bpf.c revision 1.1.1.1 1 1.1 brezak /*
2 1.1 brezak * Copyright (c) 1988, 1992 The University of Utah and the Center
3 1.1 brezak * for Software Science (CSS).
4 1.1 brezak * Copyright (c) 1992, 1993
5 1.1 brezak * The Regents of the University of California. All rights reserved.
6 1.1 brezak *
7 1.1 brezak * This code is derived from software contributed to Berkeley by
8 1.1 brezak * the Center for Software Science of the University of Utah Computer
9 1.1 brezak * Science Department. CSS requests users of this software to return
10 1.1 brezak * to css-dist (at) cs.utah.edu any improvements that they make and grant
11 1.1 brezak * CSS redistribution rights.
12 1.1 brezak *
13 1.1 brezak * Redistribution and use in source and binary forms, with or without
14 1.1 brezak * modification, are permitted provided that the following conditions
15 1.1 brezak * are met:
16 1.1 brezak * 1. Redistributions of source code must retain the above copyright
17 1.1 brezak * notice, this list of conditions and the following disclaimer.
18 1.1 brezak * 2. Redistributions in binary form must reproduce the above copyright
19 1.1 brezak * notice, this list of conditions and the following disclaimer in the
20 1.1 brezak * documentation and/or other materials provided with the distribution.
21 1.1 brezak * 3. All advertising materials mentioning features or use of this software
22 1.1 brezak * must display the following acknowledgement:
23 1.1 brezak * This product includes software developed by the University of
24 1.1 brezak * California, Berkeley and its contributors.
25 1.1 brezak * 4. Neither the name of the University nor the names of its contributors
26 1.1 brezak * may be used to endorse or promote products derived from this software
27 1.1 brezak * without specific prior written permission.
28 1.1 brezak *
29 1.1 brezak * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
30 1.1 brezak * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
31 1.1 brezak * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
32 1.1 brezak * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
33 1.1 brezak * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
34 1.1 brezak * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
35 1.1 brezak * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
36 1.1 brezak * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
37 1.1 brezak * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
38 1.1 brezak * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
39 1.1 brezak * SUCH DAMAGE.
40 1.1 brezak *
41 1.1 brezak * @(#)bpf.c 8.1 (Berkeley) 6/4/93
42 1.1 brezak *
43 1.1 brezak * Utah $Hdr: bpf.c 3.1 92/07/06$
44 1.1 brezak * Author: Jeff Forys, University of Utah CSS
45 1.1 brezak */
46 1.1 brezak
47 1.1 brezak #ifndef lint
48 1.1 brezak static char sccsid[] = "@(#)bpf.c 8.1 (Berkeley) 6/4/93";
49 1.1 brezak #endif /* not lint */
50 1.1 brezak
51 1.1 brezak #include <sys/param.h>
52 1.1 brezak #include <sys/ioctl.h>
53 1.1 brezak #include <sys/socket.h>
54 1.1 brezak
55 1.1 brezak #include <net/if.h>
56 1.1 brezak #include <net/bpf.h>
57 1.1 brezak
58 1.1 brezak #include <ctype.h>
59 1.1 brezak #include <errno.h>
60 1.1 brezak #include <fcntl.h>
61 1.1 brezak #include <stdio.h>
62 1.1 brezak #include <stdlib.h>
63 1.1 brezak #include <string.h>
64 1.1 brezak #include <syslog.h>
65 1.1 brezak #include <unistd.h>
66 1.1 brezak #include "defs.h"
67 1.1 brezak #include "pathnames.h"
68 1.1 brezak
69 1.1 brezak static int BpfFd = -1;
70 1.1 brezak static unsigned BpfLen = 0;
71 1.1 brezak static u_char *BpfPkt = NULL;
72 1.1 brezak
73 1.1 brezak /*
74 1.1 brezak ** BpfOpen -- Open and initialize a BPF device.
75 1.1 brezak **
76 1.1 brezak ** Parameters:
77 1.1 brezak ** None.
78 1.1 brezak **
79 1.1 brezak ** Returns:
80 1.1 brezak ** File descriptor of opened BPF device (for select() etc).
81 1.1 brezak **
82 1.1 brezak ** Side Effects:
83 1.1 brezak ** If an error is encountered, the program terminates here.
