1 /*
2 * tc_filter.c "tc filter".
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10 *
11 */
12
13 #include <stdio.h>
14 #include <stdlib.h>
15 #include <unistd.h>
16 #include <syslog.h>
17 #include <fcntl.h>
18 #include <sys/socket.h>
19 #include <netinet/in.h>
20 #include <arpa/inet.h>
21 #include <string.h>
22 #include <linux/if_ether.h>
23
24 #include "rt_names.h"
25 #include "utils.h"
26 #include "tc_util.h"
27 #include "tc_common.h"
28
29 static void usage(void);
30
usage(void)31 static void usage(void)
32 {
33 fprintf(stderr, "Usage: tc filter [ add | del | change | replace | show ] dev STRING\n");
34 fprintf(stderr, " [ pref PRIO ] protocol PROTO\n");
35 fprintf(stderr, " [ estimator INTERVAL TIME_CONSTANT ]\n");
36 fprintf(stderr, " [ root | classid CLASSID ] [ handle FILTERID ]\n");
37 fprintf(stderr, " [ [ FILTER_TYPE ] [ help | OPTIONS ] ]\n");
38 fprintf(stderr, "\n");
39 fprintf(stderr, " tc filter show [ dev STRING ] [ root | parent CLASSID ]\n");
40 fprintf(stderr, "Where:\n");
41 fprintf(stderr, "FILTER_TYPE := { rsvp | u32 | fw | route | etc. }\n");
42 fprintf(stderr, "FILTERID := ... format depends on classifier, see there\n");
43 fprintf(stderr, "OPTIONS := ... try tc filter add <desired FILTER_KIND> help\n");
44 return;
45 }
46
47
tc_filter_modify(int cmd,unsigned flags,int argc,char ** argv)48 int tc_filter_modify(int cmd, unsigned flags, int argc, char **argv)
49 {
50 struct {
51 struct nlmsghdr n;
52 struct tcmsg t;
53 char buf[MAX_MSG];
54 } req;
55 struct filter_util *q = NULL;
56 __u32 prio = 0;
57 __u32 protocol = 0;
58 int protocol_set = 0;
59 char *fhandle = NULL;
60 char d[16];
61 char k[16];
62 struct tc_estimator est;
63
64 memset(&req, 0, sizeof(req));
65 memset(&est, 0, sizeof(est));
66 memset(d, 0, sizeof(d));
67 memset(k, 0, sizeof(k));
68 memset(&req, 0, sizeof(req));
69
70 req.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct tcmsg));
71 req.n.nlmsg_flags = NLM_F_REQUEST|flags;
72 req.n.nlmsg_type = cmd;
73 req.t.tcm_family = AF_UNSPEC;
74
75 if (cmd == RTM_NEWTFILTER && flags & NLM_F_CREATE)
76 protocol = ETH_P_ALL;
77
78 while (argc > 0) {
79 if (strcmp(*argv, "dev") == 0) {
80 NEXT_ARG();
81 if (d[0])
82 duparg("dev", *argv);
83 strncpy(d, *argv, sizeof(d)-1);
84 } else if (strcmp(*argv, "root") == 0) {
85 if (req.t.tcm_parent) {
86 fprintf(stderr, "Error: \"root\" is duplicate parent ID\n");
87 return -1;
88 }
89 req.t.tcm_parent = TC_H_ROOT;
90 } else if (strcmp(*argv, "parent") == 0) {
91 __u32 handle;
92 NEXT_ARG();
93 if (req.t.tcm_parent)
94 duparg("parent", *argv);
95 if (get_tc_classid(&handle, *argv))
96 invarg(*argv, "Invalid parent ID");
97 req.t.tcm_parent = handle;
98 } else if (strcmp(*argv, "handle") == 0) {
99 NEXT_ARG();
100 if (fhandle)
101 duparg("handle", *argv);
102 fhandle = *argv;
103 } else if (matches(*argv, "preference") == 0 ||
104 matches(*argv, "priority") == 0) {
105 NEXT_ARG();
106 if (prio)
107 duparg("priority", *argv);
108 if (get_u32(&prio, *argv, 0))
109 invarg(*argv, "invalid priority value");
110 } else if (matches(*argv, "protocol") == 0) {
111 __u16 id;
112 NEXT_ARG();
113 if (protocol_set)
114 duparg("protocol", *argv);
115 if (ll_proto_a2n(&id, *argv))
116 invarg(*argv, "invalid protocol");
117 protocol = id;
118 protocol_set = 1;
119 } else if (matches(*argv, "estimator") == 0) {
120 if (parse_estimator(&argc, &argv, &est) < 0)
121 return -1;
