xref: /netbsd-src/usr.bin/netstat/inet.c (revision 2d48ac808c43ea6701ba8f33cfc3645685301f79)
1 /*	$NetBSD: inet.c,v 1.91 2009/09/14 10:36:50 degroote Exp $	*/
2 
3 /*
4  * Copyright (c) 1983, 1988, 1993
5  *	The Regents of the University of California.  All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  * 3. Neither the name of the University nor the names of its contributors
16  *    may be used to endorse or promote products derived from this software
17  *    without specific prior written permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29  * SUCH DAMAGE.
30  */
31 
32 #include <sys/cdefs.h>
33 #ifndef lint
34 #if 0
35 static char sccsid[] = "from: @(#)inet.c	8.4 (Berkeley) 4/20/94";
36 #else
37 __RCSID("$NetBSD: inet.c,v 1.91 2009/09/14 10:36:50 degroote Exp $");
38 #endif
39 #endif /* not lint */
40 
41 #define	_CALLOUT_PRIVATE	/* for defs in sys/callout.h */
42 
43 #include <sys/param.h>
44 #include <sys/queue.h>
45 #include <sys/socket.h>
46 #include <sys/socketvar.h>
47 #include <sys/mbuf.h>
48 #include <sys/protosw.h>
49 #include <sys/sysctl.h>
50 
51 #include <net/if_arp.h>
52 #include <net/route.h>
53 #include <netinet/in.h>
54 #include <netinet/in_systm.h>
55 #include <netinet/ip.h>
56 #include <netinet/in_pcb.h>
57 #include <netinet/ip_icmp.h>
58 
59 #ifdef INET6
60 #include <netinet/ip6.h>
61 #endif
62 
63 #include <netinet/icmp_var.h>
64 #include <netinet/igmp_var.h>
65 #include <netinet/ip_var.h>
66 #include <netinet/pim_var.h>
67 #include <netinet/tcp.h>
68 #include <netinet/tcpip.h>
69 #include <netinet/tcp_seq.h>
70 #define TCPSTATES
71 #include <netinet/tcp_fsm.h>
72 #define	TCPTIMERS
73 #include <netinet/tcp_timer.h>
74 #include <netinet/tcp_var.h>
75 #include <netinet/tcp_debug.h>
76 #include <netinet/udp.h>
77 #include <netinet/ip_carp.h>
78 #include <netinet/udp_var.h>
79 #include <net/pfvar.h>
80 #include <net/if_pfsync.h>
81 
82 #include <arpa/inet.h>
83 #include <kvm.h>
84 #include <netdb.h>
85 #include <stdio.h>
86 #include <string.h>
87 #include <unistd.h>
88 #include <stdlib.h>
89 #include <err.h>
90 #include "netstat.h"
91 
92 char	*inetname(struct in_addr *);
93 void	inetprint(struct in_addr *, u_int16_t, const char *, int);
94 
95 /*
96  * Print a summary of connections related to an Internet
97  * protocol.  For TCP, also give state of connection.
98  * Listening processes (aflag) are suppressed unless the
99  * -a (all) flag is specified.
100  */
101 static int width;
102 static int compact;
103 
104 static void
105 protoprhdr(void)
106 {
107 	printf("Active Internet connections");
108 	if (aflag)
109 		printf(" (including servers)");
110 	putchar('\n');
111 	if (Aflag)
112 		printf("%-8.8s ", "PCB");
113 	printf("%-5.5s %-6.6s %-6.6s %s%-*.*s %-*.*s %s\n",
114 		"Proto", "Recv-Q", "Send-Q", compact ? "" : " ",
115 		width, width, "Local Address",
116 		width, width, "Foreign Address",
117 		"State");
118 }
119 
120 static void
121 protopr0(intptr_t ppcb, u_long rcv_sb_cc, u_long snd_sb_cc,
122 	 struct in_addr *laddr, u_int16_t lport,
123 	 struct in_addr *faddr, u_int16_t fport,
124 	 short t_state, const char *name, int inp_flags)
125 {
126 	static const char *shorttcpstates[] = {
127 		"CLOSED",	"LISTEN",	"SYNSEN",	"SYSRCV",
128 		"ESTABL",	"CLWAIT",	"FWAIT1",	"CLOSNG",
129 		"LASTAK",	"FWAIT2",	"TMWAIT",
130 	};
131 	int istcp;
132 
133 	istcp = strcmp(name, "tcp") == 0;
134 
135 	if (Aflag) {
136 		printf("%8" PRIxPTR " ", ppcb);
137 	}
138 	printf("%-5.5s %6ld %6ld%s", name, rcv_sb_cc, snd_sb_cc,
139 	       compact ? "" : " ");
140 	if (numeric_port) {
141 		inetprint(laddr, lport, name, 1);
142 		inetprint(faddr, fport, name, 1);
143 	} else if (inp_flags & INP_ANONPORT) {
144 		inetprint(laddr, lport, name, 1);
145 		inetprint(faddr, fport, name, 0);
146 	} else {
147 		inetprint(laddr, lport, name, 0);
148 		inetprint(faddr, fport, name, 0);
149 	}
150 	if (istcp) {
151 		if (t_state < 0 || t_state >= TCP_NSTATES)
152 			printf(" %d", t_state);
153 		else
154 			printf(" %s", compact ? shorttcpstates[t_state] :
155 			       tcpstates[t_state]);
156 	}
157 	putchar('\n');
158 }
159 
160 void
161 protopr(u_long off, const char *name)
162 {
163 	struct inpcbtable table;
164 	struct inpcb *head, *next, *prev;
165 	struct inpcb inpcb;
166 	struct tcpcb tcpcb;
167 	struct socket sockb;
168 	int istcp;
169 	static int first = 1;
170 
171 	compact = 0;
172 	if (Aflag) {
173 		if (!numeric_addr)
174 			width = 18;
175 		else {
176 			width = 21;
177 			compact = 1;
178 		}
179 	} else
