1 /*
2 * m_egress.c ingress/egress packet mirror/redir actions module
3 *
4 * This program is free software; you can distribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: J Hadi Salim (hadi@cyberus.ca)
10 *
11 * TODO: Add Ingress support
12 *
13 */
14
15 #include <stdio.h>
16 #include <stdlib.h>
17 #include <unistd.h>
18 #include <syslog.h>
19 #include <fcntl.h>
20 #include <sys/socket.h>
21 #include <netinet/in.h>
22 #include <arpa/inet.h>
23 #include <string.h>
24 #include "utils.h"
25 #include "tc_util.h"
26 #include "tc_common.h"
27 #include <linux/tc_act/tc_mirred.h>
28
29 static void
explain(void)30 explain(void)
31 {
32 fprintf(stderr, "Usage: mirred <DIRECTION> <ACTION> [index INDEX] <dev DEVICENAME> \n");
33 fprintf(stderr, "where: \n");
34 fprintf(stderr, "\tDIRECTION := <ingress | egress>\n");
35 fprintf(stderr, "\tACTION := <mirror | redirect>\n");
36 fprintf(stderr, "\tINDEX is the specific policy instance id\n");
37 fprintf(stderr, "\tDEVICENAME is the devicename \n");
38
39 }
40
41 static void
usage(void)42 usage(void)
43 {
44 explain();
45 exit(-1);
46 }
47
mirred_n2a(int action)48 static const char *mirred_n2a(int action)
49 {
50 switch (action) {
51 case TCA_EGRESS_REDIR:
52 return "Egress Redirect";
53 case TCA_INGRESS_REDIR:
54 return "Ingress Redirect";
55 case TCA_EGRESS_MIRROR:
56 return "Egress Mirror";
57 case TCA_INGRESS_MIRROR:
58 return "Ingress Mirror";
59 default:
60 return "unknown";
61 }
62 }
63
64 static int
parse_egress(struct action_util * a,int * argc_p,char *** argv_p,int tca_id,struct nlmsghdr * n)65 parse_egress(struct action_util *a, int *argc_p, char ***argv_p,
66 int tca_id, struct nlmsghdr *n)
67 {
68
69 int argc = *argc_p;
70 char **argv = *argv_p;
71 int ok = 0, iok = 0, mirror=0,redir=0;
72 struct tc_mirred p;
73 struct rtattr *tail;
74 char d[16];
75
76 memset(d,0,sizeof(d)-1);
77 memset(&p,0,sizeof(struct tc_mirred));
78
79 while (argc > 0) {
80
81 if (matches(*argv, "action") == 0) {
82 break;
83 } else if (matches(*argv, "egress") == 0) {
84 NEXT_ARG();
85 ok++;
86 continue;
87 } else {
88
89 if (matches(*argv, "index") == 0) {
90 NEXT_ARG();
91 if (get_u32(&p.index, *argv, 10)) {
92 fprintf(stderr, "Illegal \"index\"\n");
93 return -1;
94 }
95 iok++;
96 if (!ok) {
97 argc--;
98 argv++;
99 break;
100 }
101 } else if(!ok) {
102 fprintf(stderr, "was expecting egress (%s)\n", *argv);
103 break;
104
105 } else if (!mirror && matches(*argv, "mirror") == 0) {
106 mirror=1;
107 if (redir) {
108 fprintf(stderr, "Can't have both mirror and redir\n");
109 return -1;
110 }
111 p.eaction = TCA_EGRESS_MIRROR;
112 p.action = TC_ACT_PIPE;
113 ok++;
114 } else if (!redir && matches(*argv, "redirect") == 0) {
115 redir=1;
116 if (mirror) {
117 fprintf(stderr, "Can't have both mirror and redir\n");
118 return -1;
119 }
120 p.eaction = TCA_EGRESS_REDIR;
121 p.action = TC_ACT_STOLEN;
122 ok++;
123 } else if ((redir || mirror) && matches(*argv, "dev") == 0) {
124 NEXT_ARG();
125 if (strlen(d))
126 duparg("dev", *argv);
127
128 strncpy(d, *argv, sizeof(d)-1);
129 argc--;
130 argv++;
131
132 break;
133
134 }
135 }
136
137 NEXT_ARG();
138 }
139
140 if (!ok && !iok) {
141 return -1;
142 }
143
144
145
146 if (d[0]) {
147 int idx;
148 ll_init_map(&rth);
149
150 if ((idx = ll_name_to_index(d)) == 0) {
151 fprintf(stderr, "Cannot find device \"%s\"\n", d);
152 return -1;
153 }
154
155 p.ifindex = idx;
156 }
157
158
159 if (argc && p.eaction == TCA_EGRESS_MIRROR) {
