1 /*- 2 * Copyright (c) 1988, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. All advertising materials mentioning features or use of this software 14 * must display the following acknowledgement: 15 * This product includes software developed by the University of 16 * California, Berkeley and its contributors. 17 * 4. Neither the name of the University nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 * 33 * @(#) Copyright (c) 1988, 1993 The Regents of the University of California. All rights reserved. 34 * @(#)fstat.c 8.3 (Berkeley) 5/2/95 35 * $FreeBSD: src/usr.bin/fstat/fstat.c,v 1.21.2.7 2001/11/21 10:49:37 dwmalone Exp $ 36 */ 37 38 #include <sys/user.h> 39 #include <sys/param.h> 40 #include <sys/time.h> 41 #include <sys/stat.h> 42 #include <sys/vnode.h> 43 #include <sys/socket.h> 44 #include <sys/socketvar.h> 45 #include <sys/domain.h> 46 #include <sys/protosw.h> 47 #include <sys/un.h> 48 #include <sys/unpcb.h> 49 #include <sys/sysctl.h> 50 #include <sys/filedesc.h> 51 #include <sys/queue.h> 52 #include <sys/pipe.h> 53 #include <sys/conf.h> 54 #include <sys/file.h> 55 #include <sys/ktrace.h> 56 #include <vfs/ufs/quota.h> 57 #include <vfs/ufs/inode.h> 58 #include <sys/mount.h> 59 #include <sys/namecache.h> 60 #include <nfs/nfsproto.h> 61 #include <nfs/rpcv2.h> 62 #include <nfs/nfs.h> 63 #include <nfs/nfsnode.h> 64 #include <sys/devfs.h> 65 66 #include <vm/vm.h> 67 #include <vm/vm_map.h> 68 #include <vm/vm_object.h> 69 70 #include <net/route.h> 71 #include <netinet/in.h> 72 #include <netinet/in_systm.h> 73 #include <netinet/ip.h> 74 #include <netinet/in_pcb.h> 75 76 #include <ctype.h> 77 #include <err.h> 78 #include <fcntl.h> 79 #include <kvm.h> 80 #include <limits.h> 81 #include <nlist.h> 82 #include <paths.h> 83 #include <pwd.h> 84 #include <stdio.h> 85 #include <stdlib.h> 86 #include <string.h> 87 #include <unistd.h> 88 #include <netdb.h> 89 90 #include "fstat.h" 91 92 #define TEXT -1 93 #define CDIR -2 94 #define RDIR -3 95 #define TRACE -4 96 #define MMAP -5 97 98 DEVS *devs; 99 100 static void make_printable(char *buf, int len); 101 102 #ifdef notdef 103 struct nlist nl[] = { 104 { "" }, 105 }; 106 #endif 107 108 int fsflg, /* show files on same filesystem as file(s) argument */ 109 pflg, /* show files open by a particular pid */ 110 uflg; /* show files open by a particular (effective) user */ 111 int checkfile; /* true if restricting to particular files or filesystems */ 112 int nflg; /* (numerical) display f.s. and rdev as dev_t */ 113 int vflg; /* display errors in locating kernel data objects etc... */ 114 int mflg; /* include memory-mapped files */ 115 int wflg_mnt = 16; 116 int wflg_cmd = 10; 117 int pid_width = 5; 118 int ino_width = 6; 119 120 121 struct fdnode *ofiles; /* buffer of pointers to file structures */ 122 int maxfiles; 123 124 #define ALLOC_OFILES(d) \ 125 if ((d) > maxfiles) { \ 126 free(ofiles); \ 127 ofiles = malloc((d) * sizeof(struct fdnode)); \ 128 if (ofiles == NULL) { \ 129 