Home | History | Annotate | Line # | Download | only in fstat
fstat.c revision 1.56
      1 /*	$NetBSD: fstat.c,v 1.56 2002/10/23 22:37:11 jdolecek Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 1988, 1993
      5  *	The Regents of the University of California.  All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  * 3. All advertising materials mentioning features or use of this software
     16  *    must display the following acknowledgement:
     17  *	This product includes software developed by the University of
     18  *	California, Berkeley and its contributors.
     19  * 4. Neither the name of the University nor the names of its contributors
     20  *    may be used to endorse or promote products derived from this software
     21  *    without specific prior written permission.
     22  *
     23  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     33  * SUCH DAMAGE.
     34  */
     35 
     36 #include <sys/cdefs.h>
     37 #ifndef lint
     38 __COPYRIGHT("@(#) Copyright (c) 1988, 1993\n\
     39 	The Regents of the University of California.  All rights reserved.\n");
     40 #endif /* not lint */
     41 
     42 #ifndef lint
     43 #if 0
     44 static char sccsid[] = "@(#)fstat.c	8.3 (Berkeley) 5/2/95";
     45 #else
     46 __RCSID("$NetBSD: fstat.c,v 1.56 2002/10/23 22:37:11 jdolecek Exp $");
     47 #endif
     48 #endif /* not lint */
     49 
     50 #include <sys/param.h>
     51 #include <sys/time.h>
     52 #include <sys/proc.h>
     53 #include <sys/user.h>
     54 #include <sys/stat.h>
     55 #include <sys/vnode.h>
     56 #include <sys/socket.h>
     57 #include <sys/socketvar.h>
     58 #include <sys/domain.h>
     59 #include <sys/protosw.h>
     60 #include <sys/unpcb.h>
     61 #include <sys/sysctl.h>
     62 #include <sys/filedesc.h>
     63 #include <sys/pipe.h>
     64 #define	_KERNEL
     65 #include <sys/file.h>
     66 #include <ufs/ufs/inode.h>
     67 #undef _KERNEL
     68 #define _KERNEL
     69 #include <sys/mount.h>
     70 #undef _KERNEL
     71 #define NFS
     72 #include <nfs/nfsproto.h>
     73 #include <nfs/rpcv2.h>
     74 #include <nfs/nfs.h>
     75 #include <nfs/nfsnode.h>
     76 #undef NFS
     77 #include <msdosfs/denode.h>
     78 #include <msdosfs/bpb.h>
     79 #define	_KERNEL
     80 #include <msdosfs/msdosfsmount.h>
     81 #undef _KERNEL
     82 #define	_KERNEL
     83 #include <miscfs/genfs/layer.h>
     84 #undef _KERNEL
     85 
     86 #include <net/route.h>
     87 #include <netinet/in.h>
     88 #include <netinet/in_systm.h>
     89 #include <netinet/ip.h>
     90 #include <netinet/in_pcb.h>
     91 
     92 #ifdef INET6
     93 #include <netinet/ip6.h>
     94 #include <netinet6/ip6_var.h>
     95 #include <netinet6/in6_pcb.h>
     96 #endif
     97 
     98 #include <netdb.h>
     99 #include <arpa/inet.h>
    100 
    101 #include <ctype.h>
    102 #include <errno.h>
    103 #include <kvm.h>
    104 #include <limits.h>
    105 #include <nlist.h>
    106 #include <paths.h>
    107 #include <pwd.h>
    108 #include <stdio.h>
    109 #include <stdlib.h>
    110 #include <string.h>
    111 #include <unistd.h>
    112 #include <err.h>
    113 
    114 #include "fstat.h"
    115 
    116 #define	TEXT	-1
    117 #define	CDIR	-2
    118 #define	RDIR	-3
    119 #define	TRACE	-4
    120 
    121 typedef struct devs {
    122 	struct	devs *next;
    123 	long	fsid;
    124 	ino_t	ino;
    125 	char	*name;
    126 } DEVS;
    127 DEVS *devs;
    128 
    129 int 	fsflg,	/* show files on same filesystem as file(s) argument */
    130 	pflg,	/* show files open by a particular pid */
    131 	uflg;	/* show files open by a particular (effective) user */
    132 int 	checkfile; /* true if restricting to particular files or filesystems */
    133 int	nflg;	/* (numerical) display f.s. and rdev as dev_t */
