1 /*
2 * Copyright (c) 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * This code contributed by Atanu Ghosh (atanu@cs.ucl.ac.uk),
22 * University College London, and subsequently modified by
23 * Guy Harris (guy@alum.mit.edu), Mark Pizzolato
24 * <List-tcpdump-workers@subscriptions.pizzolato.net>,
25 * Mark C. Brown (mbrown@hp.com), and Sagun Shakya <Sagun.Shakya@Sun.COM>.
26 */
27
28 /*
29 * Packet capture routine for DLPI under SunOS 5, HP-UX 9/10/11, and AIX.
30 *
31 * Notes:
32 *
33 * - The DLIOCRAW ioctl() is specific to SunOS.
34 *
35 * - There is a bug in bufmod(7) such that setting the snapshot
36 * length results in data being left of the front of the packet.
37 *
38 * - It might be desirable to use pfmod(7) to filter packets in the
39 * kernel when possible.
40 *
41 * - An older version of the HP-UX DLPI Programmer's Guide, which
42 * I think was advertised as the 10.20 version, used to be available
43 * at
44 *
45 * http://docs.hp.com/hpux/onlinedocs/B2355-90093/B2355-90093.html
46 *
47 * but is no longer available; it can still be found at
48 *
49 * http://h21007.www2.hp.com/dspp/files/unprotected/Drivers/Docs/Refs/B2355-90093.pdf
50 *
51 * in PDF form.
52 *
53 * - The HP-UX 10.x, 11.0, and 11i v1.6 version of the HP-UX DLPI
54 * Programmer's Guide, which I think was once advertised as the
55 * 11.00 version is available at
56 *
57 * http://docs.hp.com/en/B2355-90139/index.html
58 *
59 * - The HP-UX 11i v2 version of the HP-UX DLPI Programmer's Guide
60 * is available at
61 *
62 * http://docs.hp.com/en/B2355-90871/index.html
63 *
64 * - All of the HP documents describe raw-mode services, which are
65 * what we use if DL_HP_RAWDLS is defined. XXX - we use __hpux
66 * in some places to test for HP-UX, but use DL_HP_RAWDLS in
67 * other places; do we support any versions of HP-UX without
68 * DL_HP_RAWDLS?
69 */
70
71 #ifdef HAVE_CONFIG_H
72 #include "config.h"
73 #endif
74
75 #include <sys/types.h>
76 #include <sys/time.h>
77 #ifdef HAVE_SYS_BUFMOD_H
78 #include <sys/bufmod.h>
79 #endif
80 #include <sys/dlpi.h>
81 #ifdef HAVE_SYS_DLPI_EXT_H
82 #include <sys/dlpi_ext.h>
83 #endif
84 #ifdef HAVE_HPUX9
85 #include <sys/socket.h>
86 #endif
87 #ifdef DL_HP_PPA_REQ
88 #include <sys/stat.h>
89 #endif
90 #include <sys/stream.h>
91 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
92 #include <sys/systeminfo.h>
93 #endif
94
95 #ifdef HAVE_HPUX9
96 #include <net/if.h>
97 #endif
98
99 #include <ctype.h>
100 #ifdef HAVE_HPUX9
101 #include <nlist.h>
102 #endif
103 #include <errno.h>
104 #include <fcntl.h>
105 #include <memory.h>
106 #include <stdio.h>
107 #include <stdlib.h>
108 #include <string.h>
109 #include <stropts.h>
110 #include <unistd.h>
111
112 #ifdef HAVE_LIMITS_H
113 #include <limits.h>
114 #else
115 #define INT_MAX 2147483647
116 #endif
117
118 #include "pcap-int.h"
119 #include "dlpisubs.h"
120
121 #ifdef HAVE_OS_PROTO_H
122 #include "os-proto.h"
123 #endif
124
125 #ifndef PCAP_DEV_PREFIX
126 #ifdef _AIX
127 #define PCAP_DEV_PREFIX "/dev/dlpi"
128 #else
129 #define PCAP_DEV_PREFIX "/dev"
130 #endif
131 #endif
132
133 #define MAXDLBUF 8192
134
135 /* Forwards */
136 static char *split_dname(char *, int *, char *);
137 static int dl_doattach(int, int, char *);
138 #ifdef DL_HP_RAWDLS
139 static int dl_dohpuxbind(int, char *);
140 #endif
141 static int dlpromiscon(pcap_t *, bpf_u_int32);
142 static int dlbindreq(int, bpf_u_int32, char *);
143 static int dlbindack(int, char *, char *, int *);
144 static int dlokack(int, const char *, char *, char *);
145 static int dlinforeq(int, char *);
146 static int dlinfoack(int, char *, char *);
147
148 #ifdef HAVE_DLPI_PASSIVE
149 static void dlpassive(int, char *);
150 #endif
151
152 #ifdef DL_HP_RAWDLS
153 static int dlrawdatareq(int, const u_char *, int);
154 #endif
155 static int recv_ack(int, int, const char *, char *, char *, int *);
156 static char *dlstrerror(char *, size_t, bpf_u_int32);
157 static char *dlprim(char *, size_t, bpf_u_int32);
158 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
159 #define GET_RELEASE_BUFSIZE 32
160 static void get_release(char *, size_t, bpf_u_int32 *, bpf_u_int32 *,
161 bpf_u_int32 *);
162 #endif
163 static int send_request(int, char *, int, char *, char *);
164 #ifdef HAVE_HPUX9
165 static int dlpi_kread(int, off_t, void *, u_int, char *);
166 #endif
167 #ifdef HAVE_DEV_DLPI
168 static int get_dlpi_ppa(int, const char *, int, char *);
169 #endif
170
171 /*
172 * Cast a buffer to "union DL_primitives" without provoking warnings
173 * from the compiler.
174 */
175 #define MAKE_DL_PRIMITIVES(ptr) ((union DL_primitives *)(void *)(ptr))
176
177 static int
pcap_read_dlpi(pcap_t * p,int cnt,pcap_handler callback,u_char * user)178 pcap_read_dlpi(pcap_t *p, int cnt, pcap_handler callback, u_char *user)
179 {
180 int cc;
181 u_char *bp;
182 int flags;
183 bpf_u_int32 ctlbuf[MAXDLBUF];
184 struct strbuf ctl = {
185 MAXDLBUF,
186 0,
187 (char *)ctlbuf
188 };
189 struct strbuf data;
190
191 flags = 0;
192 cc = p->cc;
193 if (cc == 0) {
194 data.buf = (char *)p->buffer + p->offset;
195 data.maxlen = p->bufsize;
196 data.len = 0;
197 do {
198 /*
199 * Has "pcap_breakloop()" been called?
200 */
201 if (p->break_loop) {
202 /*
203 * Yes - clear the flag that indicates
204 * that it has, and return -2 to
205 * indicate that we were told to
206 * break out of the loop.
207 */
208 p->break_loop = 0;
209 return (-2);
210 }
211 /*
212 * XXX - check for the DLPI primitive, which
213 * would be DL_HP_RAWDATA_IND on HP-UX
214 * if we're in raw mode?
