xref: /freebsd/usr.bin/netstat/inet.c (revision fcb560670601b2a4d87bb31d7531c8dcc37ee71b)
1 /*-
2  * Copyright (c) 1983, 1988, 1993, 1995
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 4. Neither the name of the University nor the names of its contributors
14  *    may be used to endorse or promote products derived from this software
15  *    without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  */
29 
30 #if 0
31 #ifndef lint
32 static char sccsid[] = "@(#)inet.c	8.5 (Berkeley) 5/24/95";
33 #endif /* not lint */
34 #endif
35 
36 #include <sys/cdefs.h>
37 __FBSDID("$FreeBSD$");
38 
39 #include <sys/param.h>
40 #include <sys/queue.h>
41 #include <sys/domain.h>
42 #include <sys/protosw.h>
43 #include <sys/socket.h>
44 #include <sys/socketvar.h>
45 #include <sys/sysctl.h>
46 
47 #include <net/route.h>
48 #include <net/if_arp.h>
49 #include <netinet/in.h>
50 #include <netinet/in_systm.h>
51 #include <netinet/ip.h>
52 #include <netinet/ip_carp.h>
53 #ifdef INET6
54 #include <netinet/ip6.h>
55 #endif /* INET6 */
56 #include <netinet/in_pcb.h>
57 #include <netinet/ip_icmp.h>
58 #include <netinet/icmp_var.h>
59 #include <netinet/igmp_var.h>
60 #include <netinet/ip_var.h>
61 #include <netinet/pim_var.h>
62 #include <netinet/tcp.h>
63 #include <netinet/tcpip.h>
64 #include <netinet/tcp_seq.h>
65 #define	TCPSTATES
66 #include <netinet/tcp_fsm.h>
67 #include <netinet/tcp_timer.h>
68 #include <netinet/tcp_var.h>
69 #include <netinet/tcp_debug.h>
70 #include <netinet/udp.h>
71 #include <netinet/udp_var.h>
72 
73 #include <arpa/inet.h>
74 #include <err.h>
75 #include <errno.h>
76 #include <libutil.h>
77 #include <netdb.h>
78 #include <stdint.h>
79 #include <stdio.h>
80 #include <stdlib.h>
81 #include <string.h>
82 #include <unistd.h>
83 #include "netstat.h"
84 
85 char	*inetname(struct in_addr *);
86 void	inetprint(struct in_addr *, int, const char *, int);
87 #ifdef INET6
88 static int udp_done, tcp_done, sdp_done;
89 #endif /* INET6 */
90 
91 static int
92 pcblist_sysctl(int proto, const char *name, char **bufp, int istcp __unused)
93 {
94 	const char *mibvar;
95 	char *buf;
96 	size_t len;
97 
98 	switch (proto) {
99 	case IPPROTO_TCP:
100 		mibvar = "net.inet.tcp.pcblist";
101 		break;
102 	case IPPROTO_UDP:
103 		mibvar = "net.inet.udp.pcblist";
104 		break;
105 	case IPPROTO_DIVERT:
106 		mibvar = "net.inet.divert.pcblist";
107 		break;
108 	default:
109 		mibvar = "net.inet.raw.pcblist";
110 		break;
111 	}
112 	if (strncmp(name, "sdp", 3) == 0)
113 		mibvar = "net.inet.sdp.pcblist";
114 	len = 0;
115 	if (sysctlbyname(mibvar, 0, &len, 0, 0) < 0) {
116 		if (errno != ENOENT)
117 			warn("sysctl: %s", mibvar);
118 		return (0);
119 	}
120 	if ((buf = malloc(len)) == 0) {
121 		warnx("malloc %lu bytes", (u_long)len);
122 		return (0);
123 	}
124 	if (sysctlbyname(mibvar, buf, &len, 0, 0) < 0) {
125 		warn("sysctl: %s", mibvar);
126 		free(buf);
127 		return (0);
128 	}
129 	*bufp = buf;
130 	return (1);
131 }
132 
133 /*
134  * Copied directly from uipc_socket2.c.  We leave out some fields that are in
135  * nested structures that aren't used to avoid extra work.
136  */
137 static void
138 sbtoxsockbuf(struct sockbuf *sb, struct xsockbuf *xsb)
139 {
140 	xsb->sb_cc = sb->sb_ccc;
141 	xsb->sb_hiwat = sb->sb_hiwat;
142 	xsb->sb_mbcnt = sb->sb_mbcnt;
143 	xsb->sb_mcnt = sb->sb_mcnt;
144 	xsb->sb_ccnt = sb->sb_ccnt;
145 	xsb->sb_mbmax = sb->sb_mbmax;
146 	xsb->sb_lowat = sb->sb_lowat;
147 	xsb->sb_flags = sb->sb_flags;
148 	xsb->sb_timeo = sb->sb_timeo;
149 }
150 
151 int
152 sotoxsocket(struct socket *so, struct xsocket *xso)
153 {
154 	struct protosw proto;
155 	struct domain domain;
156 
157 	bzero(xso, sizeof *xso);
158 	xso->xso_len = sizeof *xso;
159 	xso->xso_so = so;
160 	xso->so_type = so->so_type;
161 	xso->so_options = so->so_options;
162 	xso->so_linger = so->so_linger;
163 	xso->so_state = so->so_state;
164 	xso->so_pcb = so->so_pcb;
165 	if (kread((uintptr_t)so->so_proto, &proto, sizeof(proto)) != 0)
166 		return (-1);
167 	xso->xso_protocol = proto.pr_protocol;
168 	if (kread((uintptr_t)proto.pr_domain, &domain, sizeof(domain)) != 0)
169 		return (-1);
170 	xso->xso_family = domain.dom_family;
171 	xso->so_qlen = so->so_qlen;
172 	xso->so_incqlen = so->so_incqlen;
173 	xso->so_qlimit = so->so_qlimit;
174 	xso->so_timeo = so->so_timeo;
175 	xso->so_error = so->so_error;
176 	xso->so_oobmark = so->so_oobmark;
177 	sbtoxsockbuf(&so->so_snd, &xso->so_snd);
178 	sbtoxsockbuf(&so->so_rcv, &xso->so_rcv);
179 	return (0);
180 }
181 
182 static int
183 pcblist_kvm(u_long off, char **bufp, int istcp)
184 {
185 	struct inpcbinfo pcbinfo;
186 	struct inpcbhead listhead;
187 	struct inpcb *inp;
188 	struct xinpcb xi;
189 	struct xinpgen xig;
190 	struct xtcpcb xt;
191 	struct socket so;
192 	struct xsocket *xso;
193 	char *buf, *p;
194 	size_t len;
195 
196 	if (off == 0)
197 		return (0);
198 	kread(off, &pcbinfo, sizeof(pcbinfo));
199 	if (istcp)
200 		len = 2 * sizeof(xig) +
201 		    (pcbinfo.ipi_count + pcbinfo.ipi_count / 8) *
202 		    sizeof(struct xtcpcb);
203 	else
204 		len = 2 * sizeof(xig) +
205 		    (pcbinfo.ipi_count + pcbinfo.ipi_count / 8) *
206 		    sizeof(struct xinpcb);
207 	if ((buf = malloc(len)) == 0) {
208 		warnx("malloc %lu bytes", (u_long)len);
209 		return (0);
210 	}
211 	p = buf;
212 
213 #define	COPYOUT(obj, size) do {						\
214 	if (len < (size)) {						\
215 		warnx("buffer size exceeded");				\
