Home | History | Annotate | Line # | Download | only in common
pf.c revision 1.10
      1  1.10  christos /*	$NetBSD: pf.c,v 1.10 2004/12/01 23:15:08 christos Exp $	*/
      2   1.3   thorpej 
      3   1.1       cjs /*
      4   1.1       cjs  * Copyright (c) 1993-95 Mats O Jansson.  All rights reserved.
      5   1.1       cjs  * Copyright (c) 1990 The Regents of the University of California.
      6   1.1       cjs  * All rights reserved.
      7   1.1       cjs  *
      8   1.1       cjs  * This code is partly derived from rarpd.
      9   1.1       cjs  *
     10   1.1       cjs  * Redistribution and use in source and binary forms, with or without
     11   1.1       cjs  * modification, are permitted provided that the following conditions
     12   1.1       cjs  * are met:
     13   1.1       cjs  * 1. Redistributions of source code must retain the above copyright
     14   1.1       cjs  *    notice, this list of conditions and the following disclaimer.
     15   1.1       cjs  * 2. Redistributions in binary form must reproduce the above copyright
     16   1.1       cjs  *    notice, this list of conditions and the following disclaimer in the
     17   1.1       cjs  *    documentation and/or other materials provided with the distribution.
     18   1.1       cjs  * 3. All advertising materials mentioning features or use of this software
     19   1.1       cjs  *    must display the following acknowledgement:
     20   1.1       cjs  *	This product includes software developed by Mats O Jansson.
     21   1.1       cjs  * 4. The name of the author may not be used to endorse or promote products
     22   1.1       cjs  *    derived from this software without specific prior written permission.
     23   1.1       cjs  *
     24   1.1       cjs  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     25   1.1       cjs  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     26   1.1       cjs  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     27   1.1       cjs  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     28   1.1       cjs  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     29   1.1       cjs  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     30   1.1       cjs  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     31   1.1       cjs  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     32   1.1       cjs  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     33   1.1       cjs  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     34   1.1       cjs  */
     35   1.1       cjs 
     36   1.4     lukem #include <sys/cdefs.h>
     37   1.4     lukem #ifndef lint
     38  1.10  christos __RCSID("$NetBSD: pf.c,v 1.10 2004/12/01 23:15:08 christos Exp $");
     39   1.1       cjs #endif
     40   1.1       cjs 
     41   1.4     lukem #include "os.h"
     42   1.4     lukem 
     43  1.10  christos #include <paths.h>
     44   1.1       cjs #include <sys/uio.h>
     45   1.1       cjs #include <net/bpf.h>
     46   1.1       cjs 
     47   1.4     lukem #include "mopdef.h"
     48   1.4     lukem #include "pf.h"
     49   1.8  christos #include "log.h"
     50   1.1       cjs 
     51   1.1       cjs /*
     52   1.1       cjs  * Variables
     53   1.1       cjs  */
     54   1.1       cjs 
     55   1.1       cjs extern int promisc;
     56   1.1       cjs 
     57   1.1       cjs /*
     58   1.1       cjs  * Return information to device.c how to open device.
     59   1.1       cjs  * In this case the driver can handle both Ethernet type II and
     60   1.1       cjs  * IEEE 802.3 frames (SNAP) in a single pfOpen.
     61   1.1       cjs  */
     62   1.1       cjs 
     63   1.1       cjs int
     64   1.1       cjs pfTrans(interface)
     65   1.1       cjs 	char *interface;
     66   1.1       cjs {
     67   1.1       cjs 	return TRANS_ETHER+TRANS_8023+TRANS_AND;
     68   1.1       cjs }
     69   1.1       cjs 
     70   1.1       cjs /*
     71   1.1       cjs  * Open and initialize packet filter.