215 */
216 ctl.buf = (char *)ctlbuf;
217 ctl.maxlen = MAXDLBUF;
218 ctl.len = 0;
219 if (getmsg(p->fd, &ctl, &data, &flags) < 0) {
220 /* Don't choke when we get ptraced */
221 switch (errno) {
222
223 case EINTR:
224 cc = 0;
225 continue;
226
227 case EAGAIN:
228 return (0);
229 }
230 strlcpy(p->errbuf, pcap_strerror(errno),
231 sizeof(p->errbuf));
232 return (-1);
233 }
234 cc = data.len;
235 } while (cc == 0);
236 bp = (u_char *)p->buffer + p->offset;
237 } else
238 bp = p->bp;
239
240 return (pcap_process_pkts(p, callback, user, cnt, bp, cc));
241 }
242
243 static int
pcap_inject_dlpi(pcap_t * p,const void * buf,size_t size)244 pcap_inject_dlpi(pcap_t *p, const void *buf, size_t size)
245 {
246 #ifdef DL_HP_RAWDLS
247 struct pcap_dlpi *pd = p->priv;
248 #endif
249 int ret;
250
251 #if defined(DLIOCRAW)
252 ret = write(p->fd, buf, size);
253 if (ret == -1) {
254 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "send: %s",
255 pcap_strerror(errno));
256 return (-1);
257 }
258 #elif defined(DL_HP_RAWDLS)
259 if (pd->send_fd < 0) {
260 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
261 "send: Output FD couldn't be opened");
262 return (-1);
263 }
264 ret = dlrawdatareq(pd->send_fd, buf, size);
265 if (ret == -1) {
266 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "send: %s",
267 pcap_strerror(errno));
268 return (-1);
269 }
270 /*
271 * putmsg() returns either 0 or -1; it doesn't indicate how
272 * many bytes were written (presumably they were all written
273 * or none of them were written). OpenBSD's pcap_inject()
274 * returns the number of bytes written, so, for API compatibility,
275 * we return the number of bytes we were told to write.
276 */
277 ret = size;
278 #else /* no raw mode */
279 /*
280 * XXX - this is a pain, because you might have to extract
281 * the address from the packet and use it in a DL_UNITDATA_REQ
282 * request. That would be dependent on the link-layer type.
283 *
284 * I also don't know what SAP you'd have to bind the descriptor
285 * to, or whether you'd need separate "receive" and "send" FDs,
286 * nor do I know whether you'd need different bindings for
287 * D/I/X Ethernet and 802.3, or for {FDDI,Token Ring} plus
288 * 802.2 and {FDDI,Token Ring} plus 802.2 plus SNAP.
289 *
290 * So, for now, we just return a "you can't send" indication,
291 * and leave it up to somebody with a DLPI-based system lacking
292 * both DLIOCRAW and DL_HP_RAWDLS to supply code to implement
293 * packet transmission on that system. If they do, they should
294 * send it to us - but should not send us code that assumes
295 * Ethernet; if the code doesn't work on non-Ethernet interfaces,
296 * it should check "p->linktype" and reject the send request if
297 * it's anything other than DLT_EN10MB.
298 */
299 strlcpy(p->errbuf, "send: Not supported on this version of this OS",
300 PCAP_ERRBUF_SIZE);
301 ret = -1;
302 #endif /* raw mode */
303 return (ret);
304 }
305
306 #ifndef DL_IPATM
307 #define DL_IPATM 0x12 /* ATM Classical IP interface */
308 #endif
309
310 #ifdef HAVE_SOLARIS
311 /*
312 * For SunATM.
313 */
314 #ifndef A_GET_UNITS
315 #define A_GET_UNITS (('A'<<8)|118)
316 #endif /* A_GET_UNITS */
317 #ifndef A_PROMISCON_REQ
318 #define A_PROMISCON_REQ (('A'<<8)|121)
319 #endif /* A_PROMISCON_REQ */
320 #endif /* HAVE_SOLARIS */
321
322 static void
pcap_cleanup_dlpi(pcap_t * p)323 pcap_cleanup_dlpi(pcap_t *p)
324 {
325 #ifdef DL_HP_RAWDLS
326 struct pcap_dlpi *pd = p->priv;
327
328 if (pd->send_fd >= 0) {
329 close(pd->send_fd);
330 pd->send_fd = -1;
331 }
332 #endif
333 pcap_cleanup_live_common(p);
334 }
335
336 static int
open_dlpi_device(const char * name,int * ppa,char * errbuf)337 open_dlpi_device(const char *name, int *ppa, char *errbuf)
338 {
339 int status;
340 char dname[100];
341 char *cp;
342 int fd;
343 #ifndef HAVE_DEV_DLPI
344 char dname2[100];
345 #endif
346
347 #ifdef HAVE_DEV_DLPI
348 /*
349 ** Remove any "/dev/" on the front of the device.
350 */
351 cp = strrchr(name, '/');
352 if (cp == NULL)
353 strlcpy(dname, name, sizeof(dname));
354 else
355 strlcpy(dname, cp + 1, sizeof(dname));
356
357 /*
358 * Split the device name into a device type name and a unit number;
359 * chop off the unit number, so "dname" is just a device type name.
360 */
361 cp = split_dname(dname, ppa, errbuf);
362 if (cp == NULL)
363 return (PCAP_ERROR_NO_SUCH_DEVICE);
364 *cp = '\0';
365
366 /*
367 * Use "/dev/dlpi" as the device.
368 *
369 * XXX - HP's DLPI Programmer's Guide for HP-UX 11.00 says that
370 * the "dl_mjr_num" field is for the "major number of interface
371 * driver"; that's the major of "/dev/dlpi" on the system on
372 * which I tried this, but there may be DLPI devices that
373 * use a different driver, in which case we may need to
374 * search "/dev" for the appropriate device with that major
375 * device number, rather than hardwiring "/dev/dlpi".
376 */
377 cp = "/dev/dlpi";
378 if ((fd = open(cp, O_RDWR)) < 0) {
379 if (errno == EPERM || errno == EACCES)
380 status = PCAP_ERROR_PERM_DENIED;
381 else
382 status = PCAP_ERROR;
383 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE,
384 "%s: %s", cp, pcap_strerror(errno));
385 return (status);
386 }
387
388 /*
389 * Get a table of all PPAs for that device, and search that
390 * table for the specified device type name and unit number.
391 */
392 *ppa = get_dlpi_ppa(fd, dname, *ppa, errbuf);
393 if (*ppa < 0) {
394 close(fd);
395 return (*ppa);
396 }
397 #else
398 /*
399 * If the device name begins with "/", assume it begins with
400 * the pathname of the directory containing the device to open;
401 * otherwise, concatenate the device directory name and the
402 * device name.
403 */
404 if (*name == '/')
405 strlcpy(dname, name, sizeof(dname));
406 else
407 pcap_snprintf(dname, sizeof(dname), "%s/%s", PCAP_DEV_PREFIX,
408 name);
409
410 /*
411 * Get the unit number, and a pointer to the end of the device
412 * type name.
413 */
414 cp = split_dname(dname, ppa, errbuf);
415 if (cp == NULL)
416 return (PCAP_ERROR_NO_SUCH_DEVICE);
417
418 /*
419 * Make a copy of the device pathname, and then remove the unit
420 * number from the device pathname.
421 */
422 strlcpy(dname2, dname, sizeof(dname));
423 *cp = '\0';
424
425 /* Try device without unit number */
426 if ((fd = open(dname, O_RDWR)) < 0) {
427 if (errno != ENOENT) {
428 if (errno == EPERM || errno == EACCES)
429 status = PCAP_ERROR_PERM_DENIED;
430 else
431 status = PCAP_ERROR;
432 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "%s: %s", dname,
433 pcap_strerror(errno));
434 return (status);
435 }
436
437 /* Try again with unit number */
438 if ((fd = open(dname2, O_RDWR)) < 0) {
439 if (errno == ENOENT) {
440 status = PCAP_ERROR_NO_SUCH_DEVICE;
441
442 /*
443 * We provide an error message even
444 * for this error, for diagnostic
445 * purposes (so that, for example,
446 * the app can show the message if the
447 * user requests it).
448 *
449 * In it, we just report "No DLPI device
450 * found" with the device name, so people
451 * don't get confused and think, for example,
452 * that if they can't capture on "lo0"
453 * on Solaris prior to Solaris 11 the fix
454 * is to change libpcap (or the application
455 * that uses it) to look for something other
456 * than "/dev/lo0", as the fix is to use
457 * Solaris 11 or some operating system
458 * other than Solaris - you just *can't*
459 * capture on a loopback interface
460 * on Solaris prior to Solaris 11, the lack
461 * of a DLPI device for the loopback
462 * interface is just a symptom of that
463 * inability.