84 1.1 brezak */
85 1.1 brezak int
86 1.1 brezak BpfOpen()
87 1.1 brezak {
88 1.1 brezak struct ifreq ifr;
89 1.1 brezak char bpfdev[32];
90 1.1 brezak int n = 0;
91 1.1 brezak
92 1.1 brezak /*
93 1.1 brezak * Open the first available BPF device.
94 1.1 brezak */
95 1.1 brezak do {
96 1.1 brezak (void) sprintf(bpfdev, _PATH_BPF, n++);
97 1.1 brezak BpfFd = open(bpfdev, O_RDWR);
98 1.1 brezak } while (BpfFd < 0 && (errno == EBUSY || errno == EPERM));
99 1.1 brezak
100 1.1 brezak if (BpfFd < 0) {
101 1.1 brezak syslog(LOG_ERR, "bpf: no available devices: %m");
102 1.1 brezak Exit(0);
103 1.1 brezak }
104 1.1 brezak
105 1.1 brezak /*
106 1.1 brezak * Set interface name for bpf device, get data link layer
107 1.1 brezak * type and make sure it's type Ethernet.
108 1.1 brezak */
109 1.1 brezak (void) strncpy(ifr.ifr_name, IntfName, sizeof(ifr.ifr_name));
110 1.1 brezak if (ioctl(BpfFd, BIOCSETIF, (caddr_t)&ifr) < 0) {
111 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCSETIF,%s): %m", IntfName);
112 1.1 brezak Exit(0);
113 1.1 brezak }
114 1.1 brezak
115 1.1 brezak /*
116 1.1 brezak * Make sure we are dealing with an Ethernet device.
117 1.1 brezak */
118 1.1 brezak if (ioctl(BpfFd, BIOCGDLT, (caddr_t)&n) < 0) {
119 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCGDLT): %m");
120 1.1 brezak Exit(0);
121 1.1 brezak }
122 1.1 brezak if (n != DLT_EN10MB) {
123 1.1 brezak syslog(LOG_ERR,"bpf: %s: data-link type %d unsupported",
124 1.1 brezak IntfName, n);
125 1.1 brezak Exit(0);
126 1.1 brezak }
127 1.1 brezak
128 1.1 brezak /*
129 1.1 brezak * On read(), return packets immediately (do not buffer them).
130 1.1 brezak */
131 1.1 brezak n = 1;
132 1.1 brezak if (ioctl(BpfFd, BIOCIMMEDIATE, (caddr_t)&n) < 0) {
133 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCIMMEDIATE): %m");
134 1.1 brezak Exit(0);
135 1.1 brezak }
136 1.1 brezak
137 1.1 brezak /*
138 1.1 brezak * Try to enable the chip/driver's multicast address filter to
139 1.1 brezak * grab our RMP address. If this fails, try promiscuous mode.
140 1.1 brezak * If this fails, there's no way we are going to get any RMP
141 1.1 brezak * packets so just exit here.
142 1.1 brezak */
143 1.1 brezak #ifdef MSG_EOR
144 1.1 brezak ifr.ifr_addr.sa_len = RMP_ADDRLEN + 2;
145 1.1 brezak #endif
146 1.1 brezak ifr.ifr_addr.sa_family = AF_UNSPEC;
147 1.1 brezak bcopy(&RmpMcastAddr[0], (char *)&ifr.ifr_addr.sa_data[0], RMP_ADDRLEN);
148 1.1 brezak if (ioctl(BpfFd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
149 1.1 brezak syslog(LOG_WARNING,
150 1.1 brezak "bpf: can't add mcast addr (%m), setting promiscuous mode");
151 1.1 brezak
152 1.1 brezak if (ioctl(BpfFd, BIOCPROMISC, (caddr_t)0) < 0) {
153 1.1 brezak syslog(LOG_ERR, "bpf: can't set promiscuous mode: %m");
154 1.1 brezak Exit(0);
155 1.1 brezak }
156 1.1 brezak }
157 1.1 brezak
158 1.1 brezak /*
159 1.1 brezak * Ask BPF how much buffer space it requires and allocate one.
