xref: /freebsd/usr.bin/netstat/inet.c (revision 9a0c3479e22feda1bdb2db4b97f9deb1b5fa6269)
1 /*-
2  * Copyright (c) 1983, 1988, 1993, 1995
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 4. Neither the name of the University nor the names of its contributors
14  *    may be used to endorse or promote products derived from this software
15  *    without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  */
29 
30 #if 0
31 #ifndef lint
32 static char sccsid[] = "@(#)inet.c	8.5 (Berkeley) 5/24/95";
33 #endif /* not lint */
34 #endif
35 
36 #include <sys/cdefs.h>
37 __FBSDID("$FreeBSD$");
38 
39 #include <sys/param.h>
40 #include <sys/queue.h>
41 #include <sys/domain.h>
42 #include <sys/protosw.h>
43 #include <sys/socket.h>
44 #include <sys/socketvar.h>
45 #include <sys/sysctl.h>
46 
47 #include <net/route.h>
48 #include <net/if_arp.h>
49 #include <netinet/in.h>
50 #include <netinet/in_systm.h>
51 #include <netinet/ip.h>
52 #include <netinet/ip_carp.h>
53 #ifdef INET6
54 #include <netinet/ip6.h>
55 #endif /* INET6 */
56 #include <netinet/in_pcb.h>
57 #include <netinet/ip_icmp.h>
58 #include <netinet/icmp_var.h>
59 #include <netinet/igmp_var.h>
60 #include <netinet/ip_var.h>
61 #include <netinet/pim_var.h>
62 #include <netinet/tcp.h>
63 #include <netinet/tcpip.h>
64 #include <netinet/tcp_seq.h>
65 #define	TCPSTATES
66 #include <netinet/tcp_fsm.h>
67 #include <netinet/tcp_timer.h>
68 #include <netinet/tcp_var.h>
69 #include <netinet/tcp_debug.h>
70 #include <netinet/udp.h>
71 #include <netinet/udp_var.h>
72 
73 #include <arpa/inet.h>
74 #include <err.h>
75 #include <errno.h>
76 #include <libutil.h>
77 #include <netdb.h>
78 #include <stdint.h>
79 #include <stdio.h>
80 #include <stdlib.h>
81 #include <string.h>
82 #include <unistd.h>
83 #include "netstat.h"
84 
85 char	*inetname(struct in_addr *);
86 void	inetprint(struct in_addr *, int, const char *, int);
87 #ifdef INET6
88 static int udp_done, tcp_done, sdp_done;
89 #endif /* INET6 */
90 
91 static int
92 pcblist_sysctl(int proto, const char *name, char **bufp, int istcp __unused)
93 {
94 	const char *mibvar;
95 	char *buf;
96 	size_t len;
97 
98 	switch (proto) {
99 	case IPPROTO_TCP:
100 		mibvar = "net.inet.tcp.pcblist";
101 		break;
102 	case IPPROTO_UDP:
103 		mibvar = "net.inet.udp.pcblist";
104 		break;
105 	case IPPROTO_DIVERT:
106 		mibvar = "net.inet.divert.pcblist";
107 		break;
108 	default:
109 		mibvar = "net.inet.raw.pcblist";
110 		break;
111 	}
112 	if (strncmp(name, "sdp", 3) == 0)
113 		mibvar = "net.inet.sdp.pcblist";
114 	len = 0;
115 	if (sysctlbyname(mibvar, 0, &len, 0, 0) < 0) {
116 		if (errno != ENOENT)
117 			warn("sysctl: %s", mibvar);
118 		return (0);
119 	}
120 	if ((buf = malloc(len)) == 0) {
121 		warnx("malloc %lu bytes", (u_long)len);
122 		return (0);
123 	}
124 	if (sysctlbyname(mibvar, buf, &len, 0, 0) < 0) {
125 		warn("sysctl: %s", mibvar);
126 		free(buf);
127 		return (0);
128 	}
129 	*bufp = buf;
130 	return (1);
131 }
132 
133 /*
134  * Copied directly from uipc_socket2.c.  We leave out some fields that are in
135  * nested structures that aren't used to avoid extra work.
136  */
137 static void
138 sbtoxsockbuf(struct sockbuf *sb, struct xsockbuf *xsb)
139 {
140 	xsb->sb_cc = sb->sb_cc;
141 	xsb->sb_hiwat = sb->sb_hiwat;
142 	xsb->sb_mbcnt = sb->sb_mbcnt;
143 	xsb->sb_mcnt = sb->sb_mcnt;
144 	xsb->sb_ccnt = sb->sb_ccnt;
145 	xsb->sb_mbmax = sb->sb_mbmax;
146 	xsb->sb_lowat = sb->sb_lowat;
147 	xsb->sb_flags = sb->sb_flags;
148 	xsb->sb_timeo = sb->sb_timeo;
149 }
150 
151 int
152 sotoxsocket(struct socket *so, struct xsocket *xso)
153 {
154 	struct protosw proto;
155 	struct domain domain;
156 
157 	bzero(xso, sizeof *xso);
158 	xso->xso_len = sizeof *xso;
159 	xso->xso_so = so;
160 	xso->so_type = so->so_type;
161 	xso->so_options = so->so_options;
162 	xso->so_linger = so->so_linger;
163 	xso->so_state = so->so_state;
164 	xso->so_pcb = so->so_pcb;
165 	if (kread((uintptr_t)so->so_proto, &proto, sizeof(proto)) != 0)
166 		return (-1);
167 	xso->xso_protocol = proto.pr_protocol;
168 	if (kread((uintptr_t)proto.pr_domain, &domain, sizeof(domain)) != 0)
169 		return (-1);
170 	xso->xso_family = domain.dom_family;
171 	xso->so_qlen = so->so_qlen;
172 	xso->so_incqlen = so->so_incqlen;
173 	xso->so_qlimit = so->so_qlimit;
174 	xso->so_timeo = so->so_timeo;
175 	xso->so_error = so->so_error;
176 	xso->so_oobmark = so->so_oobmark;
177 	sbtoxsockbuf(&so->so_snd, &xso->so_snd);
178 	sbtoxsockbuf(&so->so_rcv, &xso->so_rcv);
179 	return (0);
180 }
181 
182 static int
183 pcblist_kvm(u_long off, char **bufp, int istcp)
184 {
185 	struct inpcbinfo pcbinfo;
186 	struct inpcbhead listhead;
187 	struct inpcb *inp;
188 	struct xinpcb xi;
189 	struct xinpgen xig;
190 	struct xtcpcb xt;
191 	struct socket so;
192 	struct xsocket *xso;
193 	char *buf, *p;
194 	size_t len;
195 
196 	if (off == 0)
197 		return (0);
198 	kread(off, &pcbinfo, sizeof(pcbinfo));
199 	if (istcp)
200 		len = 2 * sizeof(xig) +
201 		    (pcbinfo.ipi_count + pcbinfo.ipi_count / 8) *
202 		    sizeof(struct xtcpcb);
203 	else
204 		len = 2 * sizeof(xig) +
205 		    (pcbinfo.ipi_count + pcbinfo.ipi_count / 8) *
206 		    sizeof(struct xinpcb);
207 	if ((buf = malloc(len)) == 0) {
208 		warnx("malloc %lu bytes", (u_long)len);
209 		return (0);
210 	}
211 	p = buf;
212 
213 #define	COPYOUT(obj, size) do {						\
214 	if (len < (size)) {						\
215 		warnx("buffer size exceeded");				\
