sockstat.c revision 1.17 1 /* $NetBSD: sockstat.c,v 1.17 2011/05/29 04:45:08 manu Exp $ */
2
3 /*
4 * Copyright (c) 2005 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Andrew Brown.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 #include <sys/cdefs.h>
33 #ifndef lint
34 __RCSID("$NetBSD: sockstat.c,v 1.17 2011/05/29 04:45:08 manu Exp $");
35 #endif
36
37 #include <sys/types.h>
38 #include <sys/param.h>
39 #include <sys/sysctl.h>
40 #include <sys/socket.h>
41 #include <sys/socketvar.h>
42 #include <sys/un.h>
43 #include <netinet/in.h>
44 #include <net/route.h>
45 #include <netinet/in_systm.h>
46 #include <netinet/ip.h>
47 #include <netinet/in_pcb.h>
48 #include <netinet/in_pcb_hdr.h>
49 #include <netinet/tcp_fsm.h>
50
51 #define _KERNEL
52 /* want DTYPE_* defines */
53 #include <sys/file.h>
54 #undef _KERNEL
55
56 #include <arpa/inet.h>
57
58 #include <bitstring.h>
59 #include <ctype.h>
60 #include <err.h>
61 #include <errno.h>
62 #include <netdb.h>
63 #include <pwd.h>
64 #include <stdio.h>
65 #include <strings.h>
66 #include <stdlib.h>
67 #include <unistd.h>
68 #include <util.h>
69
70 #include "prog_ops.h"
71
72 #define satosun(sa) ((struct sockaddr_un *)(sa))
73 #define satosin(sa) ((struct sockaddr_in *)(sa))
74 #ifdef INET6
75 #define satosin6(sa) ((struct sockaddr_in6 *)(sa))
76 #endif
77
78 void parse_ports(const char *);
79 int get_num(const char *, const char **, const char **);
80 void get_sockets(const char *);
81 void get_files(void);
82 int sort_files(const void *, const void *);
83 void sysctl_sucker(int *, u_int, void **, size_t *);
84 void socket_add_hash(struct kinfo_pcb *, int);
85 int isconnected(struct kinfo_pcb *);
86 int islistening(struct kinfo_pcb *);
87 struct kinfo_pcb *pick_socket(struct kinfo_file *);
88 int get_proc(struct kinfo_proc2 *, int);
89 int print_socket(struct kinfo_file *, struct kinfo_pcb *,
90 struct kinfo_proc2 *);
91 void print_addr(int, int, int, struct sockaddr *);
92
93 LIST_HEAD(socklist, sockitem);
94 #define HASHSIZE 1009
95 struct socklist sockhash[HASHSIZE];
96 struct sockitem {
97 LIST_ENTRY(sockitem) s_list;
98 struct kinfo_pcb *s_sock;
99 };
100
101 struct kinfo_file *flist;
102 size_t flistc;
103
104 int pf_list, only, nonames;
105 bitstr_t *portmap;
106
107 #define PF_LIST_INET 1
108 #ifdef INET6
109 #define PF_LIST_INET6 2
110 #endif
111 #define PF_LIST_LOCAL 4
112 #define ONLY_CONNECTED 1
113 #define ONLY_LISTEN 2
114
115 int
116 main(int argc, char *argv[])
117 {
118 struct kinfo_pcb *kp;
119 int ch;
120 size_t i;
121 struct kinfo_proc2 p;
122
123 pf_list = only = 0;
124
125 #ifdef INET6
126 while ((ch = getopt(argc, argv, "46cf:lnp:u")) != - 1) {
127 #else
128 while ((ch = getopt(argc, argv, "4cf:lnp:u")) != - 1) {
129 #endif
130 switch (ch) {
131 case '4':
132 pf_list |= PF_LIST_INET;
133 break;
134 #ifdef INET6
135 case '6':
136 pf_list |= PF_LIST_INET6;
137 break;
138 #endif
139 case 'c':
140 only |= ONLY_CONNECTED;
141 break;
142 case 'f':
143 if (strcasecmp(optarg, "inet") == 0)
