 242 pid_width, pid_width, "PID", 243 ino_width, ino_width, "INUM"); 244 else 245 printf("USER %-*.*s %*.*s FD %-*.*s %*.*s MODE SZ|DV R/W", 246 wflg_cmd, wflg_cmd, "CMD", 247 pid_width, pid_width, "PID", 248 wflg_mnt, wflg_mnt, "PATH", 249 ino_width, ino_width, "INUM"); 250 if (checkfile && fsflg == 0) 251 printf(" NAME\n"); 252 else 253 putchar('\n'); 254 255 for (plast = &p[cnt]; p < plast; ++p) { 256 if (p->kp_stat == SZOMB) 257 continue; 258 if (!kread((void *)p->kp_paddr, &proc, sizeof(proc))) { 259 dprintf(stderr, "can't read proc at %p for pid %d\n", 260 (void *)p->kp_paddr, Pid); 261 continue; 262 } 263 dofiles(p, &proc); 264 if (mflg) 265 dommap(&proc); 266 } 267 exit(0); 268 } 269 270 const char *Uname; 271 char *Comm; 272 int Pid; 273 274 #define PREFIX(i) \ 275 printf("%-8.8s %-*s %*d", Uname, wflg_cmd, Comm, pid_width, Pid); \ 276 switch(i) { \ 277 case TEXT: \ 278 printf(" text"); \ 279 break; \ 280 case CDIR: \ 281 printf(" wd"); \ 282 break; \ 283 case RDIR: \ 284 printf(" root"); \ 285 break; \ 286 case TRACE: \ 287 printf(" tr"); \ 288 break; \ 289 case MMAP: \ 290 printf(" mmap"); \ 291 break; \ 292 default: \ 293 printf(" %4d", i); \ 294 break; \ 295 } 296 297 /* 298 * print open files attributed to this process 299 */ 300 static void 301 dofiles(struct kinfo_proc *kp, struct proc *p) 302 { 303 int i; 304 struct file file; 305 struct filedesc filed; 306 struct ktrace_node ktrace_node; 307 308 Uname = user_from_uid(kp->kp_uid, 0); 309 Pid = kp->kp_pid; 310 Comm = kp->kp_comm; 311 make_printable(Comm, strlen(Comm)); 312 313 if (p->p_fd == NULL) 314 return; 315 if (!kread(p->p_fd, &filed, sizeof (filed))) { 316 dprintf(stderr, "can't read filedesc at %p for pid %d\n", 317 (void *)p->p_fd, Pid); 318 return; 319 } 320 /* 321 * root directory vnode, if one 322 */ 323 if (filed.fd_rdir) 324 vtrans(filed.fd_rdir, &filed.fd_nrdir, RDIR, FREAD, 0); 325 /* 326 * current working directory vnode 327 */ 328 vtrans(filed.fd_cdir, &filed.fd_ncdir, CDIR, FREAD, 0); 329 /* 330 * ktrace vnode, if one 331 */ 332 if (p->p_tracenode) { 333 if (kread(p->p_tracenode, &ktrace_node, sizeof (ktrace_node))) 334 vtrans(ktrace_node.kn_vp, NULL, TRACE, FREAD|FWRITE, 0); 335 } 336 /* 337 * text vnode, if one 338 */ 339 if (p->p_textvp) 340 vtrans(p->p_textvp, NULL, TEXT, FREAD, 0); 341 /* 342 * open files 343 */ 344 ALLOC_OFILES(filed.fd_lastfile+1); 345 if (!kread(filed.fd_files, ofiles, 346 (filed.fd_lastfile+1) * sizeof(struct fdnode))) { 347 dprintf(stderr, 348 "can't read file structures at %p for pid %d\n", 349 (void *)filed.fd_files, Pid); 350 return; 351 } 352 for (i = 0; i <= filed.fd_lastfile; i++) { 353 if (ofiles[i].fp == NULL) 354 continue; 355 if (!kread(ofiles[i].fp, &file, sizeof (struct file))) { 356 dprintf(stderr, "can't read file %d at %p for pid %d\n", 357 i, (void *)ofiles[i].fp, Pid); 358 continue; 359 } 360 if (file.f_type == DTYPE_VNODE) { 361 vtrans((struct vnode *)file.f_data, &file.f_nchandle, 362 i, file.f_flag, file.f_offset); 363 } else if (file.f_type == DTYPE_SOCKET) { 364 if (checkfile == 0) 365 socktrans((struct socket *)file.f_data, i); 366 } 367 #ifdef DTYPE_PIPE 368 else if (file.f_type == DTYPE_PIPE) { 369 if (checkfile == 0) 370 pipetrans((struct pipe *)file.f_data, i, 371 file.f_flag); 372 } 373 #endif 374 #ifdef DTYPE_FIFO 375 else if (file.f_type == DTYPE_FIFO) { 376 if (checkfile == 0) 377 vtrans((struct vnode *)file.f_data, 378 &file.f_nchandle, 379 i, file.f_flag, file.f_offset); 380 } 381 #endif 382 else { 383 dprintf(stderr, 384 "unknown file type %d for file %d of pid %d\n", 385 file.f_type, i, Pid); 386 } 387 } 388 } 389 390 static void 391 dommap(struct proc *p) 392 { 393 struct vmspace vmspace; 394 vm_map_t map; 395 struct vm_map_entry entry; 396 vm_map_entry_t entryp; 397 struct vm_object object; 398 vm_object_t objp; 399 int prot, fflags; 400 401 if (!kread(p->p_vmspace, &vmspace, sizeof(vmspace))) { 402 dprintf(stderr, "can't read vmspace at %p for pid %d\n", 403 (void *)p->p_vmspace, Pid); 404 return; 405 } 406 407 map = &vmspace.vm_map; 408 409 for (entryp = map->header.next; entryp != &p->p_vmspace->vm_map.header; 410 entryp = entry.next) { 411 if (!kread(entryp, &entry, sizeof(entry))) { 412 dprintf(stderr, 413 "can't read vm_map_entry at %p for pid %d\n", 414 (void *)entryp, Pid); 415 return; 416 } 417 418 if (entry.maptype == VM_MAPTYPE_SUBMAP) 419 continue; 420 421 if ((objp = entry.object.vm_object) == NULL) 422 continue; 423 424 for (; objp; objp = object.backing_object) { 425 if (!kread(objp, &object, sizeof(object))) { 426 dprintf(stderr, 427 "can't read vm_object at %p for pid %d\n", 428 (void *)objp, Pid); 429 return; 430 } 431 } 432 433 prot = entry.protection; 434 fflags = (prot & VM_PROT_READ ? FREAD : 0) | 435 (prot & VM_PROT_WRITE ? FWRITE : 0); 436 437 switch (object.type) { 438 case OBJT_VNODE: 439 vtrans((struct vnode *)object.handle, NULL, 440 MMAP, fflags, 0); 441 break; 442 default: 443 break; 444 } 445 } 446 } 447 448 static void 449 vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag, off_t off) 450 { 451 struct vnode vn; 452 struct filestat fst; 453 char rw[3], mode[15]; 454 const char *badtype = NULL, *filename; 455 char *name; 456 457 fst.offset = off; 458 filename = badtype = NULL; 459 if (!kread(vp, &vn, sizeof (struct vnode))) { 460 dprintf(stderr, "can't read vnode at %p for pid %d\n", 461 (void *)vp, Pid); 462 return; 463 } 464 if (vn.v_type == VNON || vn.v_tag == VT_NON) 465 badtype = "none"; 466 else if (vn.v_type == VBAD) 467 badtype = "bad"; 468 else 469 switch (vn.v_tag) { 470 case VT_HAMMER: 471 if (!hammer_filestat(&vn, &fst)) 472 badtype = "error"; 473 break; 474 case VT_TMPFS: 475 if (!tmpfs_filestat(&vn, &fst)) 476 badtype = "error"; 477 break; 478 case VT_UFS: 479 if (!ufs_filestat(&vn, &fst)) 480 badtype = "error"; 481 break; 482 case VT_MFS: 483 if (!ufs_filestat(&vn, &fst)) 484 badtype = "error"; 485 break; 486 case VT_NFS: 487 if (!nfs_filestat(&vn, &fst)) 488 badtype = "error"; 489 break; 490 case VT_NTFS: 491 if (!ntfs_filestat(&vn, &fst)) 