bpf.c revision 1.6 1 1.6 thorpej /* $NetBSD: bpf.c,v 1.6 1995/11/14 08:41:42 thorpej Exp $ */
2 1.3 thorpej
3 1.1 brezak /*
4 1.1 brezak * Copyright (c) 1988, 1992 The University of Utah and the Center
5 1.1 brezak * for Software Science (CSS).
6 1.1 brezak * Copyright (c) 1992, 1993
7 1.1 brezak * The Regents of the University of California. All rights reserved.
8 1.1 brezak *
9 1.1 brezak * This code is derived from software contributed to Berkeley by
10 1.1 brezak * the Center for Software Science of the University of Utah Computer
11 1.1 brezak * Science Department. CSS requests users of this software to return
12 1.1 brezak * to css-dist (at) cs.utah.edu any improvements that they make and grant
13 1.1 brezak * CSS redistribution rights.
14 1.1 brezak *
15 1.1 brezak * Redistribution and use in source and binary forms, with or without
16 1.1 brezak * modification, are permitted provided that the following conditions
17 1.1 brezak * are met:
18 1.1 brezak * 1. Redistributions of source code must retain the above copyright
19 1.1 brezak * notice, this list of conditions and the following disclaimer.
20 1.1 brezak * 2. Redistributions in binary form must reproduce the above copyright
21 1.1 brezak * notice, this list of conditions and the following disclaimer in the
22 1.1 brezak * documentation and/or other materials provided with the distribution.
23 1.1 brezak * 3. All advertising materials mentioning features or use of this software
24 1.1 brezak * must display the following acknowledgement:
25 1.1 brezak * This product includes software developed by the University of
26 1.1 brezak * California, Berkeley and its contributors.
27 1.1 brezak * 4. Neither the name of the University nor the names of its contributors
28 1.1 brezak * may be used to endorse or promote products derived from this software
29 1.1 brezak * without specific prior written permission.
30 1.1 brezak *
31 1.1 brezak * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
32 1.1 brezak * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
33 1.1 brezak * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
34 1.1 brezak * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
35 1.1 brezak * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
36 1.1 brezak * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
37 1.1 brezak * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
38 1.1 brezak * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
39 1.1 brezak * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
40 1.1 brezak * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
41 1.1 brezak * SUCH DAMAGE.
42 1.1 brezak *
43 1.2 brezak * from: @(#)bpf.c 8.1 (Berkeley) 6/4/93
44 1.1 brezak *
45 1.2 brezak * From: Utah Hdr: bpf.c 3.1 92/07/06
46 1.1 brezak * Author: Jeff Forys, University of Utah CSS
47 1.1 brezak */
48 1.1 brezak
49 1.1 brezak #ifndef lint
50 1.2 brezak /*static char sccsid[] = "@(#)bpf.c 8.1 (Berkeley) 6/4/93";*/
51 1.6 thorpej static char rcsid[] = "$NetBSD: bpf.c,v 1.6 1995/11/14 08:41:42 thorpej Exp $";
52 1.1 brezak #endif /* not lint */
53 1.1 brezak
54 1.1 brezak #include <sys/param.h>
55 1.1 brezak #include <sys/ioctl.h>
56 1.1 brezak #include <sys/socket.h>
57 1.1 brezak
58 1.1 brezak #include <net/if.h>
59 1.1 brezak #include <net/bpf.h>
60 1.1 brezak
61 1.1 brezak #include <ctype.h>
62 1.1 brezak #include <errno.h>
63 1.1 brezak #include <fcntl.h>
64 1.1 brezak #include <stdio.h>
65 1.1 brezak #include <stdlib.h>
66 1.1 brezak #include <string.h>
67 1.1 brezak #include <syslog.h>
68 1.1 brezak #include <unistd.h>
69 1.1 brezak #include "defs.h"
70 1.1 brezak #include "pathnames.h"
71 1.1 brezak
72 1.1 brezak static int BpfFd = -1;
73 1.1 brezak static unsigned BpfLen = 0;
74 1.5 thorpej static u_int8_t *BpfPkt = NULL;
75 1.1 brezak
76 1.1 brezak /*
77 1.1 brezak ** BpfOpen -- Open and initialize a BPF device.
78 1.1 brezak **
79 1.1 brezak ** Parameters:
80 1.1 brezak ** None.
81 1.1 brezak **
82 1.1 brezak ** Returns:
83 1.1 brezak ** File descriptor of opened BPF device (for select() etc).