144 pf_list |= PF_LIST_INET;
145 #ifdef INET6
146 else if (strcasecmp(optarg, "inet6") == 0)
147 pf_list |= PF_LIST_INET6;
148 #endif
149 else if (strcasecmp(optarg, "local") == 0)
150 pf_list |= PF_LIST_LOCAL;
151 else if (strcasecmp(optarg, "unix") == 0)
152 pf_list |= PF_LIST_LOCAL;
153 else
154 errx(1, "%s: unsupported protocol family",
155 optarg);
156 break;
157 case 'l':
158 only |= ONLY_LISTEN;
159 break;
160 case 'n':
161 nonames++;
162 break;
163 case 'p':
164 parse_ports(optarg);
165 break;
166 case 'u':
167 pf_list |= PF_LIST_LOCAL;
168 break;
169 default:
170 /* usage(); */
171 exit(1);
172 }
173 }
174 argc -= optind;
175 argv += optind;
176
177 if (prog_init && prog_init() == -1)
178 err(1, "init");
179
180 if ((portmap != NULL) && (pf_list == 0)) {
181 pf_list = PF_LIST_INET;
182 #ifdef INET6
183 pf_list |= PF_LIST_INET6;
184 #endif
185 }
186 if (pf_list == 0) {
187 pf_list = PF_LIST_INET | PF_LIST_LOCAL;
188 #ifdef INET6
189 pf_list |= PF_LIST_INET6;
190 #endif
191 }
192 if ((portmap != NULL) && (pf_list & PF_LIST_LOCAL))
193 errx(1, "local domain sockets do not have ports");
194
195 if (pf_list & PF_LIST_INET) {
196 get_sockets("net.inet.tcp.pcblist");
197 get_sockets("net.inet.udp.pcblist");
198 if (portmap == NULL)
199 get_sockets("net.inet.raw.pcblist");
200 }
201
202 #ifdef INET6
203 if (pf_list & PF_LIST_INET6) {
204 get_sockets("net.inet6.tcp6.pcblist");
205 get_sockets("net.inet6.udp6.pcblist");
206 if (portmap == NULL)
207 get_sockets("net.inet6.raw6.pcblist");
208 }
209 #endif
210
211 if (pf_list & PF_LIST_LOCAL) {
212 get_sockets("net.local.stream.pcblist");
213 get_sockets("net.local.seqpacket.pcblist");
214 get_sockets("net.local.dgram.pcblist");
215 }
216
217 get_files();
218
219 p.p_pid = 0;
220 for (i = 0; i < flistc; i++)
221 if ((kp = pick_socket(&flist[i])) != NULL &&
222 get_proc(&p, flist[i].ki_pid) == 0)
223 print_socket(&flist[i], kp, &p);
224
225 return (0);
226 }
227
228 void
229 parse_ports(const char *l)
230 {
231 struct servent *srv;
232 const char *s, *e;
233 long i, j;
234
235 if (portmap == NULL) {
236 portmap = bit_alloc(65536);
237 if (portmap == NULL)
238 err(1, "malloc");
239 }
240
241 if ((srv = getservbyname(l, NULL)) != NULL) {
242 bit_set(portmap, ntohs(srv->s_port));
243 return;
244 }
245
246 s = e = l;
247 while (*s != '\0') {
248 i = get_num(l, &s, &e);
249 switch (*e) {
250 case ',':
251 e++;
252 case '\0':
253 bit_set(portmap, i);
254 s = e;
255 continue;
256 case '-':
257 s = ++e;
258 j = get_num(l, &s, &e);
259 for (; i <= j; i++)
260 bit_set(portmap, i);
261 break;
262 default:
263 errno = EINVAL;
264 err(1, "%s", l);
265 }
266 }
267 }
268
269 int
270 get_num(const char *l, const char **s, const char **e)
271 {
272 long x;
273 char *t;
274
275 while (isdigit((u_int)**e))
276 (*e)++;
277 if (*s != *e) {
278 errno = 0;
279 x = strtol(*s, &t, 0);
280 if (errno == 0 && x >= 0 && x <= 65535 && t == *e)
281 return (x);
282 }
283
284 errno = EINVAL;
285 err(1, "%s", l);
286 }
287
288 void