492 badtype = "error"; 493 break; 494 case VT_EXT2FS: 495 if (!ext2fs_filestat(&vn, &fst)) 496 badtype = "error"; 497 break; 498 499 case VT_MSDOSFS: 500 if (!msdosfs_filestat(&vn, &fst)) 501 badtype = "error"; 502 break; 503 504 case VT_ISOFS: 505 if (!isofs_filestat(&vn, &fst)) 506 badtype = "error"; 507 break; 508 509 case VT_DEVFS: 510 if (!devfs_filestat(&vn, &fst)) 511 badtype = "error"; 512 break; 513 514 default: { 515 static char unknown[10]; 516 sprintf(unknown, "?(%x)", vn.v_tag); 517 badtype=unknown; 518 break; 519 } 520 } 521 if (checkfile) { 522 int fsmatch = 0; 523 DEVS *d; 524 525 if (badtype) 526 return; 527 for (d = devs; d != NULL; d = d->next) 528 if (d->fsid == fst.fsid) { 529 fsmatch = 1; 530 if (d->ino == (ino_t)fst.fileid) { 531 filename = d->name; 532 break; 533 } 534 } 535 if (fsmatch == 0 || (filename == NULL && fsflg == 0)) 536 return; 537 } 538 PREFIX(i); 539 if (badtype) { 540 (void)printf(" %-*s %10s %jd\n", 541 wflg_mnt, 542 getmnton(vn.v_mount, &vn.v_namecache, ncr), 543 badtype, 544 (intmax_t)off); 545 return; 546 } 547 if (nflg) 548 (void)printf(" %3u,%-9u ", major(fst.fsid), minor(fst.fsid)); 549 else 550 (void)printf(" %-*s", wflg_mnt, getmnton(vn.v_mount, &vn.v_namecache, ncr)); 551 if (nflg) 552 (void)sprintf(mode, "%o", fst.mode); 553 else 554 strmode(fst.mode, mode); 555 (void)printf(" %*ld %10s", ino_width, fst.fileid, mode); 556 switch (vn.v_type) { 557 case VBLK: 558 case VCHR: 559 if (nflg || ((name = devname(fst.rdev, vn.v_type == VCHR ? 560 S_IFCHR : S_IFBLK)) == NULL)) 561 printf(" %3u,%-4u", major(fst.rdev), minor(fst.rdev)); 562 else 563 printf(" %8s", name); 564 break; 565 case VREG: 566 printf(" %jd", (intmax_t)fst.offset); 567 break; 568 default: 569 printf(" %8ju", (uintmax_t)fst.size); 570 } 571 rw[0] = '\0'; 572 if (flag & FREAD) 573 strcat(rw, "r"); 574 if (flag & FWRITE) 575 strcat(rw, "w"); 576 printf(" %2s", rw); 577 if (filename && !fsflg) 578 printf(" %s", filename); 579 putchar('\n'); 580 } 581 582 static int 583 ufs_filestat(struct vnode *vp, struct filestat *fsp) 584 { 585 struct inode inode; 586 587 if (!kread(VTOI(vp), &inode, sizeof (inode))) { 588 dprintf(stderr, "can't read inode at %p for pid %d\n", 589 (void *)VTOI(vp), Pid); 590 return 0; 591 } 592 /* 593 * The st_dev from stat(2) is a udev_t. These kernel structures 594 * contain dev_t structures. We need to convert to udev to make 595 * comparisons 596 */ 597 fsp->fsid = dev2udev(inode.i_dev); 598 fsp->fileid = (long)inode.i_number; 599 fsp->mode = (mode_t)inode.i_mode; 600 fsp->size = inode.i_size; 601 fsp->rdev = inode.i_rdev; 602 603 return 1; 604 } 605 606 static int 607 nfs_filestat(struct vnode *vp, struct filestat *fsp) 608 { 609 struct nfsnode nfsnode; 610 611 if (!kread(VTONFS(vp), &nfsnode, sizeof (nfsnode))) { 612 dprintf(stderr, "can't read nfsnode at %p for pid %d\n", 613 (void *)VTONFS(vp), Pid); 614 return 0; 615 } 616 fsp->fsid = nfsnode.n_vattr.va_fsid; 617 fsp->fileid = nfsnode.n_vattr.va_fileid; 618 fsp->size = nfsnode.n_size; 