err(1, NULL); \ 130 } \ 131 maxfiles = (d); \ 132 } 133 134 kvm_t *kd; 135 136 void dofiles(struct kinfo_proc *kp, struct proc *p); 137 void dommap(struct proc *p); 138 void vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag); 139 int ufs_filestat(struct vnode *vp, struct filestat *fsp); 140 int nfs_filestat(struct vnode *vp, struct filestat *fsp); 141 int devfs_filestat(struct vnode *vp, struct filestat *fsp); 142 char *getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr); 143 void pipetrans(struct pipe *pi, int i, int flag); 144 void socktrans(struct socket *sock, int i); 145 void getinetproto(int number); 146 int getfname(const char *filename); 147 void usage(void); 148 149 150 int 151 main(int argc, char **argv) 152 { 153 struct passwd *passwd; 154 struct kinfo_proc *p, *plast; 155 struct proc proc; 156 int arg, ch, what; 157 char *memf, *nlistf; 158 char buf[_POSIX2_LINE_MAX]; 159 int cnt; 160 161 arg = 0; 162 what = KERN_PROC_ALL; 163 nlistf = memf = NULL; 164 while ((ch = getopt(argc, argv, "fmnp:u:vwN:M:")) != -1) 165 switch((char)ch) { 166 case 'f': 167 fsflg = 1; 168 break; 169 case 'M': 170 memf = optarg; 171 break; 172 case 'N': 173 nlistf = optarg; 174 break; 175 case 'm': 176 mflg = 1; 177 break; 178 case 'n': 179 nflg = 1; 180 break; 181 case 'p': 182 if (pflg++) 183 usage(); 184 if (!isdigit(*optarg)) { 185 warnx("-p requires a process id"); 186 usage(); 187 } 188 what = KERN_PROC_PID; 189 arg = atoi(optarg); 190 break; 191 case 'u': 192 if (uflg++) 193 usage(); 194 if (!(passwd = getpwnam(optarg))) 195 errx(1, "%s: unknown uid", optarg); 196 what = KERN_PROC_UID; 197 arg = passwd->pw_uid; 198 break; 199 case 'v': 200 vflg = 1; 201 break; 202 case 'w': 203 wflg_mnt = 40; 204 wflg_cmd = 16; 205 break; 206 case '?': 207 default: 208 usage(); 209 } 210 211 if (*(argv += optind)) { 212 for (; *argv; ++argv) { 213 if (getfname(*argv)) 214 checkfile = 1; 215 } 216 if (!checkfile) /* file(s) specified, but none accessable */ 217 exit(1); 218 } 219 220 ALLOC_OFILES(256); /* reserve space for file pointers */ 221 222 if (fsflg && !checkfile) { 223 /* -f with no files means use wd */ 224 if (getfname(".") == 0) 225 exit(1); 226 checkfile = 1; 227 } 228 229 /* 230 * Discard setgid privileges if not the running kernel so that bad 231 * guys can't print interesting stuff from kernel memory. 232 */ 233 if (nlistf != NULL || memf != NULL) 234 setgid(getgid()); 235 236 if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL) 237 errx(1, "%s", buf); 238 #ifdef notdef 239 if (kvm_nlist(kd, nl) != 0) 240 errx(1, "no namelist: %s", kvm_geterr(kd)); 241 #endif 242 if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL) 243 errx(1, "%s", kvm_geterr(kd)); 244 if (nflg) 245 printf("USER %-*.*s %*.*s FD DEV %*.*s MODE SZ|DV R/W", 246 wflg_cmd, wflg_cmd, "CMD", 247 pid_width, pid_width, "PID", 248 ino_width, ino_width, "INUM"); 249 else 250 printf("USER %-*.*s %*.*s FD %-*.*s %*.