1 0 stevel /* 2 0 stevel * CDDL HEADER START 3 0 stevel * 4 0 stevel * The contents of this file are subject to the terms of the 5 1676 jpk * Common Development and Distribution License (the "License"). 6 1676 jpk * You may not use this file except in compliance with the License. 7 0 stevel * 8 0 stevel * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 0 stevel * or http://www.opensolaris.org/os/licensing. 10 0 stevel * See the License for the specific language governing permissions 11 0 stevel * and limitations under the License. 12 0 stevel * 13 0 stevel * When distributing Covered Code, include this CDDL HEADER in each 14 0 stevel * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 0 stevel * If applicable, add the following below this CDDL HEADER, with the 16 0 stevel * fields enclosed by brackets "[]" replaced with your own identifying 17 0 stevel * information: Portions Copyright [yyyy] [name of copyright owner] 18 0 stevel * 19 0 stevel * CDDL HEADER END 20 0 stevel */ 21 132 robinson 22 0 stevel /* 23 8868 Peter * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 24 0 stevel * Use is subject to license terms. 25 0 stevel */ 26 0 stevel 27 0 stevel #ifndef _SNOOP_H 28 0 stevel #define _SNOOP_H 29 0 stevel 30 0 stevel #include <rpc/types.h> 31 0 stevel #include <sys/pfmod.h> 32 0 stevel #include <sys/time.h> 33 0 stevel #include <sys/types.h> 34 0 stevel #include <sys/socket.h> 35 1676 jpk #include <sys/bufmod.h> 36 0 stevel #include <net/if.h> 37 0 stevel #include <netinet/in.h> 38 0 stevel #include <netinet/if_ether.h> 39 0 stevel #include <netinet/in_systm.h> 40 0 stevel #include <netinet/ip.h> 41 0 stevel #include <netinet/ip6.h> 42 0 stevel #include <netinet/ip_icmp.h> 43 0 stevel #include <netinet/icmp6.h> 44 0 stevel #include <net/pppoe.h> 45 3628 ss150715 #include <libdlpi.h> 46 0 stevel 47 0 stevel #ifdef __cplusplus 48 0 stevel extern "C" { 49 0 stevel #endif 50 0 stevel 51 0 stevel /* 52 0 stevel * Flags to control packet info display 53 0 stevel */ 54 0 stevel #define F_NOW 0x00000001 /* display in realtime */ 55 0 stevel #define F_SUM 0x00000002 /* display summary line */ 56 0 stevel #define F_ALLSUM 0x00000004 /* display all summary lines */ 57 0 stevel #define F_DTAIL 0x00000008 /* display detail lines */ 58 0 stevel #define F_TIME 0x00000010 /* display time */ 59 0 stevel #define F_ATIME 0x00000020 /* display absolute time */ 60 0 stevel #define F_RTIME 0x00000040 /* display relative time */ 61 0 stevel #define F_DROPS 0x00000080 /* display drops */ 62 0 stevel #define F_LEN 0x00000100 /* display pkt length */ 63 0 stevel #define F_NUM 0x00000200 /* display pkt number */ 64 0 stevel #define F_WHO 0x00000400 /* display src/dst */ 65 0 stevel 66 0 stevel #define MAXLINE (1088) /* max len of detail line */ 67 0 stevel 68 0 stevel /* 69 0 stevel * The RPC XID cache structure. 70 0 stevel * When analyzing RPC protocols we 71 0 stevel * have to cache the xid of the RPC 72 0 stevel * request together with the program 73 0 stevel * number, proc, version etc since this 74 0 stevel * information is missing in the reply 75 0 stevel * packet. Using the xid in the reply 76 0 stevel * we can lookup this previously stashed 77 0 stevel * information in the cache. 78 0 stevel * 79 0 stevel * For RPCSEC_GSS flavor, some special processing is 80 0 stevel * needed for the argument interpretation based on its 81 0 stevel * control procedure and service type. This information 82 0 stevel * is stored in the cache table during interpretation of 83 0 stevel * the rpc header and will be referenced later when the rpc 84 0 stevel * argument is interpreted. 