84 1.1 brezak **
85 1.1 brezak ** Side Effects:
86 1.1 brezak ** If an error is encountered, the program terminates here.
87 1.1 brezak */
88 1.1 brezak int
89 1.1 brezak BpfOpen()
90 1.1 brezak {
91 1.1 brezak struct ifreq ifr;
92 1.1 brezak char bpfdev[32];
93 1.1 brezak int n = 0;
94 1.1 brezak
95 1.1 brezak /*
96 1.1 brezak * Open the first available BPF device.
97 1.1 brezak */
98 1.1 brezak do {
99 1.1 brezak (void) sprintf(bpfdev, _PATH_BPF, n++);
100 1.1 brezak BpfFd = open(bpfdev, O_RDWR);
101 1.1 brezak } while (BpfFd < 0 && (errno == EBUSY || errno == EPERM));
102 1.1 brezak
103 1.1 brezak if (BpfFd < 0) {
104 1.1 brezak syslog(LOG_ERR, "bpf: no available devices: %m");
105 1.1 brezak Exit(0);
106 1.1 brezak }
107 1.1 brezak
108 1.1 brezak /*
109 1.1 brezak * Set interface name for bpf device, get data link layer
110 1.1 brezak * type and make sure it's type Ethernet.
111 1.1 brezak */
112 1.1 brezak (void) strncpy(ifr.ifr_name, IntfName, sizeof(ifr.ifr_name));
113 1.1 brezak if (ioctl(BpfFd, BIOCSETIF, (caddr_t)&ifr) < 0) {
114 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCSETIF,%s): %m", IntfName);
115 1.1 brezak Exit(0);
116 1.1 brezak }
117 1.1 brezak
118 1.1 brezak /*
119 1.1 brezak * Make sure we are dealing with an Ethernet device.
120 1.1 brezak */
121 1.1 brezak if (ioctl(BpfFd, BIOCGDLT, (caddr_t)&n) < 0) {
122 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCGDLT): %m");
123 1.1 brezak Exit(0);
124 1.1 brezak }
125 1.1 brezak if (n != DLT_EN10MB) {
126 1.1 brezak syslog(LOG_ERR,"bpf: %s: data-link type %d unsupported",
127 1.1 brezak IntfName, n);
128 1.1 brezak Exit(0);
129 1.1 brezak }
130 1.1 brezak
131 1.1 brezak /*
132 1.1 brezak * On read(), return packets immediately (do not buffer them).
133 1.1 brezak */
134 1.1 brezak n = 1;
135 1.1 brezak if (ioctl(BpfFd, BIOCIMMEDIATE, (caddr_t)&n) < 0) {
136 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCIMMEDIATE): %m");
137 1.1 brezak Exit(0);
138 1.1 brezak }
139 1.1 brezak
140 1.1 brezak /*
141 1.1 brezak * Try to enable the chip/driver's multicast address filter to
142 1.1 brezak * grab our RMP address. If this fails, try promiscuous mode.
143 1.1 brezak * If this fails, there's no way we are going to get any RMP
144 1.1 brezak * packets so just exit here.
145 1.1 brezak */
146 1.1 brezak #ifdef MSG_EOR
147 1.1 brezak ifr.ifr_addr.sa_len = RMP_ADDRLEN + 2;
148 1.1 brezak #endif
149 1.1 brezak ifr.ifr_addr.sa_family = AF_UNSPEC;
150 1.1 brezak bcopy(&RmpMcastAddr[0], (char *)&ifr.ifr_addr.sa_data[0], RMP_ADDRLEN);
151 1.1 brezak if (ioctl(BpfFd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
152 1.1 brezak syslog(LOG_WARNING,
153 1.1 brezak "bpf: can't add mcast addr (%m), setting promiscuous mode");
154 1.1 brezak
155 1.1 brezak if (ioctl(BpfFd, BIOCPROMISC, (caddr_t)0) < 0) {
156 1.1 brezak syslog(LOG_ERR, "bpf: can't set promiscuous mode: %m");
157 1.1 brezak Exit(0);
158 1.1 brezak }
159 1.1 brezak }
160 1.1 brezak
161 1.1 brezak /*
162 1.1 brezak * Ask BPF how much buffer space it requires and allocate one.