289 get_sockets(const char *mib)
290 {
291 void *v;
292 size_t sz;
293 int rc, n, name[CTL_MAXNAME];
294 u_int namelen;
295
296 sz = CTL_MAXNAME;
297 rc = sysctlnametomib(mib, &name[0], &sz);
298 if (rc == -1) {
299 if (errno == ENOENT)
300 return;
301 err(1, "sysctlnametomib: %s", mib);
302 }
303 namelen = sz;
304
305 name[namelen++] = PCB_ALL;
306 name[namelen++] = 0; /* XXX all pids */
307 name[namelen++] = sizeof(struct kinfo_pcb);
308 name[namelen++] = INT_MAX; /* all of them */
309
310 sysctl_sucker(&name[0], namelen, &v, &sz);
311 n = sz / sizeof(struct kinfo_pcb);
312 socket_add_hash(v, n);
313 }
314
315 void
316 get_files(void)
317 {
318 void *v;
319 size_t sz;
320 int rc, name[CTL_MAXNAME];
321 u_int namelen;
322
323 sz = CTL_MAXNAME;
324 rc = sysctlnametomib("kern.file2", &name[0], &sz);
325 if (rc == -1)
326 err(1, "sysctlnametomib");
327 namelen = sz;
328
329 name[namelen++] = KERN_FILE_BYPID;
330 name[namelen++] = 0; /* XXX all pids */
331 name[namelen++] = sizeof(struct kinfo_file);
332 name[namelen++] = INT_MAX; /* all of them */
333
334 sysctl_sucker(&name[0], namelen, &v, &sz);
335 flist = v;
336 flistc = sz / sizeof(struct kinfo_file);
337
338 qsort(flist, flistc, sizeof(*flist), sort_files);
339 }
340
341 int
342 sort_files(const void *a, const void *b)
343 {
344 const struct kinfo_file *ka = a, *kb = b;
345
346 if (ka->ki_pid == kb->ki_pid)
347 return (ka->ki_fd - kb->ki_fd);
348
349 return (ka->ki_pid - kb->ki_pid);
350 }
351
352 void
353 sysctl_sucker(int *name, u_int namelen, void **vp, size_t *szp)
354 {
355 int rc;
356 void *v;
357 size_t sz;
358
359 /* printf("name %p, namelen %u\n", name, namelen); */
360
361 v = NULL;
362 sz = 0;
363 do {
364 rc = prog_sysctl(&name[0], namelen, v, &sz, NULL, 0);
365 if (rc == -1 && errno != ENOMEM)
366 err(1, "sysctl");
367 if (rc == -1 && v != NULL) {
368 free(v);
369 v = NULL;
370 }
371 if (v == NULL) {
372 v = malloc(sz);
373 rc = -1;
374 }
375 if (v == NULL)
376 err(1, "malloc");
377 } while (rc == -1);
378
379 *vp = v;
380 *szp = sz;
381 /* printf("got %zu at %p\n", sz, v); */
382 }
383
384 void
385 socket_add_hash(struct kinfo_pcb *kp, int n)
386 {
387 struct sockitem *si;
388 int hash, i;
389
390 if (n == 0)
391 return;
392
393 si = malloc(sizeof(*si) * n);
394 if (si== NULL)
395 err(1, "malloc");
396
397 for (i = 0; i < n; i++) {
398 si[i].s_sock = &kp[i];
399 hash = (int)(kp[i].ki_sockaddr % HASHSIZE);
400 LIST_INSERT_HEAD(&sockhash[hash], &si[i], s_list);
401 }
402 }
403
404 int
405 isconnected(struct kinfo_pcb *kp)
406 {
407
408 if ((kp->ki_sostate & SS_ISCONNECTED) ||
409 (kp->ki_prstate >= INP_CONNECTED) ||
410 (kp->ki_tstate > TCPS_LISTEN) ||
411 (kp->ki_conn != 0))
412 return (1);
413
414 return (0);
415 }
416
417 int
418 islistening(struct kinfo_pcb *kp)
419 {
420
421 if (isconnected(kp))
422 return (0);
423
424 if (kp->ki_tstate == TCPS_LISTEN)
425 return (1);
426
427 switch (kp->ki_family) {
428 case PF_INET:
429 if (kp->ki_type == SOCK_RAW ||
430 (kp->ki_type == SOCK_DGRAM &&