216 		goto fail;						\
217 	}								\
218 	bcopy((obj), p, (size));					\
219 	len -= (size);							\
220 	p += (size);							\
221 } while (0)
222 
223 #define	KREAD(off, buf, len) do {					\
224 	if (kread((uintptr_t)(off), (buf), (len)) != 0)			\
225 		goto fail;						\
226 } while (0)
227 
228 	/* Write out header. */
229 	xig.xig_len = sizeof xig;
230 	xig.xig_count = pcbinfo.ipi_count;
231 	xig.xig_gen = pcbinfo.ipi_gencnt;
232 	xig.xig_sogen = 0;
233 	COPYOUT(&xig, sizeof xig);
234 
235 	/* Walk the PCB list. */
236 	xt.xt_len = sizeof xt;
237 	xi.xi_len = sizeof xi;
238 	if (istcp)
239 		xso = &xt.xt_socket;
240 	else
241 		xso = &xi.xi_socket;
242 	KREAD(pcbinfo.ipi_listhead, &listhead, sizeof(listhead));
243 	LIST_FOREACH(inp, &listhead, inp_list) {
244 		if (istcp) {
245 			KREAD(inp, &xt.xt_inp, sizeof(*inp));
246 			inp = &xt.xt_inp;
247 		} else {
248 			KREAD(inp, &xi.xi_inp, sizeof(*inp));
249 			inp = &xi.xi_inp;
250 		}
251 
252 		if (inp->inp_gencnt > pcbinfo.ipi_gencnt)
253 			continue;
254 
255 		if (istcp) {
256 			if (inp->inp_ppcb == NULL)
257 				bzero(&xt.xt_tp, sizeof xt.xt_tp);
258 			else if (inp->inp_flags & INP_TIMEWAIT) {
259 				bzero(&xt.xt_tp, sizeof xt.xt_tp);
260 				xt.xt_tp.t_state = TCPS_TIME_WAIT;
261 			} else
262 				KREAD(inp->inp_ppcb, &xt.xt_tp,
263 				    sizeof xt.xt_tp);
264 		}
265 		if (inp->inp_socket) {
266 			KREAD(inp->inp_socket, &so, sizeof(so));
267 			if (sotoxsocket(&so, xso) != 0)
268 				goto fail;
269 		} else {
270 			bzero(xso, sizeof(*xso));
271 			if (istcp)
272 				xso->xso_protocol = IPPROTO_TCP;
273 		}
274 		if (istcp)
275 			COPYOUT(&xt, sizeof xt);
276 		else
277 			COPYOUT(&xi, sizeof xi);
278 	}
279 
280 	/* Reread the pcbinfo and write out the footer. */
281 	kread(off, &pcbinfo, sizeof(pcbinfo));
282 	xig.xig_count = pcbinfo.ipi_count;
283 	xig.xig_gen = pcbinfo.ipi_gencnt;
284 	COPYOUT(&xig, sizeof xig);
285 
286 	*bufp = buf;
287 	return (1);
288 
289 fail:
290 	free(buf);
291 	return (0);
292 #undef COPYOUT
293 #undef KREAD
294 }
295 
296 /*
297  * Print a summary of connections related to an Internet
298  * protocol.  For TCP, also give state of connection.
299  * Listening processes (aflag) are suppressed unless the
300  * -a (all) flag is specified.
301  */
302 void
303 protopr(u_long off, const char *name, int af1, int proto)
304 {
305 	int istcp;
306 	static int first = 1;
307 	char *buf;
308 	const char *vchar;
309 	struct tcpcb *tp = NULL;
310 	struct inpcb *inp;
311 	struct xinpgen *xig, *oxig;
312 	struct xsocket *so;
313 	struct xtcp_timer *timer;
314 
315 	istcp = 0;
316 	switch (proto) {
317 	case IPPROTO_TCP:
318 #ifdef INET6
319 		if (strncmp(name, "sdp", 3) != 0) {
320 			if (tcp_done != 0)
321 				return;
322 			else
323 				tcp_done = 1;
324 		} else {
325 			if (sdp_done != 0)
326 				return;
327 			else
328 				sdp_done = 1;
329 		}
330 #endif
331 		istcp = 1;
332 		break;
333 	case IPPROTO_UDP:
334 #ifdef INET6
335 		if (udp_done != 0)
336 			return;
337 		else
338 			udp_done = 1;
339 #endif
340 		break;
341 	}
342 	if (live) {
343 		if (!pcblist_sysctl(proto, name, &buf, istcp))
344 			return;
345 	} else {
346 		if (!pcblist_kvm(off, &buf, istcp))
347 			return;
348 	}
349 
350 	oxig = xig = (struct xinpgen *)buf;
351 	for (xig = (struct xinpgen *)((char *)xig + xig->xig_len);
352 	     xig->xig_len > sizeof(struct xinpgen);
353 	     xig = (struct xinpgen *)((char *)xig + xig->xig_len)) {
354 		if (istcp) {
355 			timer = &((struct xtcpcb *)xig)->xt_timer;
356 			tp = &((struct xtcpcb *)xig)->xt_tp;
357 			inp = &((struct xtcpcb *)xig)->xt_inp;
358 			so = &((struct xtcpcb *)xig)->xt_socket;
359 		} else {
360 			inp = &((struct xinpcb *)xig)->xi_inp;
361 			so = &((struct xinpcb *)xig)->xi_socket;
362 			timer = NULL;
363 		}
364 
365 		/* Ignore sockets for protocols other than the desired one. */
366 		if (so->xso_protocol != proto)
367 			continue;
368 
369 		/* Ignore PCBs which were freed during copyout. */
370 		if (inp->inp_gencnt > oxig->xig_gen)
371 			continue;
372 
373 		if ((af1 == AF_INET && (inp->inp_vflag & INP_IPV4) == 0)
374 #ifdef INET6
375 		    || (af1 == AF_INET6 && (inp->inp_vflag & INP_IPV6) == 0)
376 #endif /* INET6 */
377 		    || (af1 == AF_UNSPEC && ((inp->inp_vflag & INP_IPV4) == 0
378 #ifdef INET6
379 					  && (inp->inp_vflag & INP_IPV6) == 0
380 #endif /* INET6 */
381 			))
382 		    )
383 			continue;
384 		if (!aflag &&
385 		    (
386 		     (istcp && tp->t_state == TCPS_LISTEN)
387 		     || (af1 == AF_INET &&
388 		      inet_lnaof(inp->inp_laddr) == INADDR_ANY)
389 #ifdef INET6
390 		     || (af1 == AF_INET6 &&
391 			 IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_laddr))
392 #endif /* INET6 */
393 		     || (af1 == AF_UNSPEC &&
394 			 (((inp->inp_vflag & INP_IPV4) != 0 &&
395 			   inet_lnaof(inp->inp_laddr) == INADDR_ANY)
396 #ifdef INET6
397 			  || ((inp->inp_vflag & INP_IPV6) != 0 &&
398 			      IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_laddr))
399 #endif
400 			  ))
401 		     ))
402 			continue;
403 
404 		if (first) {
405 			if (!Lflag) {
406 				printf("Active Internet connections");
407 				if (aflag)
408 					printf(" (including servers)");
409 			} else
410 				printf(
411 	"Current listen queue sizes (qlen/incqlen/maxqlen)");
412 			putchar('\n');
413 			if (Aflag)
414 				printf("%-*s ", 2 * (int)sizeof(void *), "Tcpcb");
415 			if (Lflag)
416 				printf((Aflag && !Wflag) ?
