|
Packit |
209cc3 |
/*
|
|
Packit |
209cc3 |
* Stanford Enetfilter subroutines for tcpdump
|
|
Packit |
209cc3 |
*
|
|
Packit |
209cc3 |
* Based on the MERIT NNstat etherifrt.c and the Ultrix pcap-pf.c
|
|
Packit |
209cc3 |
* subroutines.
|
|
Packit |
209cc3 |
*
|
|
Packit |
209cc3 |
* Rayan Zachariassen, CA*Net
|
|
Packit |
209cc3 |
*/
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#ifdef HAVE_CONFIG_H
|
|
Packit |
209cc3 |
#include <config.h>
|
|
Packit |
209cc3 |
#endif
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#include <sys/types.h>
|
|
Packit |
209cc3 |
#include <sys/time.h>
|
|
Packit |
209cc3 |
#include <sys/file.h>
|
|
Packit |
209cc3 |
#include <sys/ioctl.h>
|
|
Packit |
209cc3 |
#include <sys/socket.h>
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#include <net/if.h>
|
|
Packit |
209cc3 |
#include <pcap/bpf.h>
|
|
Packit |
209cc3 |
#include <net/enet.h>
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#include <netinet/in.h>
|
|
Packit |
209cc3 |
#include <netinet/if_ether.h>
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#include <stdio.h>
|
|
Packit |
209cc3 |
#include <errno.h>
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#include "interface.h"
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
struct packet_header {
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
struct LengthWords length;
|
|
Packit |
209cc3 |
struct tap_header tap;
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
u_char packet[8]
|
|
Packit |
209cc3 |
};
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
extern int errno;
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#define BUFSPACE (4*1024)
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Forwards */
|
|
Packit |
209cc3 |
static void efReadError(int, char *);
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
void
|
|
Packit |
209cc3 |
readloop(int cnt, int if_fd, struct bpf_program *fp, printfunc printit)
|
|
Packit |
209cc3 |
{
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
register struct packet_header *ph;
|
|
Packit |
209cc3 |
register u_char *bp;
|
|
Packit |
209cc3 |
register int inc;
|
|
Packit |
209cc3 |
#else /* !IBMRTPC */
|
|
Packit |
209cc3 |
static struct timeval tv = { 0 };
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
register int cc, caplen;
|
|
Packit |
209cc3 |
register struct bpf_insn *fcode = fp->bf_insns;
|
|
Packit |
209cc3 |
union {
|
|
Packit |
209cc3 |
struct packet_header hdr;
|
|
Packit |
209cc3 |
u_char p[BUFSPACE];
|
|
Packit |
209cc3 |
u_short s;
|
|
Packit |
209cc3 |
} buf;
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
while (1) {
|
|
Packit |
209cc3 |
if ((cc = read(if_fd, (char *)buf.p, sizeof(buf))) < 0)
|
|
Packit |
209cc3 |
efReadError(if_fd, "reader");
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
/*
|
|
Packit |
209cc3 |
* Loop through each packet.
|
|
Packit |
209cc3 |
*/
|
|
Packit |
209cc3 |
bp = buf.p;
|
|
Packit |
209cc3 |
while (cc > 0) {
|
|
Packit |
209cc3 |
ph = (struct packet_header *)bp;
|
|
Packit |
209cc3 |
caplen = ph->tap.th_wirelen > snaplen ? snaplen : ph->tap
|
|
Packit |
209cc3 |
.th_wirelen ;
|
|
Packit |
209cc3 |
if (bpf_filter(fcode, (char *)ph->packet,
|
|
Packit |
209cc3 |
ph->tap.th_wirelen, caplen)) {
|
|
Packit |
209cc3 |
if (cnt >= 0 && --cnt < 0)
|
|
Packit |
209cc3 |
goto out;
|
|
Packit |
209cc3 |
(*printit)((char *)ph->packet,
|
|
Packit |
209cc3 |
(struct timeval *)ph->tap.th_timestamp,
|
|
Packit |
209cc3 |
ph->tap.th_wirelen, caplen);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
inc = ph->length.PacketOffset;
|
|
Packit |
209cc3 |
cc -= inc;
|
|
Packit |
209cc3 |
bp += inc;
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
#else /* !IBMRTPC */
|
|
Packit |
209cc3 |
caplen = cc > snaplen ? snaplen : cc ;
|
|
Packit |
209cc3 |
if (bpf_filter(fcode, buf.hdr.packet, cc, caplen)) {
|
|
Packit |
209cc3 |
if (cnt >= 0 && --cnt < 0)
|
|
Packit |
209cc3 |
goto out;
|
|
Packit |
209cc3 |
(*printit)(buf.hdr.packet, &tv, cc, caplen);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
out:
|
|
Packit |
209cc3 |
wrapup(if_fd);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Call ONLY if read() has returned an error on packet filter */
|
|
Packit |
209cc3 |
static void
|
|
Packit |
209cc3 |
efReadError(int fid, char *msg)
|
|
Packit |
209cc3 |
{
|
|
Packit |
209cc3 |
if (errno == EINVAL) { /* read MAXINT bytes already! */
|
|
Packit |
209cc3 |
if (lseek(fid, 0, 0) < 0) {
|
|
Packit |
209cc3 |