431 ntohs(satosin(&kp->ki_src)->sin_port) != 0))
432 return (1);
433 break;
434 #ifdef INET6
435 case PF_INET6:
436 if (kp->ki_type == SOCK_RAW ||
437 (kp->ki_type == SOCK_DGRAM &&
438 ntohs(satosin6(&kp->ki_src)->sin6_port) != 0))
439 return (1);
440 break;
441 #endif
442 case PF_LOCAL:
443 if (satosun(&kp->ki_src)->sun_path[0] != '\0')
444 return (1);
445 break;
446 default:
447 break;
448 }
449
450 return (0);
451 }
452
453 struct kinfo_pcb *
454 pick_socket(struct kinfo_file *f)
455 {
456 struct sockitem *si;
457 struct kinfo_pcb *kp;
458 int hash;
459
460 if (f->ki_ftype != DTYPE_SOCKET)
461 return (NULL);
462
463 hash = (int)(f->ki_fdata % HASHSIZE);
464 LIST_FOREACH(si, &sockhash[hash], s_list) {
465 if (si->s_sock->ki_sockaddr == f->ki_fdata)
466 break;
467 }
468 if (si == NULL)
469 return (NULL);
470
471 kp = si->s_sock;
472
473 if (only) {
474 if (isconnected(kp)) {
475 /*
476 * connected but you didn't say you wanted
477 * connected sockets
478 */
479 if (!(only & ONLY_CONNECTED))
480 return (NULL);
481 }
482 else if (islistening(kp)) {
483 /*
484 * listening but you didn't ask for listening
485 * sockets
486 */
487 if (!(only & ONLY_LISTEN))
488 return (NULL);
489 }
490 else
491 /*
492 * neither connected nor listening, so you
493 * don't get it
494 */
495 return (NULL);
496 }
497
498 if (portmap) {
499 switch (kp->ki_family) {
500 case AF_INET:
501 if (!bit_test(portmap,
502 ntohs(satosin(&kp->ki_src)->sin_port)) &&
503 !bit_test(portmap,
504 ntohs(satosin(&kp->ki_dst)->sin_port)))
505 return (NULL);
506 break;
507 #ifdef INET6
508 case AF_INET6:
509 if (!bit_test(portmap,
510 ntohs(satosin6(&kp->ki_src)->sin6_port)) &&
511 !bit_test(portmap,
512 ntohs(satosin6(&kp->ki_dst)->sin6_port)))
513 return (NULL);
514 break;
515 #endif
516 default:
517 return (NULL);
518 }
519 }
520
521 return (kp);
522 }
523
524 int
525 get_proc(struct kinfo_proc2 *p, int pid)
526 {
527 int name[6];
528 u_int namelen;
529 size_t sz;
530
531 if (p->p_pid == pid)
532 return (0);
533
534 sz = sizeof(*p);
535 namelen = 0;
536 name[namelen++] = CTL_KERN;
537 name[namelen++] = KERN_PROC2;
538 name[namelen++] = KERN_PROC_PID;
539 name[namelen++] = pid;
540 name[namelen++] = sz;
541 name[namelen++] = 1;
542
543 return (prog_sysctl(&name[0], namelen, p, &sz, NULL, 0));
544 }
545
546 int
547 print_socket(struct kinfo_file *kf, struct kinfo_pcb *kp, struct kinfo_proc2 *p)
548 {
549 static int first = 1;
550 struct passwd *pw;
551 const char *t;
552 char proto[22];
553
554 if (first) {
555 printf("%-8s " "%-10s " "%-5s " "%-2s " "%-6s "
556 "%-21s " "%s\n",
557 "USER", "COMMAND", "PID", "FD", "PROTO",
558 "LOCAL ADDRESS", "FOREIGN ADDRESS");
559 first = 0;
560 }
561
562 if ((pw = getpwuid(p->p_uid)) != NULL)
563 printf("%-8s ", pw->pw_name);
564 else
565 printf("%-8d ", (int)p->p_uid);
566
567 printf("%-10.10s ", p->p_comm);
568 printf("%-5d ", (int)kf->ki_pid);
569 printf("%2d ", (int)kf->ki_fd);
570
571 snprintf(proto, sizeof(proto), "%d/%d", kp->ki_family, kp->ki_protocol);
572
