#include <sys/param.h>
#include <sys/socket.h>
#include <sys/socketvar.h>
#include <sys/sysctl.h>
#include <sys/file.h>
#include <sys/un.h>
#include <sys/unpcb.h>
#include <net/route.h>
#include <netinet/in.h>
#include <netinet/in_pcb.h>
#include <netinet/tcp.h>
#include <netinet/tcp_seq.h>
#include <netinet/tcp_var.h>
#include <arpa/inet.h>
#include <ctype.h>
#include <err.h>
#include <errno.h>
#include <kinfo.h>
#include <netdb.h>
#include <pwd.h>
#include <stdarg.h>
#include <stddef.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
static int opt_4;
static int opt_6;
static int opt_c;
static int opt_l;
static int opt_u;
static int opt_v;
static int *ports;
#define INT_BIT (sizeof(int) * CHAR_BIT)
#define SET_PORT(p) do { ports[p / INT_BIT] |= 1 << (p % INT_BIT); } while (0)
#define CHK_PORT(p) (ports[p / INT_BIT] & (1 << (p % INT_BIT)))
struct sock {
void *socket;
void *pcb;
int family;
int proto;
const char *protoname;
struct sockaddr_storage laddr;
struct sockaddr_storage faddr;
struct sock *next;
};
#define HASHSIZE 1009
static struct sock *sockhash[HASHSIZE];
static struct kinfo_file *xfiles;
static size_t nxfiles;
__printflike(1, 2)
static int
xprintf(const char *fmt, ...)
{
va_list ap;
int len;
va_start(ap, fmt);
len = vprintf(fmt, ap);
va_end(ap);
if (len < 0)
err(1, "printf()");
return (len);
}
static void
parse_ports(const char *portspec)
{
const char *p, *q;
int port, end;
if (ports == NULL)
if ((ports = calloc(65536 / INT_BIT, sizeof(int))) == NULL)
err(1, "calloc()");
p = portspec;
while (*p != '\0') {
if (!isdigit(*p))
errx(1, "syntax error in port range");
for (q = p; *q != '\0' && isdigit(*q); ++q)
;
for (port = 0; p < q; ++p)
port = port * 10 + (*p - '0');
if (port < 0 || port > 65535)
errx(1, "invalid port number");
SET_PORT(port);
switch (*p) {
case '-':
++p;
break;
case ',':
++p;
case '\0':
default:
continue;
}
for (q = p; *q != '\0' && isdigit(*q); ++q)
;
for (end = 0; p < q; ++p)
end = end * 10 + (*p - '0');
if (end < port || end > 65535)
errx(1, "invalid port number");
while (port++ < end)
SET_PORT(port);
if (*p == ',')
++p;
}
}
static void
sockaddr(struct sockaddr_storage *sa, int af, void *addr, int port)
{
struct sockaddr_in *sin4;
struct sockaddr_in6 *sin6;
bzero(sa, sizeof *sa);
switch (af) {
case AF_INET:
sin4 = (struct sockaddr_in *)sa;
sin4->sin_len = sizeof *sin4;
sin4->sin_family = af;
sin4->sin_port = port;
sin4->sin_addr = *(struct in_addr *)addr;
break;
case AF_INET6:
sin6 = (struct sockaddr_in6 *)sa;
sin6->sin6_len = sizeof *sin6;
sin6->sin6_family = af;
sin6->sin6_port = port;
sin6->sin6_addr = *(struct in6_addr *)addr;
break;
default:
abort();
}
}
static void
gather_inet(int proto)
{
uint8_t *buf, *so_begin, *so_end;
struct xinpcb *xip;
struct xtcpcb *xtp;
struct inpcb *inp;
struct xsocket *so;
struct sock *sock;
const char *varname, *protoname;
size_t len;
int hash;
switch (proto) {
case IPPROTO_TCP:
varname = "net.inet.tcp.pcblist";
protoname = "tcp";
break;
case IPPROTO_UDP:
varname = "net.inet.udp.pcblist";
protoname = "udp";
break;