216 		goto fail;						\
217 	}								\
218 	bcopy((obj), p, (size));					\
219 	len -= (size);							\
220 	p += (size);							\
221 } while (0)
222 
223 #define	KREAD(off, buf, len) do {					\
224 	if (kread((uintptr_t)(off), (buf), (len)) != 0)			\
225 		goto fail;						\
226 } while (0)
227 
228 	/* Write out header. */
229 	xig.xig_len = sizeof xig;
230 	xig.xig_count = pcbinfo.ipi_count;
231 	xig.xig_gen = pcbinfo.ipi_gencnt;
232 	xig.xig_sogen = 0;
233 	COPYOUT(&xig, sizeof xig);
234 
235 	/* Walk the PCB list. */
236 	xt.xt_len = sizeof xt;
237 	xi.xi_len = sizeof xi;
238 	if (istcp)
239 		xso = &xt.xt_socket;
240 	else
241 		xso = &xi.xi_socket;
242 	KREAD(pcbinfo.ipi_listhead, &listhead, sizeof(listhead));
243 	LIST_FOREACH(inp, &listhead, inp_list) {
244 		if (istcp) {
245 			KREAD(inp, &xt.xt_inp, sizeof(*inp));
246 			inp = &xt.xt_inp;
247 		} else {
248 			KREAD(inp, &xi.xi_inp, sizeof(*inp));
249 			inp = &xi.xi_inp;
250 		}
251 
252 		if (inp->inp_gencnt > pcbinfo.ipi_gencnt)
253 			continue;
254 
255 		if (istcp) {
256 			if (inp->inp_ppcb == NULL)
257 				bzero(&xt.xt_tp, sizeof xt.xt_tp);
258 			else if (inp->inp_flags & INP_TIMEWAIT) {
259 				bzero(&xt.xt_tp, sizeof xt.xt_tp);
260 				xt.xt_tp.t_state = TCPS_TIME_WAIT;
261 			} else
262 				KREAD(inp->inp_ppcb, &xt.xt_tp,
263 				    sizeof xt.xt_tp);
264 		}
265 		if (inp->inp_socket) {
266 			KREAD(inp->inp_socket, &so, sizeof(so));
267 			if (sotoxsocket(&so, xso) != 0)
268 				goto fail;
269 		} else {
270 			bzero(xso, sizeof(*xso));
271 			if (istcp)
272 				xso->xso_protocol = IPPROTO_TCP;
273 		}
274 		if (istcp)
275 			COPYOUT(&xt, sizeof xt);
276 		else
277 			COPYOUT(&xi, sizeof xi);
278 	}
279 
280 	/* Reread the pcbinfo and write out the footer. */
281 	kread(off, &pcbinfo, sizeof(pcbinfo));
282 	xig.xig_count = pcbinfo.ipi_count;
283 	xig.xig_gen = pcbinfo.ipi_gencnt;
284 	COPYOUT(&xig, sizeof xig);
285 
286 	*bufp = buf;
287 	return (1);
288 
289 fail:
290 	free(buf);
291 	return (0);
292 #undef COPYOUT
293 #undef KREAD
294 }
295 
296 /*
297  * Print a summary of connections related to an Internet
298  * protocol.  For TCP, also give state of connection.
299  * Listening processes (aflag) are suppressed unless the
300  * -a (all) flag is specified.
301  */
302 void
303 protopr(u_long off, const char *name, int af1, int proto)
304 {
305 	int istcp;
306 	static int first = 1;
307 	char *buf;
308 	const char *vchar;
309 	struct tcpcb *tp = NULL;
310 	struct inpcb *inp;
311 	struct xinpgen *xig, *oxig;
312 	struct xsocket *so;
313 	struct xtcp_timer *timer;
314 
315 	istcp = 0;
316 	switch (proto) {
317 	case IPPROTO_TCP:
318 #ifdef INET6
319 		if (strncmp(name, "sdp", 3) != 0) {
320 			if (tcp_done != 0)
321 				return;
322 			else
323 				tcp_done = 1;
324 		} else {
325 			if (sdp_done != 0)
326 				return;
327 			else
328 				sdp_done = 1;
329 		}
330 #endif
331 		istcp = 1;
332 		break;
333 	case IPPROTO_UDP:
334 #ifdef INET6
335 		if (udp_done != 0)
336 			return;
337 		else
338 			udp_done = 1;
339 #endif
340 		break;
341 	}
342 	if (live) {
343 		if (!pcblist_sysctl(proto, name, &buf, istcp))
344 			return;
345 	} else {
346 		if (!pcblist_kvm(off, &buf, istcp))
347 			return;
348 	}
349 
350 	oxig = xig = (struct xinpgen *)buf;
351 	for (xig = (struct xinpgen *)((char *)xig + xig->xig_len);
352 	     xig->xig_len > sizeof(struct xinpgen);
353 	     xig = (struct xinpgen *)((char *)xig + xig->xig_len)) {
354 		if (istcp) {
355 			timer = &((struct xtcpcb *)xig)->xt_timer;
356 			tp = &((struct xtcpcb *)xig)->xt_tp;
357 			inp = &((struct xtcpcb *)xig)->xt_inp;
358 			so = &((struct xtcpcb *)xig)->xt_socket;
359 		} else {
360 			inp = &((struct xinpcb *)xig)->xi_inp;
361 			so = &((struct xinpcb *)xig)->xi_socket;
362 			timer = NULL;
363 		}
364 
365 		/* Ignore sockets for protocols other than the desired one. */
366 		if (so->xso_protocol != proto)
367 			continue;
368 
369 		/* Ignore PCBs which were freed during copyout. */
370 		if (inp->inp_gencnt > oxig->xig_gen)
371 			continue;
372 
373 		if ((af1 == AF_INET && (inp->inp_vflag & INP_IPV4) == 0)
374 #ifdef INET6
375 		    || (af1 == AF_INET6 && (inp->inp_vflag & INP_IPV6) == 0)
376 #endif /* INET6 */
377 		    || (af1 == AF_UNSPEC && ((inp->inp_vflag & INP_IPV4) == 0
378 #ifdef INET6
379 					  && (inp->inp_vflag & INP_IPV6) == 0
380 #endif /* INET6 */
381 			))
382 		    )
383 			continue;
384 		if (!aflag &&
385 		    (
386 		     (istcp && tp->t_state == TCPS_LISTEN)
387 		     || (af1 == AF_INET &&
388 		      inet_lnaof(inp->inp_laddr) == INADDR_ANY)
389 #ifdef INET6
390 		     || (af1 == AF_INET6 &&
391 			 IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_laddr))
392 #endif /* INET6 */
393 		     || (af1 == AF_UNSPEC &&
394 			 (((inp->inp_vflag & INP_IPV4) != 0 &&
395 			   inet_lnaof(inp->inp_laddr) == INADDR_ANY)
396 #ifdef INET6
397 			  || ((inp->inp_vflag & INP_IPV6) != 0 &&
398 			      IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_laddr))
399 #endif
400 			  ))
401 		     ))
402 			continue;
403 
404 		if (first) {
405 			if (!Lflag) {
406 				printf("Active Internet connections");
407 				if (aflag)
408 					printf(" (including servers)");
409 			} else
410 				printf(
411 	"Current listen queue sizes (qlen/incqlen/maxqlen)");
412 			putchar('\n');
413 			if (Aflag)
414 				printf("%-*s ", 2 * (int)sizeof(void *), "Tcpcb");
415 			if (Lflag)
416 				printf((Aflag && !Wflag) ?