417 				    "%-5.5s %-14.14s %-18.18s" :
418 				    "%-5.5s %-14.14s %-22.22s",
419 				    "Proto", "Listen", "Local Address");
420 			else if (Tflag)
421 				printf((Aflag && !Wflag) ?
422 			    "%-5.5s %-6.6s %-6.6s %-6.6s %-18.18s %s" :
423 			    "%-5.5s %-6.6s %-6.6s %-6.6s %-22.22s %s",
424 				    "Proto", "Rexmit", "OOORcv", "0-win",
425 				    "Local Address", "Foreign Address");
426 			else {
427 				printf((Aflag && !Wflag) ?
428 				       "%-5.5s %-6.6s %-6.6s %-18.18s %-18.18s" :
429 				       "%-5.5s %-6.6s %-6.6s %-22.22s %-22.22s",
430 				       "Proto", "Recv-Q", "Send-Q",
431 				       "Local Address", "Foreign Address");
432 				if (!xflag && !Rflag)
433 					printf(" (state)");
434 			}
435 			if (xflag) {
436 				printf(" %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s %-6.6s",
437 				       "R-MBUF", "S-MBUF", "R-CLUS",
438 				       "S-CLUS", "R-HIWA", "S-HIWA",
439 				       "R-LOWA", "S-LOWA", "R-BCNT",
440 				       "S-BCNT", "R-BMAX", "S-BMAX");
441 				printf(" %7.7s %7.7s %7.7s %7.7s %7.7s %7.7s",
442 				       "rexmt", "persist", "keep",
443 				       "2msl", "delack", "rcvtime");
444 			} else if (Rflag) {
445 				printf ("  %8.8s %5.5s",
446 				    "flowid", "ftype");
447 			}
448 			putchar('\n');
449 			first = 0;
450 		}
451 		if (Lflag && so->so_qlimit == 0)
452 			continue;
453 		if (Aflag) {
454 			if (istcp)
455 				printf("%*lx ", 2 * (int)sizeof(void *), (u_long)inp->inp_ppcb);
456 			else
457 				printf("%*lx ", 2 * (int)sizeof(void *), (u_long)so->so_pcb);
458 		}
459 #ifdef INET6
460 		if ((inp->inp_vflag & INP_IPV6) != 0)
461 			vchar = ((inp->inp_vflag & INP_IPV4) != 0) ?
462 			    "46" : "6 ";
463 		else
464 #endif
465 		vchar = ((inp->inp_vflag & INP_IPV4) != 0) ?
466 		    "4 " : "  ";
467 		if (istcp && (tp->t_flags & TF_TOE) != 0)
468 			printf("%-3.3s%-2.2s ", "toe", vchar);
469 		else
470 			printf("%-3.3s%-2.2s ", name, vchar);
471 		if (Lflag) {
472 			char buf1[15];
473 
474 			snprintf(buf1, 15, "%d/%d/%d", so->so_qlen,
475 			    so->so_incqlen, so->so_qlimit);
476 			printf("%-14.14s ", buf1);
477 		} else if (Tflag) {
478 			if (istcp)
479 				printf("%6u %6u %6u ", tp->t_sndrexmitpack,
480 				       tp->t_rcvoopack, tp->t_sndzerowin);
481 		} else {
482 			printf("%6u %6u ",
483 			    so->so_rcv.sb_cc, so->so_snd.sb_cc);
484 		}
485 		if (numeric_port) {
486 			if (inp->inp_vflag & INP_IPV4) {
487 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
488 				    name, 1);
489 				if (!Lflag)
490 					inetprint(&inp->inp_faddr,
491 					    (int)inp->inp_fport, name, 1);
492 			}
493 #ifdef INET6
494 			else if (inp->inp_vflag & INP_IPV6) {
495 				inet6print(&inp->in6p_laddr,
496 				    (int)inp->inp_lport, name, 1);
497 				if (!Lflag)
498 					inet6print(&inp->in6p_faddr,
499 					    (int)inp->inp_fport, name, 1);
500 			} /* else nothing printed now */
501 #endif /* INET6 */
502 		} else if (inp->inp_flags & INP_ANONPORT) {
503 			if (inp->inp_vflag & INP_IPV4) {
504 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
505 				    name, 1);
506 				if (!Lflag)
507 					inetprint(&inp->inp_faddr,
508 					    (int)inp->inp_fport, name, 0);
509 			}
510 #ifdef INET6
511 			else if (inp->inp_vflag & INP_IPV6) {
512 				inet6print(&inp->in6p_laddr,
513 				    (int)inp->inp_lport, name, 1);
514 				if (!Lflag)
515 					inet6print(&inp->in6p_faddr,
516 					    (int)inp->inp_fport, name, 0);
517 			} /* else nothing printed now */
518 #endif /* INET6 */
519 		} else {
520 			if (inp->inp_vflag & INP_IPV4) {
521 				inetprint(&inp->inp_laddr, (int)inp->inp_lport,
522 				    name, 0);
523 				if (!Lflag)
524 					inetprint(&inp->inp_faddr,
525 					    (int)inp->inp_fport, name,
526 					    inp->inp_lport != inp->inp_fport);
527 			}
528 #ifdef INET6
529 			else if (inp->inp_vflag & INP_IPV6) {
530 				inet6print(&inp->in6p_laddr,
531 				    (int)inp->inp_lport, name, 0);
532 				if (!Lflag)
533 					inet6print(&inp->in6p_faddr,
534 					    (int)inp->inp_fport, name,
535 					    inp->inp_lport != inp->inp_fport);
536 			} /* else nothing printed now */
537 #endif /* INET6 */
538 		}
539 		if (xflag) {
540 			printf("%6u %6u %6u %6u %6u %6u %6u %6u %6u %6u %6u %6u",
541 			       so->so_rcv.sb_mcnt, so->so_snd.sb_mcnt,
542 			       so->so_rcv.sb_ccnt, so->so_snd.sb_ccnt,
543 			       so->so_rcv.sb_hiwat, so->so_snd.sb_hiwat,
544 			       so->so_rcv.sb_lowat, so->so_snd.sb_lowat,
545 			       so->so_rcv.sb_mbcnt, so->so_snd.sb_mbcnt,
546 			       so->so_rcv.sb_mbmax, so->so_snd.sb_mbmax);
547 			if (timer != NULL)
548 				printf(" %4d.%02d %4d.%02d %4d.%02d %4d.%02d %4d.%02d %4d.%02d",
549 				    timer->tt_rexmt / 1000, (timer->tt_rexmt % 1000) / 10,
550 				    timer->tt_persist / 1000, (timer->tt_persist % 1000) / 10,
551 				    timer->tt_keep / 1000, (timer->tt_keep % 1000) / 10,
552 				    timer->tt_2msl / 1000, (timer->tt_2msl % 1000) / 10,
553 				    timer->tt_delack / 1000, (timer->tt_delack % 1000) / 10,
554 				    timer->t_rcvtime / 1000, (timer->t_rcvtime % 1000) / 10);
555 		}
556 		if (istcp && !Lflag && !xflag && !Tflag && !Rflag) {
557 			if (tp->t_state < 0 || tp->t_state >= TCP_NSTATES)
558 				printf("%d", tp->t_state);
559 			else {
560 				printf("%s", tcpstates[tp->t_state]);
561 #if defined(TF_NEEDSYN) && defined(TF_NEEDFIN)
562 				/* Show T/TCP `hidden state' */
563 				if (tp->t_flags & (TF_NEEDSYN|TF_NEEDFIN))
564 					putchar('*');
565 #endif /* defined(TF_NEEDSYN) && defined(TF_NEEDFIN) */
566 			}
567 		}
568 		if (Rflag) {
569 			printf(" %08x %5d",
570 			    inp->inp_flowid,
571 			    inp->inp_flowtype);
572 		}
573 		putchar('\n');
574 	}
575 	if (xig != oxig && xig->xig_gen != oxig->xig_gen) {
576 		if (oxig->xig_count > xig->xig_count) {
577 			printf("Some %s sockets may have been deleted.\n",
578 			    name);
579 		} else if (oxig->xig_count < xig->xig_count) {
580 			printf("Some %s sockets may have been created.\n",
581 			    name);
582 		} else {
583 			printf(
584 	"Some %s sockets may have been created or deleted.\n",
585 			    name);
586 		}
587 	}
588 	free(buf);
589 }
590 
591 /*
592  * Dump TCP statistics structure.