619 fsp->rdev = makeudev(nfsnode.n_vattr.va_rmajor, 620 nfsnode.n_vattr.va_rminor); 621 fsp->mode = nfsnode.n_vattr.va_mode | mtrans(vp->v_type); 622 623 return 1; 624 } 625 626 static int 627 devfs_filestat(struct vnode *vp, struct filestat *fsp) 628 { 629 struct devfs_node devfs_node; 630 631 if (!kread(vp->v_data, &devfs_node, sizeof (devfs_node))) { 632 dprintf(stderr, "can't read devfs_node at %p for pid %d\n", 633 (void *)vp->v_data, Pid); 634 return 0; 635 } 636 fsp->fsid = fsp->rdev = dev2udev(vp->v_rdev); 637 fsp->fileid = devfs_node.d_dir.d_ino; 638 fsp->mode = (devfs_node.mode & ~S_IFMT) | S_IFCHR; 639 fsp->size = 0; 640 641 return 1; 642 } 643 644 static char * 645 getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr) 646 { 647 static struct mount mount_l; 648 static struct mtab { 649 struct mtab *next; 650 struct mount *m; 651 char mntonname[MNAMELEN]; 652 } *mhead = NULL; 653 struct mtab *mt; 654 struct namecache *ncp; 655 struct namecache ncp_copy; 656 static char path[1024]; 657 int i; 658 659 /* 660 * If no ncp is passed try to find one via ncplist. Make sure 661 * we are using the correct mount pointer or the matching code 662 * will not know how to transition mount points properly. 663 */ 664 if (ncr == NULL || ncr->ncp == NULL) { 665 ncp = ncplist->tqh_first; 666 } else { 667 ncp = ncr->ncp; 668 if (ncr->mount) 669 m = ncr->mount; 670 } 671 672 /* 673 * If we have an ncp, traceback the path. This is a kvm pointer. 674 */ 675 if (ncp) { 676 if (!kread(m, &mount_l, sizeof(struct mount))) { 677 warnx("can't read mount table at %p", (void *)m); 678 return (NULL); 679 } 680 i = sizeof(path) - 1; 681 path[i] = 0; 682 while (ncp) { 683 /* 684 * If this is the root of the mount then traverse 685 * to the parent mount. 686 */ 687 if (ncp == mount_l.mnt_ncmountpt.ncp) { 688 ncp = mount_l.mnt_ncmounton.ncp; 689 if (ncp == NULL) 690 break; 691 m = mount_l.mnt_ncmounton.mount; 692 if (!kread(m, &mount_l, sizeof(struct mount))) { 693 warnx("can't read mount table at %p", (void *)m); 694 return (NULL); 695 } 696 } 697 698 /* 699 * Ok, pull out the ncp and extract the name 700 */ 701 if (!kread(ncp, &ncp_copy, sizeof(ncp_copy))) { 702 warnx("can't read ncp at %p", ncp); 703 return (NULL); 704 } 705 if (i <= ncp_copy.nc_nlen) 706 break; 707 i -= ncp_copy.nc_nlen; 708 if (!kread(ncp_copy.nc_name, path + i, ncp_copy.nc_nlen)) { 709 warnx("can't read ncp %p path component at %p", ncp, ncp_copy.nc_name); 710 return (NULL); 711 } 712 make_printable(path + i, ncp_copy.nc_nlen); 713 path[--i] = '/'; 714 ncp = ncp_copy.nc_parent; 715 } 716 if (i == sizeof(path) - 1) 717 path[--i] = '/'; 718 return(path + i); 719 } 720 721 /* 722 * If all else fails print out the mount point path 723 */ 724 for (mt = mhead; mt != NULL; mt = mt->next) { 725 if (m == mt->m) 726 return (mt->mntonname); 727 } 728 if (!kread(m, &mount_l, sizeof(struct mount))) { 729 warnx("can't read mount table at %p", (void *)m); 730 return (NULL); 731 } 732 if ((mt = malloc(sizeof (struct mtab))) == NULL) 