    134 int	vflg;	/* display errors in locating kernel data objects etc... */
    135 
    136 struct file **ofiles;	/* buffer of pointers to file structures */
    137 int maxfiles;
    138 #define ALLOC_OFILES(d)	\
    139 	if ((d) > maxfiles) { \
    140 		free(ofiles); \
    141 		ofiles = malloc((d) * sizeof(struct file *)); \
    142 		if (ofiles == NULL) { \
    143 			err(1, "malloc(%u)", (d) *	\
    144 					(unsigned int)sizeof(struct file *)); \
    145 		} \
    146 		maxfiles = (d); \
    147 	}
    148 
    149 kvm_t *kd;
    150 
    151 void	dofiles __P((struct kinfo_proc *));
    152 int	ext2fs_filestat __P((struct vnode *, struct filestat *));
    153 int	getfname __P((char *));
    154 void	getinetproto __P((int));
    155 char   *getmnton __P((struct mount *));
    156 char   *layer_filestat __P((struct vnode *, struct filestat *));
    157 int	main __P((int, char **));
    158 int	msdosfs_filestat __P((struct vnode *, struct filestat *));
    159 int	nfs_filestat __P((struct vnode *, struct filestat *));
    160 #ifdef INET6
    161 static const char *inet6_addrstr __P((struct in6_addr *));
    162 #endif
    163 void	socktrans __P((struct socket *, int));
    164 void	kqueuetrans __P((void *, int));
    165 int	ufs_filestat __P((struct vnode *, struct filestat *));
    166 void	usage __P((void));
    167 char   *vfilestat __P((struct vnode *, struct filestat *));
    168 void	vtrans __P((struct vnode *, int, int));
    169 void	ftrans __P((struct file *, int));
    170 void	ptrans __P((struct file *, struct pipe *, int));
    171 
    172 int
    173 main(argc, argv)
    174 	int argc;
    175 	char **argv;
    176 {
    177 	struct passwd *passwd;
    178 	struct kinfo_proc *p, *plast;
    179 	int arg, ch, what;
    180 	char *memf, *nlistf;
    181 	char buf[_POSIX2_LINE_MAX];
    182 	int cnt;
    183 	gid_t egid = getegid();
    184 
    185 	(void)setegid(getgid());
    186 	arg = 0;
    187 	what = KERN_PROC_ALL;
    188 	nlistf = memf = NULL;
    189 	while ((ch = getopt(argc, argv, "fnp:u:vN:M:")) != -1)
    190 		switch((char)ch) {
    191 		case 'f':
    192 			fsflg = 1;
    193 			break;
    194 		case 'M':
    195 			memf = optarg;
    196 			break;
    197 		case 'N':
    198 			nlistf = optarg;
    199 			break;
    200 		case 'n':
    201 			nflg = 1;
    202 			break;
    203 		case 'p':
    204 			if (pflg++)
    205 				usage();
    206 			if (!isdigit(*optarg)) {
    207 				warnx("-p requires a process id");
    208 				usage();
    209 			}
    210 			what = KERN_PROC_PID;
    211 			arg = atoi(optarg);
    212 			break;
    213 		case 'u':
    214 			if (uflg++)
    215 				usage();
    216 			if (!(passwd = getpwnam(optarg))) {
    217 				errx(1, "%s: unknown uid", optarg);
    218 			}
    219 			what = KERN_PROC_UID;
    220 			arg = passwd->pw_uid;
    221 			break;
    222 		case 'v':
    223 			vflg = 1;
    224 			break;
    225 		case '?':
    226 		default:
    227 			usage();
    228 		}
    229 
    230 	if (*(argv += optind)) {
    231 		for (; *argv; ++argv) {
    232 			if (getfname(*argv))
    233 				checkfile = 1;
    234 		}
    235 		if (!checkfile)	/* file(s) specified, but none accessible */
    236 			exit(1);
    237 	}
    238 
    239 	ALLOC_OFILES(256);	/* reserve space for file pointers */
    240 
    241 	if (fsflg && !checkfile) {
    242 		/* -f with no files means use wd */
    243 		if (getfname(".") == 0)
    244 			exit(1);
    245 		checkfile = 1;
    246 	}
    247 
    248 	/*
    249 	 * Discard setgid privileges.  If not the running kernel, we toss
    250 	 * them away totally so that bad guys can't print interesting stuff
    251 	 * from kernel memory, otherwise switch back to kmem for the
    252 	 * duration of the kvm_openfiles() call.