593  */
594 void
595 tcp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
596 {
597 	struct tcpstat tcpstat, zerostat;
598 	size_t len = sizeof tcpstat;
599 
600 #ifdef INET6
601 	if (tcp_done != 0)
602 		return;
603 	else
604 		tcp_done = 1;
605 #endif
606 
607 	if (live) {
608 		if (zflag)
609 			memset(&zerostat, 0, len);
610 		if (sysctlbyname("net.inet.tcp.stats", &tcpstat, &len,
611 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
612 			warn("sysctl: net.inet.tcp.stats");
613 			return;
614 		}
615 	} else
616 		kread_counters(off, &tcpstat, len);
617 
618 	printf ("%s:\n", name);
619 
620 #define	p(f, m) if (tcpstat.f || sflag <= 1)				\
621 	printf(m, (uintmax_t )tcpstat.f, plural(tcpstat.f))
622 
623 #define	p1a(f, m) if (tcpstat.f || sflag <= 1)				\
624 	printf(m, (uintmax_t )tcpstat.f)
625 
626 #define	p2(f1, f2, m) if (tcpstat.f1 || tcpstat.f2 || sflag <= 1)	\
627 	printf(m, (uintmax_t )tcpstat.f1, plural(tcpstat.f1),		\
628 	    (uintmax_t )tcpstat.f2, plural(tcpstat.f2))
629 
630 #define	p2a(f1, f2, m) if (tcpstat.f1 || tcpstat.f2 || sflag <= 1)	\
631 	printf(m, (uintmax_t )tcpstat.f1, plural(tcpstat.f1),		\
632 	    (uintmax_t )tcpstat.f2)
633 
634 #define	p3(f, m) if (tcpstat.f || sflag <= 1)				\
635 	printf(m, (uintmax_t )tcpstat.f, pluralies(tcpstat.f))
636 
637 	p(tcps_sndtotal, "\t%ju packet%s sent\n");
638 	p2(tcps_sndpack,tcps_sndbyte, "\t\t%ju data packet%s (%ju byte%s)\n");
639 	p2(tcps_sndrexmitpack, tcps_sndrexmitbyte,
640 	    "\t\t%ju data packet%s (%ju byte%s) retransmitted\n");
641 	p(tcps_sndrexmitbad,
642 	    "\t\t%ju data packet%s unnecessarily retransmitted\n");
643 	p(tcps_mturesent, "\t\t%ju resend%s initiated by MTU discovery\n");
644 	p2a(tcps_sndacks, tcps_delack,
645 	    "\t\t%ju ack-only packet%s (%ju delayed)\n");
646 	p(tcps_sndurg, "\t\t%ju URG only packet%s\n");
647 	p(tcps_sndprobe, "\t\t%ju window probe packet%s\n");
648 	p(tcps_sndwinup, "\t\t%ju window update packet%s\n");
649 	p(tcps_sndctrl, "\t\t%ju control packet%s\n");
650 	p(tcps_rcvtotal, "\t%ju packet%s received\n");
651 	p2(tcps_rcvackpack, tcps_rcvackbyte,
652 	    "\t\t%ju ack%s (for %ju byte%s)\n");
653 	p(tcps_rcvdupack, "\t\t%ju duplicate ack%s\n");
654 	p(tcps_rcvacktoomuch, "\t\t%ju ack%s for unsent data\n");
655 	p2(tcps_rcvpack, tcps_rcvbyte,
656 	    "\t\t%ju packet%s (%ju byte%s) received in-sequence\n");
657 	p2(tcps_rcvduppack, tcps_rcvdupbyte,
658 	    "\t\t%ju completely duplicate packet%s (%ju byte%s)\n");
659 	p(tcps_pawsdrop, "\t\t%ju old duplicate packet%s\n");
660 	p2(tcps_rcvpartduppack, tcps_rcvpartdupbyte,
661 	    "\t\t%ju packet%s with some dup. data (%ju byte%s duped)\n");
662 	p2(tcps_rcvoopack, tcps_rcvoobyte,
663 	    "\t\t%ju out-of-order packet%s (%ju byte%s)\n");
664 	p2(tcps_rcvpackafterwin, tcps_rcvbyteafterwin,
665 	    "\t\t%ju packet%s (%ju byte%s) of data after window\n");
666 	p(tcps_rcvwinprobe, "\t\t%ju window probe%s\n");
667 	p(tcps_rcvwinupd, "\t\t%ju window update packet%s\n");
668 	p(tcps_rcvafterclose, "\t\t%ju packet%s received after close\n");
669 	p(tcps_rcvbadsum, "\t\t%ju discarded for bad checksum%s\n");
670 	p(tcps_rcvbadoff, "\t\t%ju discarded for bad header offset field%s\n");
671 	p1a(tcps_rcvshort, "\t\t%ju discarded because packet too short\n");
672 	p1a(tcps_rcvreassfull,
673 	    "\t\t%ju discarded due to no space in reassembly queue\n");
674 	p(tcps_connattempt, "\t%ju connection request%s\n");
675 	p(tcps_accepts, "\t%ju connection accept%s\n");
676 	p(tcps_badsyn, "\t%ju bad connection attempt%s\n");
677 	p(tcps_listendrop, "\t%ju listen queue overflow%s\n");
678 	p(tcps_badrst, "\t%ju ignored RSTs in the window%s\n");
679 	p(tcps_connects, "\t%ju connection%s established (including accepts)\n");
680 	p2(tcps_closed, tcps_drops,
681 	    "\t%ju connection%s closed (including %ju drop%s)\n");
682 	p(tcps_cachedrtt, "\t\t%ju connection%s updated cached RTT on close\n");
683 	p(tcps_cachedrttvar,
684 	    "\t\t%ju connection%s updated cached RTT variance on close\n");
685 	p(tcps_cachedssthresh,
686 	    "\t\t%ju connection%s updated cached ssthresh on close\n");
687 	p(tcps_conndrops, "\t%ju embryonic connection%s dropped\n");
688 	p2(tcps_rttupdated, tcps_segstimed,
689 	    "\t%ju segment%s updated rtt (of %ju attempt%s)\n");
690 	p(tcps_rexmttimeo, "\t%ju retransmit timeout%s\n");
691 	p(tcps_timeoutdrop, "\t\t%ju connection%s dropped by rexmit timeout\n");
692 	p(tcps_persisttimeo, "\t%ju persist timeout%s\n");
693 	p(tcps_persistdrop, "\t\t%ju connection%s dropped by persist timeout\n");
694 	p(tcps_finwait2_drops,
695 	    "\t%ju Connection%s (fin_wait_2) dropped because of timeout\n");