     72   1.1       cjs  */
     73   1.1       cjs 
     74   1.1       cjs int
     75   1.1       cjs pfInit(interface, mode, protocol, typ)
     76   1.1       cjs 	char *interface;
     77   1.1       cjs 	u_short protocol;
     78   1.1       cjs 	int typ, mode;
     79   1.1       cjs {
     80   1.1       cjs 	int	fd;
     81   1.1       cjs 	struct ifreq ifr;
     82   1.1       cjs 	u_int	dlt;
     83   1.1       cjs 	int	immediate;
     84   1.9   darrenr 	u_int	bufsize;
     85  1.10  christos 	const char *device = _PATH_BPF;
     86   1.1       cjs 
     87   1.1       cjs 	static struct bpf_insn insns[] = {
     88   1.1       cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
     89   1.1       cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 4, 0),
     90   1.1       cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
     91   1.1       cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 0, 3),
     92   1.1       cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 14),
     93   1.1       cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xaaaa, 0, 1),
     94   1.1       cjs 		BPF_STMT(BPF_RET | BPF_K, 1520),
     95   1.1       cjs 		BPF_STMT(BPF_RET | BPF_K, 0),
     96   1.1       cjs 	};
     97   1.1       cjs 	static struct bpf_program filter = {
     98   1.1       cjs 		sizeof insns / sizeof(insns[0]),
     99   1.1       cjs 		insns
    100   1.1       cjs 	};
    101   1.1       cjs 
    102  1.10  christos 	fd = open(device, mode);
    103   1.1       cjs 	if (fd < 0) {
    104   1.8  christos       		mopLogWarn("pfInit: open %s", device);
    105   1.1       cjs 		return(-1);
    106   1.1       cjs 	}
    107   1.1       cjs 
    108   1.1       cjs 	/* Set immediate mode so packets are processed as they arrive. */
    109   1.1       cjs 	immediate = 1;
    110   1.1       cjs 	if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
    111   1.8  christos       		mopLogWarn("pfInit: BIOCIMMEDIATE");
    112   1.1       cjs 		return(-1);
    113   1.1       cjs 	}
    114   1.9   darrenr 	bufsize = 32768;
    115   1.9   darrenr 	if (ioctl(fd, BIOCSBLEN, &bufsize) < 0) {
    116   1.9   darrenr       		mopLogWarn("pfInit: BIOCSBLEN(%d)", bufsize);
    117   1.9   darrenr 	}
    118   1.1       cjs 	(void) strncpy(ifr.ifr_name, interface, sizeof ifr.ifr_name);
    119   1.1       cjs 	if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
    120   1.8  christos       		mopLogWarn("pfInit: BIOCSETIF");
    121   1.1       cjs 		return(-1);
    122   1.1       cjs 	}
    123   1.1       cjs 	/* Check that the data link layer is an Ethernet; this code won't work
    124   1.1       cjs 	 * with anything else. */
    125   1.1       cjs 	if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
    126   1.8  christos       		mopLogWarn("pfInit: BIOCGDLT");
    127   1.1       cjs 		return(-1);
    128   1.1       cjs 	}
    129   1.1       cjs 	if (dlt != DLT_EN10MB) {
    130   1.8  christos       		mopLogWarnX("pfInit: %s is not ethernet", device);
    131   1.1       cjs 		return(-1);
    132   1.1       cjs 	}
    133   1.1       cjs 	if (promisc) {
    134   1.1       cjs 		/* Set promiscuous mode. */
    135   1.1       cjs 		if (ioctl(fd, BIOCPROMISC, (caddr_t)0) < 0) {
    136   1.8  christos       			mopLogWarn("pfInit: BIOCPROMISC");
    137   1.1       cjs 			return(-1);
    138   1.1       cjs 		}
    139   1.1       cjs 	}
    140   1.1       cjs 	/* Set filter program. */
    141   1.1       cjs 	insns[1].k = protocol;
    142   1.1       cjs 	insns[3].k = protocol;
    143   1.1       cjs 
    144   1.1       cjs 	if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
    145   1.8  christos       		mopLogWarn("pfInit: BIOCSETF");
    146   1.1       cjs 		return(-1);
    147   1.1       cjs 	}
    148   1.1       cjs 	return(fd);
    149   1.1       cjs }
    150   1.1       cjs 
    151   1.1       cjs /*
    152   1.1       cjs  * Add a Multicast address to the interface
    153   1.1       cjs  */
    154   1.1       cjs 
    155   1.1       cjs int
    156   1.1       cjs pfAddMulti(s, interface, addr)
    157   1.1       cjs 	int s;
    158   1.1       cjs 	char *interface, *addr;
    159   1.1       cjs {