464 */
465 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE,
466 "%s: No DLPI device found", name);
467 } else {
468 if (errno == EPERM || errno == EACCES)
469 status = PCAP_ERROR_PERM_DENIED;
470 else
471 status = PCAP_ERROR;
472 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "%s: %s",
473 dname2, pcap_strerror(errno));
474 }
475 return (status);
476 }
477 /* XXX Assume unit zero */
478 *ppa = 0;
479 }
480 #endif
481 return (fd);
482 }
483
484 static int
pcap_activate_dlpi(pcap_t * p)485 pcap_activate_dlpi(pcap_t *p)
486 {
487 #ifdef DL_HP_RAWDLS
488 struct pcap_dlpi *pd = p->priv;
489 #endif
490 int status = 0;
491 int retv;
492 int ppa;
493 #ifdef HAVE_SOLARIS
494 int isatm = 0;
495 #endif
496 register dl_info_ack_t *infop;
497 #ifdef HAVE_SYS_BUFMOD_H
498 bpf_u_int32 ss;
499 #ifdef HAVE_SOLARIS
500 char release[GET_RELEASE_BUFSIZE];
501 bpf_u_int32 osmajor, osminor, osmicro;
502 #endif
503 #endif
504 bpf_u_int32 buf[MAXDLBUF];
505
506 p->fd = open_dlpi_device(p->opt.device, &ppa, p->errbuf);
507 if (p->fd < 0) {
508 status = p->fd;
509 goto bad;
510 }
511
512 #ifdef DL_HP_RAWDLS
513 /*
514 * XXX - HP-UX 10.20 and 11.xx don't appear to support sending and
515 * receiving packets on the same descriptor - you need separate
516 * descriptors for sending and receiving, bound to different SAPs.
517 *
518 * If the open fails, we just leave -1 in "pd->send_fd" and reject
519 * attempts to send packets, just as if, in pcap-bpf.c, we fail
520 * to open the BPF device for reading and writing, we just try
521 * to open it for reading only and, if that succeeds, just let
522 * the send attempts fail.
523 */
524 pd->send_fd = open("/dev/dlpi", O_RDWR);
525 #endif
526
527 /*
528 ** Attach if "style 2" provider
529 */
530 if (dlinforeq(p->fd, p->errbuf) < 0 ||
531 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0) {
532 status = PCAP_ERROR;
533 goto bad;
534 }
535 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack;
536 #ifdef HAVE_SOLARIS
537 if (infop->dl_mac_type == DL_IPATM)
538 isatm = 1;
539 #endif
540 if (infop->dl_provider_style == DL_STYLE2) {
541 retv = dl_doattach(p->fd, ppa, p->errbuf);
542 if (retv < 0) {
543 status = retv;
544 goto bad;
545 }
546 #ifdef DL_HP_RAWDLS
547 if (pd->send_fd >= 0) {
548 retv = dl_doattach(pd->send_fd, ppa, p->errbuf);
549 if (retv < 0) {
550 status = retv;
551 goto bad;
552 }
553 }
554 #endif
555 }
556
557 if (p->opt.rfmon) {
558 /*
559 * This device exists, but we don't support monitor mode
560 * any platforms that support DLPI.
561 */
562 status = PCAP_ERROR_RFMON_NOTSUP;
563 goto bad;
564 }
565
566 #ifdef HAVE_DLPI_PASSIVE
567 /*
568 * Enable Passive mode to be able to capture on aggregated link.
569 * Not supported in all Solaris versions.
570 */
571 dlpassive(p->fd, p->errbuf);
572 #endif
573 /*
574 ** Bind (defer if using HP-UX 9 or HP-UX 10.20 or later, totally
575 ** skip if using SINIX)
576 */
577 #if !defined(HAVE_HPUX9) && !defined(HAVE_HPUX10_20_OR_LATER) && !defined(sinix)
578 #ifdef _AIX
579 /*
580 ** AIX.
581 ** According to IBM's AIX Support Line, the dl_sap value
582 ** should not be less than 0x600 (1536) for standard Ethernet.
583 ** However, we seem to get DL_BADADDR - "DLSAP addr in improper
584 ** format or invalid" - errors if we use 1537 on the "tr0"
585 ** device, which, given that its name starts with "tr" and that
586 ** it's IBM, probably means a Token Ring device. (Perhaps we
587 ** need to use 1537 on "/dev/dlpi/en" because that device is for
588 ** D/I/X Ethernet, the "SAP" is actually an Ethernet type, and
589 ** it rejects invalid Ethernet types.)
590 **
591 ** So if 1537 fails, we try 2, as Hyung Sik Yoon of IBM Korea
592 ** says that works on Token Ring (he says that 0 does *not*
593 ** work; perhaps that's considered an invalid LLC SAP value - I
594 ** assume the SAP value in a DLPI bind is an LLC SAP for network
595 ** types that use 802.2 LLC).
596 */
597 if ((dlbindreq(p->fd, 1537, p->errbuf) < 0 &&
598 dlbindreq(p->fd, 2, p->errbuf) < 0) ||
599 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0) {
600 status = PCAP_ERROR;
601 goto bad;
602 }
603 #elif defined(DL_HP_RAWDLS)
604 /*
605 ** HP-UX 10.0x and 10.1x.
606 */
607 if (dl_dohpuxbind(p->fd, p->errbuf) < 0) {
608 status = PCAP_ERROR;
609 goto bad;
610 }
611 if (pd->send_fd >= 0) {
612 /*
613 ** XXX - if this fails, just close send_fd and
614 ** set it to -1, so that you can't send but can
615 ** still receive?
616 */
617 if (dl_dohpuxbind(pd->send_fd, p->errbuf) < 0) {
618 status = PCAP_ERROR;
619 goto bad;
620 }
621 }
622 #else /* neither AIX nor HP-UX */
623 /*
624 ** Not Sinix, and neither AIX nor HP-UX - Solaris, and any other
625 ** OS using DLPI.
626 **/
627 if (dlbindreq(p->fd, 0, p->errbuf) < 0 ||
628 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0) {
629 status = PCAP_ERROR;
630 goto bad;
631 }
632 #endif /* AIX vs. HP-UX vs. other */
633 #endif /* !HP-UX 9 and !HP-UX 10.20 or later and !SINIX */
634
635 #ifdef HAVE_SOLARIS
636 if (isatm) {
637 /*
638 ** Have to turn on some special ATM promiscuous mode
639 ** for SunATM.
640 ** Do *NOT* turn regular promiscuous mode on; it doesn't
641 ** help, and may break things.
642 */
643 if (strioctl(p->fd, A_PROMISCON_REQ, 0, NULL) < 0) {
644 status = PCAP_ERROR;
645 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
646 "A_PROMISCON_REQ: %s", pcap_strerror(errno));
647 goto bad;
648 }
649 } else
650 #endif
651 if (p->opt.promisc) {
652 /*
653 ** Enable promiscuous (not necessary on send FD)
654 */
655 retv = dlpromiscon(p, DL_PROMISC_PHYS);
656 if (retv < 0) {
657 if (retv == PCAP_ERROR_PERM_DENIED)
658 status = PCAP_ERROR_PROMISC_PERM_DENIED;
659 else
660 status = retv;
661 goto bad;
662 }
663
664 /*
665 ** Try to enable multicast (you would have thought
666 ** promiscuous would be sufficient). (Skip if using
667 ** HP-UX or SINIX) (Not necessary on send FD)
668 */
669 #if !defined(__hpux) && !defined(sinix)
670 retv = dlpromiscon(p, DL_PROMISC_MULTI);
671 if (retv < 0)
672 status = PCAP_WARNING;
673 #endif
674 }
675 /*
676 ** Try to enable SAP promiscuity (when not in promiscuous mode
677 ** when using HP-UX, when not doing SunATM on Solaris, and never
678 ** under SINIX) (Not necessary on send FD)
679 */
680 #ifndef sinix
681 #if defined(__hpux)
682 /* HP-UX - only do this when not in promiscuous mode */
683 if (!p->opt.promisc) {
684 #elif defined(HAVE_SOLARIS)
685 /* Solaris - don't do this on SunATM devices */
686 if (!isatm) {
687 #else
688 /* Everything else (except for SINIX) - always do this */
689 {
690 #endif
691 retv = dlpromiscon(p, DL_PROMISC_SAP);
692 if (retv < 0) {
693 if (p->opt.promisc) {
694 /*
695 * Not fatal, since the DL_PROMISC_PHYS mode
696 * worked.
