xref: /illumos-gate/usr/src/cmd/ipf/lib/printstate.c (revision e3ae4b35c024af1196582063ecee3ab79367227d)
1 /*
2  * Copyright (C) 2002 by Darren Reed.
3  *
4  * See the IPFILTER.LICENCE file for details on licencing.
5  */
6 
7 #include "ipf.h"
8 #include "kmem.h"
9 
10 #define	PRINTF	(void)printf
11 #define	FPRINTF	(void)fprintf
12 
13 ipstate_t *printstate(sp, opts, now)
14 ipstate_t *sp;
15 int opts;
16 u_long now;
17 {
18 	ipstate_t ips;
19 #ifdef	IPFILTER_SYNC
20 	synclist_t ipsync;
21 #endif
22 
23 	if (kmemcpy((char *)&ips, (u_long)sp, sizeof(ips)))
24 		return NULL;
25 
26 	PRINTF("%s -> ", hostname(ips.is_v, &ips.is_src.in4));
27 	PRINTF("%s pass %#x pr %d state %d/%d bkt %d\n",
28 		hostname(ips.is_v, &ips.is_dst.in4), ips.is_pass, ips.is_p,
29 		ips.is_state[0], ips.is_state[1], ips.is_hv);
30 	PRINTF("\ttag %u ttl %lu", ips.is_tag, ips.is_die - now);
31 
32 	if (ips.is_p == IPPROTO_TCP) {
33 		PRINTF("\n\t%hu -> %hu %x:%x %hu<<%d:%hu<<%d\n",
34 			ntohs(ips.is_sport), ntohs(ips.is_dport),
35 			ips.is_send, ips.is_dend,
36 			ips.is_maxswin, ips.is_swinscale,
37 			ips.is_maxdwin, ips.is_dwinscale);
38 		PRINTF("\tcmsk %04x smsk %04x isc %p s0 %08x/%08x\n",
39 			ips.is_smsk[0], ips.is_smsk[1], ips.is_isc,
40 			ips.is_s0[0], ips.is_s0[1]);
41 		PRINTF("\tFWD:ISN inc %x sumd %x\n",
42 			ips.is_isninc[0], ips.is_sumd[0]);
43 		PRINTF("\tREV:ISN inc %x sumd %x\n",
44 			ips.is_isninc[1], ips.is_sumd[1]);
45 #ifdef	IPFILTER_SCAN
46 		PRINTF("\tsbuf[0] [");
47 		printsbuf(ips.is_sbuf[0]);
48 		PRINTF("] sbuf[1] [");
49 		printsbuf(ips.is_sbuf[1]);
50 		PRINTF("]\n");
51 #endif
52 	} else if (ips.is_p == IPPROTO_UDP) {
53 		PRINTF(" %hu -> %hu\n", ntohs(ips.is_sport),
54 			ntohs(ips.is_dport));
55 	} else if (ips.is_p == IPPROTO_GRE) {
56 		PRINTF(" call %hx/%hx\n", ntohs(ips.is_gre.gs_call[0]),
57 		       ntohs(ips.is_gre.gs_call[1]));
58 	} else if (ips.is_p == IPPROTO_ICMP
59 #ifdef	USE_INET6
60 		 || ips.is_p == IPPROTO_ICMPV6
61 #endif
62 		)
63 		PRINTF(" id %hu seq %hu type %d\n", ntohs(ips.is_icmp.ici_id),
64 			ntohs(ips.is_icmp.ici_seq), ips.is_icmp.ici_type);
65 
66 #ifdef        USE_QUAD_T
67 	PRINTF("\tforward: pkts in %qd bytes in %qd pkts out %qd bytes out %qd\n\tbackward: pkts in %qd bytes in %qd pkts out %qd bytes out %qd\n",
68 		ips.is_pkts[0], ips.is_bytes[0],
69 		ips.is_pkts[1], ips.is_bytes[1],
70 		ips.is_pkts[2], ips.is_bytes[2],
71 		ips.is_pkts[3], ips.is_bytes[3]);
72 #else
73 	PRINTF("\tforward: pkts in %ld bytes in %ld pkts out %ld bytes out %ld\n\tbackward: pkts in %ld bytes in %ld pkts out %ld bytes out %ld\n",
74 		ips.is_pkts[0], ips.is_bytes[0],
75 		ips.is_pkts[1], ips.is_bytes[1],
76 		ips.is_pkts[2], ips.is_bytes[2],
77 		ips.is_pkts[3], ips.is_bytes[3]);
78 #endif
79 
80 	PRINTF("\t");
81 
82 	/*
83 	 * Print out bits set in the result code for the state being
84 	 * kept as they would for a rule.