180 		width = 22;
181 
182 	if (use_sysctl) {
183 		struct kinfo_pcb *pcblist;
184 		int mib[8];
185 		size_t namelen = 0, size = 0, i;
186 		char *mibname = NULL;
187 
188 		memset(mib, 0, sizeof(mib));
189 
190 		if (asprintf(&mibname, "net.inet.%s.pcblist", name) == -1)
191 			err(1, "asprintf");
192 
193 		/* get dynamic pcblist node */
194 		if (sysctlnametomib(mibname, mib, &namelen) == -1)
195 			err(1, "sysctlnametomib: %s", mibname);
196 
197 		if (sysctl(mib, sizeof(mib) / sizeof(*mib), NULL, &size,
198 			   NULL, 0) == -1)
199 			err(1, "sysctl (query)");
200 
201 		if ((pcblist = malloc(size)) == NULL)
202 			err(1, "malloc");
203 		memset(pcblist, 0, size);
204 
205 	        mib[6] = sizeof(*pcblist);
206         	mib[7] = size / sizeof(*pcblist);
207 
208 		if (sysctl(mib, sizeof(mib) / sizeof(*mib), pcblist,
209 			   &size, NULL, 0) == -1)
210 			err(1, "sysctl (copy)");
211 
212 		for (i = 0; i < size / sizeof(*pcblist); i++) {
213 			struct sockaddr_in src, dst;
214 
215 			memcpy(&src, &pcblist[i].ki_s, sizeof(src));
216 			memcpy(&dst, &pcblist[i].ki_d, sizeof(dst));
217 
218 			if (!aflag &&
219 			    inet_lnaof(dst.sin_addr) == INADDR_ANY)
220 				continue;
221 
222 			if (first) {
223 				protoprhdr();
224 				first = 0;
225 			}
226 
227 	                protopr0((intptr_t) pcblist[i].ki_ppcbaddr,
228 				 pcblist[i].ki_rcvq, pcblist[i].ki_sndq,
229 				 &src.sin_addr, src.sin_port,
230 				 &dst.sin_addr, dst.sin_port,
231 				 pcblist[i].ki_tstate, name,
232 				 pcblist[i].ki_pflags);
233 		}
234 
235 		free(pcblist);
236 		return;
237 	}
238 
239 	if (off == 0)
240 		return;
241 	istcp = strcmp(name, "tcp") == 0;
242 	kread(off, (char *)&table, sizeof table);
243 	prev = head =
244 	    (struct inpcb *)&((struct inpcbtable *)off)->inpt_queue.cqh_first;
245 	next = (struct inpcb *)table.inpt_queue.cqh_first;
246 
247 	while (next != head) {
248 		kread((u_long)next, (char *)&inpcb, sizeof inpcb);
249 		if ((struct inpcb *)inpcb.inp_queue.cqe_prev != prev) {
250 			printf("???\n");
251 			break;
252 		}
253 		prev = next;
254 		next = (struct inpcb *)inpcb.inp_queue.cqe_next;
255 
256 		if (inpcb.inp_af != AF_INET)
257 			continue;
258 
259 		if (!aflag &&
260 		    inet_lnaof(inpcb.inp_faddr) == INADDR_ANY)
261 			continue;
262 		kread((u_long)inpcb.inp_socket, (char *)&sockb, sizeof (sockb));
263 		if (istcp) {
264 			kread((u_long)inpcb.inp_ppcb,
265 			    (char *)&tcpcb, sizeof (tcpcb));
266 		}
267 
268 		if (first) {
269 			protoprhdr();
270 			first = 0;
271 		}
272 
273 		protopr0(istcp ? (intptr_t) inpcb.inp_ppcb : (intptr_t) prev,
274 			 sockb.so_rcv.sb_cc, sockb.so_snd.sb_cc,
275 			 &inpcb.inp_laddr, inpcb.inp_lport,
276 			 &inpcb.inp_faddr, inpcb.inp_fport,
277 			 tcpcb.t_state, name, inpcb.inp_flags);
278 	}
279 }
280 
281 /*
282  * Dump TCP statistics structure.
283  */
284 void
285 tcp_stats(u_long off, const char *name)
286 {
287 	uint64_t tcpstat[TCP_NSTATS];
288 
289 	if (use_sysctl) {
290 		size_t size = sizeof(tcpstat);
291 
292 		if (sysctlbyname("net.inet.tcp.stats", tcpstat, &size,
293 				 NULL, 0) == -1)
294 			return;
295 	} else {
296 		warnx("%s stats not available via KVM.", name);
297 		return;
298 	}
299 
300 	printf ("%s:\n", name);
301 
302 #define	ps(f, m) if (tcpstat[f] || sflag <= 1) \
303     printf(m, (unsigned long long)tcpstat[f])
304 #define	p(f, m) if (tcpstat[f] || sflag <= 1) \
305     printf(m, (unsigned long long)tcpstat[f], plural(tcpstat[f]))
306 #define	p2(f1, f2, m) if (tcpstat[f1] || tcpstat[f2] || sflag <= 1) \
307     printf(m, (unsigned long long)tcpstat[f1], plural(tcpstat[f1]), \
308     (unsigned long long)tcpstat[f2], plural(tcpstat[f2]))
309 #define	p2s(f1, f2, m) if (tcpstat[f1] || tcpstat[f2] || sflag <= 1) \
310     printf(m, (unsigned long long)tcpstat[f1], plural(tcpstat[f1]), \
311     (unsigned long long)tcpstat[f2])
312 #define	p3(f, m) if (tcpstat[f] || sflag <= 1) \
313     printf(m, (unsigned long long)tcpstat[f], plurales(tcpstat[f]))
314 
315 	p(TCP_STAT_SNDTOTAL, "\t%llu packet%s sent\n");
316 	p2(TCP_STAT_SNDPACK,TCP_STAT_SNDBYTE,
317 		"\t\t%llu data packet%s (%llu byte%s)\n");
318 	p2(TCP_STAT_SNDREXMITPACK, TCP_STAT_SNDREXMITBYTE,
319 		"\t\t%llu data packet%s (%llu byte%s) retransmitted\n");
320 	p2s(TCP_STAT_SNDACKS, TCP_STAT_DELACK,
321 		"\t\t%llu ack-only packet%s (%llu delayed)\n");
322 	p(TCP_STAT_SNDURG, "\t\t%llu URG only packet%s\n");
323 	p(TCP_STAT_SNDPROBE, "\t\t%llu window probe packet%s\n");