696 	p(tcps_keeptimeo, "\t%ju keepalive timeout%s\n");
697 	p(tcps_keepprobe, "\t\t%ju keepalive probe%s sent\n");
698 	p(tcps_keepdrops, "\t\t%ju connection%s dropped by keepalive\n");
699 	p(tcps_predack, "\t%ju correct ACK header prediction%s\n");
700 	p(tcps_preddat, "\t%ju correct data packet header prediction%s\n");
701 
702 	p3(tcps_sc_added, "\t%ju syncache entr%s added\n");
703 	p1a(tcps_sc_retransmitted, "\t\t%ju retransmitted\n");
704 	p1a(tcps_sc_dupsyn, "\t\t%ju dupsyn\n");
705 	p1a(tcps_sc_dropped, "\t\t%ju dropped\n");
706 	p1a(tcps_sc_completed, "\t\t%ju completed\n");
707 	p1a(tcps_sc_bucketoverflow, "\t\t%ju bucket overflow\n");
708 	p1a(tcps_sc_cacheoverflow, "\t\t%ju cache overflow\n");
709 	p1a(tcps_sc_reset, "\t\t%ju reset\n");
710 	p1a(tcps_sc_stale, "\t\t%ju stale\n");
711 	p1a(tcps_sc_aborted, "\t\t%ju aborted\n");
712 	p1a(tcps_sc_badack, "\t\t%ju badack\n");
713 	p1a(tcps_sc_unreach, "\t\t%ju unreach\n");
714 	p(tcps_sc_zonefail, "\t\t%ju zone failure%s\n");
715 	p(tcps_sc_sendcookie, "\t%ju cookie%s sent\n");
716 	p(tcps_sc_recvcookie, "\t%ju cookie%s received\n");
717 
718 	p3(tcps_hc_added, "\t%ju hostcache entr%s added\n");
719 	p1a(tcps_hc_bucketoverflow, "\t\t%ju bucket overflow\n");
720 
721 	p(tcps_sack_recovery_episode, "\t%ju SACK recovery episode%s\n");
722 	p(tcps_sack_rexmits,
723 	    "\t%ju segment rexmit%s in SACK recovery episodes\n");
724 	p(tcps_sack_rexmit_bytes,
725 	    "\t%ju byte rexmit%s in SACK recovery episodes\n");
726 	p(tcps_sack_rcv_blocks,
727 	    "\t%ju SACK option%s (SACK blocks) received\n");
728 	p(tcps_sack_send_blocks, "\t%ju SACK option%s (SACK blocks) sent\n");
729 	p1a(tcps_sack_sboverflow, "\t%ju SACK scoreboard overflow\n");
730 
731 	p(tcps_ecn_ce, "\t%ju packet%s with ECN CE bit set\n");
732 	p(tcps_ecn_ect0, "\t%ju packet%s with ECN ECT(0) bit set\n");
733 	p(tcps_ecn_ect1, "\t%ju packet%s with ECN ECT(1) bit set\n");
734 	p(tcps_ecn_shs, "\t%ju successful ECN handshake%s\n");
735 	p(tcps_ecn_rcwnd, "\t%ju time%s ECN reduced the congestion window\n");
736 
737 	p(tcps_sig_rcvgoodsig,
738 	     "\t%ju packet%s with valid tcp-md5 signature received\n");
739 	p(tcps_sig_rcvbadsig,
740 	     "\t%ju packet%s with invalid tcp-md5 signature received\n");
741 	p(tcps_sig_err_buildsig,
742 	     "\t%ju packet%s with tcp-md5 signature mismatch\n");
743 	p(tcps_sig_err_sigopt,
744 	     "\t%ju packet%s with unexpected tcp-md5 signature received\n");
745 	p(tcps_sig_err_nosigopt,
746 	     "\t%ju packet%s without expected tcp-md5 signature received\n");
747 #undef p
748 #undef p1a
749 #undef p2
750 #undef p2a
751 #undef p3
752 }
753 
754 /*
755  * Dump UDP statistics structure.
756  */
757 void
758 udp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
759 {
760 	struct udpstat udpstat, zerostat;
761 	size_t len = sizeof udpstat;
762 	uint64_t delivered;
763 
764 #ifdef INET6
765 	if (udp_done != 0)
766 		return;
767 	else
768 		udp_done = 1;
769 #endif
770 
771 	if (live) {
772 		if (zflag)
773 			memset(&zerostat, 0, len);
774 		if (sysctlbyname("net.inet.udp.stats", &udpstat, &len,
775 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
776 			warn("sysctl: net.inet.udp.stats");
777 			return;
778 		}
779 	} else
780 		kread_counters(off, &udpstat, len);
781 
782 	printf("%s:\n", name);
783 #define	p(f, m) if (udpstat.f || sflag <= 1) \
784     printf("\t%ju " m, (uintmax_t)udpstat.f, plural(udpstat.f))
785 #define	p1a(f, m) if (udpstat.f || sflag <= 1) \
786     printf("\t%ju " m, (uintmax_t)udpstat.f)
787 	p(udps_ipackets, "datagram%s received\n");
788 	p1a(udps_hdrops, "with incomplete header\n");
789 	p1a(udps_badlen, "with bad data length field\n");
790 	p1a(udps_badsum, "with bad checksum\n");
791 	p1a(udps_nosum, "with no checksum\n");
792 	p1a(udps_noport, "dropped due to no socket\n");
793 	p(udps_noportbcast,
794 	    "broadcast/multicast datagram%s undelivered\n");
795 	p1a(udps_fullsock, "dropped due to full socket buffers\n");
796 	p1a(udpps_pcbhashmiss, "not for hashed pcb\n");
797 	delivered = udpstat.udps_ipackets -
798 		    udpstat.udps_hdrops -
799 		    udpstat.udps_badlen -
800 		    udpstat.udps_badsum -
801 		    udpstat.udps_noport -
802 		    udpstat.udps_noportbcast -
803 		    udpstat.udps_fullsock;
804 	if (delivered || sflag <= 1)
805 		printf("\t%ju delivered\n", (uint64_t)delivered);
806 	p(udps_opackets, "datagram%s output\n");
807 	/* the next statistic is cumulative in udps_noportbcast */
808 	p(udps_filtermcast,
809 	    "time%s multicast source filter matched\n");
810 #undef p
811 #undef p1a
812 }
813 
814 /*
815  * Dump CARP statistics structure.
