usr/src/cmd/ipf/lib/common/printstate.c

   1 /*
   2  * Copyright (C) 2002 by Darren Reed.
   3  *
   4  * See the IPFILTER.LICENCE file for details on licencing.
   5  */
   6
   7 #include "ipf.h"
   8 #include "kmem.h"
   9
  10 #define PRINTF  (void)printf
  11 #define FPRINTF (void)fprintf
  12
  13 ipstate_t *printstate(sp, opts, now)
  14 ipstate_t *sp;
  15 int opts;
  16 u_long now;
  17 {
  18         ipstate_t ips;
  19 #ifdef  IPFILTER_SYNC
  20         synclist_t ipsync;
  21 #endif
  22
  23         if (kmemcpy((char *)&ips, (u_long)sp, sizeof(ips)))
  24                 return NULL;
  25
  26         PRINTF("%s -> ", hostname(ips.is_v, &ips.is_src.in4));
  27         PRINTF("%s pass %#x pr %d state %d/%d bkt %d\n",
  28                 hostname(ips.is_v, &ips.is_dst.in4), ips.is_pass, ips.is_p,
  29                 ips.is_state[0], ips.is_state[1], ips.is_hv);
  30         PRINTF("\ttag %u ttl %lu", ips.is_tag, ips.is_die - now);
  31
  32         if (ips.is_p == IPPROTO_TCP) {
  33                 PRINTF("\n\t%hu -> %hu %x:%x %hu<<%d:%hu<<%d\n",
  34                         ntohs(ips.is_sport), ntohs(ips.is_dport),
  35                         ips.is_send, ips.is_dend,
  36                         ips.is_maxswin, ips.is_swinscale,
  37                         ips.is_maxdwin, ips.is_dwinscale);
  38                 PRINTF("\tcmsk %04x smsk %04x isc %p s0 %08x/%08x\n",
  39                         ips.is_smsk[0], ips.is_smsk[1], ips.is_isc,
  40                         ips.is_s0[0], ips.is_s0[1]);
  41                 PRINTF("\tFWD:ISN inc %x sumd %x\n",
  42                         ips.is_isninc[0], ips.is_sumd[0]);
  43                 PRINTF("\tREV:ISN inc %x sumd %x\n",
  44                         ips.is_isninc[1], ips.is_sumd[1]);
  45 #ifdef  IPFILTER_SCAN
  46                 PRINTF("\tsbuf[0] [");
  47                 printsbuf(ips.is_sbuf[0]);
  48                 PRINTF("] sbuf[1] [");
  49                 printsbuf(ips.is_sbuf[1]);
  50                 PRINTF("]\n");
  51 #endif
  52         } else if (ips.is_p == IPPROTO_UDP) {
  53                 PRINTF(" %hu -> %hu\n", ntohs(ips.is_sport),
  54                         ntohs(ips.is_dport));
  55         } else if (ips.is_p == IPPROTO_GRE) {
  56                 PRINTF(" call %hx/%hx\n", ntohs(ips.is_gre.gs_call[0]),
  57                        ntohs(ips.is_gre.gs_call[1]));
  58         } else if (ips.is_p == IPPROTO_ICMP
  59 #ifdef  USE_INET6
  60                  || ips.is_p == IPPROTO_ICMPV6
  61 #endif
  62                 )
  63                 PRINTF(" id %hu seq %hu type %d\n", ntohs(ips.is_icmp.ici_id),
  64                         ntohs(ips.is_icmp.ici_seq), ips.is_icmp.ici_type);
  65
  66 #ifdef        USE_QUAD_T
  67         PRINTF("\tforward: pkts in %qd bytes in %qd pkts out %qd bytes out %qd\n\tbackward: pkts in %qd bytes in %qd pkts out %qd bytes out %qd\n",
  68                 ips.is_pkts[0], ips.is_bytes[0],
  69                 ips.is_pkts[1], ips.is_bytes[1],
  70                 ips.is_pkts[2], ips.is_bytes[2],
  71                 ips.is_pkts[3], ips.is_bytes[3]);
  72 #else
  73         PRINTF("\tforward: pkts in %ld bytes in %ld pkts out %ld bytes out %ld\n\tbackward: pkts in %ld bytes in %ld pkts out %ld bytes out %ld\n",
  74                 ips.is_pkts[0], ips.is_bytes[0],
  75                 ips.is_pkts[1], ips.is_bytes[1],
  76                 ips.is_pkts[2], ips.is_bytes[2],
  77                 ips.is_pkts[3], ips.is_bytes[3]);
  78 #endif
  79
  80         PRINTF("\t");
  81
  82         /*
  83          * Print out bits set in the result code for the state being
  84          * kept as they would for a rule.
