pf.c revision 1.12 1 1.12 drochner /* $NetBSD: pf.c,v 1.12 2009/11/17 18:58:07 drochner Exp $ */
2 1.3 thorpej
3 1.1 cjs /*
4 1.1 cjs * Copyright (c) 1993-95 Mats O Jansson. All rights reserved.
5 1.1 cjs * Copyright (c) 1990 The Regents of the University of California.
6 1.1 cjs * All rights reserved.
7 1.1 cjs *
8 1.1 cjs * This code is partly derived from rarpd.
9 1.1 cjs *
10 1.1 cjs * Redistribution and use in source and binary forms, with or without
11 1.1 cjs * modification, are permitted provided that the following conditions
12 1.1 cjs * are met:
13 1.1 cjs * 1. Redistributions of source code must retain the above copyright
14 1.1 cjs * notice, this list of conditions and the following disclaimer.
15 1.1 cjs * 2. Redistributions in binary form must reproduce the above copyright
16 1.1 cjs * notice, this list of conditions and the following disclaimer in the
17 1.1 cjs * documentation and/or other materials provided with the distribution.
18 1.11 snj * 3. The name of the author may not be used to endorse or promote products
19 1.1 cjs * derived from this software without specific prior written permission.
20 1.1 cjs *
21 1.1 cjs * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
22 1.1 cjs * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
23 1.1 cjs * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
24 1.1 cjs * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
25 1.1 cjs * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
26 1.1 cjs * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27 1.1 cjs * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28 1.1 cjs * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29 1.1 cjs * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
30 1.1 cjs * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31 1.1 cjs */
32 1.1 cjs
33 1.4 lukem #include <sys/cdefs.h>
34 1.4 lukem #ifndef lint
35 1.12 drochner __RCSID("$NetBSD: pf.c,v 1.12 2009/11/17 18:58:07 drochner Exp $");
36 1.1 cjs #endif
37 1.1 cjs
38 1.4 lukem #include "os.h"
39 1.4 lukem
40 1.10 christos #include <paths.h>
41 1.1 cjs #include <sys/uio.h>
42 1.1 cjs #include <net/bpf.h>
43 1.1 cjs
44 1.4 lukem #include "mopdef.h"
45 1.4 lukem #include "pf.h"
46 1.8 christos #include "log.h"
47 1.1 cjs
48 1.1 cjs /*
49 1.1 cjs * Variables
50 1.1 cjs */
51 1.1 cjs
52 1.1 cjs extern int promisc;
53 1.1 cjs
54 1.1 cjs /*
55 1.1 cjs * Return information to device.c how to open device.
56 1.1 cjs * In this case the driver can handle both Ethernet type II and
57 1.1 cjs * IEEE 802.3 frames (SNAP) in a single pfOpen.
58 1.1 cjs */
59 1.1 cjs
60 1.1 cjs int
61 1.12 drochner pfTrans(const char *interface)
62 1.1 cjs {
63 1.1 cjs return TRANS_ETHER+TRANS_8023+TRANS_AND;
64 1.1 cjs }
65 1.1 cjs
66 1.1 cjs /*
67 1.1 cjs * Open and initialize packet filter.
68 1.1 cjs */
69 1.1 cjs
70 1.1 cjs int
71 1.12 drochner pfInit(const char *interface, int mode, u_short protocol, int typ)
72 1.1 cjs {
73 1.1 cjs int fd;
74 1.1 cjs struct ifreq ifr;
75 1.1 cjs u_int dlt;
76 1.1 cjs int immediate;
77 1.9 darrenr u_int bufsize;
78 1.10 christos const char *device = _PATH_BPF;
79 1.1 cjs
80 1.1 cjs static struct bpf_insn insns[] = {
81 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
82 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 4, 0),
83 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
84 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 0, 3),
85 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 14),
86 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xaaaa, 0, 1),
87 1.1 cjs BPF_STMT(BPF_RET | BPF_K, 1520),
88 1.1 cjs BPF_STMT(BPF_RET | BPF_K, 0),
89 1.1 cjs };
90 1.1 cjs static struct bpf_program filter = {
91 1.1 cjs sizeof insns / sizeof(insns[0]),
92 1.1 cjs insns
93 1.1 cjs };
94 1.1 cjs
95 1.10 christos fd = open(device, mode);
96 1.1 cjs if (fd < 0) {
97 1.8 christos mopLogWarn("pfInit: open %s", device);
98 1.1 cjs return(-1);
99 1.1 cjs }
100 1.1 cjs
101 1.1 cjs /* Set immediate mode so packets are processed as they arrive. */
102 1.1 cjs immediate = 1;
103 1.1 cjs if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
104 1.8 christos mopLogWarn("pfInit: BIOCIMMEDIATE");
105 1.1 cjs return(-1);
106 1.1 cjs }
107 1.9 darrenr bufsize = 32768;
108 1.9 darrenr if (ioctl(fd, BIOCSBLEN, &bufsize) < 0) {
109 1.9 darrenr mopLogWarn("pfInit: BIOCSBLEN(%d)", bufsize);