    253 	 */
    254 	if (nlistf != NULL || memf != NULL)
    255 		(void)setgid(getgid());
    256 	else
    257 		(void)setegid(egid);
    258 
    259 	if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL)
    260 		errx(1, "%s", buf);
    261 
    262 	/* get rid of it now anyway */
    263 	if (nlistf == NULL && memf == NULL)
    264 		(void)setgid(getgid());
    265 
    266 	if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL) {
    267 		errx(1, "%s", kvm_geterr(kd));
    268 	}
    269 	if (nflg)
    270 		printf("%s",
    271 "USER     CMD          PID   FD  DEV     INUM  MODE  SZ|DV R/W");
    272 	else
    273 		printf("%s",
    274 "USER     CMD          PID   FD MOUNT       INUM MODE         SZ|DV R/W");
    275 	if (checkfile && fsflg == 0)
    276 		printf(" NAME\n");
    277 	else
    278 		putchar('\n');
    279 
    280 	for (plast = &p[cnt]; p < plast; ++p) {
    281 		if (p->kp_proc.p_stat == SZOMB)
    282 			continue;
    283 		dofiles(p);
    284 	}
    285 	exit(0);
    286 }
    287 
    288 const	char *Uname, *Comm;
    289 pid_t	Pid;
    290 
    291 #define PREFIX(i) printf("%-8.8s %-10s %5d", Uname, Comm, Pid); \
    292 	switch(i) { \
    293 	case TEXT: \
    294 		printf(" text"); \
    295 		break; \
    296 	case CDIR: \
    297 		printf("   wd"); \
    298 		break; \
    299 	case RDIR: \
    300 		printf(" root"); \
    301 		break; \
    302 	case TRACE: \
    303 		printf("   tr"); \
    304 		break; \
    305 	default: \
    306 		printf(" %4d", i); \
    307 		break; \
    308 	}
    309 
    310 /*
    311  * print open files attributed to this process
    312  */
    313 void
    314 dofiles(kp)
    315 	struct kinfo_proc *kp;
    316 {
    317 	int i;
    318 	struct filedesc0 filed0;
    319 #define	filed	filed0.fd_fd
    320 	struct cwdinfo cwdi;
    321 	struct proc *p = &kp->kp_proc;
    322 	struct eproc *ep = &kp->kp_eproc;
    323 
    324 	Uname = user_from_uid(ep->e_ucred.cr_uid, 0);
    325 	Pid = p->p_pid;
    326 	Comm = p->p_comm;
    327 
    328 	if (p->p_fd == NULL || p->p_cwdi == NULL)
    329 		return;
    330 	if (!KVM_READ(p->p_fd, &filed0, sizeof (filed0))) {
    331 		warnx("can't read filedesc at %p for pid %d", p->p_fd, Pid);
    332 		return;
    333 	}
    334 	if (!KVM_READ(p->p_cwdi, &cwdi, sizeof(cwdi))) {
    335 		warnx("can't read cwdinfo at %p for pid %d", p->p_cwdi, Pid);
    336 		return;
    337 	}
    338 	if (filed.fd_nfiles < 0 || filed.fd_lastfile >= filed.fd_nfiles ||
    339 	    filed.fd_freefile > filed.fd_lastfile + 1) {
    340 		dprintf("filedesc corrupted at %p for pid %d", p->p_fd, Pid);
    341 		return;
    342 	}
    343 	/*
    344 	 * root directory vnode, if one
    345 	 */
    346 	if (cwdi.cwdi_rdir)
    347 		vtrans(cwdi.cwdi_rdir, RDIR, FREAD);
    348 	/*
    349 	 * current working directory vnode
    350 	 */
    351 	vtrans(cwdi.cwdi_cdir, CDIR, FREAD);
    352 	/*
    353 	 * ktrace vnode, if one
    354 	 */
    355 	if (p->p_tracep)
    356 		ftrans(p->p_tracep, TRACE);
    357 	/*
    358 	 * open files
    359 	 */
    360 #define FPSIZE	(sizeof (struct file *))
    361 	ALLOC_OFILES(filed.fd_lastfile+1);
    362 	if (filed.fd_nfiles > NDFILE) {
    363 		if (!KVM_READ(filed.fd_ofiles, ofiles,
    364 		    (filed.fd_lastfile+1) * FPSIZE)) {
    365 			dprintf("can't read file structures at %p for pid %d",
    366 			    filed.fd_ofiles, Pid);
    367 			return;
    368 		}
    369 	} else
    370 		memmove(ofiles, filed0.fd_dfiles,
    371 		    (filed.fd_lastfile+1) * FPSIZE);
    372 	for (i = 0; i <= filed.fd_lastfile; i++) {
    373 		if (ofiles[i] == NULL)
    374 			continue;
    375 		ftrans(ofiles[i], i);
    376 	}
    377 }
    378 
    379 void
    380 ftrans (fp, i)
    381 	struct file *fp;
    382 	int i;
    383 {
    384 	struct file file;
    385 
    386 	if (!KVM_READ(fp, &file, sizeof (struct file))) {
    387 		dprintf("can't read file %d at %p for pid %d",
    388 		    i, fp, Pid);
    389 		return;
    390 	}
    391 	switch (file.f_type) {
    392 	case DTYPE_VNODE:
    393 		vtrans((struct vnode *)file.f_data, i, file.f_flag);
    394 		break;
    395 	case DTYPE_SOCKET:
    396 		if (checkfile == 0)
    397 			socktrans((struct socket *)file.f_data, i);
    398 		break;
    399 	case DTYPE_PIPE:
    400 		if (checkfile == 0)
    401 			ptrans(&file, (struct pipe *)file.f_data, i);
    402 		break;
    403 	case DTYPE_KQUEUE:
    404 		if (checkfile == 0)
    405 			kqueuetrans((void *)file.f_data, i);
    406 		break;
    407 	default:
    408 		dprintf("unknown file type %d for file %d of pid %d",
    409 		    file.f_type, i, Pid);
    410 		break;
    411 	}
    412 }
    413 
    414 char *
    415 vfilestat(vp, fsp)
    416 	struct vnode *vp;
    417 	struct filestat *fsp;
    418 {
    419 	char *badtype = NULL;
    420 
    421 	if (vp->v_type == VNON || vp->v_tag == VT_NON)
    422 		badtype = "none";
    423 	else if (vp->v_type == VBAD)
    424 		badtype = "bad";
    425 	else
    426 		switch (vp->v_tag) {
    427 		case VT_UFS:
    428 			if (!ufs_filestat(vp, fsp))
    429 				badtype = "error";
    430 			break;
    431 		case VT_MFS:
    432 			if (!ufs_filestat(vp, fsp))
    433 				badtype = "error";
    434 			break;
    435 		case VT_MSDOSFS:
    436 			if (!msdosfs_filestat(vp, fsp))
    437 				badtype = "error";
    438 			break;
    439 		case VT_NFS:
    440 			if (!nfs_filestat(vp, fsp))
    441 				badtype = "error";
    442 			break;
    443 		case VT_EXT2FS:
    444 			if (!ext2fs_filestat(vp, fsp))
    445 				badtype = "error";
    446 			break;
    447 		case VT_ISOFS:
    448 			if (!isofs_filestat(vp, fsp))
    449 				badtype = "error";
    450 			break;
    451 		case VT_NTFS:
    452 			if (!ntfs_filestat(vp, fsp))
    453 				badtype = "error";
    454 			break;
    455 		case VT_NULL:
    456 		case VT_OVERLAY:
    457 		case VT_UMAP:
    458 			badtype = layer_filestat(vp, fsp);
    459 			break;
    460 		default: {
    461 			static char unknown[10];
    462 			(void)snprintf(badtype = unknown, sizeof unknown,
    463 			    "?(%x)", vp->v_tag);
    464 			break;
    465 		}
    466 	}
    467 	return (badtype);
    468 }
    469 
    470 void
    471 vtrans(vp, i, flag)
    472 	struct vnode *vp;
    473 	int i;
    474 	int flag;
    475 {
    476 	struct vnode vn;
    477 	struct filestat fst;
    478 	char mode[15], rw[3];
    479 	char *badtype, *filename;
    480 
    481 	filename = NULL;
    482 	if (!KVM_READ(vp, &vn, sizeof(struct vnode))) {
    483 		dprintf("can't read vnode at %p for pid %d", vp, Pid);
    484 		return;
    485 	}
    486 	badtype = vfilestat(&vn, &fst);
    487 	if (checkfile) {
    488 		int fsmatch = 0;
    489 		DEVS *d;
    490 
    491 		if (badtype)
    492 			return;
    493 		for (d = devs; d != NULL; d = d->next)
    494 			if (d->fsid == fst.fsid) {
    495 				fsmatch = 1;
    496 				if (d->ino == fst.fileid) {
    497 					filename = d->name;
    498 					break;
    499 				}
    500 			}
    501 		if (fsmatch == 0 || (filename == NULL && fsflg == 0))
    502 			return;
    503 	}
    504 	PREFIX(i);
    505 	if (badtype) {
    506 		(void)printf(" -         -  %10s    -\n", badtype);
    507 		return;
    508 	}
    509 	if (nflg)
    510 		(void)printf(" %2d,%-2d", major(fst.fsid), minor(fst.fsid));
    511 	else
    512 		(void)printf(" %-8s", getmnton(vn.v_mount));
    513 	if (nflg)
    514 		(void)snprintf(mode, sizeof mode, "%o", fst.mode);
    515 	else
    516 		strmode(fst.mode, mode);
    517 	(void)printf(" %7ld %*s", (long)fst.fileid, nflg ? 5 : 10, mode);
    518 	switch (vn.v_type) {
    519 	case VBLK:
    520 	case VCHR: {
    521 		char *name;
    522 
    523 		if (nflg || ((name = devname(fst.rdev, vn.v_type == VCHR ?
    524 		    S_IFCHR : S_IFBLK)) == NULL))
    525 			printf("  %2d,%-2d", major(fst.rdev), minor(fst.rdev));
    526 		else
    527 			printf(" %6s", name);
    528 		break;
    529 	}
    530 	default:
    531 		printf(" %6lld", (long long)fst.size);
    532 	}
    533 	rw[0] = '\0';
    534 	if (flag & FREAD)
    535 		strcat(rw, "r");
    536 	if (flag & FWRITE)