85 0 stevel */ 86 0 stevel #define XID_CACHE_SIZE 256 87 0 stevel struct cache_struct { 88 0 stevel int xid_num; /* RPC transaction id */ 89 0 stevel int xid_frame; /* Packet number */ 90 0 stevel int xid_prog; /* RPC program number */ 91 0 stevel int xid_vers; /* RPC version number */ 92 0 stevel int xid_proc; /* RPC procedure number */ 93 0 stevel unsigned int xid_gss_proc; /* control procedure */ 94 0 stevel int xid_gss_service; /* none, integ, priv */ 95 0 stevel } xid_cache[XID_CACHE_SIZE]; 96 0 stevel 97 0 stevel 98 0 stevel /* 99 0 stevel * The following macros advance the pointer passed to them. They 100 0 stevel * assume they are given a char *. 101 0 stevel */ 102 0 stevel #define GETINT8(v, ptr) { \ 103 0 stevel (v) = (*(ptr)++); \ 104 0 stevel } 105 0 stevel 106 0 stevel #define GETINT16(v, ptr) { \ 107 0 stevel (v) = *(ptr)++ << 8; \ 108 0 stevel (v) |= *(ptr)++; \ 109 0 stevel } 110 0 stevel 111 0 stevel #define GETINT32(v, ptr) { \ 112 0 stevel (v) = *(ptr)++ << 8; \ 113 0 stevel (v) |= *(ptr)++; (v) <<= 8; \ 114 0 stevel (v) |= *(ptr)++; (v) <<= 8; \ 115 0 stevel (v) |= *(ptr)++; \ 116 0 stevel } 117 0 stevel 118 0 stevel /* 119 0 stevel * Used to print nested protocol layers. For example, an ip datagram included 120 0 stevel * in an icmp error, or a PPP packet included in an LCP protocol reject.. 121 0 stevel */ 122 0 stevel extern char *prot_nest_prefix; 123 0 stevel 124 0 stevel extern char *get_sum_line(void); 125 0 stevel extern char *get_detail_line(int, int); 126 10616 Sebastien extern int want_packet(uchar_t *, int, int); 127 2760 dg199075 extern void set_vlan_id(int); 128 0 stevel extern struct timeval prev_time; 129 1676 jpk extern void process_pkt(struct sb_hdr *, char *, int, int); 130 0 stevel extern char *getflag(int, int, char *, char *); 131 0 stevel extern void show_header(char *, char *, int); 132 10616 Sebastien extern void show_count(void); 133 0 stevel extern void xdr_init(char *, int); 134 0 stevel extern char *get_line(int, int); 135 0 stevel extern int get_line_remain(void); 136 0 stevel extern char getxdr_char(void); 137 0 stevel extern char showxdr_char(char *); 138 0 stevel extern uchar_t getxdr_u_char(void); 139 0 stevel extern uchar_t showxdr_u_char(char *); 140 0 stevel extern short getxdr_short(void); 141 0 stevel extern short showxdr_short(char *); 142 0 stevel extern ushort_t getxdr_u_short(void); 143 0 stevel extern ushort_t showxdr_u_short(char *); 144 0 stevel extern long getxdr_long(void); 145 0 stevel extern long showxdr_long(char *); 146 0 stevel extern ulong_t getxdr_u_long(void); 147 0 stevel extern ulong_t showxdr_u_long(char *); 148 0 stevel extern longlong_t getxdr_longlong(void); 149 0 stevel extern longlong_t showxdr_longlong(char *); 150 132 robinson extern u_longlong_t getxdr_u_longlong(void); 151 132 robinson extern u_longlong_t showxdr_u_longlong(char *); 152 0 stevel extern char *getxdr_opaque(char *, int); 153 0 stevel extern char *getxdr_string(char *, int); 154 0 stevel extern char *showxdr_string(int, char *); 155 0 stevel extern char *getxdr_bytes(uint_t *); 156 0 stevel extern void xdr_skip(int); 157 0 stevel extern int getxdr_pos(void); 158 0 stevel extern void setxdr_pos(int); 159 0 stevel extern char *getxdr_context(char *, int); 160 0 stevel extern char *showxdr_context(char *); 161 0 stevel extern enum_t