816  */
817 void
818 carp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
819 {
820 	struct carpstats carpstat, zerostat;
821 	size_t len = sizeof(struct carpstats);
822 
823 	if (live) {
824 		if (zflag)
825 			memset(&zerostat, 0, len);
826 		if (sysctlbyname("net.inet.carp.stats", &carpstat, &len,
827 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
828 			if (errno != ENOENT)
829 				warn("sysctl: net.inet.carp.stats");
830 			return;
831 		}
832 	} else {
833 		if (off == 0)
834 			return;
835 		kread_counters(off, &carpstat, len);
836 	}
837 
838 	printf("%s:\n", name);
839 
840 #define	p(f, m) if (carpstat.f || sflag <= 1) \
841 	printf(m, (uintmax_t)carpstat.f, plural(carpstat.f))
842 #define	p2(f, m) if (carpstat.f || sflag <= 1) \
843 	printf(m, (uintmax_t)carpstat.f)
844 
845 	p(carps_ipackets, "\t%ju packet%s received (IPv4)\n");
846 	p(carps_ipackets6, "\t%ju packet%s received (IPv6)\n");
847 	p(carps_badttl, "\t\t%ju packet%s discarded for wrong TTL\n");
848 	p(carps_hdrops, "\t\t%ju packet%s shorter than header\n");
849 	p(carps_badsum, "\t\t%ju discarded for bad checksum%s\n");
850 	p(carps_badver,	"\t\t%ju discarded packet%s with a bad version\n");
851 	p2(carps_badlen, "\t\t%ju discarded because packet too short\n");
852 	p2(carps_badauth, "\t\t%ju discarded for bad authentication\n");
853 	p2(carps_badvhid, "\t\t%ju discarded for bad vhid\n");
854 	p2(carps_badaddrs, "\t\t%ju discarded because of a bad address list\n");
855 	p(carps_opackets, "\t%ju packet%s sent (IPv4)\n");
856 	p(carps_opackets6, "\t%ju packet%s sent (IPv6)\n");
857 	p2(carps_onomem, "\t\t%ju send failed due to mbuf memory error\n");
858 #if notyet
859 	p(carps_ostates, "\t\t%s state update%s sent\n");
860 #endif
861 #undef p
862 #undef p2
863 }
864 
865 /*
866  * Dump IP statistics structure.
867  */
868 void
869 ip_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
870 {
871 	struct ipstat ipstat, zerostat;
872 	size_t len = sizeof ipstat;
873 
874 	if (live) {
875 		if (zflag)
876 			memset(&zerostat, 0, len);
877 		if (sysctlbyname("net.inet.ip.stats", &ipstat, &len,
878 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
879 			warn("sysctl: net.inet.ip.stats");
880 			return;
881 		}
882 	} else
883 		kread_counters(off, &ipstat, len);
884 
885 	printf("%s:\n", name);
886 
887 #define	p(f, m) if (ipstat.f || sflag <= 1) \
888     printf(m, (uintmax_t )ipstat.f, plural(ipstat.f))
889 #define	p1a(f, m) if (ipstat.f || sflag <= 1) \
890     printf(m, (uintmax_t )ipstat.f)
891 
892 	p(ips_total, "\t%ju total packet%s received\n");
893 	p(ips_badsum, "\t%ju bad header checksum%s\n");
894 	p1a(ips_toosmall, "\t%ju with size smaller than minimum\n");
895 	p1a(ips_tooshort, "\t%ju with data size < data length\n");
896 	p1a(ips_toolong, "\t%ju with ip length > max ip packet size\n");
897 	p1a(ips_badhlen, "\t%ju with header length < data size\n");
898 	p1a(ips_badlen, "\t%ju with data length < header length\n");
899 	p1a(ips_badoptions, "\t%ju with bad options\n");
900 	p1a(ips_badvers, "\t%ju with incorrect version number\n");
901 	p(ips_fragments, "\t%ju fragment%s received\n");
902 	p(ips_fragdropped, "\t%ju fragment%s dropped (dup or out of space)\n");
903 	p(ips_fragtimeout, "\t%ju fragment%s dropped after timeout\n");
904 	p(ips_reassembled, "\t%ju packet%s reassembled ok\n");
905 	p(ips_delivered, "\t%ju packet%s for this host\n");
906 	p(ips_noproto, "\t%ju packet%s for unknown/unsupported protocol\n");
907 	p(ips_forward, "\t%ju packet%s forwarded");
908 	p(ips_fastforward, " (%ju packet%s fast forwarded)");
909 	if (ipstat.ips_forward || sflag <= 1)
910 		putchar('\n');
911 	p(ips_cantforward, "\t%ju packet%s not forwardable\n");
912 	p(ips_notmember,
913 	    "\t%ju packet%s received for unknown multicast group\n");
914 	p(ips_redirectsent, "\t%ju redirect%s sent\n");
915 	p(ips_localout, "\t%ju packet%s sent from this host\n");
916 	p(ips_rawout, "\t%ju packet%s sent with fabricated ip header\n");
917 	p(ips_odropped,
918 	    "\t%ju output packet%s dropped due to no bufs, etc.\n");
919 	p(ips_noroute, "\t%ju output packet%s discarded due to no route\n");
920 	p(ips_fragmented, "\t%ju output datagram%s fragmented\n");
921 	p(ips_ofragments, "\t%ju fragment%s created\n");
922 	p(ips_cantfrag, "\t%ju datagram%s that can't be fragmented\n");
923 	p(ips_nogif, "\t%ju tunneling packet%s that can't find gif\n");
924 	p(ips_badaddr, "\t%ju datagram%s with bad address in header\n");
925 #undef p
926 #undef p1a
927 }
928 
929 /*
930  * Dump ARP statistics structure.
931  */
932 void
933 arp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
934 {
935 	struct arpstat arpstat, zerostat;
936 	size_t len = sizeof(arpstat);
937 
938 	if (live) {
939 		if (zflag)
940 			memset(&zerostat, 0, len);
941 		if (sysctlbyname("net.link.ether.arp.stats", &arpstat, &len,
942 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
943 			warn("sysctl: net.link.ether.arp.stats");
944 			return;
945 		}
946 	} else
947 		kread_counters(off, &arpstat, len);
948 
949 	printf("%s:\n", name);
950 
951 #define	p(f, m) if (arpstat.f || sflag <= 1) \
952     printf("\t%ju " m, (uintmax_t)arpstat.f, plural(arpstat.f))
953 #define	p2(f, m) if (arpstat.f || sflag <= 1) \
954     printf("\t%ju " m, (uintmax_t)arpstat.f, pluralies(arpstat.f))
955 
956 	p(txrequests, "ARP request%s sent\n");
957 	p2(txreplies, "ARP repl%s sent\n");
958 	p(rxrequests, "ARP request%s received\n");
959 	p2(rxreplies, "ARP repl%s received\n");
960 	p(received, "ARP packet%s received\n");
961 	p(dropped, "total packet%s dropped due to no ARP entry\n");
962 	p(timeouts, "ARP entry%s timed out\n");
963 	p(dupips, "Duplicate IP%s seen\n");
964 #undef p
965 #undef p2
966 }
967 
968 
969 
970 static	const char *icmpnames[ICMP_MAXTYPE + 1] = {
971 	"echo reply",			/* RFC 792 */
972 	"#1",
973 	"#2",
974 	"destination unreachable",	/* RFC 792 */
975 	"source quench",		/* RFC 792 */
976 	"routing redirect",		/* RFC 792 */
977 	"#6",
978 	"#7",
979 	"echo",				/* RFC 792 */
980 	"router advertisement",		/* RFC 1256 */
981 	"router solicitation",		/* RFC 1256 */
982 	"time exceeded",		/* RFC 792 */
983 	"parameter problem",		/* RFC 792 */
984 	"time stamp",			/* RFC 792 */
985 	"time stamp reply",		/* RFC 792 */
986 	"information request",		/* RFC 792 */
987 	"information request reply",	/* RFC 792 */
988 	"address mask request",		/* RFC 950 */
989 	"address mask reply",		/* RFC 950 */
990 	"#19",
991 	"#20",
992 	"#21",
993 	"#22",
994 	"#23",
995 	"#24",
996 	"#25",
997 	"#26",
998 	"#27",
999 	"#28",
1000 	"#29",
1001 	"icmp traceroute",		/* RFC 1393 */
1002 	"datagram conversion error",	/* RFC 1475 */
1003 	"mobile host redirect",
1004 	"IPv6 where-are-you",
1005 	"IPv6 i-am-here",
1006 	"mobile registration req",
1007 	"mobile registration reply",
1008 	"domain name request",		/* RFC 1788 */
1009 	"domain name reply",		/* RFC 1788 */
1010 	"icmp SKIP",
1011 	"icmp photuris",		/* RFC 2521 */
1012 };
1013 
1014 /*
1015  * Dump ICMP statistics.