160 1.1 brezak */
161 1.1 brezak if (ioctl(BpfFd, BIOCGBLEN, (caddr_t)&BpfLen) < 0) {
162 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCGBLEN): %m");
163 1.1 brezak Exit(0);
164 1.1 brezak }
165 1.1 brezak if (BpfPkt == NULL)
166 1.1 brezak BpfPkt = (u_char *)malloc(BpfLen);
167 1.1 brezak
168 1.1 brezak if (BpfPkt == NULL) {
169 1.1 brezak syslog(LOG_ERR, "bpf: out of memory (%u bytes for bpfpkt)",
170 1.1 brezak BpfLen);
171 1.1 brezak Exit(0);
172 1.1 brezak }
173 1.1 brezak
174 1.1 brezak /*
175 1.1 brezak * Write a little program to snarf RMP Boot packets and stuff
176 1.1 brezak * it down BPF's throat (i.e. set up the packet filter).
177 1.1 brezak */
178 1.1 brezak {
179 1.1 brezak #define RMP ((struct rmp_packet *)0)
180 1.1 brezak static struct bpf_insn bpf_insn[] = {
181 1.1 brezak { BPF_LD|BPF_B|BPF_ABS, 0, 0, (long)&RMP->hp_llc.dsap },
182 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 5, IEEE_DSAP_HP },
183 1.1 brezak { BPF_LD|BPF_H|BPF_ABS, 0, 0, (long)&RMP->hp_llc.cntrl },
184 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 3, IEEE_CNTL_HP },
185 1.1 brezak { BPF_LD|BPF_H|BPF_ABS, 0, 0, (long)&RMP->hp_llc.dxsap },
186 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 1, HPEXT_DXSAP },
187 1.1 brezak { BPF_RET|BPF_K, 0, 0, RMP_MAX_PACKET },
188 1.1 brezak { BPF_RET|BPF_K, 0, 0, 0x0 }
189 1.1 brezak };
190 1.1 brezak #undef RMP
191 1.1 brezak static struct bpf_program bpf_pgm = {
192 1.1 brezak sizeof(bpf_insn)/sizeof(bpf_insn[0]), bpf_insn
193 1.1 brezak };
194 1.1 brezak
195 1.1 brezak if (ioctl(BpfFd, BIOCSETF, (caddr_t)&bpf_pgm) < 0) {
196 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCSETF): %m");
197 1.1 brezak Exit(0);
198 1.1 brezak }
199 1.1 brezak }
200 1.1 brezak
201 1.1 brezak return(BpfFd);
202 1.1 brezak }
203 1.1 brezak
204 1.1 brezak /*
205 1.1 brezak ** BPF GetIntfName -- Return the name of a network interface attached to
206 1.1 brezak ** the system, or 0 if none can be found. The interface
207 1.1 brezak ** must be configured up; the lowest unit number is
208 1.1 brezak ** preferred; loopback is ignored.
209 1.1 brezak **
210 1.1 brezak ** Parameters:
211 1.1 brezak ** errmsg - if no network interface found, *errmsg explains why.
212 1.1 brezak **
213 1.1 brezak ** Returns:
214 1.1 brezak ** A (static) pointer to interface name, or NULL on error.
215 1.1 brezak **
216 1.1 brezak ** Side Effects:
217 1.1 brezak ** None.
218 1.1 brezak */
219 1.1 brezak char *
220 1.1 brezak BpfGetIntfName(errmsg)
221 1.1 brezak char **errmsg;
222 1.1 brezak {
223 1.1 brezak struct ifreq ibuf[8], *ifrp, *ifend, *mp;
224 1.1 brezak struct ifconf ifc;
225 1.1 brezak int fd;
226 1.1 brezak int minunit, n;
227 1.1 brezak char *cp;
228 1.1 brezak static char device[sizeof(ifrp->ifr_name)];
229 1.1 brezak static char errbuf[128] = "No Error!";
230 1.1 brezak
231 1.1 brezak if (errmsg != NULL)
232 1.1 brezak *errmsg = errbuf;
233 1.1 brezak
234 1.1 brezak if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
235 1.1 brezak (void) strcpy(errbuf, "bpf: socket: %m");
236 1.1 brezak return(NULL);
237 1.1 brezak }
238 1.1 brezak ifc.ifc_len = sizeof ibuf;
239 1.1 brezak ifc.ifc_buf = (caddr_t)ibuf;
240 1.1 brezak
241 1.1 brezak #ifdef OSIOCGIFCONF
242 1.1 brezak if (ioctl(fd, OSIOCGIFCONF, (char *)&ifc) < 0 ||
243 1.1 brezak ifc.ifc_len < sizeof(struct ifreq)) {
244 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(OSIOCGIFCONF): %m");
245 1.1 brezak return(NULL);
246 1.1 brezak }
247 1.1 brezak #else
248 1.1 brezak if (ioctl(fd, SIOCGIFCONF, (char *)&ifc) < 0 ||
249 1.1 brezak ifc.ifc_len < sizeof(struct ifreq)) {
250 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(SIOCGIFCONF): %m");
251 1.1 brezak return(NULL);
252 1.1 brezak }
253 1.1 brezak #endif
254 1.1 brezak ifrp = ibuf;
255 1.1 brezak ifend = (struct ifreq *)((char *)ibuf + ifc.ifc_len);
256 1.1 brezak
257 1.1 brezak mp = 0;
258 1.1 brezak minunit = 666;
259 1.1 brezak for (; ifrp < ifend; ++ifrp) {
260 1.1 brezak if (ioctl(fd, SIOCGIFFLAGS, (char *)ifrp) < 0) {
261 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(SIOCGIFFLAGS): %m");
262 1.1 brezak return(NULL);
263 1.1 brezak }
264 1.1 brezak
265 1.1 brezak /*
266 1.1 brezak * If interface is down or this is the loopback interface,
267 1.1 brezak * ignore it.