573 switch (kp->ki_family) {
574 case PF_INET:
575 switch (kp->ki_protocol) {
576 case IPPROTO_TCP: t = "tcp"; break;
577 case IPPROTO_UDP: t = "udp"; break;
578 case IPPROTO_RAW: t = "raw"; break;
579 default: t = proto; break;
580 }
581 break;
582 #ifdef INET6
583 case PF_INET6:
584 switch (kp->ki_protocol) {
585 case IPPROTO_TCP: t = "tcp6"; break;
586 case IPPROTO_UDP: t = "udp6"; break;
587 case IPPROTO_RAW: t = "raw6"; break;
588 default: t = proto; break;
589 }
590 break;
591 #endif
592 case PF_LOCAL:
593 switch (kp->ki_type) {
594 case SOCK_STREAM: t = "stream"; break;
595 case SOCK_DGRAM: t = "dgram"; break;
596 case SOCK_RAW: t = "raw"; break;
597 case SOCK_RDM: t = "rdm"; break;
598 case SOCK_SEQPACKET: t = "seq"; break;
599 default: t = proto; break;
600 }
601 break;
602 default:
603 snprintf(proto, sizeof(proto), "%d/%d/%d",
604 kp->ki_family, kp->ki_type, kp->ki_protocol);
605 t = proto;
606 break;
607 }
608
609 printf("%-6s ", t);
610
611 /*
612 if (kp->ki_family == PF_LOCAL) {
613 if (kp->ki_src.sa_len > 2) {
614 print_addr(0, kp->ki_type, kp->ki_pflags, &kp->ki_src);
615 if (kp->ki_dst.sa_family == PF_LOCAL)
616 printf(" ");
617 }
618 if (kp->ki_dst.sa_family == PF_LOCAL)
619 printf("-> ");
620 }
621 else */{
622 print_addr(21, kp->ki_type, kp->ki_pflags, &kp->ki_src);
623 printf(" ");
624 }
625
626 if (isconnected(kp))
627 print_addr(0, kp->ki_type, kp->ki_pflags, &kp->ki_dst);
628 else if (kp->ki_family == PF_INET
629 #ifdef INET6
630 || kp->ki_family == PF_INET6
631 #endif
632 )
633 printf("%-*s", 0, "*.*");
634 /* else if (kp->ki_src.sa_len == 2)
635 printf("%-*s", 0, "-"); */
636 else
637 printf("-");
638
639 printf("\n");
640
641 return (0);
642 }
643
644 void
645 print_addr(int l, int t, int f, struct sockaddr *sa)
646 {
647 char sabuf[256], pbuf[32];
648 int r = 0;
649
650 if (!(f & INP_ANONPORT))
651 f = 0;
652 else
653 f = NI_NUMERICSERV;
654 if (t == SOCK_DGRAM)
655 f |= NI_DGRAM;
656 if (nonames)
657 f |= NI_NUMERICHOST|NI_NUMERICSERV;
658
659 getnameinfo(sa, sa->sa_len, sabuf, sizeof(sabuf),
660 pbuf, sizeof(pbuf), f);
661
662 switch (sa->sa_family) {
663 case PF_UNSPEC:
664 r = printf("(PF_UNSPEC)");
665 break;
666 case PF_INET: {
667 struct sockaddr_in *si = satosin(sa);
668 if (si->sin_addr.s_addr != INADDR_ANY)
669 r = printf("%s.%s", sabuf, pbuf);
670 else if (ntohs(si->sin_port) != 0)
671 r = printf("*.%s", pbuf);
672 else
673 r = printf("*.*");
674 break;
675 }
676 #ifdef INET6
677 case PF_INET6: {
678 struct sockaddr_in6 *si6 = satosin6(sa);
679 if (!IN6_IS_ADDR_UNSPECIFIED(&si6->sin6_addr))
680 r = printf("%s.%s", sabuf, pbuf);
681 else if (ntohs(si6->sin6_port) != 0)
682 r = printf("*.%s", pbuf);
683 else
684 r = printf("*.*");
685 break;
686 }
687 #endif
688 case PF_LOCAL: {
689 struct sockaddr_un *sun = satosun(sa);
690 r = printf("%s", sun->sun_path);
691 if (r == 0)
692 r = printf("-");
693 break;
694 }
695 default:
696 break;
697 }
698
699 if (r > 0)
700 l -= r;
701 if (l > 0)
702 printf("%*s", l, "");
703 }
704