getxdr_enum(void); 162 0 stevel extern void show_space(void); 163 0 stevel extern void show_trailer(void); 164 0 stevel extern char *getxdr_date(void); 165 0 stevel extern char *showxdr_date(char *); 166 0 stevel extern char *getxdr_date_ns(void); 167 0 stevel char *format_time(int64_t sec, uint32_t nsec); 168 0 stevel extern char *showxdr_date_ns(char *); 169 0 stevel extern char *getxdr_hex(int); 170 0 stevel extern char *showxdr_hex(int, char *); 171 0 stevel extern bool_t getxdr_bool(void); 172 0 stevel extern bool_t showxdr_bool(char *); 173 0 stevel extern char *concat_args(char **, int); 174 0 stevel extern int pf_compile(char *, int); 175 0 stevel extern void compile(char *, int); 176 0 stevel extern void load_names(char *); 177 1676 jpk extern void cap_write(struct sb_hdr *, char *, int, int); 178 3628 ss150715 extern void cap_open_read(const char *); 179 3628 ss150715 extern void cap_open_write(const char *); 180 0 stevel extern void cap_read(int, int, int, void (*)(), int); 181 0 stevel extern void cap_close(void); 182 8868 Peter extern boolean_t open_datalink(dlpi_handle_t *, const char *); 183 8868 Peter extern void init_datalink(dlpi_handle_t, ulong_t, ulong_t, struct timeval *, 184 3628 ss150715 struct Pf_ext_packetfilt *); 185 3628 ss150715 extern void net_read(dlpi_handle_t, size_t, int, void (*)(), int); 186 0 stevel extern void click(int); 187 0 stevel extern void show_pktinfo(int, int, char *, char *, struct timeval *, 188 0 stevel struct timeval *, int, int); 189 0 stevel extern void show_line(char *); 190 0 stevel extern char *getxdr_time(void); 191 0 stevel extern char *showxdr_time(char *); 192 1676 jpk extern char *addrtoname(int, const void *); 193 0 stevel extern char *show_string(const char *, int, int); 194 1676 jpk extern void pr_err(const char *, ...); 195 3628 ss150715 extern void pr_errdlpi(dlpi_handle_t, const char *, int); 196 0 stevel extern void check_retransmit(char *, ulong_t); 197 0 stevel extern char *nameof_prog(int); 198 0 stevel extern char *getproto(int); 199 0 stevel extern uint8_t print_ipv6_extensions(int, uint8_t **, uint8_t *, int *, int *); 200 0 stevel extern void protoprint(int, int, ulong_t, int, int, int, char *, int); 201 0 stevel extern char *getportname(int, in_port_t); 202 0 stevel 203 0 stevel extern void interpret_arp(int, struct arphdr *, int); 204 0 stevel extern void interpret_bparam(int, int, int, int, int, char *, int); 205 4904 rs200217 extern void interpret_dns(int, int, const uchar_t *, int, int); 206 0 stevel extern void interpret_mount(int, int, int, int, int, char *, int); 207 0 stevel extern void interpret_nfs(int, int, int, int, int, char *, int); 208 0 stevel extern void interpret_nfs3(int, int, int, int, int, char *, int); 209 0 stevel extern void interpret_nfs4(int, int, int, int, int, char *, int); 210 0 stevel extern void interpret_nfs4_cb(int, int, int, int, int, char *, int); 211 0 stevel extern void interpret_nfs_acl(int, int, int, int, int, char *, int); 212 0 stevel extern void interpret_nis(int, int, int, int, int, char *, int); 213 0 stevel extern void interpret_nisbind(int, int, int, int, int, char *, int); 214 0 stevel extern void interpret_nisp_cb(int, int, int, int, int, char *, int); 215 0 stevel extern void interpret_nisplus(int, int, int, int, int, char *, int); 216 0 stevel extern void interpret_nlm(int, int, int, int, int, char *, int); 217 0 stevel extern void interpret_pmap(int, int, int, int, int, char *, int); 218 0 stevel extern int