    537 		strcat(rw, "w");
    538 	printf(" %-2s", rw);
    539 	if (filename && !fsflg)
    540 		printf("  %s", filename);
    541 	putchar('\n');
    542 }
    543 
    544 int
    545 ufs_filestat(vp, fsp)
    546 	struct vnode *vp;
    547 	struct filestat *fsp;
    548 {
    549 	struct inode inode;
    550 
    551 	if (!KVM_READ(VTOI(vp), &inode, sizeof (inode))) {
    552 		dprintf("can't read inode at %p for pid %d", VTOI(vp), Pid);
    553 		return 0;
    554 	}
    555 	fsp->fsid = inode.i_dev & 0xffff;
    556 	fsp->fileid = (long)inode.i_number;
    557 	fsp->mode = (mode_t)inode.i_ffs_mode;
    558 	fsp->size = inode.i_ffs_size;
    559 	fsp->rdev = inode.i_ffs_rdev;
    560 
    561 	return 1;
    562 }
    563 
    564 int
    565 ext2fs_filestat(vp, fsp)
    566 	struct vnode *vp;
    567 	struct filestat *fsp;
    568 {
    569 	struct inode inode;
    570 
    571 	if (!KVM_READ(VTOI(vp), &inode, sizeof (inode))) {
    572 		dprintf("can't read inode at %p for pid %d", VTOI(vp), Pid);
    573 		return 0;
    574 	}
    575 	fsp->fsid = inode.i_dev & 0xffff;
    576 	fsp->fileid = (long)inode.i_number;
    577 	fsp->mode = (mode_t)inode.i_e2fs_mode;
    578 	fsp->size = inode.i_e2fs_size;
    579 	fsp->rdev = 0;  /* XXX */
    580 	return 1;
    581 }
    582 
    583 int
    584 nfs_filestat(vp, fsp)
    585 	struct vnode *vp;
    586 	struct filestat *fsp;
    587 {
    588 	struct nfsnode nfsnode;
    589 	struct vattr va;
    590 
    591 	if (!KVM_READ(VTONFS(vp), &nfsnode, sizeof (nfsnode))) {
    592 		dprintf("can't read nfsnode at %p for pid %d", VTONFS(vp),
    593 		    Pid);
    594 		return 0;
    595 	}
    596 	if (!KVM_READ(nfsnode.n_vattr, &va, sizeof(va))) {
    597 		dprintf("can't read vnode attributes at %p for pid %d",
    598 		    nfsnode.n_vattr, Pid);
    599 		return 0;
    600 	}
    601 	fsp->fsid = va.va_fsid;
    602 	fsp->fileid = va.va_fileid;
    603 	fsp->size = nfsnode.n_size;
    604 	fsp->rdev = va.va_rdev;
    605 	fsp->mode = (mode_t)va.va_mode | getftype(vp->v_type);
    606 
    607 	return 1;
    608 }
    609 
    610 int
    611 msdosfs_filestat(vp, fsp)
    612 	struct vnode *vp;
    613 	struct filestat *fsp;
    614 {
    615 	struct denode de;
    616 	struct msdosfsmount mp;
    617 
    618 	if (!KVM_READ(VTONFS(vp), &de, sizeof(de))) {
    619 		dprintf("can't read denode at %p for pid %d", VTONFS(vp),
    620 		    Pid);
    621 		return 0;
    622 	}
    623 	if (!KVM_READ(de.de_pmp, &mp, sizeof(mp))) {
    624 		dprintf("can't read mount struct at %p for pid %d", de.de_pmp,
    625 		    Pid);
    626 		return 0;
    627 	}
    628 
    629 	fsp->fsid = de.de_dev & 0xffff;
    630 	fsp->fileid = 0; /* XXX see msdosfs_vptofh() for more info */
    631 	fsp->size = de.de_FileSize;
    632 	fsp->rdev = 0;	/* msdosfs doesn't support device files */
    633 	fsp->mode = (0777 & mp.pm_mask) | getftype(vp->v_type);
    634 	return 1;
    635 }
    636 
    637 char *
    638 layer_filestat(vp, fsp)
    639 	struct vnode *vp;
    640 	struct filestat *fsp;
    641 {
    642 	struct layer_node layer_node;
    643 	struct mount mount;
    644 	struct vnode vn;
    645 	char *badtype;
    646 
    647 	if (!KVM_READ(VTOLAYER(vp), &layer_node, sizeof(layer_node))) {
    648 		dprintf("can't read layer_node at %p for pid %d",
    649 		    VTOLAYER(vp), Pid);
    650 		return ("error");
    651 	}
    652 	if (!KVM_READ(vp->v_mount, &mount, sizeof(struct mount))) {
    653 		dprintf("can't read mount struct at %p for pid %d",
    654 		    vp->v_mount, Pid);
    655 		return ("error");
    656 	}
    657 	vp = layer_node.layer_lowervp;
    658 	if (!KVM_READ(vp, &vn, sizeof(struct vnode))) {
    659 		dprintf("can't read vnode at %p for pid %d", vp, Pid);
    660 		return ("error");
    661 	}
    662 	if ((badtype = vfilestat(&vn, fsp)) == NULL)
    663 		fsp->fsid = mount.mnt_stat.f_fsid.val[0];
    664 	return (badtype);
    665 }
    666 
    667 char *
    668 getmnton(m)
    669 	struct mount *m;
    670 {
    671 	static struct mount mount;
    672 	static struct mtab {