417 				    "%-5.5s %-14.14s %-18.18s" :
418 				    "%-5.5s %-14.14s %-22.22s",
419 				    "Proto", "Listen", "Local Address");
420 			else if (Tflag)
421 				printf((Aflag && !Wflag) ?
422 			    "%-5.5s %-6.6s %-6.6s %-6.6s %-18.18s %s" :
423 			    "%-5.5s %-6.6s %-6.6s %-6.6s %-22.22s %s",
424 				    "Proto", "Rexmit", "OOORcv", "0-win",
425 				    "Local Address", "Foreign Address");
426 			else {
427 				printf((Aflag && !Wflag) ?
428 				       "%-5.5s %-6.6s %-6.6s %-18.18s %-18.18s" :
429 				       "%-5.5s %-6.6s %-6.6s %-22.22s %-22.22s",
430 				       "Proto", "Recv-Q", "Send-Q",
431 				       "Local Address", "Foreign Address");
432 				if (!xflag)
433 					printf(" (state)");
434 			}
435 			if (xflag) {
436 				printf(" %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s",
437 				       "R-MBUF", "S-MBUF", "R-CLUS",
438 				       "S-CLUS", "R-HIWA", "S-HIWA",
439 				       "R-LOWA", "S-LOWA", "R-BCNT",
440 				       "S-BCNT", "R-BMAX", "S-BMAX");
441 				printf(" %7.7s %7.7s %7.7s %7.7s %7.7s %7.7s",
442 				       "rexmt", "persist", "keep",
443 				       "2msl", "delack", "rcvtime");
444 			}
445 			putchar('\n');
446 			first = 0;
447 		}
448 		if (Lflag && so->so_qlimit == 0)
449 			continue;
450 		if (Aflag) {
451 			if (istcp)
452 				printf("%*lx ", 2 * (int)sizeof(void *), (u_long)inp->inp_ppcb);
453 			else
454 				printf("%*lx ", 2 * (int)sizeof(void *), (u_long)so->so_pcb);
455 		}
456 #ifdef INET6
457 		if ((inp->inp_vflag & INP_IPV6) != 0)
458 			vchar = ((inp->inp_vflag & INP_IPV4) != 0) ?
459 			    "46" : "6 ";
460 		else
461 #endif
462 		vchar = ((inp->inp_vflag & INP_IPV4) != 0) ?
463 		    "4 " : "  ";
464 		if (istcp && (tp->t_flags & TF_TOE) != 0)
465 			printf("%-3.3s%-2.2s ", "toe", vchar);
466 		else
467 			printf("%-3.3s%-2.2s ", name, vchar);
468 		if (Lflag) {
469 			char buf1[15];
470 
471 			snprintf(buf1, 15, "%d/%d/%d", so->so_qlen,
472 			    so->so_incqlen, so->so_qlimit);
473 			printf("%-14.14s ", buf1);
474 		} else if (Tflag) {
475 			if (istcp)
476 				printf("%6u %6u %6u ", tp->t_sndrexmitpack,
477 				       tp->t_rcvoopack, tp->t_sndzerowin);
478 		} else {
479 			printf("%6u %6u ", so->so_rcv.sb_cc, so->so_snd.sb_cc);
480 		}
481 		if (numeric_port) {
482 			if (inp->inp_vflag & INP_IPV4) {
483 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
484 				    name, 1);
485 				if (!Lflag)
486 					inetprint(&inp->inp_faddr,
487 					    (int)inp->inp_fport, name, 1);
488 			}
489 #ifdef INET6
490 			else if (inp->inp_vflag & INP_IPV6) {
491 				inet6print(&inp->in6p_laddr,
492 				    (int)inp->inp_lport, name, 1);
493 				if (!Lflag)
494 					inet6print(&inp->in6p_faddr,
495 					    (int)inp->inp_fport, name, 1);
496 			} /* else nothing printed now */
497 #endif /* INET6 */
498 		} else if (inp->inp_flags & INP_ANONPORT) {
499 			if (inp->inp_vflag & INP_IPV4) {
500 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
501 				    name, 1);
502 				if (!Lflag)
503 					inetprint(&inp->inp_faddr,
504 					    (int)inp->inp_fport, name, 0);
505 			}
506 #ifdef INET6
507 			else if (inp->inp_vflag & INP_IPV6) {
508 				inet6print(&inp->in6p_laddr,
509 				    (int)inp->inp_lport, name, 1);
510 				if (!Lflag)
511 					inet6print(&inp->in6p_faddr,
512 					    (int)inp->inp_fport, name, 0);
513 			} /* else nothing printed now */
514 #endif /* INET6 */
515 		} else {
516 			if (inp->inp_vflag & INP_IPV4) {
517 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
518 				    name, 0);
519 				if (!Lflag)
520 					inetprint(&inp->inp_faddr,
521 					    (int)inp->inp_fport, name,
522 					    inp->inp_lport != inp->inp_fport);
523 			}
524 #ifdef INET6
525 			else if (inp->inp_vflag & INP_IPV6) {
526 				inet6print(&inp->in6p_laddr,
527 				    (int)inp->inp_lport, name, 0);
528 				if (!Lflag)
529 					inet6print(&inp->in6p_faddr,
530 					    (int)inp->inp_fport, name,
531 					    inp->inp_lport != inp->inp_fport);
532 			} /* else nothing printed now */
533 #endif /* INET6 */
534 		}
535 		if (xflag) {
536 			printf("%6u %6u %6u %6u %6u %6u %6u %6u %6u %6u %6u %6u",
537 			       so->so_rcv.sb_mcnt, so->so_snd.sb_mcnt,
538 			       so->so_rcv.sb_ccnt, so->so_snd.sb_ccnt,
539 			       so->so_rcv.sb_hiwat, so->so_snd.sb_hiwat,
540 			       so->so_rcv.sb_lowat, so->so_snd.sb_lowat,
541 			       so->so_rcv.sb_mbcnt, so->so_snd.sb_mbcnt,
542 			       so->so_rcv.sb_mbmax, so->so_snd.sb_mbmax);
543 			if (timer != NULL)
544 				printf(" %4d.%02d %4d.%02d %4d.%02d %4d.%02d %4d.%02d %4d.%02d",
545 				    timer->tt_rexmt / 1000, (timer->tt_rexmt % 1000) / 10,
546 				    timer->tt_persist / 1000, (timer->tt_persist % 1000) / 10,
547 				    timer->tt_keep / 1000, (timer->tt_keep % 1000) / 10,
548 				    timer->tt_2msl / 1000, (timer->tt_2msl % 1000) / 10,
549 				    timer->tt_delack / 1000, (timer->tt_delack % 1000) / 10,
550 				    timer->t_rcvtime / 1000, (timer->t_rcvtime % 1000) / 10);
551 		}
552 		if (istcp && !Lflag && !xflag && !Tflag) {
553 			if (tp->t_state < 0 || tp->t_state >= TCP_NSTATES)
554 				printf("%d", tp->t_state);
555 			else {
556 				printf("%s", tcpstates[tp->t_state]);
557 #if defined(TF_NEEDSYN) && defined(TF_NEEDFIN)
558 				/* Show T/TCP `hidden state' */
559 				if (tp->t_flags & (TF_NEEDSYN|TF_NEEDFIN))
560 					putchar('*');
561 #endif /* defined(TF_NEEDSYN) && defined(TF_NEEDFIN) */
562 			}
563 		}
564 		putchar('\n');
565 	}
566 	if (xig != oxig && xig->xig_gen != oxig->xig_gen) {
567 		if (oxig->xig_count > xig->xig_count) {
568 			printf("Some %s sockets may have been deleted.\n",
569 			    name);
570 		} else if (oxig->xig_count < xig->xig_count) {
571 			printf("Some %s sockets may have been created.\n",
572 			    name);
573 		} else {
574 			printf(
575 	"Some %s sockets may have been created or deleted.\n",
576 			    name);
577 		}
578 	}
579 	free(buf);
580 }
581 
582 /*
583  * Dump TCP statistics structure.