1016  */
1017 void
1018 icmp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
1019 {
1020 	struct icmpstat icmpstat, zerostat;
1021 	int i, first;
1022 	size_t len;
1023 
1024 	len = sizeof icmpstat;
1025 	if (live) {
1026 		if (zflag)
1027 			memset(&zerostat, 0, len);
1028 		if (sysctlbyname("net.inet.icmp.stats", &icmpstat, &len,
1029 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1030 			warn("sysctl: net.inet.icmp.stats");
1031 			return;
1032 		}
1033 	} else
1034 		kread_counters(off, &icmpstat, len);
1035 
1036 	printf("%s:\n", name);
1037 
1038 #define	p(f, m) if (icmpstat.f || sflag <= 1) \
1039     printf(m, icmpstat.f, plural(icmpstat.f))
1040 #define	p1a(f, m) if (icmpstat.f || sflag <= 1) \
1041     printf(m, icmpstat.f)
1042 #define	p2(f, m) if (icmpstat.f || sflag <= 1) \
1043     printf(m, icmpstat.f, plurales(icmpstat.f))
1044 
1045 	p(icps_error, "\t%lu call%s to icmp_error\n");
1046 	p(icps_oldicmp,
1047 	    "\t%lu error%s not generated in response to an icmp message\n");
1048 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
1049 		if (icmpstat.icps_outhist[i] != 0) {
1050 			if (first) {
1051 				printf("\tOutput histogram:\n");
1052 				first = 0;
1053 			}
1054 			if (icmpnames[i] != NULL)
1055 				printf("\t\t%s: %lu\n", icmpnames[i],
1056 					icmpstat.icps_outhist[i]);
1057 			else
1058 				printf("\t\tunknown ICMP #%d: %lu\n", i,
1059 					icmpstat.icps_outhist[i]);
1060 		}
1061 	p(icps_badcode, "\t%lu message%s with bad code fields\n");
1062 	p(icps_tooshort, "\t%lu message%s less than the minimum length\n");
1063 	p(icps_checksum, "\t%lu message%s with bad checksum\n");
1064 	p(icps_badlen, "\t%lu message%s with bad length\n");
1065 	p1a(icps_bmcastecho, "\t%lu multicast echo requests ignored\n");
1066 	p1a(icps_bmcasttstamp, "\t%lu multicast timestamp requests ignored\n");
1067 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
1068 		if (icmpstat.icps_inhist[i] != 0) {
1069 			if (first) {
1070 				printf("\tInput histogram:\n");
1071 				first = 0;
1072 			}
1073 			if (icmpnames[i] != NULL)
1074 				printf("\t\t%s: %lu\n", icmpnames[i],
1075 				    icmpstat.icps_inhist[i]);
1076 			else
1077 				printf("\t\tunknown ICMP #%d: %lu\n", i,
1078 				    icmpstat.icps_inhist[i]);
1079 		}
1080 	p(icps_reflect, "\t%lu message response%s generated\n");
1081 	p2(icps_badaddr, "\t%lu invalid return address%s\n");
1082 	p(icps_noroute, "\t%lu no return route%s\n");
1083 #undef p
1084 #undef p1a
1085 #undef p2
1086 	if (live) {
1087 		len = sizeof i;
1088 		if (sysctlbyname("net.inet.icmp.maskrepl", &i, &len, NULL, 0) <
1089 		    0)
1090 			return;
1091 		printf("\tICMP address mask responses are %sabled\n",
1092 		    i ? "en" : "dis");
1093 	}
1094 }
1095 
1096 #ifndef BURN_BRIDGES
1097 /*
1098  * Dump IGMP statistics structure (pre 8.x kernel).
1099  */
1100 static void
1101 igmp_stats_live_old(const char *name)
1102 {
1103 	struct oigmpstat oigmpstat, zerostat;
1104 	size_t len = sizeof(oigmpstat);
1105 
1106 	if (zflag)
1107 		memset(&zerostat, 0, len);
1108 	if (sysctlbyname("net.inet.igmp.stats", &oigmpstat, &len,
1109 	    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1110 		warn("sysctl: net.inet.igmp.stats");
1111 		return;
1112 	}
1113 
1114 	printf("%s:\n", name);
1115 
1116 #define	p(f, m) if (oigmpstat.f || sflag <= 1) \
1117     printf(m, oigmpstat.f, plural(oigmpstat.f))
1118 #define	py(f, m) if (oigmpstat.f || sflag <= 1) \
1119     printf(m, oigmpstat.f, oigmpstat.f != 1 ? "ies" : "y")
1120 	p(igps_rcv_total, "\t%u message%s received\n");
1121 	p(igps_rcv_tooshort, "\t%u message%s received with too few bytes\n");
1122 	p(igps_rcv_badsum, "\t%u message%s received with bad checksum\n");
1123 	py(igps_rcv_queries, "\t%u membership quer%s received\n");
1124 	py(igps_rcv_badqueries,
1125 	    "\t%u membership quer%s received with invalid field(s)\n");
1126 	p(igps_rcv_reports, "\t%u membership report%s received\n");
1127 	p(igps_rcv_badreports,
1128 	    "\t%u membership report%s received with invalid field(s)\n");
1129 	p(igps_rcv_ourreports,
1130 "\t%u membership report%s received for groups to which we belong\n");
1131         p(igps_snd_reports, "\t%u membership report%s sent\n");
1132 #undef p
1133 #undef py
1134 }
1135 #endif /* !BURN_BRIDGES */
1136 
1137 /*
1138  * Dump IGMP statistics structure.
1139  */
1140 void
1141 igmp_stats(u_long off, const char *name, int af1 __unused, int proto __unused)
1142 {
1143 	struct igmpstat igmpstat, zerostat;
1144 	size_t len;
1145 
1146 #ifndef BURN_BRIDGES
1147 	if (live) {
1148 		/*
1149 		 * Detect if we are being run against a pre-IGMPv3 kernel.
1150 		 * We cannot do this for a core file as the legacy
1151 		 * struct igmpstat has no size field, nor does it
1152 		 * export it in any readily-available symbols.