268 1.1 brezak */
269 1.1 brezak if ((ifrp->ifr_flags & IFF_UP) == 0 ||
270 1.1 brezak #ifdef IFF_LOOPBACK
271 1.1 brezak (ifrp->ifr_flags & IFF_LOOPBACK))
272 1.1 brezak #else
273 1.1 brezak (strcmp(ifrp->ifr_name, "lo0") == 0))
274 1.1 brezak #endif
275 1.1 brezak continue;
276 1.1 brezak
277 1.1 brezak for (cp = ifrp->ifr_name; !isdigit(*cp); ++cp)
278 1.1 brezak ;
279 1.1 brezak n = atoi(cp);
280 1.1 brezak if (n < minunit) {
281 1.1 brezak minunit = n;
282 1.1 brezak mp = ifrp;
283 1.1 brezak }
284 1.1 brezak }
285 1.1 brezak
286 1.1 brezak (void) close(fd);
287 1.1 brezak if (mp == 0) {
288 1.1 brezak (void) strcpy(errbuf, "bpf: no interfaces found");
289 1.1 brezak return(NULL);
290 1.1 brezak }
291 1.1 brezak
292 1.1 brezak (void) strcpy(device, mp->ifr_name);
293 1.1 brezak return(device);
294 1.1 brezak }
295 1.1 brezak
296 1.1 brezak /*
297 1.1 brezak ** BpfRead -- Read packets from a BPF device and fill in `rconn'.
298 1.1 brezak **
299 1.1 brezak ** Parameters:
300 1.1 brezak ** rconn - filled in with next packet.
301 1.1 brezak ** doread - is True if we can issue a read() syscall.
302 1.1 brezak **
303 1.1 brezak ** Returns:
304 1.1 brezak ** True if `rconn' contains a new packet, False otherwise.
305 1.1 brezak **
306 1.1 brezak ** Side Effects:
307 1.1 brezak ** None.
308 1.1 brezak */
309 1.1 brezak int
310 1.1 brezak BpfRead(rconn, doread)
311 1.1 brezak RMPCONN *rconn;
312 1.1 brezak int doread;
313 1.1 brezak {
314 1.1 brezak register int datlen, caplen, hdrlen;
315 1.1 brezak static u_char *bp = NULL, *ep = NULL;
316 1.1 brezak int cc;
317 1.1 brezak
318 1.1 brezak /*
319 1.1 brezak * The read() may block, or it may return one or more packets.
320 1.1 brezak * We let the caller decide whether or not we can issue a read().
321 1.1 brezak */
322 1.1 brezak if (doread) {
323 1.1 brezak if ((cc = read(BpfFd, (char *)BpfPkt, (int)BpfLen)) < 0) {
324 1.1 brezak syslog(LOG_ERR, "bpf: read: %m");
325 1.1 brezak return(0);
326 1.1 brezak } else {
327 1.1 brezak bp = BpfPkt;
328 1.1 brezak ep = BpfPkt + cc;
329 1.1 brezak }
330 1.1 brezak }
331 1.1 brezak
332 1.1 brezak #define bhp ((struct bpf_hdr *)bp)
333 1.1 brezak /*
334 1.1 brezak * If there is a new packet in the buffer, stuff it into `rconn'
335 1.1 brezak * and return a success indication.