324 	p(TCP_STAT_SNDWINUP, "\t\t%llu window update packet%s\n");
325 	p(TCP_STAT_SNDCTRL, "\t\t%llu control packet%s\n");
326 	p(TCP_STAT_SELFQUENCH,
327 	    "\t\t%llu send attempt%s resulted in self-quench\n");
328 	p(TCP_STAT_RCVTOTAL, "\t%llu packet%s received\n");
329 	p2(TCP_STAT_RCVACKPACK, TCP_STAT_RCVACKBYTE,
330 		"\t\t%llu ack%s (for %llu byte%s)\n");
331 	p(TCP_STAT_RCVDUPACK, "\t\t%llu duplicate ack%s\n");
332 	p(TCP_STAT_RCVACKTOOMUCH, "\t\t%llu ack%s for unsent data\n");
333 	p2(TCP_STAT_RCVPACK, TCP_STAT_RCVBYTE,
334 		"\t\t%llu packet%s (%llu byte%s) received in-sequence\n");
335 	p2(TCP_STAT_RCVDUPPACK, TCP_STAT_RCVDUPBYTE,
336 		"\t\t%llu completely duplicate packet%s (%llu byte%s)\n");
337 	p(TCP_STAT_PAWSDROP, "\t\t%llu old duplicate packet%s\n");
338 	p2(TCP_STAT_RCVPARTDUPPACK, TCP_STAT_RCVPARTDUPBYTE,
339 		"\t\t%llu packet%s with some dup. data (%llu byte%s duped)\n");
340 	p2(TCP_STAT_RCVOOPACK, TCP_STAT_RCVOOBYTE,
341 		"\t\t%llu out-of-order packet%s (%llu byte%s)\n");
342 	p2(TCP_STAT_RCVPACKAFTERWIN, TCP_STAT_RCVBYTEAFTERWIN,
343 		"\t\t%llu packet%s (%llu byte%s) of data after window\n");
344 	p(TCP_STAT_RCVWINPROBE, "\t\t%llu window probe%s\n");
345 	p(TCP_STAT_RCVWINUPD, "\t\t%llu window update packet%s\n");
346 	p(TCP_STAT_RCVAFTERCLOSE, "\t\t%llu packet%s received after close\n");
347 	p(TCP_STAT_RCVBADSUM, "\t\t%llu discarded for bad checksum%s\n");
348 	p(TCP_STAT_RCVBADOFF, "\t\t%llu discarded for bad header offset field%s\n");
349 	ps(TCP_STAT_RCVSHORT, "\t\t%llu discarded because packet too short\n");
350 	p(TCP_STAT_CONNATTEMPT, "\t%llu connection request%s\n");
351 	p(TCP_STAT_ACCEPTS, "\t%llu connection accept%s\n");
352 	p(TCP_STAT_CONNECTS,
353 		"\t%llu connection%s established (including accepts)\n");
354 	p2(TCP_STAT_CLOSED, TCP_STAT_DROPS,
355 		"\t%llu connection%s closed (including %llu drop%s)\n");
356 	p(TCP_STAT_CONNDROPS, "\t%llu embryonic connection%s dropped\n");
357 	p(TCP_STAT_DELAYED_FREE, "\t%llu delayed free%s of tcpcb\n");
358 	p2(TCP_STAT_RTTUPDATED, TCP_STAT_SEGSTIMED,
359 		"\t%llu segment%s updated rtt (of %llu attempt%s)\n");
360 	p(TCP_STAT_REXMTTIMEO, "\t%llu retransmit timeout%s\n");
361 	p(TCP_STAT_TIMEOUTDROP,
362 		"\t\t%llu connection%s dropped by rexmit timeout\n");
363 	p2(TCP_STAT_PERSISTTIMEO, TCP_STAT_PERSISTDROPS,
364 	   "\t%llu persist timeout%s (resulting in %llu dropped "
365 		"connection%s)\n");
366 	p(TCP_STAT_KEEPTIMEO, "\t%llu keepalive timeout%s\n");
367 	p(TCP_STAT_KEEPPROBE, "\t\t%llu keepalive probe%s sent\n");
368 	p(TCP_STAT_KEEPDROPS, "\t\t%llu connection%s dropped by keepalive\n");
369 	p(TCP_STAT_PREDACK, "\t%llu correct ACK header prediction%s\n");
370 	p(TCP_STAT_PREDDAT, "\t%llu correct data packet header prediction%s\n");
371 	p3(TCP_STAT_PCBHASHMISS, "\t%llu PCB hash miss%s\n");
372 	ps(TCP_STAT_NOPORT, "\t%llu dropped due to no socket\n");
373 	p(TCP_STAT_CONNSDRAINED, "\t%llu connection%s drained due to memory "
374 		"shortage\n");
375 	p(TCP_STAT_PMTUBLACKHOLE, "\t%llu PMTUD blackhole%s detected\n");
376 
377 	p(TCP_STAT_BADSYN, "\t%llu bad connection attempt%s\n");
378 	ps(TCP_STAT_SC_ADDED, "\t%llu SYN cache entries added\n");
379 	p(TCP_STAT_SC_COLLISIONS, "\t\t%llu hash collision%s\n");
380 	ps(TCP_STAT_SC_COMPLETED, "\t\t%llu completed\n");
381 	ps(TCP_STAT_SC_ABORTED, "\t\t%llu aborted (no space to build PCB)\n");
382 	ps(TCP_STAT_SC_TIMED_OUT, "\t\t%llu timed out\n");
383 	ps(TCP_STAT_SC_OVERFLOWED, "\t\t%llu dropped due to overflow\n");
384 	ps(TCP_STAT_SC_BUCKETOVERFLOW, "\t\t%llu dropped due to bucket overflow\n");
385 	ps(TCP_STAT_SC_RESET, "\t\t%llu dropped due to RST\n");
386 	ps(TCP_STAT_SC_UNREACH, "\t\t%llu dropped due to ICMP unreachable\n");
387 	ps(TCP_STAT_SC_DELAYED_FREE, "\t\t%llu delayed free of SYN cache "
388 		"entries\n");
389 	p(TCP_STAT_SC_RETRANSMITTED, "\t%llu SYN,ACK%s retransmitted\n");
390 	p(TCP_STAT_SC_DUPESYN, "\t%llu duplicate SYN%s received for entries "
391 		"already in the cache\n");
392 	p(TCP_STAT_SC_DROPPED, "\t%llu SYN%s dropped (no route or no space)\n");
393 	p(TCP_STAT_BADSIG, "\t%llu packet%s with bad signature\n");
394 	p(TCP_STAT_GOODSIG, "\t%llu packet%s with good signature\n");
395 
396 	p(TCP_STAT_ECN_SHS, "\t%llu sucessful ECN handshake%s\n");
397 	p(TCP_STAT_ECN_CE, "\t%llu packet%s with ECN CE bit\n");
398 	p(TCP_STAT_ECN_ECT, "\t%llu packet%s ECN ECT(0) bit\n");
399 #undef p
400 #undef ps
401 #undef p2
402 #undef p2s
403 #undef p3
404 }
405 
406 /*
407  * Dump UDP statistics structure.