*s MODE SZ|DV R/W", 251 wflg_cmd, wflg_cmd, "CMD", 252 pid_width, pid_width, "PID", 253 wflg_mnt, wflg_mnt, "PATH", 254 ino_width, ino_width, "INUM"); 255 if (checkfile && fsflg == 0) 256 printf(" NAME\n"); 257 else 258 putchar('\n'); 259 260 for (plast = &p[cnt]; p < plast; ++p) { 261 if (p->kp_stat == SZOMB) 262 continue; 263 if (!kread((void *)p->kp_paddr, &proc, sizeof(proc))) { 264 dprintf(stderr, "can't read proc at %p for pid %d\n", 265 (void *)p->kp_paddr, Pid); 266 continue; 267 } 268 dofiles(p, &proc); 269 if (mflg) 270 dommap(&proc); 271 } 272 exit(0); 273 } 274 275 const char *Uname; 276 char *Comm; 277 int Pid; 278 279 #define PREFIX(i) \ 280 printf("%-8.8s %-*s %*d", Uname, wflg_cmd, Comm, pid_width, Pid); \ 281 switch(i) { \ 282 case TEXT: \ 283 printf(" text"); \ 284 break; \ 285 case CDIR: \ 286 printf(" wd"); \ 287 break; \ 288 case RDIR: \ 289 printf(" root"); \ 290 break; \ 291 case TRACE: \ 292 printf(" tr"); \ 293 break; \ 294 case MMAP: \ 295 printf(" mmap"); \ 296 break; \ 297 default: \ 298 printf(" %4d", i); \ 299 break; \ 300 } 301 302 /* 303 * print open files attributed to this process 304 */ 305 void 306 dofiles(struct kinfo_proc *kp, struct proc *p) 307 { 308 int i; 309 struct file file; 310 struct filedesc filed; 311 struct ktrace_node ktrace_node; 312 313 Uname = user_from_uid(kp->kp_uid, 0); 314 Pid = kp->kp_pid; 315 Comm = kp->kp_comm; 316 make_printable(Comm, strlen(Comm)); 317 318 if (p->p_fd == NULL) 319 return; 320 if (!kread(p->p_fd, &filed, sizeof (filed))) { 321 dprintf(stderr, "can't read filedesc at %p for pid %d\n", 322 (void *)p->p_fd, Pid); 323 return; 324 } 325 /* 326 * root directory vnode, if one 327 */ 328 if (filed.fd_rdir) 329 vtrans(filed.fd_rdir, &filed.fd_nrdir, RDIR, FREAD); 330 /* 331 * current working directory vnode 332 */ 333 vtrans(filed.fd_cdir, &filed.fd_ncdir, CDIR, FREAD); 334 /* 335 * ktrace vnode, if one 336 */ 337 if (p->p_tracenode) { 338 if (kread(p->p_tracenode, &ktrace_node, sizeof (ktrace_node))) 339 vtrans(ktrace_node.kn_vp, NULL, TRACE, FREAD|FWRITE); 340 } 341 /* 342 * text vnode, if one 343 */ 344 if (p->p_textvp) 345 vtrans(p->p_textvp, NULL, TEXT, FREAD); 346 /* 347 * open files 348 */ 349 ALLOC_OFILES(filed.fd_lastfile+1); 350 if (!kread(filed.fd_files, ofiles, 351 (filed.fd_lastfile+1) * sizeof(struct fdnode))) { 352 dprintf(stderr, 353 "can't read file structures at %p for pid %d\n", 354 (void *)filed.fd_files, Pid); 355 return; 356 } 357 for (i = 0; i <= filed.fd_lastfile; i++) { 358 if (ofiles[i].fp == NULL) 359 continue; 360 if (!kread(ofiles[i].fp, &file, sizeof (struct file))) { 361 dprintf(stderr, "can't read file %d at %p for pid %d\n", 362 i, (void *)ofiles[i].fp, Pid); 363 continue; 364 } 365 if (file.f_type == DTYPE_VNODE) { 366 vtrans((struct vnode *)file.f_data, &file.f_nchandle, i, 367 file.f_flag); 368 } else if (file.f_type == DTYPE_SOCKET) { 369 if (checkfile == 0) 370 socktrans((struct socket *)file.f_data, i); 371 } 372 #ifdef DTYPE_PIPE 373 else if (file.f_type == DTYPE_PIPE) { 374 if (checkfile == 0) 375 pipetrans((struct pipe *)file.f_data, i, 376 file.f_flag); 377 } 378 #endif 379 #ifdef DTYPE_FIFO 380 else if (file.f_type == DTYPE_FIFO) { 381 if (checkfile == 0) 382 vtrans((struct vnode *)file.f_data, &file.f_nchandle, 383 i, file.f_flag); 384 } 385 #endif 386 else { 387 dprintf(stderr, 388 "unknown file type %d for file %d of pid %d\n", 389 file.f_type, i, Pid); 390 } 391 } 392 } 393 394 void 395 dommap(struct proc *p) 396 { 397 struct vmspace vmspace; 398 vm_map_t map; 399 struct vm_map_entry entry; 400 vm_map_entry_t entryp; 401 struct vm_object object; 402 vm_object_t objp; 403 int prot, fflags; 404 405 if (!kread(p->p_vmspace, &vmspace, sizeof(vmspace))) { 406 dprintf(stderr, "can't read vmspace at %p for pid %d\n", 407 (void *)p->p_vmspace, Pid); 408 return; 409 } 410 411 map = &vmspace.vm_map; 412 413 for (entryp = map->header.next; entryp != &p->p_vmspace->vm_map.header; 414 entryp = entry.next) { 415 if (!kread(entryp, &entry, sizeof(entry))) { 416 dprintf(stderr, 417 "can't read vm_map_entry at %p for pid %d\n", 418 (void *)entryp, Pid); 419 return; 420 } 421 422 if (entry.maptype == VM_MAPTYPE_SUBMAP) 423 continue; 424 425 if ((objp = entry.object.vm_object) == NULL) 426 continue; 427 428 for (; objp; objp = object.backing_object) { 429 if (!kread(objp, &object, sizeof(object))) { 430 dprintf(stderr, 431 "can't read vm_object at %p for pid %d\n", 432 (void *)objp, Pid); 433 return; 434 } 435 } 436 437 prot = entry.protection; 438 fflags = (prot & VM_PROT_READ ? FREAD : 0) | 439 (prot & VM_PROT_WRITE ? FWRITE : 0); 440 441 switch (object.type) { 442 case OBJT_VNODE: 443 vtrans((struct vnode *)object.handle, NULL, 444 MMAP, fflags); 445 break; 446 default: 447 break; 448 } 449 } 450 } 451 452 void 453 vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag) 454 { 455 struct vnode vn; 456 struct filestat fst; 457 char rw[3], mode[15]; 458 const char *badtype = NULL, *filename; 459 460 filename = badtype = NULL; 461 if (!kread(vp, &vn, sizeof (struct vnode))) { 462 dprintf(stderr, "can't read vnode at %p for pid %d\n", 463 (void *)vp, Pid); 464 return; 465 } 466 if (vn.v_type == VNON || vn.v_tag == VT_NON) 467 badtype = "none"; 468 else if (vn.v_type == VBAD) 469 badtype = "bad"; 470 else 471 switch (vn.v_tag) { 472 case VT_UFS: 473 if (!ufs_filestat(&vn, &fst)) 474 badtype = "error"; 475 break; 476 case VT_MFS: 477 if (!ufs_filestat(&vn, &fst)) 478 badtype = "error"; 479 break; 480 case VT_NFS: 481 if (!nfs_filestat(&vn, &fst)) 482 badtype = "error"; 483 break; 484 485 case VT_MSDOSFS: 486 if (!msdosfs_filestat(&vn, &fst)) 487 badtype = "error"; 488 break; 489 490 case VT_ISOFS: 491 if (!isofs_filestat(&vn, &fst)) 492 badtype = "error"; 493 break; 494 495 case VT_DEVFS: 496 if (!devfs_filestat(&vn, &fst)) 497 badtype = "error"; 498 break; 499 500 default: { 501 static char unknown[10]; 502 sprintf(unknown, "?