    673 		struct mtab *next;
    674 		struct mount *m;
    675 		char mntonname[MNAMELEN];
    676 	} *mhead = NULL;
    677 	struct mtab *mt;
    678 
    679 	for (mt = mhead; mt != NULL; mt = mt->next)
    680 		if (m == mt->m)
    681 			return (mt->mntonname);
    682 	if (!KVM_READ(m, &mount, sizeof(struct mount))) {
    683 		warnx("can't read mount table at %p", m);
    684 		return (NULL);
    685 	}
    686 	if ((mt = malloc(sizeof (struct mtab))) == NULL) {
    687 		err(1, "malloc(%u)", (unsigned int)sizeof(struct mtab));
    688 	}
    689 	mt->m = m;
    690 	memmove(&mt->mntonname[0], &mount.mnt_stat.f_mntonname[0], MNAMELEN);
    691 	mt->next = mhead;
    692 	mhead = mt;
    693 	return (mt->mntonname);
    694 }
    695 
    696 #ifdef INET6
    697 static const char *
    698 inet6_addrstr(p)
    699 	struct in6_addr *p;
    700 {
    701 	struct sockaddr_in6 sin6;
    702 	static char hbuf[NI_MAXHOST];
    703 #ifdef NI_WITHSCOPEID
    704 	const int niflags = NI_NUMERICHOST | NI_WITHSCOPEID;
    705 #else
    706 	const int niflags = NI_NUMERICHOST;
    707 #endif
    708 
    709 	memset(&sin6, 0, sizeof(sin6));
    710 	sin6.sin6_family = AF_INET6;
    711 	sin6.sin6_len = sizeof(struct sockaddr_in6);
    712 	sin6.sin6_addr = *p;
    713 	if (IN6_IS_ADDR_LINKLOCAL(p) &&
    714 	    *(u_int16_t *)&sin6.sin6_addr.s6_addr[2] != 0) {
    715 		sin6.sin6_scope_id =
    716 			ntohs(*(u_int16_t *)&sin6.sin6_addr.s6_addr[2]);
    717 		sin6.sin6_addr.s6_addr[2] = sin6.sin6_addr.s6_addr[3] = 0;
    718 	}
    719 
    720 	if (getnameinfo((struct sockaddr *)&sin6, sin6.sin6_len,
    721 			hbuf, sizeof(hbuf), NULL, 0, niflags))
    722 		return "invalid";
    723 
    724 	return hbuf;
    725 }
    726 #endif
    727 
    728 void
    729 socktrans(sock, i)
    730 	struct socket *sock;
    731 	int i;
    732 {
    733 	static char *stypename[] = {
    734 		"unused",	/* 0 */
    735 		"stream", 	/* 1 */
    736 		"dgram",	/* 2 */
    737 		"raw",		/* 3 */
    738 		"rdm",		/* 4 */
    739 		"seqpak"	/* 5 */
    740 	};
    741 #define	STYPEMAX 5
    742 	struct socket	so;
    743 	struct protosw	proto;
    744 	struct domain	dom;
    745 	struct inpcb	inpcb;
    746 #ifdef INET6
    747 	struct in6pcb	in6pcb;
    748 #endif
    749 	struct unpcb	unpcb;
    750 	int len;
    751 	char dname[32];
    752 #ifdef INET6
    753 	char xaddrbuf[NI_MAXHOST + 2];
    754 #endif
    755 
    756 	PREFIX(i);
    757 
    758 	/* fill in socket */
    759 	if (!KVM_READ(sock, &so, sizeof(struct socket))) {
    760 		dprintf("can't read sock at %p", sock);
    761 		goto bad;
    762 	}
    763 
    764 	/* fill in protosw entry */
    765 	if (!KVM_READ(so.so_proto, &proto, sizeof(struct protosw))) {
    766 		dprintf("can't read protosw at %p", so.so_proto);
    767 		goto bad;
    768 	}
    769 
    770 	/* fill in domain */
    771 	if (!KVM_READ(proto.pr_domain, &dom, sizeof(struct domain))) {
    772 		dprintf("can't read domain at %p", proto.pr_domain);
    773 		goto bad;
    774 	}
    775 
    776 	if ((len = kvm_read(kd, (u_long)dom.dom_name, dname,
    777 	    sizeof(dname) - 1)) != sizeof(dname) -1) {
    778 		dprintf("can't read domain name at %p", dom.dom_name);
    779 		dname[0] = '\0';
    780 	}
    781 	else
    782 		dname[len] = '\0';
    783 
    784 	if ((u_short)so.so_type > STYPEMAX)
    785 		printf("* %s ?%d", dname, so.so_type);
    786 	else
    787 		printf("* %s %s", dname, stypename[so.so_type]);
    788 
    789 	/*
    790 	 * protocol specific formatting
    791 	 *
    792 	 * Try to find interesting things to print.  For TCP, the interesting
    793 	 * thing is the address of the tcpcb, for UDP and others, just the
    794 	 * inpcb (socket pcb).  For UNIX domain, its the address of the socket
    795 	 * pcb and the address of the connected pcb (if connected).  Otherwise
    796 	 * just print the protocol number and address of the socket itself.
    797 	 * The idea is not to duplicate netstat, but to make available enough
    798 	 * information for further analysis.