408  */
409 void
410 udp_stats(u_long off, const char *name)
411 {
412 	uint64_t udpstat[UDP_NSTATS];
413 	u_quad_t delivered;
414 
415 	if (use_sysctl) {
416 		size_t size = sizeof(udpstat);
417 
418 		if (sysctlbyname("net.inet.udp.stats", udpstat, &size,
419 				 NULL, 0) == -1)
420 			return;
421 	} else {
422 		warnx("%s stats not available via KVM.", name);
423 		return;
424 	}
425 
426 	printf ("%s:\n", name);
427 
428 #define	ps(f, m) if (udpstat[f] || sflag <= 1) \
429     printf(m, (unsigned long long)udpstat[f])
430 #define	p(f, m) if (udpstat[f] || sflag <= 1) \
431     printf(m, (unsigned long long)udpstat[f], plural(udpstat[f]))
432 #define	p3(f, m) if (udpstat[f] || sflag <= 1) \
433     printf(m, (unsigned long long)udpstat[f], plurales(udpstat[f]))
434 
435 	p(UDP_STAT_IPACKETS, "\t%llu datagram%s received\n");
436 	ps(UDP_STAT_HDROPS, "\t%llu with incomplete header\n");
437 	ps(UDP_STAT_BADLEN, "\t%llu with bad data length field\n");
438 	ps(UDP_STAT_BADSUM, "\t%llu with bad checksum\n");
439 	ps(UDP_STAT_NOPORT, "\t%llu dropped due to no socket\n");
440 	p(UDP_STAT_NOPORTBCAST,
441 	  "\t%llu broadcast/multicast datagram%s dropped due to no socket\n");
442 	ps(UDP_STAT_FULLSOCK, "\t%llu dropped due to full socket buffers\n");
443 	delivered = udpstat[UDP_STAT_IPACKETS] -
444 		    udpstat[UDP_STAT_HDROPS] -
445 		    udpstat[UDP_STAT_BADLEN] -
446 		    udpstat[UDP_STAT_BADSUM] -
447 		    udpstat[UDP_STAT_NOPORT] -
448 		    udpstat[UDP_STAT_NOPORTBCAST] -
449 		    udpstat[UDP_STAT_FULLSOCK];
450 	if (delivered || sflag <= 1)
451 		printf("\t%llu delivered\n", (unsigned long long)delivered);
452 	p3(UDP_STAT_PCBHASHMISS, "\t%llu PCB hash miss%s\n");
453 	p(UDP_STAT_OPACKETS, "\t%llu datagram%s output\n");
454 
455 #undef ps
456 #undef p
457 #undef p3
458 }
459 
460 /*
461  * Dump IP statistics structure.
462  */
463 void
464 ip_stats(u_long off, const char *name)
465 {
466 	uint64_t ipstat[IP_NSTATS];
467 
468 	if (use_sysctl) {
469 		size_t size = sizeof(ipstat);
470 
471 		if (sysctlbyname("net.inet.ip.stats", ipstat, &size,
472 				 NULL, 0) == -1)
473 			return;
474 	} else {
475 		warnx("%s stats not available via KVM.", name);
476 		return;
477 	}
478 
479 	printf("%s:\n", name);
480 
481 #define	ps(f, m) if (ipstat[f] || sflag <= 1) \
482     printf(m, (unsigned long long)ipstat[f])
483 #define	p(f, m) if (ipstat[f] || sflag <= 1) \
484     printf(m, (unsigned long long)ipstat[f], plural(ipstat[f]))
485 
486 	p(IP_STAT_TOTAL, "\t%llu total packet%s received\n");
487 	p(IP_STAT_BADSUM, "\t%llu bad header checksum%s\n");
488 	ps(IP_STAT_TOOSMALL, "\t%llu with size smaller than minimum\n");
489 	ps(IP_STAT_TOOSHORT, "\t%llu with data size < data length\n");
490 	ps(IP_STAT_TOOLONG, "\t%llu with length > max ip packet size\n");
491 	ps(IP_STAT_BADHLEN, "\t%llu with header length < data size\n");
492 	ps(IP_STAT_BADLEN, "\t%llu with data length < header length\n");
493 	ps(IP_STAT_BADOPTIONS, "\t%llu with bad options\n");
494 	ps(IP_STAT_BADVERS, "\t%llu with incorrect version number\n");
495 	p(IP_STAT_FRAGMENTS, "\t%llu fragment%s received\n");
496 	p(IP_STAT_FRAGDROPPED, "\t%llu fragment%s dropped (dup or out of space)\n");
497 	p(IP_STAT_RCVMEMDROP, "\t%llu fragment%s dropped (out of ipqent)\n");
498 	p(IP_STAT_BADFRAGS, "\t%llu malformed fragment%s dropped\n");
499 	p(IP_STAT_FRAGTIMEOUT, "\t%llu fragment%s dropped after timeout\n");
500 	p(IP_STAT_REASSEMBLED, "\t%llu packet%s reassembled ok\n");
501 	p(IP_STAT_DELIVERED, "\t%llu packet%s for this host\n");
502 	p(IP_STAT_NOPROTO, "\t%llu packet%s for unknown/unsupported protocol\n");
503 	p(IP_STAT_FORWARD, "\t%llu packet%s forwarded");
504 	p(IP_STAT_FASTFORWARD, " (%llu packet%s fast forwarded)");
505 	if (ipstat[IP_STAT_FORWARD] || sflag <= 1)
506 		putchar('\n');
507 	p(IP_STAT_CANTFORWARD, "\t%llu packet%s not forwardable\n");
508 	p(IP_STAT_REDIRECTSENT, "\t%llu redirect%s sent\n");
509 	p(IP_STAT_NOGIF, "\t%llu packet%s no matching gif found\n");
510 	p(IP_STAT_LOCALOUT, "\t%llu packet%s sent from this host\n");
511 	p(IP_STAT_RAWOUT, "\t%llu packet%s sent with fabricated ip header\n");
512 	p(IP_STAT_ODROPPED, "\t%llu output packet%s dropped due to no bufs, etc.\n");