85 	 */
86 	if (FR_ISPASS(ips.is_pass)) {
87 		PRINTF("pass");
88 	} else if (FR_ISBLOCK(ips.is_pass)) {
89 		PRINTF("block");
90 		switch (ips.is_pass & FR_RETMASK)
91 		{
92 		case FR_RETICMP :
93 			PRINTF(" return-icmp");
94 			break;
95 		case FR_FAKEICMP :
96 			PRINTF(" return-icmp-as-dest");
97 			break;
98 		case FR_RETRST :
99 			PRINTF(" return-rst");
100 			break;
101 		default :
102 			break;
103 		}
104 	} else if ((ips.is_pass & FR_LOGMASK) == FR_LOG) {
105 			PRINTF("log");
106 		if (ips.is_pass & FR_LOGBODY)
107 			PRINTF(" body");
108 		if (ips.is_pass & FR_LOGFIRST)
109 			PRINTF(" first");
110 	} else if (FR_ISACCOUNT(ips.is_pass)) {
111 		PRINTF("count");
112 	} else if (FR_ISPREAUTH(ips.is_pass)) {
113 		PRINTF("preauth");
114 	} else if (FR_ISAUTH(ips.is_pass))
115 		PRINTF("auth");
116 
117 	if (ips.is_pass & FR_OUTQUE)
118 		PRINTF(" out");
119 	else
120 		PRINTF(" in");
121 
122 	if ((ips.is_pass & FR_LOG) != 0) {
123 		PRINTF(" log");
124 		if (ips.is_pass & FR_LOGBODY)
125 			PRINTF(" body");
126 		if (ips.is_pass & FR_LOGFIRST)
127 			PRINTF(" first");
128 		if (ips.is_pass & FR_LOGORBLOCK)
129 			PRINTF(" or-block");
130 	}
131 	if (ips.is_pass & FR_QUICK)
132 		PRINTF(" quick");
133 	if (ips.is_pass & FR_KEEPFRAG)
134 		PRINTF(" keep frags");
135 	/* a given; no? */
136 	if (ips.is_pass & FR_KEEPSTATE) {
137 		PRINTF(" keep state");
138 		if (ips.is_pass & FR_STATESYNC)
139 			PRINTF(" ( sync )");
140 	}
141 	PRINTF("\tIPv%d", ips.is_v);
142 	PRINTF("\n");
143 
144 	PRINTF("\tpkt_flags & %x(%x) = %x,\t",
145 		ips.is_flags & 0xf, ips.is_flags,
146 		ips.is_flags >> 4);
147 	PRINTF("\tpkt_options & %x = %x, %x = %x \n", ips.is_optmsk[0],
148 		ips.is_opt[0], ips.is_optmsk[1], ips.is_opt[1]);
149 	PRINTF("\tpkt_security & %x = %x, pkt_auth & %x = %x\n",
150 		ips.is_secmsk, ips.is_sec, ips.is_authmsk,
151 		ips.is_auth);
152 	PRINTF("\tis_flx %#x %#x %#x %#x\n", ips.is_flx[0][0], ips.is_flx[0][1],
153 		ips.is_flx[1][0], ips.is_flx[1][1]);
154 	PRINTF("\tinterfaces: in %s[%s", getifname(ips.is_ifp[0]),
155 		ips.is_ifname[0]);
156 	if (opts & OPT_DEBUG)
157 		PRINTF("/%p", ips.is_ifp[0]);
158 	putchar(']');
159 	PRINTF(",%s[%s", getifname(ips.is_ifp[1]), ips.is_ifname[1]);
160 	if (opts & OPT_DEBUG)
161 		PRINTF("/%p", ips.is_ifp[1]);
162 	putchar(']');
163 	PRINTF(" out %s[%s", getifname(ips.is_ifp[2]), ips.is_ifname[2]);
164 	if (opts & OPT_DEBUG)
165 		PRINTF("/%p", ips.is_ifp[2]);
166 	putchar(']');
167 	PRINTF(",%s[%s", getifname(ips.is_ifp[3]), ips.is_ifname[3]);
168 	if (opts & OPT_DEBUG)
169 		PRINTF("/%p", ips.is_ifp[3]);
170 	PRINTF("]\n");
171 
172 #ifdef	IPFILTER_SYNC
173 	if (ips.is_sync != NULL) {
174 
175 		if (kmemcpy((char *)&ipsync, (u_long)ips.is_sync, sizeof(ipsync))) {
176 
177 			PRINTF("\tSync status: status could not be retrieved\n");
178 			return NULL;
179 		}
180 
181 		PRINTF("\tSync status: idx %d num %d v %d pr %d rev %d\n",
182 			ipsync.sl_idx, ipsync.sl_num, ipsync.sl_v,
183 			ipsync.sl_p, ipsync.sl_rev);
184 
185 	} else {
186 		PRINTF("\tSync status: not synchronized\n");
187 	}
188 #endif
189 
190 	return ips.is_next;
191 }
192