    160   1.1       cjs 	struct ifreq ifr;
    161   1.1       cjs 	int	fd;
    162   1.1       cjs 
    163   1.7    itojun 	strncpy(ifr.ifr_name, interface, sizeof(ifr.ifr_name));
    164   1.1       cjs 
    165   1.1       cjs 	ifr.ifr_addr.sa_family = AF_UNSPEC;
    166   1.4     lukem 	memmove(ifr.ifr_addr.sa_data, addr, 6);
    167   1.1       cjs 
    168   1.1       cjs 	/*
    169   1.1       cjs 	 * open a socket, temporarily, to use for SIOC* ioctls
    170   1.1       cjs 	 *
    171   1.1       cjs 	 */
    172   1.1       cjs 	if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
    173   1.8  christos 		mopLogWarn("pfAddMulti: socket");
    174   1.1       cjs 		return(-1);
    175   1.1       cjs 	}
    176   1.1       cjs 	if (ioctl(fd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
    177   1.8  christos 		mopLogWarn("pfAddMulti: SIOCADDMULTI");
    178   1.1       cjs 		close(fd);
    179   1.1       cjs 		return(-1);
    180   1.1       cjs 	}
    181   1.1       cjs 	close(fd);
    182   1.1       cjs 
    183   1.1       cjs 	return(0);
    184   1.1       cjs }
    185   1.1       cjs 
    186   1.1       cjs /*
    187   1.1       cjs  * Delete a Multicast address from the interface
    188   1.1       cjs  */
    189   1.1       cjs 
    190   1.1       cjs int
    191   1.1       cjs pfDelMulti(s, interface, addr)
    192   1.1       cjs 	int s;
    193   1.1       cjs 	char *interface, *addr;
    194   1.1       cjs {
    195   1.1       cjs 	struct ifreq ifr;
    196   1.1       cjs 	int	fd;
    197   1.1       cjs 
    198   1.7    itojun 	strncpy(ifr.ifr_name, interface, sizeof(ifr.ifr_name));
    199   1.1       cjs 
    200   1.1       cjs 	ifr.ifr_addr.sa_family = AF_UNSPEC;
    201   1.4     lukem 	memmove(ifr.ifr_addr.sa_data, addr, 6);
    202   1.1       cjs 
    203   1.1       cjs 	/*
    204   1.1       cjs 	 * open a socket, temporarily, to use for SIOC* ioctls
    205   1.1       cjs 	 *
    206   1.1       cjs 	 */
    207   1.1       cjs 	if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
    208   1.8  christos 		mopLogWarn("pfDelMulti: socket");
    209   1.1       cjs 		return(-1);
    210   1.1       cjs 	}
    211   1.1       cjs 	if (ioctl(fd, SIOCDELMULTI, (caddr_t)&ifr) < 0) {
    212   1.8  christos 		mopLogWarn("pfAddMulti: SIOCDELMULTI");
    213   1.1       cjs 		close(fd);
    214   1.1       cjs 		return(-1);
    215   1.1       cjs 	}
    216   1.1       cjs 	close(fd);
    217   1.1       cjs 
    218   1.1       cjs 	return(0);
    219   1.1       cjs }
    220   1.1       cjs 
    221   1.1       cjs /*
    222   1.1       cjs  * read a packet
    223   1.1       cjs  */
    224   1.1       cjs 
    225   1.1       cjs int
    226   1.1       cjs pfRead(fd, buf, len)
    227   1.1       cjs 	int	fd, len;
    228   1.1       cjs 	u_char *buf;
    229   1.1       cjs {
    230   1.1       cjs 	return(read(fd, buf, len));
    231   1.1       cjs }
    232   1.1       cjs 
    233   1.1       cjs /*
    234   1.1       cjs  * write a packet
    235   1.1       cjs  */
    236   1.1       cjs 
    237   1.1       cjs int
    238   1.1       cjs pfWrite(fd, buf, len, trans)
    239   1.1       cjs 	int fd, len, trans;
    240   1.1       cjs 	u_char *buf;
    241   1.1       cjs {
    242   1.1       cjs 
    243   1.1       cjs 	struct iovec iov[2];
    244   1.1       cjs 
    245   1.1       cjs 	switch (trans) {
    246   1.1       cjs 	case TRANS_8023:
    247   1.1       cjs 		iov[0].iov_base = (caddr_t)buf;
    248   1.1       cjs 		iov[0].iov_len = 22;
    249   1.1       cjs 		iov[1].iov_base = (caddr_t)buf+22;
    250   1.1       cjs 		iov[1].iov_len = len-22;
    251   1.1       cjs 		break;
    252   1.1       cjs 	default:
    253   1.1       cjs 		iov[0].iov_base = (caddr_t)buf;
    254   1.1       cjs 		iov[0].iov_len = 14;
    255   1.1       cjs 		iov[1].iov_base = (caddr_t)buf+14;
    256   1.1       cjs 		iov[1].iov_len = len-14;
    257   1.1       cjs 		break;
    258   1.1       cjs 	}
    259   1.1       cjs 
    260   1.1       cjs 	if (writev(fd, iov, 2) == len)
    261   1.1       cjs 		return(len);
    262   1.1       cjs 
    263   1.1       cjs 	return(-1);
    264   1.1       cjs }
    265   1.1       cjs 
    266