513 	p(IP_STAT_NOROUTE, "\t%llu output packet%s discarded due to no route\n");
514 	p(IP_STAT_FRAGMENTED, "\t%llu output datagram%s fragmented\n");
515 	p(IP_STAT_OFRAGMENTS, "\t%llu fragment%s created\n");
516 	p(IP_STAT_CANTFRAG, "\t%llu datagram%s that can't be fragmented\n");
517 	p(IP_STAT_BADADDR, "\t%llu datagram%s with bad address in header\n");
518 #undef ps
519 #undef p
520 }
521 
522 static	const char *icmpnames[] = {
523 	"echo reply",
524 	"#1",
525 	"#2",
526 	"destination unreachable",
527 	"source quench",
528 	"routing redirect",
529 	"alternate host address",
530 	"#7",
531 	"echo",
532 	"router advertisement",
533 	"router solicitation",
534 	"time exceeded",
535 	"parameter problem",
536 	"time stamp",
537 	"time stamp reply",
538 	"information request",
539 	"information request reply",
540 	"address mask request",
541 	"address mask reply",
542 };
543 
544 /*
545  * Dump ICMP statistics.
546  */
547 void
548 icmp_stats(u_long off, const char *name)
549 {
550 	uint64_t icmpstat[ICMP_NSTATS];
551 	int i, first;
552 
553 	if (use_sysctl) {
554 		size_t size = sizeof(icmpstat);
555 
556 		if (sysctlbyname("net.inet.icmp.stats", icmpstat, &size,
557 				 NULL, 0) == -1)
558 			return;
559 	} else {
560 		warnx("%s stats not available via KVM.", name);
561 		return;
562 	}
563 
564 	printf("%s:\n", name);
565 
566 #define	p(f, m) if (icmpstat[f] || sflag <= 1) \
567     printf(m, (unsigned long long)icmpstat[f], plural(icmpstat[f]))
568 
569 	p(ICMP_STAT_ERROR, "\t%llu call%s to icmp_error\n");
570 	p(ICMP_STAT_OLDICMP,
571 	    "\t%llu error%s not generated because old message was icmp\n");
572 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
573 		if (icmpstat[ICMP_STAT_OUTHIST + i] != 0) {
574 			if (first) {
575 				printf("\tOutput histogram:\n");
576 				first = 0;
577 			}
578 			printf("\t\t%s: %llu\n", icmpnames[i],
579 			   (unsigned long long)icmpstat[ICMP_STAT_OUTHIST + i]);
580 		}
581 	p(ICMP_STAT_BADCODE, "\t%llu message%s with bad code fields\n");
582 	p(ICMP_STAT_TOOSHORT, "\t%llu message%s < minimum length\n");
583 	p(ICMP_STAT_CHECKSUM, "\t%llu bad checksum%s\n");
584 	p(ICMP_STAT_BADLEN, "\t%llu message%s with bad length\n");
585 	for (first = 1, i = 0; i < ICMP_MAXTYPE + 1; i++)
586 		if (icmpstat[ICMP_STAT_INHIST + i] != 0) {
587 			if (first) {
588 				printf("\tInput histogram:\n");
589 				first = 0;
590 			}
591 			printf("\t\t%s: %llu\n", icmpnames[i],
592 			    (unsigned long long)icmpstat[ICMP_STAT_INHIST + i]);
593 		}
594 	p(ICMP_STAT_REFLECT, "\t%llu message response%s generated\n");
595 	p(ICMP_STAT_PMTUCHG, "\t%llu path MTU change%s\n");
596 #undef p
597 }
598 
599 /*
600  * Dump IGMP statistics structure.
601  */
602 void
603 igmp_stats(u_long off, const char *name)
604 {
605 	uint64_t igmpstat[IGMP_NSTATS];
606 
607 	if (use_sysctl) {
608 		size_t size = sizeof(igmpstat);
609 
610 		if (sysctlbyname("net.inet.igmp.stats", igmpstat, &size,
611 				 NULL, 0) == -1)
612 			return;
613 	} else {
614 		warnx("%s stats not available via KVM.", name);
615 		return;
616 	}
617 
618 	printf("%s:\n", name);
619 
620 #define	p(f, m) if (igmpstat[f] || sflag <= 1) \
621     printf(m, (unsigned long long)igmpstat[f], plural(igmpstat[f]))
622 #define	py(f, m) if (igmpstat[f] || sflag <= 1) \
623     printf(m, (unsigned long long)igmpstat[f], igmpstat[f] != 1 ? "ies" : "y")
624 	p(IGMP_STAT_RCV_TOTAL, "\t%llu message%s received\n");
625         p(IGMP_STAT_RCV_TOOSHORT, "\t%llu message%s received with too few bytes\n");
626         p(IGMP_STAT_RCV_BADSUM, "\t%llu message%s received with bad checksum\n");
627         py(IGMP_STAT_RCV_QUERIES, "\t%llu membership quer%s received\n");
628         py(IGMP_STAT_RCV_BADQUERIES, "\t%llu membership quer%s received with invalid field(s)\n");
629         p(IGMP_STAT_RCV_REPORTS, "\t%llu membership report%s received\n");
630         p(IGMP_STAT_RCV_BADREPORTS, "\t%llu membership report%s received with invalid field(s)\n");
631         p(IGMP_STAT_RCV_OURREPORTS, "\t%llu membership report%s received for groups to which we belong\n");
632         p(IGMP_STAT_SND_REPORTS, "\t%llu membership report%s sent\n");
633 #undef p
634 #undef py
635 }
636 
637 /*
638  * Dump CARP statistics structure.