interpret_reserved(int, int, in_port_t, in_port_t, char *, int); 219 0 stevel extern void interpret_rquota(int, int, int, int, int, char *, int); 220 0 stevel extern void interpret_rstat(int, int, int, int, int, char *, int); 221 0 stevel extern void interpret_solarnet_fw(int, int, int, int, int, char *, int); 222 0 stevel extern void interpret_ldap(int, char *, int, int, int); 223 0 stevel extern void interpret_icmp(int, struct icmp *, int, int); 224 0 stevel extern void interpret_icmpv6(int, icmp6_t *, int, int); 225 1676 jpk extern int interpret_ip(int, const struct ip *, int); 226 1676 jpk extern int interpret_ipv6(int, const ip6_t *, int); 227 0 stevel extern int interpret_ppp(int, uchar_t *, int); 228 0 stevel extern int interpret_pppoe(int, poep_t *, int); 229 1676 jpk struct tcphdr; 230 1676 jpk extern int interpret_tcp(int, struct tcphdr *, int, int); 231 1676 jpk struct udphdr; 232 1676 jpk extern int interpret_udp(int, struct udphdr *, int, int); 233 1676 jpk extern int interpret_esp(int, uint8_t *, int, int); 234 1676 jpk extern int interpret_ah(int, uint8_t *, int, int); 235 1676 jpk struct sctp_hdr; 236 1676 jpk extern void interpret_sctp(int, struct sctp_hdr *, int, int); 237 1676 jpk extern void interpret_mip_cntrlmsg(int, uchar_t *, int); 238 1676 jpk struct dhcp; 239 1676 jpk extern int interpret_dhcp(int, struct dhcp *, int); 240 3431 carlsonj extern int interpret_dhcpv6(int, const uint8_t *, int); 241 1676 jpk struct tftphdr; 242 1676 jpk extern int interpret_tftp(int, struct tftphdr *, int); 243 1676 jpk extern int interpret_http(int, char *, int); 244 1676 jpk struct ntpdata; 245 1676 jpk extern int interpret_ntp(int, struct ntpdata *, int); 246 1676 jpk extern void interpret_netbios_ns(int, uchar_t *, int); 247 1676 jpk extern void interpret_netbios_datagram(int, uchar_t *, int); 248 1676 jpk extern void interpret_netbios_ses(int, uchar_t *, int); 249 1676 jpk extern void interpret_slp(int, char *, int); 250 1676 jpk struct rip; 251 1676 jpk extern int interpret_rip(int, struct rip *, int); 252 1676 jpk struct rip6; 253 1676 jpk extern int interpret_rip6(int, struct rip6 *, int); 254 1676 jpk extern int interpret_socks_call(int, char *, int); 255 1676 jpk extern int interpret_socks_reply(int, char *, int); 256 10491 Rishi extern int interpret_trill(int, struct ether_header **, char *, int *); 257 10491 Rishi extern int interpret_isis(int, char *, int, boolean_t); 258 10491 Rishi extern int interpret_bpdu(int, char *, int); 259 0 stevel extern void init_ldap(void); 260 0 stevel extern boolean_t arp_for_ether(char *, struct ether_addr *); 261 0 stevel extern char *ether_ouiname(uint32_t); 262 1676 jpk extern char *tohex(char *p, int len); 263 0 stevel extern char *printether(struct ether_addr *); 264 0 stevel extern char *print_ethertype(int); 265 3431 carlsonj extern const char *arp_htype(int); 266 10616 Sebastien extern int valid_rpc(char *, int); 267 0 stevel 268 0 stevel /* 269 0 stevel * Describes characteristics of the Media Access Layer. 270 0 stevel * The mac_type is one of the supported DLPI media 271 0 stevel * types (see <sys/dlpi.h>). 272 0 stevel * The mtu_size is the size of the largest frame. 273 2760 dg199075 * network_type_offset is where the network type 274 2760 dg199075 * is located in the link layer header. 275 0 stevel * The header length is returned by a function to 276 0 stevel * allow for variable header size - for ethernet it's 277 0 stevel * just a constant 14 octets. 