163 1.1 brezak */
164 1.1 brezak if (ioctl(BpfFd, BIOCGBLEN, (caddr_t)&BpfLen) < 0) {
165 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCGBLEN): %m");
166 1.1 brezak Exit(0);
167 1.1 brezak }
168 1.1 brezak if (BpfPkt == NULL)
169 1.5 thorpej BpfPkt = (u_int8_t *)malloc(BpfLen);
170 1.1 brezak
171 1.1 brezak if (BpfPkt == NULL) {
172 1.1 brezak syslog(LOG_ERR, "bpf: out of memory (%u bytes for bpfpkt)",
173 1.1 brezak BpfLen);
174 1.1 brezak Exit(0);
175 1.1 brezak }
176 1.1 brezak
177 1.1 brezak /*
178 1.1 brezak * Write a little program to snarf RMP Boot packets and stuff
179 1.1 brezak * it down BPF's throat (i.e. set up the packet filter).
180 1.1 brezak */
181 1.1 brezak {
182 1.1 brezak #define RMP ((struct rmp_packet *)0)
183 1.1 brezak static struct bpf_insn bpf_insn[] = {
184 1.1 brezak { BPF_LD|BPF_B|BPF_ABS, 0, 0, (long)&RMP->hp_llc.dsap },
185 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 5, IEEE_DSAP_HP },
186 1.1 brezak { BPF_LD|BPF_H|BPF_ABS, 0, 0, (long)&RMP->hp_llc.cntrl },
187 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 3, IEEE_CNTL_HP },
188 1.1 brezak { BPF_LD|BPF_H|BPF_ABS, 0, 0, (long)&RMP->hp_llc.dxsap },
189 1.1 brezak { BPF_JMP|BPF_JEQ|BPF_K, 0, 1, HPEXT_DXSAP },
190 1.1 brezak { BPF_RET|BPF_K, 0, 0, RMP_MAX_PACKET },
191 1.1 brezak { BPF_RET|BPF_K, 0, 0, 0x0 }
192 1.1 brezak };
193 1.1 brezak #undef RMP
194 1.1 brezak static struct bpf_program bpf_pgm = {
195 1.1 brezak sizeof(bpf_insn)/sizeof(bpf_insn[0]), bpf_insn
196 1.1 brezak };
197 1.1 brezak
198 1.1 brezak if (ioctl(BpfFd, BIOCSETF, (caddr_t)&bpf_pgm) < 0) {
199 1.1 brezak syslog(LOG_ERR, "bpf: ioctl(BIOCSETF): %m");
200 1.1 brezak Exit(0);
201 1.1 brezak }
202 1.1 brezak }
203 1.1 brezak
204 1.1 brezak return(BpfFd);
205 1.1 brezak }
206 1.1 brezak
207 1.1 brezak /*
208 1.1 brezak ** BPF GetIntfName -- Return the name of a network interface attached to
209 1.1 brezak ** the system, or 0 if none can be found. The interface
210 1.1 brezak ** must be configured up; the lowest unit number is
211 1.1 brezak ** preferred; loopback is ignored.
212 1.1 brezak **
213 1.1 brezak ** Parameters:
214 1.1 brezak ** errmsg - if no network interface found, *errmsg explains why.
215 1.1 brezak **
216 1.1 brezak ** Returns:
217 1.1 brezak ** A (static) pointer to interface name, or NULL on error.
218 1.1 brezak **
219 1.1 brezak ** Side Effects:
220 1.1 brezak ** None.