639  */
640 void
641 carp_stats(u_long off, const char *name)
642 {
643 	uint64_t carpstat[CARP_NSTATS];
644 
645 	if (use_sysctl) {
646 		size_t size = sizeof(carpstat);
647 
648 		if (sysctlbyname("net.inet.carp.stats", carpstat, &size,
649 				 NULL, 0) == -1)
650 			return;
651 	} else {
652 		warnx("%s stats not available via KVM.", name);
653 		return;
654 	}
655 
656 	printf("%s:\n", name);
657 
658 #define p(f, m) if (carpstat[f] || sflag <= 1) \
659 	printf(m, carpstat[f], plural(carpstat[f]))
660 #define p2(f, m) if (carpstat[f] || sflag <= 1) \
661 	printf(m, carpstat[f])
662 
663 	p(CARP_STAT_IPACKETS, "\t%" PRIu64 " packet%s received (IPv4)\n");
664 	p(CARP_STAT_IPACKETS6, "\t%" PRIu64 " packet%s received (IPv6)\n");
665 	p(CARP_STAT_BADIF,
666 	    "\t\t%" PRIu64 " packet%s discarded for bad interface\n");
667 	p(CARP_STAT_BADTTL,
668 	    "\t\t%" PRIu64 " packet%s discarded for wrong TTL\n");
669 	p(CARP_STAT_HDROPS, "\t\t%" PRIu64 " packet%s shorter than header\n");
670 	p(CARP_STAT_BADSUM, "\t\t%" PRIu64
671 		" packet%s discarded for bad checksum\n");
672 	p(CARP_STAT_BADVER,
673 	    "\t\t%" PRIu64 " packet%s discarded with a bad version\n");
674 	p2(CARP_STAT_BADLEN,
675 	    "\t\t%" PRIu64 " discarded because packet was too short\n");
676 	p(CARP_STAT_BADAUTH,
677 	    "\t\t%" PRIu64 " packet%s discarded for bad authentication\n");
678 	p(CARP_STAT_BADVHID, "\t\t%" PRIu64 " packet%s discarded for bad vhid\n");
679 	p(CARP_STAT_BADADDRS, "\t\t%" PRIu64
680 		" packet%s discarded because of a bad address list\n");
681 	p(CARP_STAT_OPACKETS, "\t%" PRIu64 " packet%s sent (IPv4)\n");
682 	p(CARP_STAT_OPACKETS6, "\t%" PRIu64 " packet%s sent (IPv6)\n");
683 	p2(CARP_STAT_ONOMEM,
684 	    "\t\t%" PRIu64 " send failed due to mbuf memory error\n");
685 #undef p
686 #undef p2
687 }
688 
689 /*
690  * Dump PFSYNC statistics structure.
691  */
692 void
693 pfsync_stats(u_long off, const char *name)
694 {
695 	uint64_t pfsyncstat[PFSYNC_NSTATS];
696 
697 	if (use_sysctl) {
698 		size_t size = sizeof(pfsyncstat);
699 
700 		if (sysctlbyname("net.inet.pfsync.stats", pfsyncstat, &size,
701 				 NULL, 0) == -1)
702 			return;
703 	} else {
704 		warnx("%s stats not available via KVM.", name);
705 		return;
706 	}
707 
708 	printf("%s:\n", name);
709 
710 #define p(f, m) if (pfsyncstat[f] || sflag <= 1) \
711 	printf(m, pfsyncstat[f], plural(pfsyncstat[f]))
712 #define p2(f, m) if (pfsyncstat[f] || sflag <= 1) \
713 	printf(m, pfsyncstat[f])
714 
715 	p(PFSYNC_STAT_IPACKETS, "\t%" PRIu64 " packet%s received (IPv4)\n");
716 	p(PFSYNC_STAT_IPACKETS6,"\t%" PRIu64 " packet%s received (IPv6)\n");
717 	p(PFSYNC_STAT_BADIF, "\t\t%" PRIu64 " packet%s discarded for bad interface\n");
718 	p(PFSYNC_STAT_BADTTL, "\t\t%" PRIu64 " packet%s discarded for bad ttl\n");
719 	p(PFSYNC_STAT_HDROPS, "\t\t%" PRIu64 " packet%s shorter than header\n");
720 	p(PFSYNC_STAT_BADVER, "\t\t%" PRIu64 " packet%s discarded for bad version\n");
721 	p(PFSYNC_STAT_BADAUTH, "\t\t%" PRIu64 " packet%s discarded for bad HMAC\n");
722 	p(PFSYNC_STAT_BADACT,"\t\t%" PRIu64 " packet%s discarded for bad action\n");
723 	p(PFSYNC_STAT_BADLEN, "\t\t%" PRIu64 " packet%s discarded for short packet\n");
724 	p(PFSYNC_STAT_BADVAL, "\t\t%" PRIu64 " state%s discarded for bad values\n");
725 	p(PFSYNC_STAT_STALE, "\t\t%" PRIu64 " stale state%s\n");
726 	p(PFSYNC_STAT_BADSTATE, "\t\t%" PRIu64 " failed state lookup/insert%s\n");
727 	p(PFSYNC_STAT_OPACKETS, "\t%" PRIu64 " packet%s sent (IPv4)\n");
728 	p(PFSYNC_STAT_OPACKETS6, "\t%" PRIu64 " packet%s sent (IPv6)\n");
729 	p2(PFSYNC_STAT_ONOMEM, "\t\t%" PRIu64 " send failed due to mbuf memory error\n");
730 	p2(PFSYNC_STAT_OERRORS, "\t\t%" PRIu64 " send error\n");
731 #undef p
732 #undef p2
733 }
734 
735 /*
736  * Dump PIM statistics structure.