584  */
585 void
586 tcp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
587 {
588 	struct tcpstat tcpstat, zerostat;
589 	size_t len = sizeof tcpstat;
590 
591 #ifdef INET6
592 	if (tcp_done != 0)
593 		return;
594 	else
595 		tcp_done = 1;
596 #endif
597 
598 	if (live) {
599 		if (zflag)
600 			memset(&zerostat, 0, len);
601 		if (sysctlbyname("net.inet.tcp.stats", &tcpstat, &len,
602 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
603 			warn("sysctl: net.inet.tcp.stats");
604 			return;
605 		}
606 	} else {
607 		u_long tcpstat_p[sizeof(struct tcpstat)/sizeof(uint64_t)];
608 
609 		kread(off, &tcpstat_p, sizeof(tcpstat_p));
610 		kread_counters(tcpstat_p, (uint64_t *)&tcpstat,
611 		    sizeof(struct tcpstat)/sizeof(uint64_t));
612 	}
613 
614 	printf ("%s:\n", name);
615 
616 #define	p(f, m) if (tcpstat.f || sflag <= 1)				\
617 	printf(m, (uintmax_t )tcpstat.f, plural(tcpstat.f))
618 
619 #define	p1a(f, m) if (tcpstat.f || sflag <= 1)				\
620 	printf(m, (uintmax_t )tcpstat.f)
621 
622 #define	p2(f1, f2, m) if (tcpstat.f1 || tcpstat.f2 || sflag <= 1)	\
623 	printf(m, (uintmax_t )tcpstat.f1, plural(tcpstat.f1),		\
624 	    (uintmax_t )tcpstat.f2, plural(tcpstat.f2))
625 
626 #define	p2a(f1, f2, m) if (tcpstat.f1 || tcpstat.f2 || sflag <= 1)	\
627 	printf(m, (uintmax_t )tcpstat.f1, plural(tcpstat.f1),		\
628 	    (uintmax_t )tcpstat.f2)
629 
630 #define	p3(f, m) if (tcpstat.f || sflag <= 1)				\
631 	printf(m, (uintmax_t )tcpstat.f, pluralies(tcpstat.f))
632 
633 	p(tcps_sndtotal, "\t%ju packet%s sent\n");
634 	p2(tcps_sndpack,tcps_sndbyte, "\t\t%ju data packet%s (%ju byte%s)\n");
635 	p2(tcps_sndrexmitpack, tcps_sndrexmitbyte,
636 	    "\t\t%ju data packet%s (%ju byte%s) retransmitted\n");
637 	p(tcps_sndrexmitbad,
638 	    "\t\t%ju data packet%s unnecessarily retransmitted\n");
639 	p(tcps_mturesent, "\t\t%ju resend%s initiated by MTU discovery\n");
640 	p2a(tcps_sndacks, tcps_delack,
641 	    "\t\t%ju ack-only packet%s (%ju delayed)\n");
642 	p(tcps_sndurg, "\t\t%ju URG only packet%s\n");
643 	p(tcps_sndprobe, "\t\t%ju window probe packet%s\n");
644 	p(tcps_sndwinup, "\t\t%ju window update packet%s\n");
645 	p(tcps_sndctrl, "\t\t%ju control packet%s\n");
646 	p(tcps_rcvtotal, "\t%ju packet%s received\n");
647 	p2(tcps_rcvackpack, tcps_rcvackbyte,
648 	    "\t\t%ju ack%s (for %ju byte%s)\n");
649 	p(tcps_rcvdupack, "\t\t%ju duplicate ack%s\n");
650 	p(tcps_rcvacktoomuch, "\t\t%ju ack%s for unsent data\n");
651 	p2(tcps_rcvpack, tcps_rcvbyte,
652 	    "\t\t%ju packet%s (%ju byte%s) received in-sequence\n");
653 	p2(tcps_rcvduppack, tcps_rcvdupbyte,
654 	    "\t\t%ju completely duplicate packet%s (%ju byte%s)\n");
655 	p(tcps_pawsdrop, "\t\t%ju old duplicate packet%s\n");
656 	p2(tcps_rcvpartduppack, tcps_rcvpartdupbyte,
657 	    "\t\t%ju packet%s with some dup. data (%ju byte%s duped)\n");
658 	p2(tcps_rcvoopack, tcps_rcvoobyte,
659 	    "\t\t%ju out-of-order packet%s (%ju byte%s)\n");
660 	p2(tcps_rcvpackafterwin, tcps_rcvbyteafterwin,
661 	    "\t\t%ju packet%s (%ju byte%s) of data after window\n");
662 	p(tcps_rcvwinprobe, "\t\t%ju window probe%s\n");
663 	p(tcps_rcvwinupd, "\t\t%ju window update packet%s\n");
664 	p(tcps_rcvafterclose, "\t\t%ju packet%s received after close\n");
665 	p(tcps_rcvbadsum, "\t\t%ju discarded for bad checksum%s\n");
666 	p(tcps_rcvbadoff, "\t\t%ju discarded for bad header offset field%s\n");
667 	p1a(tcps_rcvshort, "\t\t%ju discarded because packet too short\n");
668 	p1a(tcps_rcvmemdrop, "\t\t%ju discarded due to memory problems\n");
669 	p(tcps_connattempt, "\t%ju connection request%s\n");
670 	p(tcps_accepts, "\t%ju connection accept%s\n");
671 	p(tcps_badsyn, "\t%ju bad connection attempt%s\n");
672 	p(tcps_listendrop, "\t%ju listen queue overflow%s\n");
673 	p(tcps_badrst, "\t%ju ignored RSTs in the window%s\n");
674 	p(tcps_connects, "\t%ju connection%s established (including accepts)\n");
675 	p2(tcps_closed, tcps_drops,
676 	    "\t%ju connection%s closed (including %ju drop%s)\n");
677 	p(tcps_cachedrtt, "\t\t%ju connection%s updated cached RTT on close\n");
678 	p(tcps_cachedrttvar,
679 	    "\t\t%ju connection%s updated cached RTT variance on close\n");
680 	p(tcps_cachedssthresh,
681 	    "\t\t%ju connection%s updated cached ssthresh on close\n");
682 	p(tcps_conndrops, "\t%ju embryonic connection%s dropped\n");
683 	p2(tcps_rttupdated, tcps_segstimed,
684 	    "\t%ju segment%s updated rtt (of %ju attempt%s)\n");
685 	p(tcps_rexmttimeo, "\t%ju retransmit timeout%s\n");
686 	p(tcps_timeoutdrop, "\t\t%ju connection%s dropped by rexmit timeout\n");
687 	p(tcps_persisttimeo, "\t%ju persist timeout%s\n");
688 	p(tcps_persistdrop, "\t\t%ju connection%s dropped by persist timeout\n");
689 	p(tcps_finwait2_drops,
690 	    "\t%ju Connection%s (fin_wait_2) dropped because of timeout\n");
691 	p(tcps_keeptimeo, "\t%ju keepalive timeout%s\n");
692 	p(tcps_keepprobe, "\t\t%ju keepalive probe%s sent\n");
693 	p(tcps_keepdrops, "\t\t%ju connection%s dropped by keepalive\n");
694 	p(tcps_predack, "\t%ju correct ACK header prediction%s\n");
695 	p(tcps_preddat, "\t%ju correct data packet header prediction%s\n");
696 
697 	p3(tcps_sc_added, "\t%ju syncache entr%s added\n");
698 	p1a(tcps_sc_retransmitted, "\t\t%ju retransmitted\n");
699 	p1a(tcps_sc_dupsyn, "\t\t%ju dupsyn\n");
700 	p1a(tcps_sc_dropped, "\t\t%ju dropped\n");