    799 	 */
    800 	switch(dom.dom_family) {
    801 	case AF_INET:
    802 		getinetproto(proto.pr_protocol);
    803 		if (proto.pr_protocol == IPPROTO_TCP) {
    804 			if (so.so_pcb == NULL)
    805 				break;
    806 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&inpcb,
    807 			    sizeof(struct inpcb)) != sizeof(struct inpcb)) {
    808 				dprintf("can't read inpcb at %p", so.so_pcb);
    809 				goto bad;
    810 			}
    811 			printf(" %lx", (long)inpcb.inp_ppcb);
    812 			printf(" %s:%d",
    813 			    inpcb.inp_laddr.s_addr == INADDR_ANY ? "*" :
    814 			    inet_ntoa(inpcb.inp_laddr), ntohs(inpcb.inp_lport));
    815 			if (inpcb.inp_fport) {
    816 				printf(" <-> %s:%d",
    817 				    inpcb.inp_faddr.s_addr == INADDR_ANY ? "*" :
    818 				    inet_ntoa(inpcb.inp_faddr),
    819 				    ntohs(inpcb.inp_fport));
    820 			}
    821 		} else if (proto.pr_protocol == IPPROTO_UDP) {
    822 			if (so.so_pcb == NULL)
    823 				break;
    824 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&inpcb,
    825 			    sizeof(struct inpcb)) != sizeof(struct inpcb)) {
    826 				dprintf("can't read inpcb at %p", so.so_pcb);
    827 				goto bad;
    828 			}
    829 			printf(" %lx", (long)so.so_pcb);
    830 			printf(" %s:%d",
    831 			    inpcb.inp_laddr.s_addr == INADDR_ANY ? "*" :
    832 			    inet_ntoa(inpcb.inp_laddr), ntohs(inpcb.inp_lport));
    833 			if (inpcb.inp_fport)
    834 				printf(" <-> %s:%d",
    835 				    inpcb.inp_faddr.s_addr == INADDR_ANY ? "*" :
    836 				    inet_ntoa(inpcb.inp_faddr),
    837 				    ntohs(inpcb.inp_fport));
    838 		} else if (so.so_pcb)
    839 			printf(" %lx", (long)so.so_pcb);
    840 		break;
    841 #ifdef INET6
    842 	case AF_INET6:
    843 		getinetproto(proto.pr_protocol);
    844 		if (proto.pr_protocol == IPPROTO_TCP) {
    845 			if (so.so_pcb == NULL)
    846 				break;
    847 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&in6pcb,
    848 			    sizeof(struct in6pcb)) != sizeof(struct in6pcb)) {
    849 				dprintf("can't read in6pcb at %p", so.so_pcb);
    850 				goto bad;
    851 			}
    852 			printf(" %lx", (long)in6pcb.in6p_ppcb);
    853 			sprintf(xaddrbuf, "[%s]",
    854 			    inet6_addrstr(&in6pcb.in6p_laddr));
    855 			printf(" %s:%d",
    856 			    IN6_IS_ADDR_UNSPECIFIED(&in6pcb.in6p_laddr) ? "*" :
    857 			    xaddrbuf,
    858 			    ntohs(in6pcb.in6p_lport));
    859 			if (in6pcb.in6p_fport) {
    860 				sprintf(xaddrbuf, "[%s]",
    861 				    inet6_addrstr(&in6pcb.in6p_faddr));
    862 				printf(" <-> %s:%d",
    863 			            IN6_IS_ADDR_UNSPECIFIED(&in6pcb.in6p_faddr) ? "*" :
    864 				    xaddrbuf,
    865 				    ntohs(in6pcb.in6p_fport));
    866 			}
    867 		} else if (proto.pr_protocol == IPPROTO_UDP) {
    868 			if (so.so_pcb == NULL)
    869 				break;
    870 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&in6pcb,
    871 			    sizeof(struct in6pcb)) != sizeof(struct in6pcb)) {
    872 				dprintf("can't read inpcb at %p", so.so_pcb);
    873 				goto bad;
    874 			}
    875 			printf(" %lx", (long)so.so_pcb);
    876 			sprintf(xaddrbuf, "[%s]",
    877 			    inet6_addrstr(&in6pcb.in6p_laddr));
    878 			printf(" %s:%d",
    879 		            IN6_IS_ADDR_UNSPECIFIED(&in6pcb.in6p_laddr) ? "*" :
    880 			    xaddrbuf,
    881 			    ntohs(in6pcb.in6p_lport));
    882 			if (in6pcb.in6p_fport) {
    883 				sprintf(xaddrbuf, "[%s]",
    884 				    inet6_addrstr(&in6pcb.in6p_faddr));
    885 				printf(" <-> %s:%d",
    886 			            IN6_IS_ADDR_UNSPECIFIED(&in6pcb.in6p_faddr) ? "*" :
    887 				    xaddrbuf,
    888 				    ntohs(in6pcb.in6p_fport));
    889 			}
    890 		} else if (so.so_pcb)
    891 			printf(" %lx", (long)so.so_pcb);
    892 		break;
    893 #endif
    894 	case AF_LOCAL:
    895 		/* print address of pcb and connected pcb */
    896 		if (so.so_pcb) {
    897 			printf(" %lx", (long)so.so_pcb);
    898 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb,
    899 			    sizeof(struct unpcb)) != sizeof(struct unpcb)){