278 0 stevel * The interpreter is the function that "knows" how 279 0 stevel * to interpret the frame. 280 2760 dg199075 * try_kernel_filter tells snoop to first try a kernel 281 2760 dg199075 * filter (because the header size is fixed, or if it could 282 2760 dg199075 * be of variable size where the variable size is easy for a kernel 283 2760 dg199075 * filter to handle, for example, Ethernet and VLAN tags) 284 2760 dg199075 * and only use a user space filter if the filter expression 285 2760 dg199075 * cannot be expressed in kernel space. 286 0 stevel */ 287 10616 Sebastien typedef uint_t (interpreter_fn_t)(int, char *, int, int); 288 10616 Sebastien typedef uint_t (headerlen_fn_t)(char *, size_t); 289 0 stevel typedef struct interface { 290 8023 Phil uint_t mac_type; 291 8023 Phil uint_t mtu_size; 292 8023 Phil uint_t network_type_offset; 293 8023 Phil size_t network_type_len; 294 8023 Phil uint_t network_type_ip; 295 8023 Phil uint_t network_type_ipv6; 296 10616 Sebastien headerlen_fn_t *header_len; 297 10616 Sebastien interpreter_fn_t *interpreter; 298 8023 Phil boolean_t try_kernel_filter; 299 0 stevel } interface_t; 300 0 stevel 301 0 stevel extern interface_t INTERFACES[], *interface; 302 0 stevel extern char *dlc_header; 303 1676 jpk extern char *src_name, *dst_name; 304 1676 jpk extern char *prot_prefix; 305 1676 jpk extern char *prot_nest_prefix; 306 1676 jpk extern char *prot_title; 307 1676 jpk 308 1676 jpk /* Keep track of how many nested IP headers we have. */ 309 1676 jpk extern unsigned int encap_levels, total_encap_levels; 310 1676 jpk 311 1676 jpk extern int quitting; 312 8023 Phil extern boolean_t Iflg, Pflg, rflg; 313 1676 jpk 314 0 stevel /* 315 0 stevel * Global error recovery routine: used to reset snoop variables after 316 0 stevel * catastrophic failure. 317 0 stevel */ 318 0 stevel void snoop_recover(void); 319 0 stevel 320 0 stevel /* 321 0 stevel * Global alarm handler structure for managing multiple alarms within 322 0 stevel * snoop. 323 0 stevel */ 324 0 stevel typedef struct snoop_handler { 325 0 stevel struct snoop_handler *s_next; /* next alarm handler */ 326 0 stevel time_t s_time; /* time to fire */ 327 0 stevel void (*s_handler)(); /* alarm handler */ 328 0 stevel } snoop_handler_t; 329 0 stevel 330 0 stevel #define SNOOP_MAXRECOVER 20 /* maxium number of recoveries */ 331 0 stevel #define SNOOP_ALARM_GRAN 3 /* alarm() timeout multiplier */ 332 0 stevel 333 0 stevel /* 334 0 stevel * Global alarm handler management routine. 335 0 stevel */ 336 0 stevel extern int snoop_alarm(int s_sec, void (*s_handler)()); 337 0 stevel 338 3220 dg199075 /* 339 3220 dg199075 * The next two definitions do not take into account the length 340 3220 dg199075 * of the underlying link header. In order to use them, you must 341 3220 dg199075 * add link_header_len to them. The reason it is not done here is 342 3220 dg199075 * that later these macros are used to initialize a table. 343 3220 dg199075 */ 344 3220 dg199075 #define IPV4_TYPE_HEADER_OFFSET 9 345 3220 dg199075 #define IPV6_TYPE_HEADER_OFFSET 6 346 3220 dg199075 347 0 stevel #ifdef __cplusplus 348 0 stevel } 349 0 stevel #endif 350 0 stevel 351 0 stevel #endif /* _SNOOP_H */ 352
Indexes created Fri Nov 27 04:12:29 UTC 2009
Terms of Use |
Privacy |
Trademarks |
Copyright Policy |
Site Guidelines |
Help
Your use of this web site or any of its content or software indicates your agreement to be bound by these Terms of Use.
Copyright © 1995-2008 Sun Microsystems, Inc.