737  */
738 void
739 pim_stats(u_long off, const char *name)
740 {
741 	struct pimstat pimstat;
742 
743 	if (off == 0)
744 		return;
745 	if (kread(off, (char *)&pimstat, sizeof (pimstat)) != 0) {
746 		/* XXX: PIM is probably not enabled in the kernel */
747 		return;
748 	}
749 
750 	printf("%s:\n", name);
751 
752 #define	p(f, m) if (pimstat.f || sflag <= 1) \
753 	printf(m, (unsigned long long)pimstat.f, plural(pimstat.f))
754 
755 	p(pims_rcv_total_msgs, "\t%llu message%s received\n");
756 	p(pims_rcv_total_bytes, "\t%llu byte%s received\n");
757 	p(pims_rcv_tooshort, "\t%llu message%s received with too few bytes\n");
758         p(pims_rcv_badsum, "\t%llu message%s received with bad checksum\n");
759 	p(pims_rcv_badversion, "\t%llu message%s received with bad version\n");
760 	p(pims_rcv_registers_msgs, "\t%llu data register message%s received\n");
761 	p(pims_rcv_registers_bytes, "\t%llu data register byte%s received\n");
762 	p(pims_rcv_registers_wrongiif, "\t%llu data register message%s received on wrong iif\n");
763 	p(pims_rcv_badregisters, "\t%llu bad register%s received\n");
764 	p(pims_snd_registers_msgs, "\t%llu data register message%s sent\n");
765 	p(pims_snd_registers_bytes, "\t%llu data register byte%s sent\n");
766 #undef p
767 }
768 
769 /*
770  * Dump the ARP statistics structure.
771  */
772 void
773 arp_stats(u_long off, const char *name)
774 {
775 	uint64_t arpstat[ARP_NSTATS];
776 
777 	if (use_sysctl) {
778 		size_t size = sizeof(arpstat);
779 
780 		if (sysctlbyname("net.inet.arp.stats", arpstat, &size,
781 				 NULL, 0) == -1)
782 			return;
783 	} else {
784 		warnx("%s stats not available via KVM.", name);
785 		return;
786 	}
787 
788 	printf("%s:\n", name);
789 
790 #define	ps(f, m) if (arpstat[f] || sflag <= 1) \
791     printf(m, (unsigned long long)arpstat[f])
792 #define	p(f, m) if (arpstat[f] || sflag <= 1) \
793     printf(m, (unsigned long long)arpstat[f], plural(arpstat[f]))
794 
795 	p(ARP_STAT_SNDTOTAL, "\t%llu packet%s sent\n");
796 	p(ARP_STAT_SNDREPLY, "\t\t%llu reply packet%s\n");
797 	p(ARP_STAT_SENDREQUEST, "\t\t%llu request packet%s\n");
798 
799 	p(ARP_STAT_RCVTOTAL, "\t%llu packet%s received\n");
800 	p(ARP_STAT_RCVREPLY, "\t\t%llu reply packet%s\n");
801 	p(ARP_STAT_RCVREQUEST, "\t\t%llu valid request packet%s\n");
802 	p(ARP_STAT_RCVMCAST, "\t\t%llu broadcast/multicast packet%s\n");
803 	p(ARP_STAT_RCVBADPROTO, "\t\t%llu packet%s with unknown protocol type\n");
804 	p(ARP_STAT_RCVBADLEN, "\t\t%llu packet%s with bad (short) length\n");
805 	p(ARP_STAT_RCVZEROTPA, "\t\t%llu packet%s with null target IP address\n");
806 	p(ARP_STAT_RCVZEROSPA, "\t\t%llu packet%s with null source IP address\n");
807 	ps(ARP_STAT_RCVNOINT, "\t\t%llu could not be mapped to an interface\n");
808 	p(ARP_STAT_RCVLOCALSHA, "\t\t%llu packet%s sourced from a local hardware "
809 	    "address\n");
810 	p(ARP_STAT_RCVBCASTSHA, "\t\t%llu packet%s with a broadcast "
811 	    "source hardware address\n");
812 	p(ARP_STAT_RCVLOCALSPA, "\t\t%llu duplicate%s for a local IP address\n");
813 	p(ARP_STAT_RCVOVERPERM, "\t\t%llu attempt%s to overwrite a static entry\n");
814 	p(ARP_STAT_RCVOVERINT, "\t\t%llu packet%s received on wrong interface\n");
815 	p(ARP_STAT_RCVOVER, "\t\t%llu entry%s overwritten\n");
816 	p(ARP_STAT_RCVLENCHG, "\t\t%llu change%s in hardware address length\n");
817 
818 	p(ARP_STAT_DFRTOTAL, "\t%llu packet%s deferred pending ARP resolution\n");
819 	ps(ARP_STAT_DFRSENT, "\t\t%llu sent\n");
820 	ps(ARP_STAT_DFRDROPPED, "\t\t%llu dropped\n");
821 
822 	p(ARP_STAT_ALLOCFAIL, "\t%llu failure%s to allocate llinfo\n");
823 
824 #undef ps
825 #undef p
826 }
827 
828 /*
829  * Pretty print an Internet address (net address + port).
830  * Take numeric_addr and numeric_port into consideration.
831  */
832 void
833 inetprint(struct in_addr *in, uint16_t port, const char *proto,
834 	  int port_numeric)
835 {
836 	struct servent *sp = 0;
837 	char line[80], *cp;
838 	size_t space;
839 
840 	(void)snprintf(line, sizeof line, "%.*s.",
841 	    (Aflag && !numeric_addr) ? 12 : 16, inetname(in));
842 	cp = strchr(line, '\0');
843 	if (!port_numeric && port)
844 		sp = getservbyport((int)port, proto);
845 	space = sizeof line - (cp-line);
846 	if (sp || port == 0)
847 		(void)snprintf(cp, space, "%s", sp ? sp->s_name : "*");
848 	else
849 		(void)snprintf(cp, space, "%u", ntohs(port));
850 	(void)printf(" %-*.*s", width, width, line);
851 }
852 
853 /*
854  * Construct an Internet address representation.