697 *
698 * Report it as a warning, however.
699 */
700 status = PCAP_WARNING;
701 } else {
702 /*
703 * Fatal.
704 */
705 status = retv;
706 goto bad;
707 }
708 }
709 }
710 #endif /* sinix */
711
712 /*
713 ** HP-UX 9, and HP-UX 10.20 or later, must bind after setting
714 ** promiscuous options.
715 */
716 #if defined(HAVE_HPUX9) || defined(HAVE_HPUX10_20_OR_LATER)
717 if (dl_dohpuxbind(p->fd, p->errbuf) < 0) {
718 status = PCAP_ERROR;
719 goto bad;
720 }
721 /*
722 ** We don't set promiscuous mode on the send FD, but we'll defer
723 ** binding it anyway, just to keep the HP-UX 9/10.20 or later
724 ** code together.
725 */
726 if (pd->send_fd >= 0) {
727 /*
728 ** XXX - if this fails, just close send_fd and
729 ** set it to -1, so that you can't send but can
730 ** still receive?
731 */
732 if (dl_dohpuxbind(pd->send_fd, p->errbuf) < 0) {
733 status = PCAP_ERROR;
734 goto bad;
735 }
736 }
737 #endif
738
739 /*
740 ** Determine link type
741 ** XXX - get SAP length and address length as well, for use
742 ** when sending packets.
743 */
744 if (dlinforeq(p->fd, p->errbuf) < 0 ||
745 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0) {
746 status = PCAP_ERROR;
747 goto bad;
748 }
749
750 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack;
751 if (pcap_process_mactype(p, infop->dl_mac_type) != 0) {
752 status = PCAP_ERROR;
753 goto bad;
754 }
755
756 #ifdef DLIOCRAW
757 /*
758 ** This is a non standard SunOS hack to get the full raw link-layer
759 ** header.
760 */
761 if (strioctl(p->fd, DLIOCRAW, 0, NULL) < 0) {
762 status = PCAP_ERROR;
763 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "DLIOCRAW: %s",
764 pcap_strerror(errno));
765 goto bad;
766 }
767 #endif
768
769 #ifdef HAVE_SYS_BUFMOD_H
770 ss = p->snapshot;
771
772 /*
773 ** There is a bug in bufmod(7). When dealing with messages of
774 ** less than snaplen size it strips data from the beginning not
775 ** the end.
776 **
777 ** This bug is fixed in 5.3.2. Also, there is a patch available.
778 ** Ask for bugid 1149065.
779 */
780 #ifdef HAVE_SOLARIS
781 get_release(release, sizeof (release), &osmajor, &osminor, &osmicro);
782 if (osmajor == 5 && (osminor <= 2 || (osminor == 3 && osmicro < 2)) &&
783 getenv("BUFMOD_FIXED") == NULL) {
784 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
785 "WARNING: bufmod is broken in SunOS %s; ignoring snaplen.",
786 release);
787 ss = 0;
788 status = PCAP_WARNING;
789 }
790 #endif
791
792 /* Push and configure bufmod. */
793 if (pcap_conf_bufmod(p, ss) != 0) {
794 status = PCAP_ERROR;
795 goto bad;
796 }
797 #endif
798
799 /*
800 ** As the last operation flush the read side.
801 */
802 if (ioctl(p->fd, I_FLUSH, FLUSHR) != 0) {
803 status = PCAP_ERROR;
804 pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "FLUSHR: %s",
805 pcap_strerror(errno));
806 goto bad;
807 }
808
809 /* Allocate data buffer. */
810 if (pcap_alloc_databuf(p) != 0) {
811 status = PCAP_ERROR;
812 goto bad;
813 }
814
815 /*
816 * Success.
817 *
818 * "p->fd" is an FD for a STREAMS device, so "select()" and
819 * "poll()" should work on it.
820 */
821 p->selectable_fd = p->fd;
822
823 p->read_op = pcap_read_dlpi;
824 p->inject_op = pcap_inject_dlpi;
825 p->setfilter_op = install_bpf_program; /* no kernel filtering */
826 p->setdirection_op = NULL; /* Not implemented.*/
827 p->set_datalink_op = NULL; /* can't change data link type */
828 p->getnonblock_op = pcap_getnonblock_fd;
829 p->setnonblock_op = pcap_setnonblock_fd;
830 p->stats_op = pcap_stats_dlpi;
831 p->cleanup_op = pcap_cleanup_dlpi;
832
833 return (status);
834 bad:
835 pcap_cleanup_dlpi(p);
836 return (status);
837 }
838
839 /*
840 * Split a device name into a device type name and a unit number;
841 * return the a pointer to the beginning of the unit number, which
842 * is the end of the device type name, and set "*unitp" to the unit
843 * number.
844 *
845 * Returns NULL on error, and fills "ebuf" with an error message.
846 */
847 static char *
848 split_dname(char *device, int *unitp, char *ebuf)
849 {
850 char *cp;
851 char *eos;
852 long unit;
853
854 /*
855 * Look for a number at the end of the device name string.
856 */
857 cp = device + strlen(device) - 1;
858 if (*cp < '0' || *cp > '9') {
859 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s missing unit number",
860 device);
861 return (NULL);
862 }
863
864 /* Digits at end of string are unit number */
865 while (cp-1 >= device && *(cp-1) >= '0' && *(cp-1) <= '9')
866 cp--;
867
868 errno = 0;
869 unit = strtol(cp, &eos, 10);
870 if (*eos != '\0') {
871 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s bad unit number", device);
872 return (NULL);
873 }
874 if (errno == ERANGE || unit > INT_MAX) {
875 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number too large",
876 device);
877 return (NULL);
878 }
879 if (unit < 0) {
880 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number is negative",
881 device);
882 return (NULL);
883 }
884 *unitp = (int)unit;
885 return (cp);
886 }
887
888 static int
889 dl_doattach(int fd, int ppa, char *ebuf)
890 {
891 dl_attach_req_t req;
892 bpf_u_int32 buf[MAXDLBUF];
893 int err;
894
895 req.dl_primitive = DL_ATTACH_REQ;
896 req.dl_ppa = ppa;
897 if (send_request(fd, (char *)&req, sizeof(req), "attach", ebuf) < 0)
898 return (PCAP_ERROR);
899
900 err = dlokack(fd, "attach", (char *)buf, ebuf);
901 if (err < 0)
902 return (err);
903 return (0);
904 }
905
906 #ifdef DL_HP_RAWDLS
907 static int
908 dl_dohpuxbind(int fd, char *ebuf)
909 {
910 int hpsap;
911 int uerror;
912 bpf_u_int32 buf[MAXDLBUF];
913
914 /*
915 * XXX - we start at 22 because we used to use only 22, but
916 * that was just because that was the value used in some
917 * sample code from HP. With what value *should* we start?
918 * Does it matter, given that we're enabling SAP promiscuity
919 * on the input FD?
920 */
921 hpsap = 22;
922 for (;;) {
923 if (dlbindreq(fd, hpsap, ebuf) < 0)
924 return (-1);
925 if (dlbindack(fd, (char *)buf, ebuf, &uerror) >= 0)
926 break;
927 /*
928 * For any error other than a UNIX EBUSY, give up.
929 */
930 if (uerror != EBUSY) {
931 /*
932 * dlbindack() has already filled in ebuf for
933 * this error.