701 	p1a(tcps_sc_completed, "\t\t%ju completed\n");
702 	p1a(tcps_sc_bucketoverflow, "\t\t%ju bucket overflow\n");
703 	p1a(tcps_sc_cacheoverflow, "\t\t%ju cache overflow\n");
704 	p1a(tcps_sc_reset, "\t\t%ju reset\n");
705 	p1a(tcps_sc_stale, "\t\t%ju stale\n");
706 	p1a(tcps_sc_aborted, "\t\t%ju aborted\n");
707 	p1a(tcps_sc_badack, "\t\t%ju badack\n");
708 	p1a(tcps_sc_unreach, "\t\t%ju unreach\n");
709 	p(tcps_sc_zonefail, "\t\t%ju zone failure%s\n");
710 	p(tcps_sc_sendcookie, "\t%ju cookie%s sent\n");
711 	p(tcps_sc_recvcookie, "\t%ju cookie%s received\n");
712 
713 	p3(tcps_hc_added, "\t%ju hostcache entr%s added\n");
714 	p1a(tcps_hc_bucketoverflow, "\t\t%ju bucket overflow\n");
715 
716 	p(tcps_sack_recovery_episode, "\t%ju SACK recovery episode%s\n");
717 	p(tcps_sack_rexmits,
718 	    "\t%ju segment rexmit%s in SACK recovery episodes\n");
719 	p(tcps_sack_rexmit_bytes,
720 	    "\t%ju byte rexmit%s in SACK recovery episodes\n");
721 	p(tcps_sack_rcv_blocks,
722 	    "\t%ju SACK option%s (SACK blocks) received\n");
723 	p(tcps_sack_send_blocks, "\t%ju SACK option%s (SACK blocks) sent\n");
724 	p1a(tcps_sack_sboverflow, "\t%ju SACK scoreboard overflow\n");
725 
726 	p(tcps_ecn_ce, "\t%ju packet%s with ECN CE bit set\n");
727 	p(tcps_ecn_ect0, "\t%ju packet%s with ECN ECT(0) bit set\n");
728 	p(tcps_ecn_ect1, "\t%ju packet%s with ECN ECT(1) bit set\n");
729 	p(tcps_ecn_shs, "\t%ju successful ECN handshake%s\n");
730 	p(tcps_ecn_rcwnd, "\t%ju time%s ECN reduced the congestion window\n");
731 #undef p
732 #undef p1a
733 #undef p2
734 #undef p2a
735 #undef p3
736 }
737 
738 /*
739  * Dump UDP statistics structure.
740  */
741 void
742 udp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
743 {
744 	struct udpstat udpstat, zerostat;
745 	size_t len = sizeof udpstat;
746 	u_long delivered;
747 
748 #ifdef INET6
749 	if (udp_done != 0)
750 		return;
751 	else
752 		udp_done = 1;
753 #endif
754 
755 	if (live) {
756 		if (zflag)
757 			memset(&zerostat, 0, len);
758 		if (sysctlbyname("net.inet.udp.stats", &udpstat, &len,
759 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
760 			warn("sysctl: net.inet.udp.stats");
761 			return;
762 		}
763 	} else
764 		kread(off, &udpstat, len);
765 
766 	printf("%s:\n", name);
767 #define	p(f, m) if (udpstat.f || sflag <= 1) \
768     printf(m, udpstat.f, plural(udpstat.f))
769 #define	p1a(f, m) if (udpstat.f || sflag <= 1) \
770     printf(m, udpstat.f)
771 	p(udps_ipackets, "\t%lu datagram%s received\n");
772 	p1a(udps_hdrops, "\t%lu with incomplete header\n");
773 	p1a(udps_badlen, "\t%lu with bad data length field\n");
774 	p1a(udps_badsum, "\t%lu with bad checksum\n");
775 	p1a(udps_nosum, "\t%lu with no checksum\n");
776 	p1a(udps_noport, "\t%lu dropped due to no socket\n");
777 	p(udps_noportbcast,
778 	    "\t%lu broadcast/multicast datagram%s undelivered\n");
779 	p1a(udps_fullsock, "\t%lu dropped due to full socket buffers\n");
780 	p1a(udpps_pcbhashmiss, "\t%lu not for hashed pcb\n");
781 	delivered = udpstat.udps_ipackets -
782 		    udpstat.udps_hdrops -
783 		    udpstat.udps_badlen -
784 		    udpstat.udps_badsum -
785 		    udpstat.udps_noport -
786 		    udpstat.udps_noportbcast -
787 		    udpstat.udps_fullsock;
788 	if (delivered || sflag <= 1)
789 		printf("\t%lu delivered\n", delivered);
790 	p(udps_opackets, "\t%lu datagram%s output\n");
791 	/* the next statistic is cumulative in udps_noportbcast */
792 	p(udps_filtermcast,
793 	    "\t%lu time%s multicast source filter matched\n");
794 #undef p
795 #undef p1a
796 }
797 
798 /*
799  * Dump CARP statistics structure.
800  */
801 void
802 carp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
803 {
804 	struct carpstats carpstat, zerostat;
805 	size_t len = sizeof(struct carpstats);
806 
807 	if (live) {
808 		if (zflag)
809 			memset(&zerostat, 0, len);
810 		if (sysctlbyname("net.inet.carp.stats", &carpstat, &len,
811 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
812 			if (errno != ENOENT)
813 				warn("sysctl: net.inet.carp.stats");
814 			return;
815 		}
816 	} else {
817 		if (off == 0)
818 			return;
819 		kread(off, &carpstat, len);
820 	}
821 
822 	printf("%s:\n", name);
823 
824 #define	p(f, m) if (carpstat.f || sflag <= 1) \
825 	printf(m, (uintmax_t)carpstat.f, plural(carpstat.f))
826 #define	p2(f, m) if (carpstat.f || sflag <= 1) \
827 	printf(m, (uintmax_t)carpstat.f)
828 
829 	p(carps_ipackets, "\t%ju packet%s received (IPv4)\n");
830 	p(carps_ipackets6, "\t%ju packet%s received (IPv6)\n");
831 	p(carps_badttl, "\t\t%ju packet%s discarded for wrong TTL\n");
832 	p(carps_hdrops, "\t\t%ju packet%s shorter than header\n");
833 	p(carps_badsum, "\t\t%ju discarded for bad checksum%s\n");
834 	p(carps_badver,	"\t\t%ju discarded packet%s with a bad version\n");
835 	p2(carps_badlen, "\t\t%ju discarded because packet too short\n");
836 	p2(carps_badauth, "\t\t%ju discarded for bad authentication\n");
837 	p2(carps_badvhid, "\t\t%ju discarded for bad vhid\n");
838 	p2(carps_badaddrs, "\t\t%ju discarded because of a bad address list\n");
839 	p(carps_opackets, "\t%ju packet%s sent (IPv4)\n");
840 	p(carps_opackets6, "\t%ju packet%s sent (IPv6)\n");
841 	p2(carps_onomem, "\t\t%ju send failed due to mbuf memory error\n");
842 #if notyet
843 	p(carps_ostates, "\t\t%s state update%s sent\n");
844 #endif
845 #undef p
846 #undef p2
847 }
848 
849 /*
850  * Dump IP statistics structure.