  85          */
  86         if (FR_ISPASS(ips.is_pass)) {
  87                 PRINTF("pass");
  88         } else if (FR_ISBLOCK(ips.is_pass)) {
  89                 PRINTF("block");
  90                 switch (ips.is_pass & FR_RETMASK)
  91                 {
  92                 case FR_RETICMP :
  93                         PRINTF(" return-icmp");
  94                         break;
  95                 case FR_FAKEICMP :
  96                         PRINTF(" return-icmp-as-dest");
  97                         break;
  98                 case FR_RETRST :
  99                         PRINTF(" return-rst");
 100                         break;
 101                 default :
 102                         break;
 103                 }
 104         } else if ((ips.is_pass & FR_LOGMASK) == FR_LOG) {
 105                         PRINTF("log");
 106                 if (ips.is_pass & FR_LOGBODY)
 107                         PRINTF(" body");
 108                 if (ips.is_pass & FR_LOGFIRST)
 109                         PRINTF(" first");
 110         } else if (FR_ISACCOUNT(ips.is_pass)) {
 111                 PRINTF("count");
 112         } else if (FR_ISPREAUTH(ips.is_pass)) {
 113                 PRINTF("preauth");
 114         } else if (FR_ISAUTH(ips.is_pass))
 115                 PRINTF("auth");
 116
 117         if (ips.is_pass & FR_OUTQUE)
 118                 PRINTF(" out");
 119         else
 120                 PRINTF(" in");
 121
 122         if ((ips.is_pass & FR_LOG) != 0) {
 123                 PRINTF(" log");
 124                 if (ips.is_pass & FR_LOGBODY)
 125                         PRINTF(" body");
 126                 if (ips.is_pass & FR_LOGFIRST)
 127                         PRINTF(" first");
 128                 if (ips.is_pass & FR_LOGORBLOCK)
 129                         PRINTF(" or-block");
 130         }
 131         if (ips.is_pass & FR_QUICK)
 132                 PRINTF(" quick");
 133         if (ips.is_pass & FR_KEEPFRAG)
 134                 PRINTF(" keep frags");
 135         /* a given; no? */
 136         if (ips.is_pass & FR_KEEPSTATE) {
 137                 PRINTF(" keep state");
 138                 if (ips.is_pass & FR_STATESYNC)
 139                         PRINTF(" ( sync )");
 140         }
 141         PRINTF("\tIPv%d", ips.is_v);
 142         PRINTF("\n");
 143
 144         PRINTF("\tpkt_flags & %x(%x) = %x,\t",
 145                 ips.is_flags & 0xf, ips.is_flags,
 146                 ips.is_flags >> 4);
 147         PRINTF("\tpkt_options & %x = %x, %x = %x \n", ips.is_optmsk[0],
 148                 ips.is_opt[0], ips.is_optmsk[1], ips.is_opt[1]);
 149         PRINTF("\tpkt_security & %x = %x, pkt_auth & %x = %x\n",
 150                 ips.is_secmsk, ips.is_sec, ips.is_authmsk,
 151                 ips.is_auth);
 152         PRINTF("\tis_flx %#x %#x %#x %#x\n", ips.is_flx[0][0], ips.is_flx[0][1],
 153                 ips.is_flx[1][0], ips.is_flx[1][1]);
 154         PRINTF("\tinterfaces: in %s[%s", getifname(ips.is_ifp[0]),
 155                 ips.is_ifname[0]);
 156         if (opts & OPT_DEBUG)
 157                 PRINTF("/%p", ips.is_ifp[0]);
 158         putchar(']');
 159         PRINTF(",%s[%s", getifname(ips.is_ifp[1]), ips.is_ifname[1]);
 160         if (opts & OPT_DEBUG)
 161                 PRINTF("/%p", ips.is_ifp[1]);
 162         putchar(']');
 163         PRINTF(" out %s[%s", getifname(ips.is_ifp[2]), ips.is_ifname[2]);
 164         if (opts & OPT_DEBUG)
 165                 PRINTF("/%p", ips.is_ifp[2]);
 166         putchar(']');
 167         PRINTF(",%s[%s", getifname(ips.is_ifp[3]), ips.is_ifname[3]);
 168         if (opts & OPT_DEBUG)
 169                 PRINTF("/%p", ips.is_ifp[3]);
 170         PRINTF("]\n");
 171
 172 #ifdef  IPFILTER_SYNC
 173         if (ips.is_sync != NULL) {
 174
 175                 if (kmemcpy((char *)&ipsync, (u_long)ips.is_sync, sizeof(ipsync))) {
 176
 177                         PRINTF("\tSync status: status could not be retrieved\n");
 178                         return NULL;
 179                 }
 180
 181                 PRINTF("\tSync status: idx %d num %d v %d pr %d rev %d\n",
 182                         ipsync.sl_idx, ipsync.sl_num, ipsync.sl_v,
 183                         ipsync.sl_p, ipsync.sl_rev);
 184
 185         } else {
 186                 PRINTF("\tSync status: not synchronized\n");
 187         }
 188 #endif
 189
 190         return ips.is_next;
 191 }