122 } else if (matches(*argv, "help") == 0) {
123 usage();
124 return 0;
125 } else {
126 strncpy(k, *argv, sizeof(k)-1);
127
128 q = get_filter_kind(k);
129 argc--; argv++;
130 break;
131 }
132
133 argc--; argv++;
134 }
135
136 req.t.tcm_info = TC_H_MAKE(prio<<16, protocol);
137
138 if (k[0])
139 addattr_l(&req.n, sizeof(req), TCA_KIND, k, strlen(k)+1);
140
141 if (q) {
142 if (q->parse_fopt(q, fhandle, argc, argv, &req.n))
143 return 1;
144 } else {
145 if (fhandle) {
146 fprintf(stderr, "Must specify filter type when using "
147 "\"handle\"\n");
148 return -1;
149 }
150 if (argc) {
151 if (matches(*argv, "help") == 0)
152 usage();
153 fprintf(stderr, "Garbage instead of arguments \"%s ...\". Try \"tc filter help\".\n", *argv);
154 return -1;
155 }
156 }
157 if (est.ewma_log)
158 addattr_l(&req.n, sizeof(req), TCA_RATE, &est, sizeof(est));
159
160
161 if (d[0]) {
162 ll_init_map(&rth);
163
164 if ((req.t.tcm_ifindex = ll_name_to_index(d)) == 0) {
165 fprintf(stderr, "Cannot find device \"%s\"\n", d);
166 return 1;
167 }
168 }
169
170 if (rtnl_talk(&rth, &req.n, 0, 0, NULL, NULL, NULL) < 0) {
171 fprintf(stderr, "We have an error talking to the kernel\n");
172 return 2;
173 }
174
175 return 0;
176 }
177
178 static __u32 filter_parent;
179 static int filter_ifindex;
180 static __u32 filter_prio;
181 static __u32 filter_protocol;
182 __u16 f_proto = 0;
183
print_filter(const struct sockaddr_nl * who,struct nlmsghdr * n,void * arg)184 int print_filter(const struct sockaddr_nl *who,
185 struct nlmsghdr *n,
186 void *arg)
187 {
188 FILE *fp = (FILE*)arg;
189 struct tcmsg *t = NLMSG_DATA(n);
190 int len = n->nlmsg_len;
191 struct rtattr * tb[TCA_MAX+1];
192 struct filter_util *q;
193 char abuf[256];
194
195 if (n->nlmsg_type != RTM_NEWTFILTER && n->nlmsg_type != RTM_DELTFILTER) {
196 fprintf(stderr, "Not a filter\n");
197 return 0;
198 }
199 len -= NLMSG_LENGTH(sizeof(*t));
200 if (len < 0) {
201 fprintf(stderr, "Wrong len %d\n", len);
202 return -1;
203 }
204
205 memset(tb, 0, sizeof(tb));
206 parse_rtattr(tb, TCA_MAX, TCA_RTA(t), len);
207
208 if (tb[TCA_KIND] == NULL) {
209 fprintf(stderr, "print_filter: NULL kind\n");
210 return -1;
211 }
212
213 if (n->nlmsg_type == RTM_DELTFILTER)
214 fprintf(fp, "deleted ");
215
216 fprintf(fp, "filter ");
217 if (!filter_ifindex || filter_ifindex != t->tcm_ifindex)
218 fprintf(fp, "dev %s ", ll_index_to_name(t->tcm_ifindex));
219
220 if (!filter_parent || filter_parent != t->tcm_parent) {
221 if (t->tcm_parent == TC_H_ROOT)
222 fprintf(fp, "root ");
223 else {
224 print_tc_classid(abuf, sizeof(abuf), t->tcm_parent);
225 fprintf(fp, "parent %s ", abuf);
226 }
227 }
228 if (t->tcm_info) {
229 f_proto = TC_H_MIN(t->tcm_info);
230 __u32 prio = TC_H_MAJ(t->tcm_info)>>16;
231 if (!filter_protocol || filter_protocol != f_proto) {
232 if (f_proto) {
233 SPRINT_BUF(b1);
234 fprintf(fp, "protocol %s ",
235 ll_proto_n2a(f_proto, b1, sizeof(b1)));
236 }
237 }
238 if (!filter_prio || filter_prio != prio) {
239 if (prio)
240 fprintf(fp, "pref %u ", prio);
241 }
242 }
243 fprintf(fp, "%s ", (char*)RTA_DATA(tb[TCA_KIND]));
244 q = get_filter_kind(RTA_DATA(tb[TCA_KIND]));
245 if (tb[TCA_OPTIONS]) {
246 if (q)
247 q->print_fopt(q, fp, tb[TCA_OPTIONS], t->tcm_handle);
248 else
249 fprintf(fp, "[cannot parse parameters]");
250 }
251 fprintf(fp, "\n");
252
253 if (show_stats && (tb[TCA_STATS] || tb[TCA_STATS2])) {
254 print_tcstats_attr(fp, tb, " ", NULL);