851  */
852 void
853 ip_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
854 {
855 	struct ipstat ipstat, zerostat;
856 	size_t len = sizeof ipstat;
857 
858 	if (live) {
859 		if (zflag)
860 			memset(&zerostat, 0, len);
861 		if (sysctlbyname("net.inet.ip.stats", &ipstat, &len,
862 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
863 			warn("sysctl: net.inet.ip.stats");
864 			return;
865 		}
866 	} else {
867 		u_long ipstat_p[sizeof(struct ipstat)/sizeof(uint64_t)];
868 
869 		kread(off, &ipstat_p, sizeof(ipstat_p));
870 		kread_counters(ipstat_p, (uint64_t *)&ipstat,
871 		    sizeof(struct ipstat)/sizeof(uint64_t));
872 	}
873 
874 	printf("%s:\n", name);
875 
876 #define	p(f, m) if (ipstat.f || sflag <= 1) \
877     printf(m, (uintmax_t )ipstat.f, plural(ipstat.f))
878 #define	p1a(f, m) if (ipstat.f || sflag <= 1) \
879     printf(m, (uintmax_t )ipstat.f)
880 
881 	p(ips_total, "\t%ju total packet%s received\n");
882 	p(ips_badsum, "\t%ju bad header checksum%s\n");
883 	p1a(ips_toosmall, "\t%ju with size smaller than minimum\n");
884 	p1a(ips_tooshort, "\t%ju with data size < data length\n");
885 	p1a(ips_toolong, "\t%ju with ip length > max ip packet size\n");
886 	p1a(ips_badhlen, "\t%ju with header length < data size\n");
887 	p1a(ips_badlen, "\t%ju with data length < header length\n");
888 	p1a(ips_badoptions, "\t%ju with bad options\n");
889 	p1a(ips_badvers, "\t%ju with incorrect version number\n");
890 	p(ips_fragments, "\t%ju fragment%s received\n");
891 	p(ips_fragdropped, "\t%ju fragment%s dropped (dup or out of space)\n");
892 	p(ips_fragtimeout, "\t%ju fragment%s dropped after timeout\n");
893 	p(ips_reassembled, "\t%ju packet%s reassembled ok\n");
894 	p(ips_delivered, "\t%ju packet%s for this host\n");
895 	p(ips_noproto, "\t%ju packet%s for unknown/unsupported protocol\n");
896 	p(ips_forward, "\t%ju packet%s forwarded");
897 	p(ips_fastforward, " (%ju packet%s fast forwarded)");
898 	if (ipstat.ips_forward || sflag <= 1)
899 		putchar('\n');
900 	p(ips_cantforward, "\t%ju packet%s not forwardable\n");
901 	p(ips_notmember,
902 	    "\t%ju packet%s received for unknown multicast group\n");
903 	p(ips_redirectsent, "\t%ju redirect%s sent\n");
904 	p(ips_localout, "\t%ju packet%s sent from this host\n");
905 	p(ips_rawout, "\t%ju packet%s sent with fabricated ip header\n");
906 	p(ips_odropped,
907 	    "\t%ju output packet%s dropped due to no bufs, etc.\n");
908 	p(ips_noroute, "\t%ju output packet%s discarded due to no route\n");
909 	p(ips_fragmented, "\t%ju output datagram%s fragmented\n");
910 	p(ips_ofragments, "\t%ju fragment%s created\n");
911 	p(ips_cantfrag, "\t%ju datagram%s that can't be fragmented\n");
912 	p(ips_nogif, "\t%ju tunneling packet%s that can't find gif\n");
913 	p(ips_badaddr, "\t%ju datagram%s with bad address in header\n");
914 #undef p
915 #undef p1a
916 }
917 
918 /*
919  * Dump ARP statistics structure.
920  */
921 void
922 arp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
923 {
924 	struct arpstat arpstat, zerostat;
925 	size_t len = sizeof(arpstat);
926 
927 	if (live) {
928 		if (zflag)
929 			memset(&zerostat, 0, len);
930 		if (sysctlbyname("net.link.ether.arp.stats", &arpstat, &len,
931 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
932 			warn("sysctl: net.link.ether.arp.stats");
933 			return;
934 		}
935 	} else
936 		kread(off, &arpstat, len);
937 
938 	printf("%s:\n", name);
939 
940 #define	p(f, m) if (arpstat.f || sflag <= 1) \
941     printf(m, arpstat.f, plural(arpstat.f))
942 #define	p2(f, m) if (arpstat.f || sflag <= 1) \
943     printf(m, arpstat.f, pluralies(arpstat.f))
944 
945 	p(txrequests, "\t%lu ARP request%s sent\n");
946 	p2(txreplies, "\t%lu ARP repl%s sent\n");
947 	p(rxrequests, "\t%lu ARP request%s received\n");
948 	p2(rxreplies, "\t%lu ARP repl%s received\n");
949 	p(received, "\t%lu ARP packet%s received\n");
950 	p(dropped, "\t%lu total packet%s dropped due to no ARP entry\n");
951 	p(timeouts, "\t%lu ARP entry%s timed out\n");
952 	p(dupips, "\t%lu Duplicate IP%s seen\n");
953 #undef p
954 #undef p2
955 }
956 
957 
958 
959 static	const char *icmpnames[ICMP_MAXTYPE + 1] = {
960 	"echo reply",			/* RFC 792 */
961 	"#1",
962 	"#2",
963 	"destination unreachable",	/* RFC 792 */
964 	"source quench",		/* RFC 792 */
965 	"routing redirect",		/* RFC 792 */
966 	"#6",
967 	"#7",
968 	"echo",				/* RFC 792 */
969 	"router advertisement",		/* RFC 1256 */
970 	"router solicitation",		/* RFC 1256 */
971 	"time exceeded",		/* RFC 792 */
972 	"parameter problem",		/* RFC 792 */
973 	"time stamp",			/* RFC 792 */
974 	"time stamp reply",		/* RFC 792 */
975 	"information request",		/* RFC 792 */
976 	"information request reply",	/* RFC 792 */
977 	"address mask request",		/* RFC 950 */
978 	"address mask reply",		/* RFC 950 */
979 	"#19",
980 	"#20",
981 	"#21",
982 	"#22",
983 	"#23",
984 	"#24",
985 	"#25",
986 	"#26",
987 	"#27",
988 	"#28",
989 	"#29",
990 	"icmp traceroute",		/* RFC 1393 */
991 	"datagram conversion error",	/* RFC 1475 */
992 	"mobile host redirect",
993 	"IPv6 where-are-you",
994 	"IPv6 i-am-here",
995 	"mobile registration req",
996 	"mobile registration reply",
997 	"domain name request",		/* RFC 1788 */
998 	"domain name reply",		/* RFC 1788 */
999 	"icmp SKIP",
1000 	"icmp photuris",		/* RFC 2521 */
1001 };
1002 
1003 /*
1004  * Dump ICMP statistics.