(%x)", vn.v_tag); 503 badtype=unknown; 504 break; 505 } 506 } 507 if (checkfile) { 508 int fsmatch = 0; 509 DEVS *d; 510 511 if (badtype) 512 return; 513 for (d = devs; d != NULL; d = d->next) 514 if (d->fsid == fst.fsid) { 515 fsmatch = 1; 516 if (d->ino == (ino_t)fst.fileid) { 517 filename = d->name; 518 break; 519 } 520 } 521 if (fsmatch == 0 || (filename == NULL && fsflg == 0)) 522 return; 523 } 524 PREFIX(i); 525 if (badtype) { 526 (void)printf(" %-*s %10s -\n", 527 wflg_mnt, 528 getmnton(vn.v_mount, &vn.v_namecache, ncr), 529 badtype); 530 return; 531 } 532 if (nflg) 533 (void)printf(" %3d,%-9d ", major(fst.fsid), minor(fst.fsid)); 534 else 535 (void)printf(" %-*s", wflg_mnt, getmnton(vn.v_mount, &vn.v_namecache, ncr)); 536 if (nflg) 537 (void)sprintf(mode, "%o", fst.mode); 538 else 539 strmode(fst.mode, mode); 540 (void)printf(" %*ld %10s", ino_width, fst.fileid, mode); 541 switch (vn.v_type) { 542 case VBLK: 543 case VCHR: { 544 char *name; 545 546 if (nflg || ((name = devname(fst.rdev, vn.v_type == VCHR ? 547 S_IFCHR : S_IFBLK)) == NULL)) 548 printf(" %3d,%-4d", major(fst.rdev), minor(fst.rdev)); 549 else 550 printf(" %8s", name); 551 break; 552 } 553 default: 554 printf(" %8llu", fst.size); 555 } 556 rw[0] = '\0'; 557 if (flag & FREAD) 558 strcat(rw, "r"); 559 if (flag & FWRITE) 560 strcat(rw, "w"); 561 printf(" %2s", rw); 562 if (filename && !fsflg) 563 printf(" %s", filename); 564 putchar('\n'); 565 } 566 567 int 568 ufs_filestat(struct vnode *vp, struct filestat *fsp) 569 { 570 struct inode inode; 571 572 if (!kread(VTOI(vp), &inode, sizeof (inode))) { 573 dprintf(stderr, "can't read inode at %p for pid %d\n", 574 (void *)VTOI(vp), Pid); 575 return 0; 576 } 577 /* 578 * The st_dev from stat(2) is a udev_t. These kernel structures 579 * contain dev_t structures. We need to convert to udev to make 580 * comparisons 581 */ 582 fsp->fsid = dev2udev(inode.i_dev); 583 fsp->fileid = (long)inode.i_number; 584 fsp->mode = (mode_t)inode.i_mode; 585 fsp->size = inode.i_size; 586 fsp->rdev = inode.i_rdev; 587 588 return 1; 589 } 590 591 int 592 nfs_filestat(struct vnode *vp, struct filestat *fsp) 593 { 594 struct nfsnode nfsnode; 595 mode_t mode; 596 597 if (!kread(VTONFS(vp), &nfsnode, sizeof (nfsnode))) { 598 dprintf(stderr, "can't read nfsnode at %p for pid %d\n", 599 (void *)VTONFS(vp), Pid); 600 return 0; 601 } 602 fsp->fsid = nfsnode.n_vattr.va_fsid; 603 fsp->fileid = nfsnode.n_vattr.va_fileid; 604 fsp->size = nfsnode.n_size; 605 fsp->rdev = makeudev(nfsnode.n_vattr.va_rmajor, 606 nfsnode.n_vattr.va_rminor); 607 mode = (mode_t)nfsnode.n_vattr.va_mode; 608 switch (vp->v_type) { 609 case VREG: 610 mode |= S_IFREG; 611 break; 612 case VDIR: 613 mode |= S_IFDIR; 614 break; 615 case VBLK: 616 mode |= S_IFBLK; 617 break; 618 case VCHR: 619 mode |= S_IFCHR; 620 break; 621 case VLNK: 622 mode |= S_IFLNK; 623 break; 624 case VSOCK: 625 mode |= S_IFSOCK; 626 break; 627 case VFIFO: 628 mode |= S_IFIFO; 629 break; 630 case VDATABASE: 631 break; 632 case VINT: 633 case VNON: 634 case VBAD: 635 