110 1.9 darrenr }
111 1.1 cjs (void) strncpy(ifr.ifr_name, interface, sizeof ifr.ifr_name);
112 1.1 cjs if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
113 1.8 christos mopLogWarn("pfInit: BIOCSETIF");
114 1.1 cjs return(-1);
115 1.1 cjs }
116 1.1 cjs /* Check that the data link layer is an Ethernet; this code won't work
117 1.1 cjs * with anything else. */
118 1.1 cjs if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
119 1.8 christos mopLogWarn("pfInit: BIOCGDLT");
120 1.1 cjs return(-1);
121 1.1 cjs }
122 1.1 cjs if (dlt != DLT_EN10MB) {
123 1.8 christos mopLogWarnX("pfInit: %s is not ethernet", device);
124 1.1 cjs return(-1);
125 1.1 cjs }
126 1.1 cjs if (promisc) {
127 1.1 cjs /* Set promiscuous mode. */
128 1.1 cjs if (ioctl(fd, BIOCPROMISC, (caddr_t)0) < 0) {
129 1.8 christos mopLogWarn("pfInit: BIOCPROMISC");
130 1.1 cjs return(-1);
131 1.1 cjs }
132 1.1 cjs }
133 1.1 cjs /* Set filter program. */
134 1.1 cjs insns[1].k = protocol;
135 1.1 cjs insns[3].k = protocol;
136 1.1 cjs
137 1.1 cjs if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
138 1.8 christos mopLogWarn("pfInit: BIOCSETF");
139 1.1 cjs return(-1);
140 1.1 cjs }
141 1.1 cjs return(fd);
142 1.1 cjs }
143 1.1 cjs
144 1.1 cjs /*
145 1.1 cjs * Add a Multicast address to the interface
146 1.1 cjs */
147 1.1 cjs
148 1.1 cjs int
149 1.12 drochner pfAddMulti(int s, const char *interface, const char *addr)
150 1.1 cjs {
151 1.1 cjs struct ifreq ifr;
152 1.1 cjs int fd;
153 1.1 cjs
154 1.7 itojun strncpy(ifr.ifr_name, interface, sizeof(ifr.ifr_name));
155 1.1 cjs
156 1.1 cjs ifr.ifr_addr.sa_family = AF_UNSPEC;
157 1.4 lukem memmove(ifr.ifr_addr.sa_data, addr, 6);
158 1.1 cjs
159 1.1 cjs /*
160 1.1 cjs * open a socket, temporarily, to use for SIOC* ioctls
161 1.1 cjs *
162 1.1 cjs */
163 1.1 cjs if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
164 1.8 christos mopLogWarn("pfAddMulti: socket");
165 1.1 cjs return(-1);
166 1.1 cjs }
167 1.1 cjs if (ioctl(fd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
168 1.8 christos mopLogWarn("pfAddMulti: SIOCADDMULTI");
169 1.1 cjs close(fd);
170 1.1 cjs return(-1);
171 1.1 cjs }
172 1.1 cjs close(fd);
173 1.1 cjs
174 1.1 cjs return(0);
175 1.1 cjs }
176 1.1 cjs
177 1.1 cjs /*
178 1.1 cjs * Delete a Multicast address from the interface
179 1.1 cjs */
180 1.1 cjs
181 1.1 cjs int
182 1.12 drochner pfDelMulti(int s, const char *interface, const char *addr)
183 1.1 cjs {
184 1.1 cjs struct ifreq ifr;
185 1.1 cjs int fd;
186 1.1 cjs
187 1.7 itojun strncpy(ifr.ifr_name, interface, sizeof(ifr.ifr_name));
188 1.1 cjs
189 1.1 cjs ifr.ifr_addr.sa_family = AF_UNSPEC;
190 1.4 lukem memmove(ifr.ifr_addr.sa_data, addr, 6);
191 1.1 cjs
192 1.1 cjs /*
193 1.1 cjs * open a socket, temporarily, to use for SIOC* ioctls
194 1.1 cjs *
195 1.1 cjs */
196 1.1 cjs if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
197 1.8 christos mopLogWarn("pfDelMulti: socket");
198 1.1 cjs return(-1);
199 1.1 cjs }
200 1.1 cjs if (ioctl(fd, SIOCDELMULTI, (caddr_t)&ifr) < 0) {
201 1.8 christos mopLogWarn("pfAddMulti: SIOCDELMULTI");
202 1.1 cjs close(fd);
203 1.1 cjs return(-1);
204 1.1 cjs }
205 1.1 cjs close(fd);
206 1.1 cjs
207 1.1 cjs return(0);
208 1.1 cjs }
209 1.1 cjs
210 1.1 cjs /*
211 1.1 cjs * read a packet
212 1.1 cjs */
213 1.1 cjs
214 1.1 cjs int
215 1.12 drochner pfRead(int fd, u_char *buf, int len)
216 1.1 cjs {
217 1.1 cjs return(read(fd, buf, len));
218 1.1 cjs }
219 1.1 cjs
220 1.1 cjs /*
221 1.1 cjs * write a packet
222 1.1 cjs */
223 1.1 cjs
224 1.1 cjs int
225 1.12 drochner pfWrite(int fd, const u_char *buf, int len, int trans)
226 1.1 cjs {
227 1.1 cjs
228 1.1 cjs struct iovec iov[2];
229 1.1 cjs
230 1.1 cjs switch (trans) {
231 1.1 cjs case TRANS_8023:
232 1.12 drochner iov[0].iov_base = (caddr_t)__UNCONST(buf);
233 1.1 cjs iov[0].iov_len = 22;
234 1.12 drochner iov[1].iov_base = (caddr_t)__UNCONST(buf+22);
235 1.1 cjs iov[1].iov_len = len-22;
236 1.1 cjs break;
237 1.1 cjs default:
238 1.12 drochner iov[0].iov_base = (caddr_t)__UNCONST(buf);
239 1.1 cjs iov[0].iov_len = 14;
240 1.12 drochner iov[1].iov_base = (caddr_t)__UNCONST(buf+14);
241 1.1 cjs iov[1].iov_len = len-14;
242 1.1 cjs break;
243 1.1 cjs }
244 1.1 cjs
245 1.1 cjs if (writev(fd, iov, 2) == len)
246 1.1 cjs return(len);
247 1.1 cjs
248 1.1 cjs return(-1);
249 1.1 cjs }
250 1.1 cjs
251