perror("tcpdump: efReadError/lseek");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
else
|
|
Packit |
209cc3 |
return;
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
else {
|
|
Packit |
209cc3 |
(void) fprintf(stderr, "tcpdump: ");
|
|
Packit |
209cc3 |
perror(msg);
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
void
|
|
Packit |
209cc3 |
wrapup(int fd)
|
|
Packit |
209cc3 |
{
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
struct enstats es;
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
if (ioctl(fd, EIOSTATS, &es) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOSTATS error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
fprintf(stderr, "%d packets queued", es.enStat_Rcnt);
|
|
Packit |
209cc3 |
if (es.enStat_Rdrops > 0)
|
|
Packit |
209cc3 |
fprintf(stderr, ", %d dropped", es.enStat_Rdrops);
|
|
Packit |
209cc3 |
if (es.enStat_Reads > 0)
|
|
Packit |
209cc3 |
fprintf(stderr, ", %d tcpdump %s", es.enStat_Reads,
|
|
Packit |
209cc3 |
es.enStat_Reads > 1 ? "reads" : "read");
|
|
Packit |
209cc3 |
if (es.enStat_MaxRead > 1)
|
|
Packit |
209cc3 |
fprintf(stderr, ", %d packets in largest read",
|
|
Packit |
209cc3 |
es.enStat_MaxRead);
|
|
Packit |
209cc3 |
putc('\n', stderr);
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
close(fd);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
int
|
|
Packit |
209cc3 |
initdevice(char *device, int pflag, int *linktype)
|
|
Packit |
209cc3 |
{
|
|
Packit |
209cc3 |
struct eniocb ctl;
|
|
Packit |
209cc3 |
struct enfilter filter;
|
|
Packit |
209cc3 |
u_int maxwaiting;
|
|
Packit |
209cc3 |
int if_fd;
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
GETENETDEVICE(0, O_RDONLY, &if_fd);
|
|
Packit |
209cc3 |
#else /* !IBMRTPC */
|
|
Packit |
209cc3 |
if_fd = open("/dev/enet", O_RDONLY, 0);
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
if (if_fd == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet open error");
|
|
Packit |
209cc3 |
error(
|
|
Packit |
209cc3 |
"your system may not be properly configured; see \"man enet(4)\"");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Get operating parameters. */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCGETP, (char *)&ctl) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCGETP error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Set operating parameters. */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
ctl.en_rtout = 1 * ctl.en_hz;
|
|
Packit |
209cc3 |
ctl.en_tr_etherhead = 1;
|
|
Packit |
209cc3 |
ctl.en_tap_network = 1;
|
|
Packit |
209cc3 |
ctl.en_multi_packet = 1;
|
|
Packit |
209cc3 |
ctl.en_maxlen = BUFSPACE;
|
|
Packit |
209cc3 |
#else /* !IBMRTPC */
|
|
Packit |
209cc3 |
ctl.en_rtout = 64; /* randomly picked value for HZ */
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCSETP, &ctl) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCSETP error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Flush the receive queue, since we've changed
|
|
Packit |
209cc3 |
the operating parameters and we otherwise might
|
|
Packit |
209cc3 |
receive data without headers. */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCFLUSH) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCFLUSH error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Set the receive queue depth to its maximum. */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
maxwaiting = ctl.en_maxwaiting;
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCSETW, &maxwaiting) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCSETW error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
#ifdef IBMRTPC
|
|
Packit |
209cc3 |
/* Clear statistics. */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCLRSTAT, 0) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCLRSTAT error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
#endif /* IBMRTPC */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
/* Set the filter (accept all packets). */
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
filter.enf_Priority = 3;
|
|
Packit |
209cc3 |
filter.enf_FilterLen = 0;
|
|
Packit |
209cc3 |
if (ioctl(if_fd, EIOCSETF, &filter) == -1) {
|
|
Packit |
209cc3 |
perror("tcpdump: enet ioctl EIOCSETF error");
|
|
Packit |
209cc3 |
exit(-1);
|
|
Packit |
209cc3 |
}
|
|
Packit |
209cc3 |
/*
|
|
Packit |
209cc3 |
* "enetfilter" supports only ethernets.
|
|
Packit |
209cc3 |
*/
|
|
Packit |
209cc3 |
*linktype = DLT_EN10MB;
|
|
Packit |
209cc3 |
|
|
Packit |
209cc3 |
return(if_fd);
|
|
Packit |
209cc3 |
}
|