336 1.1 brezak */
337 1.1 brezak if (bp < ep) {
338 1.1 brezak datlen = bhp->bh_datalen;
339 1.1 brezak caplen = bhp->bh_caplen;
340 1.1 brezak hdrlen = bhp->bh_hdrlen;
341 1.1 brezak
342 1.1 brezak if (caplen != datlen)
343 1.1 brezak syslog(LOG_ERR,
344 1.1 brezak "bpf: short packet dropped (%d of %d bytes)",
345 1.1 brezak caplen, datlen);
346 1.1 brezak else if (caplen > sizeof(struct rmp_packet))
347 1.1 brezak syslog(LOG_ERR, "bpf: large packet dropped (%d bytes)",
348 1.1 brezak caplen);
349 1.1 brezak else {
350 1.1 brezak rconn->rmplen = caplen;
351 1.1 brezak bcopy((char *)&bhp->bh_tstamp, (char *)&rconn->tstamp,
352 1.1 brezak sizeof(struct timeval));
353 1.1 brezak bcopy((char *)bp + hdrlen, (char *)&rconn->rmp, caplen);
354 1.1 brezak }
355 1.1 brezak bp += BPF_WORDALIGN(caplen + hdrlen);
356 1.1 brezak return(1);
357 1.1 brezak }
358 1.1 brezak #undef bhp
359 1.1 brezak
360 1.1 brezak return(0);
361 1.1 brezak }
362 1.1 brezak
363 1.1 brezak /*
364 1.1 brezak ** BpfWrite -- Write packet to BPF device.
365 1.1 brezak **
366 1.1 brezak ** Parameters:
367 1.1 brezak ** rconn - packet to send.
368 1.1 brezak **
369 1.1 brezak ** Returns:
370 1.1 brezak ** True if write succeeded, False otherwise.
371 1.1 brezak **
372 1.1 brezak ** Side Effects:
373 1.1 brezak ** None.
374 1.1 brezak */
375 1.1 brezak int
376 1.1 brezak BpfWrite(rconn)
377 1.1 brezak RMPCONN *rconn;
378 1.1 brezak {
379 1.1 brezak if (write(BpfFd, (char *)&rconn->rmp, rconn->rmplen) < 0) {
380 1.1 brezak syslog(LOG_ERR, "write: %s: %m", EnetStr(rconn));
381 1.1 brezak return(0);
382 1.1 brezak }
383 1.1 brezak
384 1.1 brezak return(1);
385 1.1 brezak }
386 1.1 brezak
387 1.1 brezak /*
388 1.1 brezak ** BpfClose -- Close a BPF device.
389 1.1 brezak **
390 1.1 brezak ** Parameters:
391 1.1 brezak ** None.
392 1.1 brezak **
393 1.1 brezak ** Returns:
394 1.1 brezak ** Nothing.
395 1.1 brezak **
396 1.1 brezak ** Side Effects:
397 1.1 brezak ** None.
398 1.1 brezak */
399 1.1 brezak void
400 1.1 brezak BpfClose()
401 1.1 brezak {
402 1.1 brezak struct ifreq ifr;
403 1.1 brezak
404 1.1 brezak if (BpfPkt != NULL) {
405 1.1 brezak free((char *)BpfPkt);
406 1.1 brezak BpfPkt = NULL;
407 1.1 brezak }
408 1.1 brezak
409 1.1 brezak if (BpfFd == -1)
410 1.1 brezak return;
411 1.1 brezak
412 1.1 brezak #ifdef MSG_EOR
413 1.1 brezak ifr.ifr_addr.sa_len = RMP_ADDRLEN + 2;
414 1.1 brezak #endif
415 1.1 brezak ifr.ifr_addr.sa_family = AF_UNSPEC;
416 1.1 brezak bcopy(&RmpMcastAddr[0], (char *)&ifr.ifr_addr.sa_data[0], RMP_ADDRLEN);
417 1.1 brezak if (ioctl(BpfFd, SIOCDELMULTI, (caddr_t)&ifr) < 0)
418 1.1 brezak (void) ioctl(BpfFd, BIOCPROMISC, (caddr_t)0);
419 1.1 brezak
420 1.1 brezak (void) close(BpfFd);
421 1.1 brezak BpfFd = -1;
422 1.1 brezak }
423