return 0; 636 }; 637 fsp->mode = mode; 638 639 return 1; 640 } 641 642 int 643 devfs_filestat(struct vnode *vp, struct filestat *fsp) 644 { 645 struct devfs_node devfs_node; 646 647 if (!kread(vp->v_data, &devfs_node, sizeof (devfs_node))) { 648 dprintf(stderr, "can't read devfs_node at %p for pid %d\n", 649 (void *)vp->v_data, Pid); 650 return 0; 651 } 652 fsp->fsid = fsp->rdev = dev2udev(vp->v_rdev); 653 fsp->fileid = devfs_node.d_dir.d_ino; 654 fsp->mode = (devfs_node.mode & ~S_IFMT) | S_IFCHR; 655 fsp->size = 0; 656 657 return 1; 658 } 659 660 char * 661 getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr) 662 { 663 static struct mount mount_l; 664 static struct mtab { 665 struct mtab *next; 666 struct mount *m; 667 char mntonname[MNAMELEN]; 668 } *mhead = NULL; 669 struct mtab *mt; 670 struct namecache *ncp; 671 struct namecache ncp_copy; 672 static char path[1024]; 673 int i; 674 675 /* 676 * If no ncp is passed try to find one via ncplist. Make sure 677 * we are using the correct mount pointer or the matching code 678 * will not know how to transition mount points properly. 679 */ 680 if (ncr == NULL || ncr->ncp == NULL) { 681 ncp = ncplist->tqh_first; 682 } else { 683 ncp = ncr->ncp; 684 if (ncr->mount) 685 m = ncr->mount; 686 } 687 688 /* 689 * If we have an ncp, traceback the path. This is a kvm pointer. 690 */ 691 if (ncp) { 692 if (!kread(m, &mount_l, sizeof(struct mount))) { 693 warnx("can't read mount table at %p", (void *)m); 694 return (NULL); 695 } 696 i = sizeof(path) - 1; 697 path[i] = 0; 698 while (ncp) { 699 /* 700 * If this is the root of the mount then traverse 701 * to the parent mount. 702 */ 703 if (ncp == mount_l.mnt_ncmountpt.ncp) { 704 ncp = mount_l.mnt_ncmounton.ncp; 705 if (ncp == NULL) 706 break; 707 m = mount_l.mnt_ncmounton.mount; 708 if (!kread(m, &mount_l, sizeof(struct mount))) { 709 warnx("can't read mount table at %p", (void *)m); 710 return (NULL); 711 } 712 } 713 714 /* 715 * Ok, pull out the ncp and extract the name 716 */ 717 if (!kread(ncp, &ncp_copy, sizeof(ncp_copy))) { 718 warnx("can't read ncp at %p", ncp); 719 return (NULL); 720 } 721 if (i <= ncp_copy.nc_nlen) 722 break; 723 i -= ncp_copy.nc_nlen; 724 if (!kread(ncp_copy.nc_name, path + i, ncp_copy.nc_nlen)) { 725 warnx("can't read ncp %p path component at %p", ncp, ncp_copy.nc_name); 726 return (NULL); 727 } 728 make_printable(path + i, ncp_copy.nc_nlen); 729 path[--i] = '/'; 730 ncp = ncp_copy.nc_parent; 731 } 732 if (i == sizeof(path) - 1) 733 path[--i] = '/'; 734 return(path + i); 735 } 736 737 /* 738 * If all else fails print out the mount point path 739 */ 740 for (mt = mhead; mt != NULL; mt = mt->next) { 741 if (m == mt->m) 742 return (mt->mntonname); 743 } 744 if (!kread(m, &mount_l, sizeof(struct mount))) { 745 warnx("can't read mount table at %p", (void *)m); 746 return (NULL); 747 } 748 if ((mt = malloc(sizeof (struct mtab))) == NULL) 749 err(1, NULL); 750 mt->m = m; 751 bcopy(&mount_l.mnt_stat.f_mntonname[0], &mt->mntonname[0], MNAMELEN); 