733 err(1, NULL); 734 mt->m = m; 735 bcopy(&mount_l.mnt_stat.f_mntonname[0], &mt->mntonname[0], MNAMELEN); 736 mt->next = mhead; 737 mhead = mt; 738 return (mt->mntonname); 739 } 740 741 static void 742 pipetrans(struct pipe *pi, int i, int flag) 743 { 744 struct pipe pip; 745 char rw[3]; 746 747 PREFIX(i); 748 749 /* fill in socket */ 750 if (!kread(pi, &pip, sizeof(struct pipe))) { 751 dprintf(stderr, "can't read pipe at %p\n", (void *)pi); 752 goto bad; 753 } 754 755 printf("* pipe %8lx <-> %8lx", (u_long)pi, (u_long)pip.pipe_peer); 756 printf(" %6d", (int)(pip.pipe_buffer.windex - pip.pipe_buffer.rindex)); 757 rw[0] = '\0'; 758 if (flag & FREAD) 759 strcat(rw, "r"); 760 if (flag & FWRITE) 761 strcat(rw, "w"); 762 printf(" %2s", rw); 763 putchar('\n'); 764 return; 765 766 bad: 767 printf("* error\n"); 768 } 769 770 static void 771 socktrans(struct socket *sock, int i) 772 { 773 static const char *stypename[] = { 774 "unused", /* 0 */ 775 "stream", /* 1 */ 776 "dgram", /* 2 */ 777 "raw", /* 3 */ 778 "rdm", /* 4 */ 779 "seqpak" /* 5 */ 780 }; 781 #define STYPEMAX 5 782 struct socket so; 783 struct protosw proto; 784 struct domain dom; 785 struct inpcb inpcb; 786 struct unpcb unpcb; 787 int len; 788 char dname[32]; 789 790 PREFIX(i); 791 792 /* fill in socket */ 793 if (!kread(sock, &so, sizeof(struct socket))) { 794 dprintf(stderr, "can't read sock at %p\n", (void *)sock); 795 goto bad; 796 } 797 798 /* fill in protosw entry */ 799 if (!kread(so.so_proto, &proto, sizeof(struct protosw))) { 800 dprintf(stderr, "can't read protosw at %p", 801 (void *)so.so_proto); 802 goto bad; 803 } 804 805 /* fill in domain */ 806 if (!kread(proto.pr_domain, &dom, sizeof(struct domain))) { 807 dprintf(stderr, "can't read domain at %p\n", 808 (const void *)proto.pr_domain); 809 goto bad; 810 } 811 812 if ((len = kvm_read(kd, (u_long)dom.dom_name, dname, 813 sizeof(dname) - 1)) < 0) { 814 dprintf(stderr, "can't read domain name at %p\n", 815 (void *)dom.dom_name); 816 dname[0] = '\0'; 817 } 818 else 819 dname[len] = '\0'; 820 821 if ((u_short)so.so_type > STYPEMAX) 822 printf("* %s ?%d", dname, so.so_type); 823 else 824 printf("* %s %s", dname, stypename[so.so_type]); 825 826 /* 827 * protocol specific formatting 828 * 829 * Try to find interesting things to print. For tcp, the interesting 830 * thing is the address of the tcpcb, for udp and others, just the 831 * inpcb (socket pcb). For unix domain, its the address of the socket 832 * pcb and the address of the connected pcb (if connected). Otherwise 833 * just print the protocol number and address of the socket itself. 834 * The idea is not to duplicate netstat, but to make available enough 835 * information for further analysis. 