934 */
935 return (-1);
936 }
937
938 /*
939 * For EBUSY, try the next SAP value; that means that
940 * somebody else is using that SAP. Clear ebuf so
941 * that application doesn't report the "Device busy"
942 * error as a warning.
943 */
944 *ebuf = '\0';
945 hpsap++;
946 if (hpsap > 100) {
947 strlcpy(ebuf,
948 "All SAPs from 22 through 100 are in use",
949 PCAP_ERRBUF_SIZE);
950 return (-1);
951 }
952 }
953 return (0);
954 }
955 #endif
956
957 #define STRINGIFY(n) #n
958
959 static int
960 dlpromiscon(pcap_t *p, bpf_u_int32 level)
961 {
962 dl_promiscon_req_t req;
963 bpf_u_int32 buf[MAXDLBUF];
964 int err;
965
966 req.dl_primitive = DL_PROMISCON_REQ;
967 req.dl_level = level;
968 if (send_request(p->fd, (char *)&req, sizeof(req), "promiscon",
969 p->errbuf) < 0)
970 return (PCAP_ERROR);
971 err = dlokack(p->fd, "promiscon" STRINGIFY(level), (char *)buf,
972 p->errbuf);
973 if (err < 0)
974 return (err);
975 return (0);
976 }
977
978 /*
979 * Not all interfaces are DLPI interfaces, and thus not all interfaces
980 * can be opened with DLPI (for example, the loopback interface is not
981 * a DLPI interface on Solaris prior to Solaris 11), so try to open
982 * the specified interface; return 0 if we fail with PCAP_ERROR_NO_SUCH_DEVICE
983 * and 1 otherwise.
984 */
985 static int
986 is_dlpi_interface(const char *name)
987 {
988 int fd;
989 int ppa;
990 char errbuf[PCAP_ERRBUF_SIZE];
991
992 fd = open_dlpi_device(name, &ppa, errbuf);
993 if (fd < 0) {
994 /*
995 * Error - was it PCAP_ERROR_NO_SUCH_DEVICE?
996 */
997 if (fd == PCAP_ERROR_NO_SUCH_DEVICE) {
998 /*
999 * Yes, so we can't open this because it's
1000 * not a DLPI interface.
1001 */
1002 return (0);
1003 }
1004 /*
1005 * No, so, in the case where there's a single DLPI
1006 * device for all interfaces of this type ("style
1007 * 2" providers?), we don't know whether it's a DLPI
1008 * interface or not, as we didn't try an attach.
1009 * Say it is a DLPI device, so that the user can at
1010 * least try to open it and report the error (which
1011 * is probably "you don't have permission to open that
1012 * DLPI device"; reporting those interfaces means
1013 * users will ask "why am I getting a permissions error
1014 * when I try to capture" rather than "why am I not
1015 * seeing any interfaces", making the underlying problem
1016 * clearer).
1017 */
1018 return (1);
1019 }
1020
1021 /*
1022 * Success.
1023 */
1024 close(fd);
1025 return (1);
1026 }
1027
1028 int
1029 pcap_platform_finddevs(pcap_if_t **alldevsp, char *errbuf)
1030 {
1031 #ifdef HAVE_SOLARIS
1032 int fd;
1033 union {
1034 u_int nunits;
1035 char pad[516]; /* XXX - must be at least 513; is 516
1036 in "atmgetunits" */
1037 } buf;
1038 char baname[2+1+1];
1039 u_int i;
1040 #endif
1041
1042 /*
1043 * Get the list of regular interfaces first.
1044 */
1045 if (pcap_findalldevs_interfaces(alldevsp, errbuf, is_dlpi_interface) == -1)
1046 return (-1); /* failure */
1047
1048 #ifdef HAVE_SOLARIS
1049 /*
1050 * We may have to do special magic to get ATM devices.
1051 */
1052 if ((fd = open("/dev/ba", O_RDWR)) < 0) {
1053 /*
1054 * We couldn't open the "ba" device.
1055 * For now, just give up; perhaps we should
1056 * return an error if the problem is neither
1057 * a "that device doesn't exist" error (ENOENT,
1058 * ENXIO, etc.) or a "you're not allowed to do
1059 * that" error (EPERM, EACCES).
1060 */
1061 return (0);
1062 }
1063
1064 if (strioctl(fd, A_GET_UNITS, sizeof(buf), (char *)&buf) < 0) {
1065 pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "A_GET_UNITS: %s",
1066 pcap_strerror(errno));
1067 return (-1);
1068 }
1069 for (i = 0; i < buf.nunits; i++) {
1070 pcap_snprintf(baname, sizeof baname, "ba%u", i);
1071 if (pcap_add_if(alldevsp, baname, 0, NULL, errbuf) < 0)
1072 return (-1);
1073 }
1074 #endif
1075
1076 return (0);
1077 }
1078
1079 static int
1080 send_request(int fd, char *ptr, int len, char *what, char *ebuf)
1081 {
1082 struct strbuf ctl;
1083 int flags;
1084
1085 ctl.maxlen = 0;
1086 ctl.len = len;
1087 ctl.buf = ptr;
1088
1089 flags = 0;
1090 if (putmsg(fd, &ctl, (struct strbuf *) NULL, flags) < 0) {
1091 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1092 "send_request: putmsg \"%s\": %s",
1093 what, pcap_strerror(errno));
1094 return (-1);
1095 }
1096 return (0);
1097 }
1098
1099 static int
1100 recv_ack(int fd, int size, const char *what, char *bufp, char *ebuf, int *uerror)
1101 {
1102 union DL_primitives *dlp;
1103 struct strbuf ctl;
1104 int flags;
1105 char errmsgbuf[PCAP_ERRBUF_SIZE];
1106 char dlprimbuf[64];
1107
1108 /*
1109 * Clear out "*uerror", so it's only set for DL_ERROR_ACK/DL_SYSERR,
1110 * making that the only place where EBUSY is treated specially.
1111 */
1112 if (uerror != NULL)
1113 *uerror = 0;
1114
1115 ctl.maxlen = MAXDLBUF;
1116 ctl.len = 0;
1117 ctl.buf = bufp;
1118
1119 flags = 0;
1120 if (getmsg(fd, &ctl, (struct strbuf*)NULL, &flags) < 0) {
1121 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "recv_ack: %s getmsg: %s",
1122 what, pcap_strerror(errno));
1123 return (PCAP_ERROR);
1124 }
1125
1126 dlp = MAKE_DL_PRIMITIVES(ctl.buf);
1127 switch (dlp->dl_primitive) {
1128
1129 case DL_INFO_ACK:
1130 case DL_BIND_ACK:
1131 case DL_OK_ACK:
1132 #ifdef DL_HP_PPA_ACK
1133 case DL_HP_PPA_ACK:
1134 #endif
1135 /* These are OK */
1136 break;
1137
1138 case DL_ERROR_ACK:
1139 switch (dlp->error_ack.dl_errno) {
1140
1141 case DL_SYSERR:
1142 if (uerror != NULL)
1143 *uerror = dlp->error_ack.dl_unix_errno;
1144 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1145 "recv_ack: %s: UNIX error - %s",
1146 what, pcap_strerror(dlp->error_ack.dl_unix_errno));
1147 if (dlp->error_ack.dl_unix_errno == EPERM ||
1148 dlp->error_ack.dl_unix_errno == EACCES)
1149 return (PCAP_ERROR_PERM_DENIED);
1150 break;
1151
1152 default:
1153 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1154 "recv_ack: %s: %s", what,
1155 dlstrerror(errmsgbuf, sizeof (errmsgbuf), dlp->error_ack.dl_errno));
1156 if (dlp->error_ack.dl_errno == DL_BADPPA)
1157 return (PCAP_ERROR_NO_SUCH_DEVICE);
1158 else if (dlp->error_ack.dl_errno == DL_ACCESS)
1159 return (PCAP_ERROR_PERM_DENIED);
1160 break;
1161 }
1162 return (PCAP_ERROR);
1163
1164 default:
1165 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1166 "recv_ack: %s: Unexpected primitive ack %s",
1167 what, dlprim(dlprimbuf, sizeof (dlprimbuf), dlp->dl_primitive));
1168 return (PCAP_ERROR);
1169 }
1170
1171 if (ctl.len < size) {
1172 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1173 "recv_ack: %s: Ack too small (%d < %d)",
1174 what, ctl.len, size);
1175 return (PCAP_ERROR);
1176 }
1177 return (ctl.len);
1178 }
1179
1180 static char *
1181 dlstrerror(char *errbuf, size_t errbufsize, bpf_u_int32 dl_errno)
1182 {
1183 switch (dl_errno) {
1184
1185 case DL_ACCESS:
1186 return ("Improper permissions for request");
1187
1188 case DL_BADADDR:
1189 return ("DLSAP addr in improper format or invalid");
1190
1191 case DL_BADCORR:
1192 return ("Seq number not from outstand DL_CONN_IND");
1193
1194 case DL_BADDATA:
1195 return ("User data exceeded provider limit");
1196
1197 case DL_BADPPA:
1198 #ifdef HAVE_DEV_DLPI
1199 /*
1200 * With a single "/dev/dlpi" device used for all
1201 * DLPI providers, PPAs have nothing to do with
1202 * unit numbers.