752 mt->next = mhead; 753 mhead = mt; 754 return (mt->mntonname); 755 } 756 757 void 758 pipetrans(struct pipe *pi, int i, int flag) 759 { 760 struct pipe pip; 761 char rw[3]; 762 763 PREFIX(i); 764 765 /* fill in socket */ 766 if (!kread(pi, &pip, sizeof(struct pipe))) { 767 dprintf(stderr, "can't read pipe at %p\n", (void *)pi); 768 goto bad; 769 } 770 771 printf("* pipe %8lx <-> %8lx", (u_long)pi, (u_long)pip.pipe_peer); 772 printf(" %6d", (int)(pip.pipe_buffer.windex - pip.pipe_buffer.rindex)); 773 rw[0] = '\0'; 774 if (flag & FREAD) 775 strcat(rw, "r"); 776 if (flag & FWRITE) 777 strcat(rw, "w"); 778 printf(" %2s", rw); 779 putchar('\n'); 780 return; 781 782 bad: 783 printf("* error\n"); 784 } 785 786 void 787 socktrans(struct socket *sock, int i) 788 { 789 static const char *stypename[] = { 790 "unused", /* 0 */ 791 "stream", /* 1 */ 792 "dgram", /* 2 */ 793 "raw", /* 3 */ 794 "rdm", /* 4 */ 795 "seqpak" /* 5 */ 796 }; 797 #define STYPEMAX 5 798 struct socket so; 799 struct protosw proto; 800 struct domain dom; 801 struct inpcb inpcb; 802 struct unpcb unpcb; 803 int len; 804 char dname[32]; 805 806 PREFIX(i); 807 808 /* fill in socket */ 809 if (!kread(sock, &so, sizeof(struct socket))) { 810 dprintf(stderr, "can't read sock at %p\n", (void *)sock); 811 goto bad; 812 } 813 814 /* fill in protosw entry */ 815 if (!kread(so.so_proto, &proto, sizeof(struct protosw))) { 816 dprintf(stderr, "can't read protosw at %p", 817 (void *)so.so_proto); 818 goto bad; 819 } 820 821 /* fill in domain */ 822 if (!kread(proto.pr_domain, &dom, sizeof(struct domain))) { 823 dprintf(stderr, "can't read domain at %p\n", 824 (const void *)proto.pr_domain); 825 goto bad; 826 } 827 828 if ((len = kvm_read(kd, (u_long)dom.dom_name, dname, 829 sizeof(dname) - 1)) < 0) { 830 dprintf(stderr, "can't read domain name at %p\n", 831 (void *)dom.dom_name); 832 dname[0] = '\0'; 833 } 834 else 835 dname[len] = '\0'; 836 837 if ((u_short)so.so_type > STYPEMAX) 838 printf("* %s ?%d", dname, so.so_type); 839 else 840 printf("* %s %s", dname, stypename[so.so_type]); 841 842 /* 843 * protocol specific formatting 844 * 845 * Try to find interesting things to print. For tcp, the interesting 846 * thing is the address of the tcpcb, for udp and others, just the 847 * inpcb (socket pcb). For unix domain, its the address of the socket 848 * pcb and the address of the connected pcb (if connected). Otherwise 849 * just print the protocol number and address of the socket itself. 850 * The idea is not to duplicate netstat, but to make available enough 851 * information for further analysis. 