836 */ 837 switch(dom.dom_family) { 838 case AF_INET: 839 case AF_INET6: 840 getinetproto(proto.pr_protocol); 841 if (proto.pr_protocol == IPPROTO_TCP ) { 842 if (so.so_pcb) { 843 if (kvm_read(kd, (u_long)so.so_pcb, 844 (char *)&inpcb, sizeof(struct inpcb)) 845 != sizeof(struct inpcb)) { 846 dprintf(stderr, 847 "can't read inpcb at %p\n", 848 (void *)so.so_pcb); 849 goto bad; 850 } 851 printf(" %lx", (u_long)inpcb.inp_ppcb); 852 } 853 } 854 else if (so.so_pcb) 855 printf(" %lx", (u_long)so.so_pcb); 856 break; 857 case AF_UNIX: 858 /* print address of pcb and connected pcb */ 859 if (so.so_pcb) { 860 printf(" %lx", (u_long)so.so_pcb); 861 if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb, 862 sizeof(struct unpcb)) != sizeof(struct unpcb)){ 863 dprintf(stderr, "can't read unpcb at %p\n", 864 (void *)so.so_pcb); 865 goto bad; 866 } 867 if (unpcb.unp_conn) { 868 char shoconn[4], *cp; 869 870 cp = shoconn; 871 if (!(so.so_state & SS_CANTRCVMORE)) 872 *cp++ = '<'; 873 *cp++ = '-'; 874 if (!(so.so_state & SS_CANTSENDMORE)) 875 *cp++ = '>'; 876 *cp = '\0'; 877 printf(" %s %lx", shoconn, 878 (u_long)unpcb.unp_conn); 879 } 880 } 881 break; 882 default: 883 /* print protocol number and socket address */ 884 printf(" %d %lx", proto.pr_protocol, (u_long)sock); 885 } 886 printf("\n"); 887 return; 888 bad: 889 printf("* error\n"); 890 } 891 892 893 /* 894 * Read the cdev structure in the kernel (as pointed to by a dev_t) 895 * in order to work out the associated udev_t 896 */ 897 udev_t 898 dev2udev(void *dev) 899 { 900 struct cdev si; 901 902 if (kread(dev, &si, sizeof si)) { 903 if ((si.si_umajor & 0xffffff00) || 904 (si.si_uminor & 0x0000ff00)) { 905 return NOUDEV; 906 } 907 return((si.si_umajor << 8) | si.si_uminor); 908 } else { 909 dprintf(stderr, "can't convert dev_t %p to a udev_t\n", dev); 910 return NOUDEV; 911 } 912 } 913 914 udev_t 915 makeudev(int x, int y) 916 { 917 if ((x & 0xffffff00) || (y & 0x0000ff00)) 918 return NOUDEV; 919 return ((x << 8) | y); 920 } 921 922 /* 923 * getinetproto -- 924 * print name of protocol number 925 */ 926 static void 927 getinetproto(int number) 928 { 929 static int isopen; 930 struct protoent *pe; 931 932 if (!isopen) 933 setprotoent(++isopen); 934 if ((pe = getprotobynumber(number)) != NULL) 935 printf(" %s", pe->p_name); 936 else 937 printf(" %d", number); 938 } 939 940 static int 941 getfname(const char *filename) 942 { 943 struct stat statbuf; 944 DEVS *cur; 945 946 if (stat(filename, &statbuf)) { 947 warn("%s", filename); 948 return(0); 949 } 950 if ((cur = malloc(sizeof(DEVS))) == NULL) 951 err(1, NULL); 952 cur->next = devs; 953 devs = cur; 954 955 cur->ino = statbuf.st_ino; 956 cur->fsid = statbuf.st_dev; 957 cur->name = filename; 958 return(1); 959 } 960 961 static void 962 usage(void) 963 { 964 (void)fprintf(stderr, 965 "usage: fstat [-fmnv] [-p pid] [-u user] [-N system] [-M core] [file ...]\n"); 966 exit(1); 967 } 968 969 static 970 void 971 make_printable(char *buf, int len) 972 { 973 while (len > 0) { 974 if (!isprint(*buf)) 975 *buf = '?'; 976 ++buf; 977 --len; 978 } 979 } 980 981 ssize_t 982 kread(const void *kaddr, void *uaddr, size_t nbytes) 983 { 984 if (nbytes > 0x10000000) 985 return(0); 986 987 if (kvm_read(kd, (u_long)kaddr, (char *)uaddr, nbytes) == (ssize_t)nbytes) 988 return(1); 989 else 990 return(0); 991 } 992 993