1005  */
1006 void
1007 icmp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
1008 {
1009 	struct icmpstat icmpstat, zerostat;
1010 	int i, first;
1011 	size_t len;
1012 
1013 	len = sizeof icmpstat;
1014 	if (live) {
1015 		if (zflag)
1016 			memset(&zerostat, 0, len);
1017 		if (sysctlbyname("net.inet.icmp.stats", &icmpstat, &len,
1018 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1019 			warn("sysctl: net.inet.icmp.stats");
1020 			return;
1021 		}
1022 	} else
1023 		kread(off, &icmpstat, len);
1024 
1025 	printf("%s:\n", name);
1026 
1027 #define	p(f, m) if (icmpstat.f || sflag <= 1) \
1028     printf(m, icmpstat.f, plural(icmpstat.f))
1029 #define	p1a(f, m) if (icmpstat.f || sflag <= 1) \
1030     printf(m, icmpstat.f)
1031 #define	p2(f, m) if (icmpstat.f || sflag <= 1) \
1032     printf(m, icmpstat.f, plurales(icmpstat.f))
1033 
1034 	p(icps_error, "\t%lu call%s to icmp_error\n");
1035 	p(icps_oldicmp,
1036 	    "\t%lu error%s not generated in response to an icmp message\n");
1037 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
1038 		if (icmpstat.icps_outhist[i] != 0) {
1039 			if (first) {
1040 				printf("\tOutput histogram:\n");
1041 				first = 0;
1042 			}
1043 			if (icmpnames[i] != NULL)
1044 				printf("\t\t%s: %lu\n", icmpnames[i],
1045 					icmpstat.icps_outhist[i]);
1046 			else
1047 				printf("\t\tunknown ICMP #%d: %lu\n", i,
1048 					icmpstat.icps_outhist[i]);
1049 		}
1050 	p(icps_badcode, "\t%lu message%s with bad code fields\n");
1051 	p(icps_tooshort, "\t%lu message%s less than the minimum length\n");
1052 	p(icps_checksum, "\t%lu message%s with bad checksum\n");
1053 	p(icps_badlen, "\t%lu message%s with bad length\n");
1054 	p1a(icps_bmcastecho, "\t%lu multicast echo requests ignored\n");
1055 	p1a(icps_bmcasttstamp, "\t%lu multicast timestamp requests ignored\n");
1056 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
1057 		if (icmpstat.icps_inhist[i] != 0) {
1058 			if (first) {
1059 				printf("\tInput histogram:\n");
1060 				first = 0;
1061 			}
1062 			if (icmpnames[i] != NULL)
1063 				printf("\t\t%s: %lu\n", icmpnames[i],
1064 				    icmpstat.icps_inhist[i]);
1065 			else
1066 				printf("\t\tunknown ICMP #%d: %lu\n", i,
1067 				    icmpstat.icps_inhist[i]);
1068 		}
1069 	p(icps_reflect, "\t%lu message response%s generated\n");
1070 	p2(icps_badaddr, "\t%lu invalid return address%s\n");
1071 	p(icps_noroute, "\t%lu no return route%s\n");
1072 #undef p
1073 #undef p1a
1074 #undef p2
1075 	if (live) {
1076 		len = sizeof i;
1077 		if (sysctlbyname("net.inet.icmp.maskrepl", &i, &len, NULL, 0) <
1078 		    0)
1079 			return;
1080 		printf("\tICMP address mask responses are %sabled\n",
1081 		    i ? "en" : "dis");
1082 	}
1083 }
1084 
1085 #ifndef BURN_BRIDGES
1086 /*
1087  * Dump IGMP statistics structure (pre 8.x kernel).
1088  */
1089 static void
1090 igmp_stats_live_old(const char *name)
1091 {
1092 	struct oigmpstat oigmpstat, zerostat;
1093 	size_t len = sizeof(oigmpstat);
1094 
1095 	if (zflag)
1096 		memset(&zerostat, 0, len);
1097 	if (sysctlbyname("net.inet.igmp.stats", &oigmpstat, &len,
1098 	    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1099 		warn("sysctl: net.inet.igmp.stats");
1100 		return;
1101 	}
1102 
1103 	printf("%s:\n", name);
1104 
1105 #define	p(f, m) if (oigmpstat.f || sflag <= 1) \
1106     printf(m, oigmpstat.f, plural(oigmpstat.f))
1107 #define	py(f, m) if (oigmpstat.f || sflag <= 1) \
1108     printf(m, oigmpstat.f, oigmpstat.f != 1 ? "ies" : "y")
1109 	p(igps_rcv_total, "\t%u message%s received\n");
1110 	p(igps_rcv_tooshort, "\t%u message%s received with too few bytes\n");
1111 	p(igps_rcv_badsum, "\t%u message%s received with bad checksum\n");
1112 	py(igps_rcv_queries, "\t%u membership quer%s received\n");
1113 	py(igps_rcv_badqueries,
1114 	    "\t%u membership quer%s received with invalid field(s)\n");
1115 	p(igps_rcv_reports, "\t%u membership report%s received\n");
1116 	p(igps_rcv_badreports,
1117 	    "\t%u membership report%s received with invalid field(s)\n");
1118 	p(igps_rcv_ourreports,
1119 "\t%u membership report%s received for groups to which we belong\n");
1120         p(igps_snd_reports, "\t%u membership report%s sent\n");
1121 #undef p
1122 #undef py
1123 }
1124 #endif /* !BURN_BRIDGES */
1125 
1126 /*
1127  * Dump IGMP statistics structure.
1128  */
1129 void
1130 igmp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
1131 {
1132 	struct igmpstat igmpstat, zerostat;
1133 	size_t len;
1134 
1135 #ifndef BURN_BRIDGES
1136 	if (live) {
1137 		/*
1138 		 * Detect if we are being run against a pre-IGMPv3 kernel.
1139 		 * We cannot do this for a core file as the legacy
1140 		 * struct igmpstat has no size field, nor does it
1141 		 * export it in any readily-available symbols.