852 */ 853 switch(dom.dom_family) { 854 case AF_INET: 855 case AF_INET6: 856 getinetproto(proto.pr_protocol); 857 if (proto.pr_protocol == IPPROTO_TCP ) { 858 if (so.so_pcb) { 859 if (kvm_read(kd, (u_long)so.so_pcb, 860 (char *)&inpcb, sizeof(struct inpcb)) 861 != sizeof(struct inpcb)) { 862 dprintf(stderr, 863 "can't read inpcb at %p\n", 864 (void *)so.so_pcb); 865 goto bad; 866 } 867 printf(" %lx", (u_long)inpcb.inp_ppcb); 868 } 869 } 870 else if (so.so_pcb) 871 printf(" %lx", (u_long)so.so_pcb); 872 break; 873 case AF_UNIX: 874 /* print address of pcb and connected pcb */ 875 if (so.so_pcb) { 876 printf(" %lx", (u_long)so.so_pcb); 877 if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb, 878 sizeof(struct unpcb)) != sizeof(struct unpcb)){ 879 dprintf(stderr, "can't read unpcb at %p\n", 880 (void *)so.so_pcb); 881 goto bad; 882 } 883 if (unpcb.unp_conn) { 884 char shoconn[4], *cp; 885 886 cp = shoconn; 887 if (!(so.so_state & SS_CANTRCVMORE)) 888 *cp++ = '<'; 889 *cp++ = '-'; 890 if (!(so.so_state & SS_CANTSENDMORE)) 891 *cp++ = '>'; 892 *cp = '\0'; 893 printf(" %s %lx", shoconn, 894 (u_long)unpcb.unp_conn); 895 } 896 } 897 break; 898 default: 899 /* print protocol number and socket address */ 900 printf(" %d %lx", proto.pr_protocol, (u_long)sock); 901 } 902 printf("\n"); 903 return; 904 bad: 905 printf("* error\n"); 906 } 907 908 909 /* 910 * Read the cdev structure in the kernel (as pointed to by a dev_t) 911 * in order to work out the associated udev_t 912 */ 913 udev_t 914 dev2udev(void *dev) 915 { 916 struct cdev si; 917 918 if (kread(dev, &si, sizeof si)) { 919 if ((si.si_umajor & 0xffffff00) || 920 (si.si_uminor & 0x0000ff00)) { 921 return NOUDEV; 922 } 923 return((si.si_umajor << 8) | si.si_uminor); 924 } else { 925 dprintf(stderr, "can't convert dev_t %p to a udev_t\n", dev); 926 return NOUDEV; 927 } 928 } 929 930 udev_t 931 makeudev(int x, int y) 932 { 933 if ((x & 0xffffff00) || (y & 0x0000ff00)) 934 return NOUDEV; 935 return ((x << 8) | y); 936 } 937 938 /* 939 * getinetproto -- 940 * print name of protocol number 941 */ 942 void 943 getinetproto(int number) 944 { 945 static int isopen; 946 struct protoent *pe; 947 948 if (!isopen) 949 setprotoent(++isopen); 950 if ((pe = getprotobynumber(number)) != NULL) 951 printf(" %s", pe->p_name); 952 else 953 printf(" %d", number); 954 } 955 956 int 957 getfname(const char *filename) 958 { 959 struct stat statbuf; 960 DEVS *cur; 961 962 if (stat(filename, &statbuf)) { 963 warn("%s", filename); 964 return(0); 965 } 966 if ((cur = malloc(sizeof(DEVS))) == NULL) 967 err(1, NULL); 968 cur->next = devs; 969 devs = cur; 970 971 cur->ino = statbuf.st_ino; 972 cur->fsid = statbuf.st_dev; 973 cur->name = filename; 974 return(1); 975 } 976 977 void 978 usage(void) 979 { 980 (void)fprintf(stderr, 981 "usage: fstat [-fmnv] [-p pid] [-u user] [-N system] [-M core] [file ...]\n"); 982 exit(1); 983 } 984 985 static 986 void 987 make_printable(char *buf, int len) 988 { 989 while (len > 0) { 990 if (!isprint(*buf)) 991 *buf = '?'; 992 ++buf; 993 --len; 994 } 995 } 996 997 ssize_t 998 kread(const void *kaddr, void *uaddr, size_t nbytes) 999 { 1000 if (nbytes > 0x10000000) 1001 return(0); 1002 1003 if (kvm_read(kd, (u_long)kaddr, (char *)uaddr, nbytes) == (ssize_t)nbytes) 1004 return(1); 1005 else 1006 return(0); 1007 } 1008 1009