1203 */
1204 return ("Specified PPA was invalid");
1205 #else
1206 /*
1207 * We have separate devices for separate devices;
1208 * the PPA is just the unit number.
1209 */
1210 return ("Specified PPA (device unit) was invalid");
1211 #endif
1212
1213 case DL_BADPRIM:
1214 return ("Primitive received not known by provider");
1215
1216 case DL_BADQOSPARAM:
1217 return ("QOS parameters contained invalid values");
1218
1219 case DL_BADQOSTYPE:
1220 return ("QOS structure type is unknown/unsupported");
1221
1222 case DL_BADSAP:
1223 return ("Bad LSAP selector");
1224
1225 case DL_BADTOKEN:
1226 return ("Token used not an active stream");
1227
1228 case DL_BOUND:
1229 return ("Attempted second bind with dl_max_conind");
1230
1231 case DL_INITFAILED:
1232 return ("Physical link initialization failed");
1233
1234 case DL_NOADDR:
1235 return ("Provider couldn't allocate alternate address");
1236
1237 case DL_NOTINIT:
1238 return ("Physical link not initialized");
1239
1240 case DL_OUTSTATE:
1241 return ("Primitive issued in improper state");
1242
1243 case DL_SYSERR:
1244 return ("UNIX system error occurred");
1245
1246 case DL_UNSUPPORTED:
1247 return ("Requested service not supplied by provider");
1248
1249 case DL_UNDELIVERABLE:
1250 return ("Previous data unit could not be delivered");
1251
1252 case DL_NOTSUPPORTED:
1253 return ("Primitive is known but not supported");
1254
1255 case DL_TOOMANY:
1256 return ("Limit exceeded");
1257
1258 case DL_NOTENAB:
1259 return ("Promiscuous mode not enabled");
1260
1261 case DL_BUSY:
1262 return ("Other streams for PPA in post-attached");
1263
1264 case DL_NOAUTO:
1265 return ("Automatic handling XID&TEST not supported");
1266
1267 case DL_NOXIDAUTO:
1268 return ("Automatic handling of XID not supported");
1269
1270 case DL_NOTESTAUTO:
1271 return ("Automatic handling of TEST not supported");
1272
1273 case DL_XIDAUTO:
1274 return ("Automatic handling of XID response");
1275
1276 case DL_TESTAUTO:
1277 return ("Automatic handling of TEST response");
1278
1279 case DL_PENDING:
1280 return ("Pending outstanding connect indications");
1281
1282 default:
1283 pcap_snprintf(errbuf, errbufsize, "Error %02x", dl_errno);
1284 return (errbuf);
1285 }
1286 }
1287
1288 static char *
1289 dlprim(char *primbuf, size_t primbufsize, bpf_u_int32 prim)
1290 {
1291 switch (prim) {
1292
1293 case DL_INFO_REQ:
1294 return ("DL_INFO_REQ");
1295
1296 case DL_INFO_ACK:
1297 return ("DL_INFO_ACK");
1298
1299 case DL_ATTACH_REQ:
1300 return ("DL_ATTACH_REQ");
1301
1302 case DL_DETACH_REQ:
1303 return ("DL_DETACH_REQ");
1304
1305 case DL_BIND_REQ:
1306 return ("DL_BIND_REQ");
1307
1308 case DL_BIND_ACK:
1309 return ("DL_BIND_ACK");
1310
1311 case DL_UNBIND_REQ:
1312 return ("DL_UNBIND_REQ");
1313
1314 case DL_OK_ACK:
1315 return ("DL_OK_ACK");
1316
1317 case DL_ERROR_ACK:
1318 return ("DL_ERROR_ACK");
1319
1320 case DL_SUBS_BIND_REQ:
1321 return ("DL_SUBS_BIND_REQ");
1322
1323 case DL_SUBS_BIND_ACK:
1324 return ("DL_SUBS_BIND_ACK");
1325
1326 case DL_UNITDATA_REQ:
1327 return ("DL_UNITDATA_REQ");
1328
1329 case DL_UNITDATA_IND:
1330 return ("DL_UNITDATA_IND");
1331
1332 case DL_UDERROR_IND:
1333 return ("DL_UDERROR_IND");
1334
1335 case DL_UDQOS_REQ:
1336 return ("DL_UDQOS_REQ");
1337
1338 case DL_CONNECT_REQ:
1339 return ("DL_CONNECT_REQ");
1340
1341 case DL_CONNECT_IND:
1342 return ("DL_CONNECT_IND");
1343
1344 case DL_CONNECT_RES:
1345 return ("DL_CONNECT_RES");
1346
1347 case DL_CONNECT_CON:
1348 return ("DL_CONNECT_CON");
1349
1350 case DL_TOKEN_REQ:
1351 return ("DL_TOKEN_REQ");
1352
1353 case DL_TOKEN_ACK:
1354 return ("DL_TOKEN_ACK");
1355
1356 case DL_DISCONNECT_REQ:
1357 return ("DL_DISCONNECT_REQ");
1358
1359 case DL_DISCONNECT_IND:
1360 return ("DL_DISCONNECT_IND");
1361
1362 case DL_RESET_REQ:
1363 return ("DL_RESET_REQ");
1364
1365 case DL_RESET_IND:
1366 return ("DL_RESET_IND");
1367
1368 case DL_RESET_RES:
1369 return ("DL_RESET_RES");
1370
1371 case DL_RESET_CON:
1372 return ("DL_RESET_CON");
1373
1374 default:
1375 pcap_snprintf(primbuf, primbufsize, "unknown primitive 0x%x",
1376 prim);
1377 return (primbuf);
1378 }
1379 }
1380
1381 static int
1382 dlbindreq(int fd, bpf_u_int32 sap, char *ebuf)
1383 {
1384
1385 dl_bind_req_t req;
1386
1387 memset((char *)&req, 0, sizeof(req));
1388 req.dl_primitive = DL_BIND_REQ;
1389 /* XXX - what if neither of these are defined? */
1390 #if defined(DL_HP_RAWDLS)
1391 req.dl_max_conind = 1; /* XXX magic number */
1392 req.dl_service_mode = DL_HP_RAWDLS;
1393 #elif defined(DL_CLDLS)
1394 req.dl_service_mode = DL_CLDLS;
1395 #endif
1396 req.dl_sap = sap;
1397
1398 return (send_request(fd, (char *)&req, sizeof(req), "bind", ebuf));
1399 }
1400
1401 static int
1402 dlbindack(int fd, char *bufp, char *ebuf, int *uerror)
1403 {
1404
1405 return (recv_ack(fd, DL_BIND_ACK_SIZE, "bind", bufp, ebuf, uerror));
1406 }
1407
1408 static int
1409 dlokack(int fd, const char *what, char *bufp, char *ebuf)
1410 {
1411
1412 return (recv_ack(fd, DL_OK_ACK_SIZE, what, bufp, ebuf, NULL));
1413 }
1414
1415
1416 static int
1417 dlinforeq(int fd, char *ebuf)
1418 {
1419 dl_info_req_t req;
1420
1421 req.dl_primitive = DL_INFO_REQ;
1422
1423 return (send_request(fd, (char *)&req, sizeof(req), "info", ebuf));
1424 }
1425
1426 static int
1427 dlinfoack(int fd, char *bufp, char *ebuf)
1428 {
1429
1430 return (recv_ack(fd, DL_INFO_ACK_SIZE, "info", bufp, ebuf, NULL));
1431 }
1432
1433 #ifdef HAVE_DLPI_PASSIVE
1434 /*
1435 * Enable DLPI passive mode. We do not care if this request fails, as this
1436 * indicates the underlying DLPI device does not support link aggregation.