case IPPROTO_DIVERT:
varname = "net.inet.divert.pcblist";
protoname = "div";
break;
default:
abort();
}
buf = NULL;
len = 0;
if (sysctlbyname(varname, NULL, &len, NULL, 0)) {
if (errno == ENOENT)
goto out;
err(1, "fetching %s", varname);
}
if ((buf = malloc(len)) == NULL)
err(1, "malloc()");
if (sysctlbyname(varname, buf, &len, NULL, 0)) {
if (errno == ENOENT)
goto out;
err(1, "fetching %s", varname);
}
for (so_begin = buf, so_end = buf + len;
so_begin + sizeof(size_t) < so_end &&
so_begin + *(size_t *)so_begin <= so_end;
so_begin = so_begin + *(size_t *)so_begin) {
switch (proto) {
case IPPROTO_TCP:
xtp = (struct xtcpcb *)so_begin;
if (xtp->xt_len != sizeof *xtp) {
warnx("struct xtcpcb size mismatch");
goto out;
}
inp = &xtp->xt_inp;
so = &xtp->xt_socket;
break;
case IPPROTO_UDP:
case IPPROTO_DIVERT:
xip = (struct xinpcb *)so_begin;
if (xip->xi_len != sizeof *xip) {
warnx("struct xinpcb size mismatch");
goto out;
}
inp = &xip->xi_inp;
so = &xip->xi_socket;
break;
default:
abort();
}
if ((INP_ISIPV4(inp) && !opt_4) || (INP_ISIPV6(inp) && !opt_6))
continue;
if (INP_ISIPV4(inp)) {
if ((inp->inp_fport == 0 && !opt_l) ||
(inp->inp_fport != 0 && !opt_c))
continue;
} else if (INP_ISIPV6(inp)) {
if ((inp->in6p_fport == 0 && !opt_l) ||
(inp->in6p_fport != 0 && !opt_c))
continue;
} else {
if (opt_v)
warnx("invalid af 0x%x", inp->inp_af);
continue;
}
if ((sock = calloc(1, sizeof *sock)) == NULL)
err(1, "malloc()");
sock->socket = so->xso_so;
sock->proto = proto;
if (INP_ISIPV4(inp)) {
sock->family = AF_INET;
sockaddr(&sock->laddr, sock->family,
&inp->inp_laddr, inp->inp_lport);
sockaddr(&sock->faddr, sock->family,
&inp->inp_faddr, inp->inp_fport);
} else if (INP_ISIPV6(inp)) {
sock->family = AF_INET6;
sockaddr(&sock->laddr, sock->family,
&inp->in6p_laddr, inp->in6p_lport);
sockaddr(&sock->faddr, sock->family,
&inp->in6p_faddr, inp->in6p_fport);
}
sock->protoname = protoname;
hash = (int)((uintptr_t)sock->socket % HASHSIZE);
sock->next = sockhash[hash];
sockhash[hash] = sock;
}
out:
free(buf);
}
static void
gather_unix(int proto)
{
uint8_t *buf, *so_begin, *so_end;
struct xunpcb *xup;
struct sock *sock;
const char *varname, *protoname;
size_t len;
int hash;
switch (proto) {
case SOCK_STREAM:
varname = "net.local.stream.pcblist";
protoname = "stream";
break;
case SOCK_DGRAM:
varname = "net.local.dgram.pcblist";
protoname = "dgram";
break;
default:
abort();
}
buf = NULL;
len = 0;
if (sysctlbyname(varname, NULL, &len, NULL, 0))
err(1, "fetching %s", varname);
if ((buf = malloc(len)) == NULL)
err(1, "malloc()");
if (sysctlbyname(varname, buf, &len, NULL, 0))
err(1, "fetching %s", varname);
for (so_begin = buf, so_end = buf + len;
so_begin + sizeof(size_t) < so_end &&
so_begin + *(size_t *)so_begin <= so_end;
so_begin = so_begin + *(size_t *)so_begin) {
xup = (struct xunpcb *)so_begin;
if (xup->xu_len != sizeof *xup) {
warnx("struct xunpcb size mismatch");
goto out;
}
if ((xup->xu_unp.unp_conn == NULL && !opt_l) ||
(xup->xu_unp.unp_conn != NULL && !opt_c))
continue;
if ((sock = calloc(1, sizeof *sock)) == NULL)