855  * If numeric_addr has been supplied, give
856  * numeric value, otherwise try for symbolic name.
857  */
858 char *
859 inetname(struct in_addr *inp)
860 {
861 	char *cp;
862 	static char line[50];
863 	struct hostent *hp;
864 	struct netent *np;
865 	static char domain[MAXHOSTNAMELEN + 1];
866 	static int first = 1;
867 
868 	if (first && !numeric_addr) {
869 		first = 0;
870 		if (gethostname(domain, sizeof domain) == 0) {
871 			domain[sizeof(domain) - 1] = '\0';
872 			if ((cp = strchr(domain, '.')))
873 				(void) strlcpy(domain, cp + 1, sizeof(domain));
874 			else
875 				domain[0] = 0;
876 		} else
877 			domain[0] = 0;
878 	}
879 	cp = 0;
880 	if (!numeric_addr && inp->s_addr != INADDR_ANY) {
881 		int net = inet_netof(*inp);
882 		int lna = inet_lnaof(*inp);
883 
884 		if (lna == INADDR_ANY) {
885 			np = getnetbyaddr(net, AF_INET);
886 			if (np)
887 				cp = np->n_name;
888 		}
889 		if (cp == 0) {
890 			hp = gethostbyaddr((char *)inp, sizeof (*inp), AF_INET);
891 			if (hp) {
892 				if ((cp = strchr(hp->h_name, '.')) &&
893 				    !strcmp(cp + 1, domain))
894 					*cp = 0;
895 				cp = hp->h_name;
896 			}
897 		}
898 	}
899 	if (inp->s_addr == INADDR_ANY)
900 		strlcpy(line, "*", sizeof line);
901 	else if (cp)
902 		strlcpy(line, cp, sizeof line);
903 	else {
904 		inp->s_addr = ntohl(inp->s_addr);
905 #define C(x)	((x) & 0xff)
906 		(void)snprintf(line, sizeof line, "%u.%u.%u.%u",
907 		    C(inp->s_addr >> 24), C(inp->s_addr >> 16),
908 		    C(inp->s_addr >> 8), C(inp->s_addr));
909 #undef C
910 	}
911 	return (line);
912 }
913 
914 /*
915  * Dump the contents of a TCP PCB.
916  */
917 void
918 tcp_dump(u_long pcbaddr)
919 {
920 	callout_impl_t *ci;
921 	struct tcpcb tcpcb;
922 	int i, hardticks;
923 
924 	kread(pcbaddr, (char *)&tcpcb, sizeof(tcpcb));
925 	hardticks = get_hardticks();
926 
927 	printf("TCP Protocol Control Block at 0x%08lx:\n\n", pcbaddr);
928 
929 	printf("Timers:\n");
930 	for (i = 0; i < TCPT_NTIMERS; i++) {
931 		ci = (callout_impl_t *)&tcpcb.t_timer[i];
932 		printf("\t%s: %d", tcptimers[i],
933 		    (ci->c_flags & CALLOUT_PENDING) ?
934 		    ci->c_time - hardticks : 0);
935 	}
936 	printf("\n\n");
937 
938 	if (tcpcb.t_state < 0 || tcpcb.t_state >= TCP_NSTATES)
939 		printf("State: %d", tcpcb.t_state);
940 	else
941 		printf("State: %s", tcpstates[tcpcb.t_state]);
942 	printf(", flags 0x%x, inpcb 0x%lx, in6pcb 0x%lx\n\n", tcpcb.t_flags,
943 	    (u_long)tcpcb.t_inpcb, (u_long)tcpcb.t_in6pcb);
944 
945 	printf("rxtshift %d, rxtcur %d, dupacks %d\n", tcpcb.t_rxtshift,
946 	    tcpcb.t_rxtcur, tcpcb.t_dupacks);
947 	printf("peermss %u, ourmss %u, segsz %u\n\n", tcpcb.t_peermss,
948 	    tcpcb.t_ourmss, tcpcb.t_segsz);
949 
950 	printf("snd_una %u, snd_nxt %u, snd_up %u\n",
951 	    tcpcb.snd_una, tcpcb.snd_nxt, tcpcb.snd_up);
952 	printf("snd_wl1 %u, snd_wl2 %u, iss %u, snd_wnd %lu\n\n",
953 	    tcpcb.snd_wl1, tcpcb.snd_wl2, tcpcb.iss, tcpcb.snd_wnd);
954 
955 	printf("rcv_wnd %lu, rcv_nxt %u, rcv_up %u, irs %u\n\n",
956 	    tcpcb.rcv_wnd, tcpcb.rcv_nxt, tcpcb.rcv_up, tcpcb.irs);
957 
958 	printf("rcv_adv %u, snd_max %u, snd_cwnd %lu, snd_ssthresh %lu\n",
959 	    tcpcb.rcv_adv, tcpcb.snd_max, tcpcb.snd_cwnd, tcpcb.snd_ssthresh);
960 
961 	printf("rcvtime %u, rtttime %u, rtseq %u, srtt %d, rttvar %d, "
962 	    "rttmin %d, max_sndwnd %lu\n\n", tcpcb.t_rcvtime, tcpcb.t_rtttime,
963 	    tcpcb.t_rtseq, tcpcb.t_srtt, tcpcb.t_rttvar, tcpcb.t_rttmin,
964 	    tcpcb.max_sndwnd);
965 
966 	printf("oobflags %d, iobc %d, softerror %d\n\n", tcpcb.t_oobflags,
967 	    tcpcb.t_iobc, tcpcb.t_softerror);
968 
969 	printf("snd_scale %d, rcv_scale %d, req_r_scale %d, req_s_scale %d\n",
970 	    tcpcb.snd_scale, tcpcb.rcv_scale, tcpcb.request_r_scale,
971 	    tcpcb.requested_s_scale);
972 	printf("ts_recent %u, ts_regent_age %d, last_ack_sent %u\n",
973 	    tcpcb.ts_recent, tcpcb.ts_recent_age, tcpcb.last_ack_sent);
974 }
975