1437 */
1438 static void
1439 dlpassive(int fd, char *ebuf)
1440 {
1441 dl_passive_req_t req;
1442 bpf_u_int32 buf[MAXDLBUF];
1443
1444 req.dl_primitive = DL_PASSIVE_REQ;
1445
1446 if (send_request(fd, (char *)&req, sizeof(req), "dlpassive", ebuf) == 0)
1447 (void) dlokack(fd, "dlpassive", (char *)buf, ebuf);
1448 }
1449 #endif
1450
1451 #ifdef DL_HP_RAWDLS
1452 /*
1453 * There's an ack *if* there's an error.
1454 */
1455 static int
1456 dlrawdatareq(int fd, const u_char *datap, int datalen)
1457 {
1458 struct strbuf ctl, data;
1459 long buf[MAXDLBUF]; /* XXX - char? */
1460 union DL_primitives *dlp;
1461 int dlen;
1462
1463 dlp = MAKE_DL_PRIMITIVES(buf);
1464
1465 dlp->dl_primitive = DL_HP_RAWDATA_REQ;
1466 dlen = DL_HP_RAWDATA_REQ_SIZE;
1467
1468 /*
1469 * HP's documentation doesn't appear to show us supplying any
1470 * address pointed to by the control part of the message.
1471 * I think that's what raw mode means - you just send the raw
1472 * packet, you don't specify where to send it to, as that's
1473 * implied by the destination address.
1474 */
1475 ctl.maxlen = 0;
1476 ctl.len = dlen;
1477 ctl.buf = (void *)buf;
1478
1479 data.maxlen = 0;
1480 data.len = datalen;
1481 data.buf = (void *)datap;
1482
1483 return (putmsg(fd, &ctl, &data, 0));
1484 }
1485 #endif /* DL_HP_RAWDLS */
1486
1487 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
1488 static void
1489 get_release(char *buf, size_t bufsize, bpf_u_int32 *majorp,
1490 bpf_u_int32 *minorp, bpf_u_int32 *microp)
1491 {
1492 char *cp;
1493
1494 *majorp = 0;
1495 *minorp = 0;
1496 *microp = 0;
1497 if (sysinfo(SI_RELEASE, buf, bufsize) < 0) {
1498 strlcpy(buf, "?", bufsize);
1499 return;
1500 }
1501 cp = buf;
1502 if (!isdigit((unsigned char)*cp))
1503 return;
1504 *majorp = strtol(cp, &cp, 10);
1505 if (*cp++ != '.')
1506 return;
1507 *minorp = strtol(cp, &cp, 10);
1508 if (*cp++ != '.')
1509 return;
1510 *microp = strtol(cp, &cp, 10);
1511 }
1512 #endif
1513
1514 #ifdef DL_HP_PPA_REQ
1515 /*
1516 * Under HP-UX 10 and HP-UX 11, we can ask for the ppa
1517 */
1518
1519
1520 /*
1521 * Determine ppa number that specifies ifname.
1522 *
1523 * If the "dl_hp_ppa_info_t" doesn't have a "dl_module_id_1" member,
1524 * the code that's used here is the old code for HP-UX 10.x.
1525 *
1526 * However, HP-UX 10.20, at least, appears to have such a member
1527 * in its "dl_hp_ppa_info_t" structure, so the new code is used.
1528 * The new code didn't work on an old 10.20 system on which Rick
1529 * Jones of HP tried it, but with later patches installed, it
1530 * worked - it appears that the older system had those members but
1531 * didn't put anything in them, so, if the search by name fails, we
1532 * do the old search.
1533 *
1534 * Rick suggests that making sure your system is "up on the latest
1535 * lancommon/DLPI/driver patches" is probably a good idea; it'd fix
1536 * that problem, as well as allowing libpcap to see packets sent
1537 * from the system on which the libpcap application is being run.
1538 * (On 10.20, in addition to getting the latest patches, you need
1539 * to turn the kernel "lanc_outbound_promisc_flag" flag on with ADB;
1540 * a posting to "comp.sys.hp.hpux" at
1541 *
1542 * http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=558092266
1543 *
1544 * says that, to see the machine's outgoing traffic, you'd need to
1545 * apply the right patches to your system, and also set that variable
1546 * with:
1547
1548 echo 'lanc_outbound_promisc_flag/W1' | /usr/bin/adb -w /stand/vmunix /dev/kmem
1549
1550 * which could be put in, for example, "/sbin/init.d/lan".
1551 *
1552 * Setting the variable is not necessary on HP-UX 11.x.
1553 */
1554 static int
1555 get_dlpi_ppa(register int fd, register const char *device, register int unit,
1556 register char *ebuf)
1557 {
1558 register dl_hp_ppa_ack_t *ap;
1559 register dl_hp_ppa_info_t *ipstart, *ip;
1560 register int i;
1561 char dname[100];
1562 register u_long majdev;
1563 struct stat statbuf;
1564 dl_hp_ppa_req_t req;
1565 char buf[MAXDLBUF];
1566 char *ppa_data_buf;
1567 dl_hp_ppa_ack_t *dlp;
1568 struct strbuf ctl;
1569 int flags;
1570 int ppa;
1571
1572 memset((char *)&req, 0, sizeof(req));
1573 req.dl_primitive = DL_HP_PPA_REQ;
1574
1575 memset((char *)buf, 0, sizeof(buf));
1576 if (send_request(fd, (char *)&req, sizeof(req), "hpppa", ebuf) < 0)
1577 return (PCAP_ERROR);
1578
1579 ctl.maxlen = DL_HP_PPA_ACK_SIZE;
1580 ctl.len = 0;
1581 ctl.buf = (char *)buf;
1582
1583 flags = 0;
1584 /*
1585 * DLPI may return a big chunk of data for a DL_HP_PPA_REQ. The normal
1586 * recv_ack will fail because it set the maxlen to MAXDLBUF (8192)
1587 * which is NOT big enough for a DL_HP_PPA_REQ.
1588 *
1589 * This causes libpcap applications to fail on a system with HP-APA
1590 * installed.
1591 *
1592 * To figure out how big the returned data is, we first call getmsg
1593 * to get the small head and peek at the head to get the actual data
1594 * length, and then issue another getmsg to get the actual PPA data.