221 1.1 brezak */
222 1.1 brezak char *
223 1.1 brezak BpfGetIntfName(errmsg)
224 1.1 brezak char **errmsg;
225 1.1 brezak {
226 1.1 brezak struct ifreq ibuf[8], *ifrp, *ifend, *mp;
227 1.1 brezak struct ifconf ifc;
228 1.1 brezak int fd;
229 1.1 brezak int minunit, n;
230 1.1 brezak char *cp;
231 1.1 brezak static char device[sizeof(ifrp->ifr_name)];
232 1.1 brezak static char errbuf[128] = "No Error!";
233 1.1 brezak
234 1.1 brezak if (errmsg != NULL)
235 1.1 brezak *errmsg = errbuf;
236 1.1 brezak
237 1.1 brezak if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
238 1.1 brezak (void) strcpy(errbuf, "bpf: socket: %m");
239 1.1 brezak return(NULL);
240 1.1 brezak }
241 1.1 brezak ifc.ifc_len = sizeof ibuf;
242 1.1 brezak ifc.ifc_buf = (caddr_t)ibuf;
243 1.1 brezak
244 1.1 brezak #ifdef OSIOCGIFCONF
245 1.1 brezak if (ioctl(fd, OSIOCGIFCONF, (char *)&ifc) < 0 ||
246 1.1 brezak ifc.ifc_len < sizeof(struct ifreq)) {
247 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(OSIOCGIFCONF): %m");
248 1.1 brezak return(NULL);
249 1.1 brezak }
250 1.1 brezak #else
251 1.1 brezak if (ioctl(fd, SIOCGIFCONF, (char *)&ifc) < 0 ||
252 1.1 brezak ifc.ifc_len < sizeof(struct ifreq)) {
253 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(SIOCGIFCONF): %m");
254 1.1 brezak return(NULL);
255 1.1 brezak }
256 1.1 brezak #endif
257 1.1 brezak ifrp = ibuf;
258 1.1 brezak ifend = (struct ifreq *)((char *)ibuf + ifc.ifc_len);
259 1.1 brezak
260 1.1 brezak mp = 0;
261 1.1 brezak minunit = 666;
262 1.1 brezak for (; ifrp < ifend; ++ifrp) {
263 1.1 brezak if (ioctl(fd, SIOCGIFFLAGS, (char *)ifrp) < 0) {
264 1.1 brezak (void) strcpy(errbuf, "bpf: ioctl(SIOCGIFFLAGS): %m");
265 1.1 brezak return(NULL);
266 1.1 brezak }
267 1.1 brezak
268 1.1 brezak /*
269 1.1 brezak * If interface is down or this is the loopback interface,
270 1.1 brezak * ignore it.
271 1.1 brezak */
272 1.1 brezak if ((ifrp->ifr_flags & IFF_UP) == 0 ||
273 1.1 brezak #ifdef IFF_LOOPBACK
274 1.1 brezak (ifrp->ifr_flags & IFF_LOOPBACK))
275 1.1 brezak #else
276 1.1 brezak (strcmp(ifrp->ifr_name, "lo0") == 0))
277 1.1 brezak #endif
278 1.1 brezak continue;
279 1.1 brezak
280 1.1 brezak for (cp = ifrp->ifr_name; !isdigit(*cp); ++cp)
281 1.1 brezak ;
282 1.1 brezak n = atoi(cp);
283 1.1 brezak if (n < minunit) {
284 1.1 brezak minunit = n;
285 1.1 brezak mp = ifrp;
286 1.1 brezak }
287 1.1 brezak }
288 1.1 brezak
289 1.1 brezak (void) close(fd);
290 1.1 brezak if (mp == 0) {
291 1.1 brezak (void) strcpy(errbuf, "bpf: no interfaces found");
292 1.1 brezak return(NULL);
293 1.1 brezak }
294 1.1 brezak
295 1.1 brezak (void) strcpy(device, mp->ifr_name);
296 1.1 brezak return(device);
297 1.1 brezak }
298 1.1 brezak
299 1.1 brezak /*
300 1.1 brezak ** BpfRead -- Read packets from a BPF device and fill in `rconn'.
301 1.1 brezak **
302 1.1 brezak ** Parameters:
303 1.1 brezak ** rconn - filled in with next packet.
304 1.1 brezak ** doread - is True if we can issue a read() syscall.
305 1.1 brezak **
306 1.1 brezak ** Returns:
307 1.1 brezak ** True if `rconn' contains a new packet, False otherwise.
308 1.1 brezak **
309 1.1 brezak ** Side Effects:
310 1.1 brezak ** None.
311 1.1 brezak */
312 1.1 brezak int
313 1.1 brezak BpfRead(rconn, doread)
314 1.1 brezak RMPCONN *rconn;
315 1.1 brezak int doread;
316 1.1 brezak {
317 1.1 brezak register int datlen, caplen, hdrlen;
318 1.5 thorpej static u_int8_t *bp = NULL, *ep = NULL;
319 1.1 brezak int cc;
320 1.1 brezak
321 1.1 brezak /*
322 1.1 brezak * The read() may block, or it may return one or more packets.
323 1.1 brezak * We let the caller decide whether or not we can issue a read().
324 1.1 brezak */
325 1.1 brezak if (doread) {
326 1.1 brezak if ((cc = read(BpfFd, (char *)BpfPkt, (int)BpfLen)) < 0) {
327 1.1 brezak syslog(LOG_ERR, "bpf: read: %m");
328 1.1 brezak return(0);
329 1.1 brezak } else {
330 1.1 brezak bp = BpfPkt;
331 1.1 brezak ep = BpfPkt + cc;
332 1.1 brezak }
333 1.1 brezak }
334 1.1 brezak
335 1.1 brezak #define bhp ((struct bpf_hdr *)bp)
336 1.1 brezak /*
337 1.1 brezak * If there is a new packet in the buffer, stuff it into `rconn'
338 1.1 brezak * and return a success indication.