255 fprintf(fp, "\n");
256 }
257
258 fflush(fp);
259 return 0;
260 }
261
262
tc_filter_list(int argc,char ** argv)263 int tc_filter_list(int argc, char **argv)
264 {
265 struct tcmsg t;
266 char d[16];
267 __u32 prio = 0;
268 __u32 protocol = 0;
269 char *fhandle = NULL;
270
271 memset(&t, 0, sizeof(t));
272 t.tcm_family = AF_UNSPEC;
273 memset(d, 0, sizeof(d));
274
275 while (argc > 0) {
276 if (strcmp(*argv, "dev") == 0) {
277 NEXT_ARG();
278 if (d[0])
279 duparg("dev", *argv);
280 strncpy(d, *argv, sizeof(d)-1);
281 } else if (strcmp(*argv, "root") == 0) {
282 if (t.tcm_parent) {
283 fprintf(stderr, "Error: \"root\" is duplicate parent ID\n");
284 return -1;
285 }
286 filter_parent = t.tcm_parent = TC_H_ROOT;
287 } else if (strcmp(*argv, "parent") == 0) {
288 __u32 handle;
289 NEXT_ARG();
290 if (t.tcm_parent)
291 duparg("parent", *argv);
292 if (get_tc_classid(&handle, *argv))
293 invarg(*argv, "invalid parent ID");
294 filter_parent = t.tcm_parent = handle;
295 } else if (strcmp(*argv, "handle") == 0) {
296 NEXT_ARG();
297 if (fhandle)
298 duparg("handle", *argv);
299 fhandle = *argv;
300 } else if (matches(*argv, "preference") == 0 ||
301 matches(*argv, "priority") == 0) {
302 NEXT_ARG();
303 if (prio)
304 duparg("priority", *argv);
305 if (get_u32(&prio, *argv, 0))
306 invarg(*argv, "invalid preference");
307 filter_prio = prio;
308 } else if (matches(*argv, "protocol") == 0) {
309 __u16 res;
310 NEXT_ARG();
311 if (protocol)
312 duparg("protocol", *argv);
313 if (ll_proto_a2n(&res, *argv))
314 invarg(*argv, "invalid protocol");
315 protocol = res;
316 filter_protocol = protocol;
317 } else if (matches(*argv, "help") == 0) {
318 usage();
319 } else {
320 fprintf(stderr, " What is \"%s\"? Try \"tc filter help\"\n", *argv);
321 return -1;
322 }
323
324 argc--; argv++;
325 }
326
327 t.tcm_info = TC_H_MAKE(prio<<16, protocol);
328
329 ll_init_map(&rth);
330
331 if (d[0]) {
332 if ((t.tcm_ifindex = ll_name_to_index(d)) == 0) {
333 fprintf(stderr, "Cannot find device \"%s\"\n", d);
334 return 1;
335 }
336 filter_ifindex = t.tcm_ifindex;
337 }
338
339 if (rtnl_dump_request(&rth, RTM_GETTFILTER, &t, sizeof(t)) < 0) {
340 perror("Cannot send dump request");
341 return 1;
342 }
343
344 if (rtnl_dump_filter(&rth, print_filter, stdout, NULL, NULL) < 0) {
345 fprintf(stderr, "Dump terminated\n");
346 return 1;
347 }
348
349 return 0;
350 }
351
do_filter(int argc,char ** argv)352 int do_filter(int argc, char **argv)
353 {
354 if (argc < 1)
355 return tc_filter_list(0, NULL);
356 if (matches(*argv, "add") == 0)
357 return tc_filter_modify(RTM_NEWTFILTER, NLM_F_EXCL|NLM_F_CREATE, argc-1, argv+1);
358 if (matches(*argv, "change") == 0)
359 return tc_filter_modify(RTM_NEWTFILTER, 0, argc-1, argv+1);
360 if (matches(*argv, "replace") == 0)
361 return tc_filter_modify(RTM_NEWTFILTER, NLM_F_CREATE, argc-1, argv+1);
362 if (matches(*argv, "delete") == 0)
363 return tc_filter_modify(RTM_DELTFILTER, 0, argc-1, argv+1);
364 #if 0
365 if (matches(*argv, "get") == 0)
366 return tc_filter_get(RTM_GETTFILTER, 0, argc-1, argv+1);
367 #endif
368 if (matches(*argv, "list") == 0 || matches(*argv, "show") == 0
369 || matches(*argv, "lst") == 0)
370 return tc_filter_list(argc-1, argv+1);
371 if (matches(*argv, "help") == 0) {
372 usage();
373 return 0;
374 }
375 fprintf(stderr, "Command \"%s\" is unknown, try \"tc filter help\".\n", *argv);
376 return -1;
377 }
378
379