1595 */
1596 /* get the head first */
1597 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1598 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1599 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1600 return (PCAP_ERROR);
1601 }
1602
1603 dlp = (dl_hp_ppa_ack_t *)ctl.buf;
1604 if (dlp->dl_primitive != DL_HP_PPA_ACK) {
1605 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1606 "get_dlpi_ppa: hpppa unexpected primitive ack 0x%x",
1607 (bpf_u_int32)dlp->dl_primitive);
1608 return (PCAP_ERROR);
1609 }
1610
1611 if (ctl.len < DL_HP_PPA_ACK_SIZE) {
1612 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1613 "get_dlpi_ppa: hpppa ack too small (%d < %lu)",
1614 ctl.len, (unsigned long)DL_HP_PPA_ACK_SIZE);
1615 return (PCAP_ERROR);
1616 }
1617
1618 /* allocate buffer */
1619 if ((ppa_data_buf = (char *)malloc(dlp->dl_length)) == NULL) {
1620 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1621 "get_dlpi_ppa: hpppa malloc: %s", pcap_strerror(errno));
1622 return (PCAP_ERROR);
1623 }
1624 ctl.maxlen = dlp->dl_length;
1625 ctl.len = 0;
1626 ctl.buf = (char *)ppa_data_buf;
1627 /* get the data */
1628 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1629 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1630 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1631 free(ppa_data_buf);
1632 return (PCAP_ERROR);
1633 }
1634 if (ctl.len < dlp->dl_length) {
1635 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1636 "get_dlpi_ppa: hpppa ack too small (%d < %lu)",
1637 ctl.len, (unsigned long)dlp->dl_length);
1638 free(ppa_data_buf);
1639 return (PCAP_ERROR);
1640 }
1641
1642 ap = (dl_hp_ppa_ack_t *)buf;
1643 ipstart = (dl_hp_ppa_info_t *)ppa_data_buf;
1644 ip = ipstart;
1645
1646 #ifdef HAVE_HP_PPA_INFO_T_DL_MODULE_ID_1
1647 /*
1648 * The "dl_hp_ppa_info_t" structure has a "dl_module_id_1"
1649 * member that should, in theory, contain the part of the
1650 * name for the device that comes before the unit number,
1651 * and should also have a "dl_module_id_2" member that may
1652 * contain an alternate name (e.g., I think Ethernet devices
1653 * have both "lan", for "lanN", and "snap", for "snapN", with
1654 * the former being for Ethernet packets and the latter being
1655 * for 802.3/802.2 packets).
1656 *
1657 * Search for the device that has the specified name and
1658 * instance number.
1659 */
1660 for (i = 0; i < ap->dl_count; i++) {
1661 if ((strcmp((const char *)ip->dl_module_id_1, device) == 0 ||
1662 strcmp((const char *)ip->dl_module_id_2, device) == 0) &&
1663 ip->dl_instance_num == unit)
1664 break;
1665
1666 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1667 }
1668 #else
1669 /*
1670 * We don't have that member, so the search is impossible; make it
1671 * look as if the search failed.
1672 */
1673 i = ap->dl_count;
1674 #endif
1675
1676 if (i == ap->dl_count) {
1677 /*
1678 * Well, we didn't, or can't, find the device by name.
1679 *
1680 * HP-UX 10.20, whilst it has "dl_module_id_1" and
1681 * "dl_module_id_2" fields in the "dl_hp_ppa_info_t",
1682 * doesn't seem to fill them in unless the system is
1683 * at a reasonably up-to-date patch level.
1684 *
1685 * Older HP-UX 10.x systems might not have those fields
1686 * at all.
1687 *
1688 * Therefore, we'll search for the entry with the major
1689 * device number of a device with the name "/dev/<dev><unit>",
1690 * if such a device exists, as the old code did.
1691 */
1692 pcap_snprintf(dname, sizeof(dname), "/dev/%s%d", device, unit);
1693 if (stat(dname, &statbuf) < 0) {
1694 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "stat: %s: %s",
1695 dname, pcap_strerror(errno));
1696 return (PCAP_ERROR);
1697 }
1698 majdev = major(statbuf.st_rdev);
1699
1700 ip = ipstart;
1701
1702 for (i = 0; i < ap->dl_count; i++) {
1703 if (ip->dl_mjr_num == majdev &&
1704 ip->dl_instance_num == unit)
1705 break;
1706
1707 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1708 }
1709 }
1710 if (i == ap->dl_count) {
1711 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1712 "can't find /dev/dlpi PPA for %s%d", device, unit);
1713 return (PCAP_ERROR_NO_SUCH_DEVICE);
1714 }
1715 if (ip->dl_hdw_state == HDW_DEAD) {
1716 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1717 "%s%d: hardware state: DOWN\n", device, unit);
1718 free(ppa_data_buf);
1719 return (PCAP_ERROR);
1720 }
1721 ppa = ip->dl_ppa;
1722 free(ppa_data_buf);
1723 return (ppa);
1724 }
1725 #endif
1726
1727 #ifdef HAVE_HPUX9
1728 /*
1729 * Under HP-UX 9, there is no good way to determine the ppa.
1730 * So punt and read it from /dev/kmem.
1731 */
1732 static struct nlist nl[] = {
1733 #define NL_IFNET 0
1734 { "ifnet" },
1735 { "" }
1736 };
1737
1738 static char path_vmunix[] = "/hp-ux";
1739
1740 /* Determine ppa number that specifies ifname */
1741 static int
1742 get_dlpi_ppa(register int fd, register const char *ifname, register int unit,
1743 register char *ebuf)
1744 {
1745 register const char *cp;
1746 register int kd;
1747 void *addr;
1748 struct ifnet ifnet;
1749 char if_name[sizeof(ifnet.if_name) + 1];
1750
1751 cp = strrchr(ifname, '/');
1752 if (cp != NULL)
1753 ifname = cp + 1;
1754 if (nlist(path_vmunix, &nl) < 0) {
1755 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "nlist %s failed",
1756 path_vmunix);
1757 return (-1);
1758 }
1759 if (nl[NL_IFNET].n_value == 0) {
1760 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE,
1761 "could't find %s kernel symbol",
1762 nl[NL_IFNET].n_name);
1763 return (-1);
1764 }
1765 kd = open("/dev/kmem", O_RDONLY);
1766 if (kd < 0) {
1767 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "kmem open: %s",
1768 pcap_strerror(errno));
1769 return (-1);
1770 }
1771 if (dlpi_kread(kd, nl[NL_IFNET].n_value,
1772 &addr, sizeof(addr), ebuf) < 0) {
1773 close(kd);
1774 return (-1);
1775 }
1776 for (; addr != NULL; addr = ifnet.if_next) {
1777 if (dlpi_kread(kd, (off_t)addr,
1778 &ifnet, sizeof(ifnet), ebuf) < 0 ||
1779 dlpi_kread(kd, (off_t)ifnet.if_name,
1780 if_name, sizeof(ifnet.if_name), ebuf) < 0) {
1781 (void)close(kd);
1782 return (-1);
1783 }
1784 if_name[sizeof(ifnet.if_name)] = '\0';
1785 if (strcmp(if_name, ifname) == 0 && ifnet.if_unit == unit)
1786 return (ifnet.if_index);
1787 }
1788
1789 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "Can't find %s", ifname);
1790 return (-1);
1791 }
1792
1793 static int
1794 dlpi_kread(register int fd, register off_t addr,
1795 register void *buf, register u_int len, register char *ebuf)
1796 {
1797 register int cc;
1798
1799 if (lseek(fd, addr, SEEK_SET) < 0) {
1800 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "lseek: %s",
1801 pcap_strerror(errno));
1802 return (-1);
1803 }
1804 cc = read(fd, buf, len);
1805 if (cc < 0) {
1806 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "read: %s",
1807 pcap_strerror(errno));
1808 return (-1);
1809 } else if (cc != len) {
1810 pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "short read (%d != %d)", cc,
1811 len);
1812 return (-1);
1813 }
1814 return (cc);
1815 }
1816 #endif
1817
1818 pcap_t *
1819 pcap_create_interface(const char *device _U_, char *ebuf)
1820 {
1821 pcap_t *p;
1822 #ifdef DL_HP_RAWDLS
1823 struct pcap_dlpi *pd;
1824 #endif
1825
1826 p = pcap_create_common(ebuf, sizeof (struct pcap_dlpi));
1827 if (p == NULL)
1828 return (NULL);
1829
1830 #ifdef DL_HP_RAWDLS
1831 pd = p->priv;
1832 pd->send_fd = -1; /* it hasn't been opened yet */
1833 #endif
1834
1835 p->activate_op = pcap_activate_dlpi;
1836 return (p);
1837 }
1838