1142 		 */
1143 		len = 0;
1144 		if (sysctlbyname("net.inet.igmp.stats", NULL, &len, NULL,
1145 		    0) < 0) {
1146 			warn("sysctl: net.inet.igmp.stats");
1147 			return;
1148 		}
1149 		if (len < sizeof(igmpstat)) {
1150 			igmp_stats_live_old(name);
1151 			return;
1152 		}
1153 	}
1154 #endif /* !BURN_BRIDGES */
1155 
1156 	len = sizeof(igmpstat);
1157 	if (live) {
1158 		if (zflag)
1159 			memset(&zerostat, 0, len);
1160 		if (sysctlbyname("net.inet.igmp.stats", &igmpstat, &len,
1161 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1162 			warn("sysctl: net.inet.igmp.stats");
1163 			return;
1164 		}
1165 	} else {
1166 		len = sizeof(igmpstat);
1167 		kread(off, &igmpstat, len);
1168 	}
1169 
1170 	if (igmpstat.igps_version != IGPS_VERSION_3) {
1171 		warnx("%s: version mismatch (%d != %d)", __func__,
1172 		    igmpstat.igps_version, IGPS_VERSION_3);
1173 	}
1174 	if (igmpstat.igps_len != IGPS_VERSION3_LEN) {
1175 		warnx("%s: size mismatch (%d != %d)", __func__,
1176 		    igmpstat.igps_len, IGPS_VERSION3_LEN);
1177 	}
1178 
1179 	printf("%s:\n", name);
1180 
1181 #define	p64(f, m) if (igmpstat.f || sflag <= 1) \
1182     printf(m, (uintmax_t) igmpstat.f, plural(igmpstat.f))
1183 #define	py64(f, m) if (igmpstat.f || sflag <= 1) \
1184     printf(m, (uintmax_t) igmpstat.f, pluralies(igmpstat.f))
1185 	p64(igps_rcv_total, "\t%ju message%s received\n");
1186 	p64(igps_rcv_tooshort, "\t%ju message%s received with too few bytes\n");
1187 	p64(igps_rcv_badttl, "\t%ju message%s received with wrong TTL\n");
1188 	p64(igps_rcv_badsum, "\t%ju message%s received with bad checksum\n");
1189 	py64(igps_rcv_v1v2_queries, "\t%ju V1/V2 membership quer%s received\n");
1190 	py64(igps_rcv_v3_queries, "\t%ju V3 membership quer%s received\n");
1191 	py64(igps_rcv_badqueries,
1192 	    "\t%ju membership quer%s received with invalid field(s)\n");
1193 	py64(igps_rcv_gen_queries, "\t%ju general quer%s received\n");
1194 	py64(igps_rcv_group_queries, "\t%ju group quer%s received\n");
1195 	py64(igps_rcv_gsr_queries, "\t%ju group-source quer%s received\n");
1196 	py64(igps_drop_gsr_queries, "\t%ju group-source quer%s dropped\n");
1197 	p64(igps_rcv_reports, "\t%ju membership report%s received\n");
1198 	p64(igps_rcv_badreports,
1199 	    "\t%ju membership report%s received with invalid field(s)\n");
1200 	p64(igps_rcv_ourreports,
1201 "\t%ju membership report%s received for groups to which we belong\n");
1202         p64(igps_rcv_nora, "\t%ju V3 report%s received without Router Alert\n");
1203         p64(igps_snd_reports, "\t%ju membership report%s sent\n");
1204 #undef p64
1205 #undef py64
1206 }
1207 
1208 /*
1209  * Dump PIM statistics structure.
1210  */
1211 void
1212 pim_stats(u_long off __unused, const char *name, int af1 __unused,
1213     int proto __unused)
1214 {
1215 	struct pimstat pimstat, zerostat;
1216 	size_t len = sizeof pimstat;
1217 
1218 	if (live) {
1219 		if (zflag)
1220 			memset(&zerostat, 0, len);
1221 		if (sysctlbyname("net.inet.pim.stats", &pimstat, &len,
1222 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1223 			if (errno != ENOENT)
1224 				warn("sysctl: net.inet.pim.stats");
1225 			return;
1226 		}
1227 	} else {
1228 		if (off == 0)
1229 			return;
1230 		kread(off, &pimstat, len);
1231 	}
1232 
1233 	printf("%s:\n", name);
1234 
1235 #define	p(f, m) if (pimstat.f || sflag <= 1) \
1236     printf(m, (uintmax_t)pimstat.f, plural(pimstat.f))
1237 #define	py(f, m) if (pimstat.f || sflag <= 1) \
1238     printf(m, (uintmax_t)pimstat.f, pimstat.f != 1 ? "ies" : "y")
1239 	p(pims_rcv_total_msgs, "\t%ju message%s received\n");
1240 	p(pims_rcv_total_bytes, "\t%ju byte%s received\n");
1241 	p(pims_rcv_tooshort, "\t%ju message%s received with too few bytes\n");
1242         p(pims_rcv_badsum, "\t%ju message%s received with bad checksum\n");
1243 	p(pims_rcv_badversion, "\t%ju message%s received with bad version\n");
1244 	p(pims_rcv_registers_msgs, "\t%ju data register message%s received\n");
1245 	p(pims_rcv_registers_bytes, "\t%ju data register byte%s received\n");
1246 	p(pims_rcv_registers_wrongiif,
1247 	    "\t%ju data register message%s received on wrong iif\n");
1248 	p(pims_rcv_badregisters, "\t%ju bad register%s received\n");
1249 	p(pims_snd_registers_msgs, "\t%ju data register message%s sent\n");
1250 	p(pims_snd_registers_bytes, "\t%ju data register byte%s sent\n");
1251 #undef p
1252 #undef py
1253 }
1254 
1255 /*
1256  * Pretty print an Internet address (net address + port).
1257  */
1258 void
1259 inetprint(struct in_addr *in, int port, const char *proto, int num_port)
1260 {
1261 	struct servent *sp = 0;
1262 	char line[80], *cp;
1263 	int width;
1264 
1265 	if (Wflag)
1266 	    sprintf(line, "%s.", inetname(in));
1267 	else
1268 	    sprintf(line, "%.*s.", (Aflag && !num_port) ? 12 : 16, inetname(in));
1269 	cp = strchr(line, '\0');
1270 	if (!num_port && port)
1271 		sp = getservbyport((int)port, proto);
1272 	if (sp || port == 0)
1273 		sprintf(cp, "%.15s ", sp ? sp->s_name : "*");
1274 	else
1275 		sprintf(cp, "%d ", ntohs((u_short)port));
1276 	width = (Aflag && !Wflag) ? 18 : 22;
1277 	if (Wflag)
1278 	    printf("%-*s ", width, line);
1279 	else
1280 	    printf("%-*.*s ", width, width, line);
1281 }
1282 
1283 /*
1284  * Construct an Internet address representation.
1285  * If numeric_addr has been supplied, give
1286  * numeric value, otherwise try for symbolic name.
1287  */
1288 char *
1289 inetname(struct in_addr *inp)
1290 {
1291 	char *cp;
1292 	static char line[MAXHOSTNAMELEN];
1293 	struct hostent *hp;
1294 	struct netent *np;
1295 
1296 	cp = 0;
1297 	if (!numeric_addr && inp->s_addr != INADDR_ANY) {
1298 		int net = inet_netof(*inp);
1299 		int lna = inet_lnaof(*inp);
1300 
1301 		if (lna == INADDR_ANY) {
1302 			np = getnetbyaddr(net, AF_INET);
1303 			if (np)
1304 				cp = np->n_name;
1305 		}
1306 		if (cp == 0) {
1307 			hp = gethostbyaddr((char *)inp, sizeof (*inp), AF_INET);
1308 			if (hp) {
1309 				cp = hp->h_name;
1310 				trimdomain(cp, strlen(cp));
1311 			}
1312 		}
1313 	}
1314 	if (inp->s_addr == INADDR_ANY)
1315 		strcpy(line, "*");
1316 	else if (cp) {
1317 		strlcpy(line, cp, sizeof(line));
1318 	} else {
1319 		inp->s_addr = ntohl(inp->s_addr);
1320 #define	C(x)	((u_int)((x) & 0xff))
1321 		sprintf(line, "%u.%u.%u.%u", C(inp->s_addr >> 24),
1322 		    C(inp->s_addr >> 16), C(inp->s_addr >> 8), C(inp->s_addr));
1323 	}
1324 	return (line);
1325 }
1326