160
161 if (matches(*argv, "reclassify") == 0) {
162 p.action = TC_POLICE_RECLASSIFY;
163 NEXT_ARG();
164 } else if (matches(*argv, "pipe") == 0) {
165 p.action = TC_POLICE_PIPE;
166 NEXT_ARG();
167 } else if (matches(*argv, "drop") == 0 ||
168 matches(*argv, "shot") == 0) {
169 p.action = TC_POLICE_SHOT;
170 NEXT_ARG();
171 } else if (matches(*argv, "continue") == 0) {
172 p.action = TC_POLICE_UNSPEC;
173 NEXT_ARG();
174 } else if (matches(*argv, "pass") == 0) {
175 p.action = TC_POLICE_OK;
176 NEXT_ARG();
177 }
178
179 }
180
181 if (argc) {
182 if (iok && matches(*argv, "index") == 0) {
183 fprintf(stderr, "mirred: Illegal double index\n");
184 return -1;
185 } else {
186 if (matches(*argv, "index") == 0) {
187 NEXT_ARG();
188 if (get_u32(&p.index, *argv, 10)) {
189 fprintf(stderr, "mirred: Illegal \"index\"\n");
190 return -1;
191 }
192 argc--;
193 argv++;
194 }
195 }
196 }
197
198 tail = NLMSG_TAIL(n);
199 addattr_l(n, MAX_MSG, tca_id, NULL, 0);
200 addattr_l(n, MAX_MSG, TCA_MIRRED_PARMS, &p, sizeof (p));
201 tail->rta_len = (void *) NLMSG_TAIL(n) - (void *) tail;
202
203 *argc_p = argc;
204 *argv_p = argv;
205 return 0;
206 }
207
208
209 static int
parse_mirred(struct action_util * a,int * argc_p,char *** argv_p,int tca_id,struct nlmsghdr * n)210 parse_mirred(struct action_util *a, int *argc_p, char ***argv_p,
211 int tca_id, struct nlmsghdr *n)
212 {
213
214 int argc = *argc_p;
215 char **argv = *argv_p;
216
217 if (argc < 0) {
218 fprintf(stderr,"mirred bad argument count %d\n", argc);
219 return -1;
220 }
221
222 if (matches(*argv, "mirred") == 0) {
223 NEXT_ARG();
224 } else {
225 fprintf(stderr,"mirred bad argument %s\n", *argv);
226 return -1;
227 }
228
229
230 if (matches(*argv, "egress") == 0 || matches(*argv, "index") == 0) {
231 int ret = parse_egress(a, &argc, &argv, tca_id, n);
232 if (ret == 0) {
233 *argc_p = argc;
234 *argv_p = argv;
235 return 0;
236 }
237
238 } else if (matches(*argv, "ingress") == 0) {
239 fprintf(stderr,"mirred ingress not supported at the moment\n");
240 } else if (matches(*argv, "help") == 0) {
241 usage();
242 } else {
243 fprintf(stderr,"mirred option not supported %s\n", *argv);
244 }
245
246 return -1;
247
248 }
249
250 static int
print_mirred(struct action_util * au,FILE * f,struct rtattr * arg)251 print_mirred(struct action_util *au,FILE * f, struct rtattr *arg)
252 {
253 struct tc_mirred *p;
254 struct rtattr *tb[TCA_MIRRED_MAX + 1];
255 const char *dev;
256 SPRINT_BUF(b1);
257
258 if (arg == NULL)
259 return -1;
260
261 parse_rtattr_nested(tb, TCA_MIRRED_MAX, arg);
262
263 if (tb[TCA_MIRRED_PARMS] == NULL) {
264 fprintf(f, "[NULL mirred parameters]");
265 return -1;
266 }
267 p = RTA_DATA(tb[TCA_MIRRED_PARMS]);
268
269 /*
270 ll_init_map(&rth);
271 */
272
273
274 if ((dev = ll_index_to_name(p->ifindex)) == 0) {
275 fprintf(stderr, "Cannot find device %d\n", p->ifindex);
276 return -1;
277 }
278
279 fprintf(f, "mirred (%s to device %s) %s", mirred_n2a(p->eaction), dev,action_n2a(p->action, b1, sizeof (b1)));
280
281 fprintf(f, "\n ");
282 fprintf(f, "\tindex %d ref %d bind %d",p->index,p->refcnt,p->bindcnt);
283
284 if (show_stats) {
285 if (tb[TCA_MIRRED_TM]) {
286 struct tcf_t *tm = RTA_DATA(tb[TCA_MIRRED_TM]);
287 print_tm(f,tm);
288 }
289 }
290 fprintf(f, "\n ");
291 return 0;
292 }
293
294 struct action_util mirred_action_util = {
295 .id = "mirred",
296 .parse_aopt = parse_mirred,
297 .print_aopt = print_mirred,
298 };
299