1153 		 */
1154 		len = 0;
1155 		if (sysctlbyname("net.inet.igmp.stats", NULL, &len, NULL,
1156 		    0) < 0) {
1157 			warn("sysctl: net.inet.igmp.stats");
1158 			return;
1159 		}
1160 		if (len < sizeof(igmpstat)) {
1161 			igmp_stats_live_old(name);
1162 			return;
1163 		}
1164 	}
1165 #endif /* !BURN_BRIDGES */
1166 
1167 	len = sizeof(igmpstat);
1168 	if (live) {
1169 		if (zflag)
1170 			memset(&zerostat, 0, len);
1171 		if (sysctlbyname("net.inet.igmp.stats", &igmpstat, &len,
1172 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1173 			warn("sysctl: net.inet.igmp.stats");
1174 			return;
1175 		}
1176 	} else {
1177 		len = sizeof(igmpstat);
1178 		kread(off, &igmpstat, len);
1179 	}
1180 
1181 	if (igmpstat.igps_version != IGPS_VERSION_3) {
1182 		warnx("%s: version mismatch (%d != %d)", __func__,
1183 		    igmpstat.igps_version, IGPS_VERSION_3);
1184 	}
1185 	if (igmpstat.igps_len != IGPS_VERSION3_LEN) {
1186 		warnx("%s: size mismatch (%d != %d)", __func__,
1187 		    igmpstat.igps_len, IGPS_VERSION3_LEN);
1188 	}
1189 
1190 	printf("%s:\n", name);
1191 
1192 #define	p64(f, m) if (igmpstat.f || sflag <= 1) \
1193     printf(m, (uintmax_t) igmpstat.f, plural(igmpstat.f))
1194 #define	py64(f, m) if (igmpstat.f || sflag <= 1) \
1195     printf(m, (uintmax_t) igmpstat.f, pluralies(igmpstat.f))
1196 	p64(igps_rcv_total, "\t%ju message%s received\n");
1197 	p64(igps_rcv_tooshort, "\t%ju message%s received with too few bytes\n");
1198 	p64(igps_rcv_badttl, "\t%ju message%s received with wrong TTL\n");
1199 	p64(igps_rcv_badsum, "\t%ju message%s received with bad checksum\n");
1200 	py64(igps_rcv_v1v2_queries, "\t%ju V1/V2 membership quer%s received\n");
1201 	py64(igps_rcv_v3_queries, "\t%ju V3 membership quer%s received\n");
1202 	py64(igps_rcv_badqueries,
1203 	    "\t%ju membership quer%s received with invalid field(s)\n");
1204 	py64(igps_rcv_gen_queries, "\t%ju general quer%s received\n");
1205 	py64(igps_rcv_group_queries, "\t%ju group quer%s received\n");
1206 	py64(igps_rcv_gsr_queries, "\t%ju group-source quer%s received\n");
1207 	py64(igps_drop_gsr_queries, "\t%ju group-source quer%s dropped\n");
1208 	p64(igps_rcv_reports, "\t%ju membership report%s received\n");
1209 	p64(igps_rcv_badreports,
1210 	    "\t%ju membership report%s received with invalid field(s)\n");
1211 	p64(igps_rcv_ourreports,
1212 "\t%ju membership report%s received for groups to which we belong\n");
1213         p64(igps_rcv_nora, "\t%ju V3 report%s received without Router Alert\n");
1214         p64(igps_snd_reports, "\t%ju membership report%s sent\n");
1215 #undef p64
1216 #undef py64
1217 }
1218 
1219 /*
1220  * Dump PIM statistics structure.
1221  */
1222 void
1223 pim_stats(u_long off __unused, const char *name, int af1 __unused,
1224     int proto __unused)
1225 {
1226 	struct pimstat pimstat, zerostat;
1227 	size_t len = sizeof pimstat;
1228 
1229 	if (live) {
1230 		if (zflag)
1231 			memset(&zerostat, 0, len);
1232 		if (sysctlbyname("net.inet.pim.stats", &pimstat, &len,
1233 		    zflag ? &zerostat : NULL, zflag ? len : 0) < 0) {
1234 			if (errno != ENOENT)
1235 				warn("sysctl: net.inet.pim.stats");
1236 			return;
1237 		}
1238 	} else {
1239 		if (off == 0)
1240 			return;
1241 		kread_counters(off, &pimstat, len);
1242 	}
1243 
1244 	printf("%s:\n", name);
1245 
1246 #define	p(f, m) if (pimstat.f || sflag <= 1) \
1247     printf(m, (uintmax_t)pimstat.f, plural(pimstat.f))
1248 #define	py(f, m) if (pimstat.f || sflag <= 1) \
1249     printf(m, (uintmax_t)pimstat.f, pimstat.f != 1 ? "ies" : "y")
1250 	p(pims_rcv_total_msgs, "\t%ju message%s received\n");
1251 	p(pims_rcv_total_bytes, "\t%ju byte%s received\n");
1252 	p(pims_rcv_tooshort, "\t%ju message%s received with too few bytes\n");
1253         p(pims_rcv_badsum, "\t%ju message%s received with bad checksum\n");
1254 	p(pims_rcv_badversion, "\t%ju message%s received with bad version\n");
1255 	p(pims_rcv_registers_msgs, "\t%ju data register message%s received\n");
1256 	p(pims_rcv_registers_bytes, "\t%ju data register byte%s received\n");
1257 	p(pims_rcv_registers_wrongiif,
1258 	    "\t%ju data register message%s received on wrong iif\n");
1259 	p(pims_rcv_badregisters, "\t%ju bad register%s received\n");
1260 	p(pims_snd_registers_msgs, "\t%ju data register message%s sent\n");
1261 	p(pims_snd_registers_bytes, "\t%ju data register byte%s sent\n");
1262 #undef p
1263 #undef py
1264 }
1265 
1266 /*
1267  * Pretty print an Internet address (net address + port).
1268  */
1269 void
1270 inetprint(struct in_addr *in, int port, const char *proto, int num_port)
1271 {
1272 	struct servent *sp = 0;
1273 	char line[80], *cp;
1274 	int width;
1275 
1276 	if (Wflag)
1277 	    sprintf(line, "%s.", inetname(in));
1278 	else
1279 	    sprintf(line, "%.*s.", (Aflag && !num_port) ? 12 : 16, inetname(in));
1280 	cp = strchr(line, '\0');
1281 	if (!num_port && port)
1282 		sp = getservbyport((int)port, proto);
1283 	if (sp || port == 0)
1284 		sprintf(cp, "%.15s ", sp ? sp->s_name : "*");
1285 	else
1286 		sprintf(cp, "%d ", ntohs((u_short)port));
1287 	width = (Aflag && !Wflag) ? 18 : 22;
1288 	if (Wflag)
1289 	    printf("%-*s ", width, line);
1290 	else
1291 	    printf("%-*.*s ", width, width, line);
1292 }
1293 
1294 /*
1295  * Construct an Internet address representation.
1296  * If numeric_addr has been supplied, give
1297  * numeric value, otherwise try for symbolic name.
1298  */
1299 char *
1300 inetname(struct in_addr *inp)
1301 {
1302 	char *cp;
1303 	static char line[MAXHOSTNAMELEN];
1304 	struct hostent *hp;
1305 	struct netent *np;
1306 
1307 	cp = 0;
1308 	if (!numeric_addr && inp->s_addr != INADDR_ANY) {
1309 		int net = inet_netof(*inp);
1310 		int lna = inet_lnaof(*inp);
1311 
1312 		if (lna == INADDR_ANY) {
1313 			np = getnetbyaddr(net, AF_INET);
1314 			if (np)
1315 				cp = np->n_name;
1316 		}
1317 		if (cp == 0) {
1318 			hp = gethostbyaddr((char *)inp, sizeof (*inp), AF_INET);
1319 			if (hp) {
1320 				cp = hp->h_name;
1321 				trimdomain(cp, strlen(cp));
1322 			}
1323 		}
1324 	}
1325 	if (inp->s_addr == INADDR_ANY)
1326 		strcpy(line, "*");
1327 	else if (cp) {
1328 		strlcpy(line, cp, sizeof(line));
1329 	} else {
1330 		inp->s_addr = ntohl(inp->s_addr);
1331 #define	C(x)	((u_int)((x) & 0xff))
1332 		sprintf(line, "%u.%u.%u.%u", C(inp->s_addr >> 24),
1333 		    C(inp->s_addr >> 16), C(inp->s_addr >> 8), C(inp->s_addr));
1334 	}
1335 	return (line);
1336 }
1337