1 /*- 2 * Copyright (c) 2005 Christian S.J. Peron 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24 * SUCH DAMAGE. 25 */ 26 27 #include <sys/cdefs.h> 28 __FBSDID("$FreeBSD$"); 29 30 #include <sys/types.h> 31 #include <sys/protosw.h> 32 #include <sys/socket.h> 33 #include <sys/socketvar.h> 34 #include <sys/sysctl.h> 35 #include <sys/param.h> 36 #include <sys/user.h> 37 38 #include <net/if.h> 39 #include <net/bpf.h> 40 #include <net/bpfdesc.h> 41 #include <arpa/inet.h> 42 43 #include <err.h> 44 #include <errno.h> 45 #include <stdint.h> 46 #include <stdio.h> 47 #include <stdlib.h> 48 #include <stdbool.h> 49 #include <string.h> 50 #include <unistd.h> 51 #include <libxo/xo.h> 52 53 #include "netstat.h" 54 55 /* print bpf stats */ 56 57 static char * 58 bpf_pidname(pid_t pid) 59 { 60 struct kinfo_proc newkp; 61 int error, mib[4]; 62 size_t size; 63 64 mib[0] = CTL_KERN; 65 mib[1] = KERN_PROC; 66 mib[2] = KERN_PROC_PID; 67 mib[3] = pid; 68 size = sizeof(newkp); 69 error = sysctl(mib, 4, &newkp, &size, NULL, 0); 70 if (error < 0) { 71 xo_warn("kern.proc.pid failed"); 72 return (strdup("??????")); 73 } 74 return (strdup(newkp.ki_comm)); 75 } 76 77 static void 78 bpf_flags(struct xbpf_d *bd, char *flagbuf) 79 { 80 81 *flagbuf++ = bd->bd_promisc ? 'p' : '-'; 82 *flagbuf++ = bd->bd_immediate ? 'i' : '-'; 83 *flagbuf++ = bd->bd_hdrcmplt ? '-' : 'f'; 84 *flagbuf++ = (bd->bd_direction == BPF_D_IN) ? '-' : 85 ((bd->bd_direction == BPF_D_OUT) ? 'o' : 's'); 86 *flagbuf++ = bd->bd_feedback ? 'b' : '-'; 87 *flagbuf++ = bd->bd_async ? 'a' : '-'; 88 *flagbuf++ = bd->bd_locked ? 'l' : '-'; 89 *flagbuf++ = '\0'; 90 91 if (bd->bd_promisc) 92 xo_emit("{e:promiscuous/}"); 93 if (bd->bd_immediate) 94 xo_emit("{e:immediate/}"); 95 if (bd->bd_hdrcmplt) 96 xo_emit("{e:header-complete/}"); 97 xo_emit("{e:direction}", (bd->bd_direction == BPF_D_IN) ? "input" : 98 (bd->bd_direction == BPF_D_OUT) ? "output" : "bidirectional"); 99 if (bd->bd_feedback) 100 xo_emit("{e:feedback/}"); 101 if (bd->bd_async) 102 xo_emit("{e:async/}"); 103 if (bd->bd_locked) 104 xo_emit("{e:locked/}"); 105 } 106 107 void 108 bpf_stats(char *ifname) 109 { 110 struct xbpf_d *d, *bd, zerostat; 111 char *pname, flagbuf[12]; 112 size_t size; 113 114 if (zflag) { 115 bzero(&zerostat, sizeof(zerostat)); 116 if (sysctlbyname("net.bpf.stats", NULL, NULL, 117 &zerostat, sizeof(zerostat)) < 0) 118 xo_warn("failed to zero bpf counters"); 119 return; 120 } 121 if (sysctlbyname("net.bpf.stats", NULL, &size, 122 NULL, 0) < 0) { 123 xo_warn("net.bpf.stats"); 124 return; 125 } 126 if (size == 0) 127 return; 128 bd = malloc(size); 129 if (bd == NULL) { 130 xo_warn("malloc failed"); 131 return; 132 } 133 if (sysctlbyname("net.bpf.stats", bd, &size, 134 NULL, 0) < 0) { 135 xo_warn("net.bpf.stats"); 136 free(bd); 137 return; 138 } 139 xo_emit("{T:/%5s} {T:/%6s} {T:/%7s} {T:/%9s} {T:/%9s} {T:/%9s} " 140 "{T:/%5s} {T:/%5s} {T:/%s}\n", 141 "Pid", "Netif", "Flags", "Recv", "Drop", "Match", 142 "Sblen", "Hblen", "Command"); 143 xo_open_container("bpf-statistics"); 144 xo_open_list("bpf-entry"); 145 for (d = &bd[0]; d < &bd[size / sizeof(*d)]; d++) { 146 if (d->bd_structsize != sizeof(*d)) { 147 xo_warnx("bpf_stats_extended: version mismatch"); 148 return; 149 } 150 if (ifname && strcmp(ifname, d->bd_ifname) != 0) 151 continue; 152 xo_open_instance("bpf-entry"); 153 pname = bpf_pidname(d->bd_pid); 154 xo_emit("{k:pid/%5d} {k:interface-name/%6s} ", 155 d->bd_pid, d->bd_ifname); 156 bpf_flags(d, flagbuf); 157 xo_emit("{d:flags/%7s} {:received-packets/%9ju} " 158 "{:dropped-packets/%9ju} {:filter-packets/%9ju} " 159 "{:store-buffer-length/%5d} {:hold-buffer-length/%5d} " 160 "{:process/%s}\n", 161 flagbuf, (uintmax_t)d->bd_rcount, (uintmax_t)d->bd_dcount, 162 (uintmax_t)d->bd_fcount, d->bd_slen, d->bd_hlen, pname); 163 free(pname); 164 xo_close_instance("bpf-entry"); 165 } 166 xo_close_list("bpf-entry"); 167 xo_close_container("bpf-statistics"); 168 free(bd); 169 } 170