339 1.1 brezak */
340 1.1 brezak if (bp < ep) {
341 1.1 brezak datlen = bhp->bh_datalen;
342 1.1 brezak caplen = bhp->bh_caplen;
343 1.1 brezak hdrlen = bhp->bh_hdrlen;
344 1.1 brezak
345 1.1 brezak if (caplen != datlen)
346 1.1 brezak syslog(LOG_ERR,
347 1.1 brezak "bpf: short packet dropped (%d of %d bytes)",
348 1.1 brezak caplen, datlen);
349 1.1 brezak else if (caplen > sizeof(struct rmp_packet))
350 1.1 brezak syslog(LOG_ERR, "bpf: large packet dropped (%d bytes)",
351 1.1 brezak caplen);
352 1.1 brezak else {
353 1.6 thorpej rconn->rmplen = caplen;
354 1.1 brezak bcopy((char *)&bhp->bh_tstamp, (char *)&rconn->tstamp,
355 1.1 brezak sizeof(struct timeval));
356 1.1 brezak bcopy((char *)bp + hdrlen, (char *)&rconn->rmp, caplen);
357 1.1 brezak }
358 1.1 brezak bp += BPF_WORDALIGN(caplen + hdrlen);
359 1.1 brezak return(1);
360 1.1 brezak }
361 1.1 brezak #undef bhp
362 1.1 brezak
363 1.1 brezak return(0);
364 1.1 brezak }
365 1.1 brezak
366 1.1 brezak /*
367 1.1 brezak ** BpfWrite -- Write packet to BPF device.
368 1.1 brezak **
369 1.1 brezak ** Parameters:
370 1.1 brezak ** rconn - packet to send.
371 1.1 brezak **
372 1.1 brezak ** Returns:
373 1.1 brezak ** True if write succeeded, False otherwise.
374 1.1 brezak **
375 1.1 brezak ** Side Effects:
376 1.1 brezak ** None.
377 1.1 brezak */
378 1.1 brezak int
379 1.1 brezak BpfWrite(rconn)
380 1.1 brezak RMPCONN *rconn;
381 1.1 brezak {
382 1.6 thorpej if (write(BpfFd, (char *)&rconn->rmp, rconn->rmplen) < 0) {
383 1.1 brezak syslog(LOG_ERR, "write: %s: %m", EnetStr(rconn));
384 1.1 brezak return(0);
385 1.1 brezak }
386 1.1 brezak
387 1.1 brezak return(1);
388 1.1 brezak }
389 1.1 brezak
390 1.1 brezak /*
391 1.1 brezak ** BpfClose -- Close a BPF device.
392 1.1 brezak **
393 1.1 brezak ** Parameters:
394 1.1 brezak ** None.
395 1.1 brezak **
396 1.1 brezak ** Returns:
397 1.1 brezak ** Nothing.
398 1.1 brezak **
399 1.1 brezak ** Side Effects:
400 1.1 brezak ** None.
401 1.1 brezak */
402 1.1 brezak void
403 1.1 brezak BpfClose()
404 1.1 brezak {
405 1.1 brezak struct ifreq ifr;
406 1.1 brezak
407 1.1 brezak if (BpfPkt != NULL) {
408 1.1 brezak free((char *)BpfPkt);
409 1.1 brezak BpfPkt = NULL;
410 1.1 brezak }
411 1.1 brezak
412 1.1 brezak if (BpfFd == -1)
413 1.1 brezak return;
414 1.1 brezak
415 1.1 brezak #ifdef MSG_EOR
416 1.1 brezak ifr.ifr_addr.sa_len = RMP_ADDRLEN + 2;
417 1.1 brezak #endif
418 1.1 brezak ifr.ifr_addr.sa_family = AF_UNSPEC;
419 1.1 brezak bcopy(&RmpMcastAddr[0], (char *)&ifr.ifr_addr.sa_data[0], RMP_ADDRLEN);
420 1.1 brezak if (ioctl(BpfFd, SIOCDELMULTI, (caddr_t)&ifr) < 0)
421 1.1 brezak (void) ioctl(BpfFd, BIOCPROMISC, (caddr_t)0);
422 1.1 brezak
423 1.1 brezak (void) close(BpfFd);
424 1.1 brezak BpfFd = -1;
425 1.1 brezak }
426