    900 				dprintf("can't read unpcb at %p", so.so_pcb);
    901 				goto bad;
    902 			}
    903 			if (unpcb.unp_conn) {
    904 				char shoconn[4], *cp;
    905 
    906 				cp = shoconn;
    907 				if (!(so.so_state & SS_CANTRCVMORE))
    908 					*cp++ = '<';
    909 				*cp++ = '-';
    910 				if (!(so.so_state & SS_CANTSENDMORE))
    911 					*cp++ = '>';
    912 				*cp = '\0';
    913 				printf(" %s %lx", shoconn,
    914 				    (long)unpcb.unp_conn);
    915 			}
    916 		}
    917 		break;
    918 	default:
    919 		/* print protocol number and socket address */
    920 		printf(" %d %lx", proto.pr_protocol, (long)sock);
    921 	}
    922 	printf("\n");
    923 	return;
    924 bad:
    925 	printf("* error\n");
    926 }
    927 
    928 void
    929 ptrans(fp, cpipe, i)
    930 	struct file *fp;
    931 	struct pipe *cpipe;
    932 	int i;
    933 {
    934 	struct pipe cp;
    935 
    936 	PREFIX(i);
    937 
    938 	/* fill in pipe */
    939 	if (!KVM_READ(cpipe, &cp, sizeof(struct pipe))) {
    940 		dprintf("can't read pipe at %p", cpipe);
    941 		goto bad;
    942 	}
    943 
    944 	/* pipe descriptor is either read or write, never both */
    945 	printf("* pipe %p %s %p %s%s%s", cpipe,
    946 		(fp->f_flag & FWRITE) ? "->" : "<-",
    947 		cp.pipe_peer,
    948 		(fp->f_flag & FWRITE) ? "w" : "r",
    949 		(fp->f_flag & FNONBLOCK) ? "n" : "",
    950 		(cp.pipe_state & PIPE_ASYNC) ? "a" : "");
    951 	printf("\n");
    952 	return;
    953 bad:
    954 	printf("* error\n");
    955 }
    956 
    957 void
    958 kqueuetrans(kq, i)
    959 	void *kq;
    960 	int i;
    961 {
    962 
    963 	PREFIX(i);
    964 	printf("* kqueue %lx", (long)kq);
    965 	printf("\n");
    966 }
    967 
    968 /*
    969  * getinetproto --
    970  *	print name of protocol number
    971  */
    972 void
    973 getinetproto(number)
    974 	int number;
    975 {
    976 	char *cp;
    977 
    978 	switch (number) {
    979 	case IPPROTO_IP:
    980 		cp = "ip"; break;
    981 	case IPPROTO_ICMP:
    982 		cp ="icmp"; break;
    983 	case IPPROTO_GGP:
    984 		cp ="ggp"; break;
    985 	case IPPROTO_TCP:
    986 		cp ="tcp"; break;
    987 	case IPPROTO_EGP:
    988 		cp ="egp"; break;
    989 	case IPPROTO_PUP:
    990 		cp ="pup"; break;
    991 	case IPPROTO_UDP:
    992 		cp ="udp"; break;
    993 	case IPPROTO_IDP:
    994 		cp ="idp"; break;
    995 	case IPPROTO_RAW:
    996 		cp ="raw"; break;
    997 	case IPPROTO_ICMPV6:
    998 		cp ="icmp6"; break;
    999 	default:
   1000 		printf(" %d", number);
   1001 		return;
   1002 	}
   1003 	printf(" %s", cp);
   1004 }
   1005 
   1006 int
   1007 getfname(filename)
   1008 	char *filename;
   1009 {
   1010 	struct stat statbuf;
   1011 	DEVS *cur;
   1012 
   1013 	if (stat(filename, &statbuf)) {
   1014 		warn("stat(%s)", filename);
   1015 		return(0);
   1016 	}
   1017 	if ((cur = malloc(sizeof(DEVS))) == NULL) {
   1018 		err(1, "malloc(%u)", (unsigned int)sizeof(DEVS));
   1019 	}
   1020 	cur->next = devs;
   1021 	devs = cur;
   1022 
   1023 	cur->ino = statbuf.st_ino;
   1024 	cur->fsid = statbuf.st_dev & 0xffff;
   1025 	cur->name = filename;
   1026 	return(1);
   1027 }
   1028 
   1029 mode_t
   1030 getftype(v_type)
   1031 	enum vtype v_type;
   1032 {
   1033 	mode_t ftype;
   1034 
   1035 	switch (v_type) {
   1036 	case VREG:
   1037 		ftype = S_IFREG;
   1038 		break;
   1039 	case VDIR:
   1040 		ftype = S_IFDIR;
   1041 		break;
   1042 	case VBLK:
   1043 		ftype = S_IFBLK;
   1044 		break;
   1045 	case VCHR:
   1046 		ftype = S_IFCHR;
   1047 		break;
   1048 	case VLNK:
   1049 		ftype = S_IFLNK;
   1050 		break;
   1051 	case VSOCK:
   1052 		ftype = S_IFSOCK;
   1053 		break;
   1054 	case VFIFO:
   1055 		ftype = S_IFIFO;
   1056 		break;
   1057 	default:
   1058 		ftype = 0;
   1059 		break;
   1060 	};
   1061 
   1062 	return ftype;
   1063 }
   1064 
   1065 void
   1066 usage()
   1067 {
   1068 	errx(1,
   1069  "usage: fstat [-fnv] [-p pid] [-u user] [-N system] [-M core] [file ...]\n");
   1070 }
   1071