err(1, "malloc()");
sock->socket = xup->xu_socket.xso_so;
sock->pcb = xup->xu_unpp;
sock->proto = proto;
sock->family = AF_UNIX;
sock->protoname = protoname;
if (xup->xu_unp.unp_addr != NULL)
sock->laddr = *(struct sockaddr_storage *)&xup->xu_addr;
else if (xup->xu_unp.unp_conn != NULL)
*(void **)&sock->faddr = xup->xu_unp.unp_conn;
hash = (int)((uintptr_t)sock->socket % HASHSIZE);
sock->next = sockhash[hash];
sockhash[hash] = sock;
}
out:
free(buf);
}
static void
getfiles(void)
{
if (kinfo_get_files(&xfiles, &nxfiles))
err(1, "kinfo_get_files");
}
static void
printproto(int width, int af, const char *protoname)
{
int n;
switch (af) {
case AF_INET:
case AF_INET6:
n = xprintf("%s%c", protoname, af == AF_INET ? '4' : '6');
break;
default:
n = xprintf("%s", protoname);
break;
}
if (width > 0 && width > n)
xprintf("%*s", width - n, "");
}
static void
printaddr(int width, int af, struct sockaddr_storage *ss)
{
char addrstr[INET6_ADDRSTRLEN] = { '\0', '\0' };
struct sockaddr_un *sun;
void *addr;
int port, n;
if (af == AF_UNIX) {
sun = (struct sockaddr_un *)ss;
n = sun->sun_len - offsetof(struct sockaddr_un, sun_path);
xprintf("%.*s", n, sun->sun_path);
if (width > 0 && width > n)
xprintf("%*s", width - n, "");
return;
}
switch (af) {
case AF_INET:
addr = &((struct sockaddr_in *)ss)->sin_addr;
if (inet_lnaof(*(struct in_addr *)addr) == INADDR_ANY)
addrstr[0] = '*';
port = ntohs(((struct sockaddr_in *)ss)->sin_port);
break;
case AF_INET6:
addr = &((struct sockaddr_in6 *)ss)->sin6_addr;
if (IN6_IS_ADDR_UNSPECIFIED((struct in6_addr *)addr))
addrstr[0] = '*';
port = ntohs(((struct sockaddr_in6 *)ss)->sin6_port);
break;
default:
abort();
}
if (addrstr[0] == '\0')
inet_ntop(af, addr, addrstr, sizeof addrstr);
if (port == 0)
n = xprintf("%s:*", addrstr);
else
n = xprintf("%s:%d", addrstr, port);
if (width > 0 && width > n)
xprintf("%*s", width - n, "");
}
static const char *
getprocname(pid_t pid)
{
static struct kinfo_proc proc;
size_t len;
int mib[4];
mib[0] = CTL_KERN;
mib[1] = KERN_PROC;
mib[2] = KERN_PROC_PID;
mib[3] = (int)pid;
len = sizeof proc;
if (sysctl(mib, 4, &proc, &len, NULL, 0) == -1) {
warn("sysctl()");
return ("??");
}
return (proc.kp_comm);
}
static int
check_ports(struct sock *s)
{
int port;
if (ports == NULL)
return (1);
if ((s->family != AF_INET) && (s->family != AF_INET6))
return (1);
if (s->family == AF_INET)
port = ntohs(((struct sockaddr_in *)(&s->laddr))->sin_port);
else
port = ntohs(((struct sockaddr_in6 *)(&s->laddr))->sin6_port);
if (CHK_PORT(port))
return (1);
if (s->family == AF_INET)
port = ntohs(((struct sockaddr_in *)(&s->faddr))->sin_port);
else
port = ntohs(((struct sockaddr_in6 *)(&s->faddr))->sin6_port);
if (CHK_PORT(port))
return (1);
return (0);
}
static void
display(void)
{
struct passwd *pwd;
struct kinfo_file *xf;
struct sock *s;
void *p;
int hash, n;
printf("%-8s %-10s %6s %5s %-6s %-21s %-21s\n",
"USER", "COMMAND", "PID", "FD", "PROTO",
"LOCAL ADDRESS", "FOREIGN ADDRESS");
setpassent(1);
for (xf = xfiles, n = 0; n < (int)nxfiles; ++n, ++xf) {
if (xf->f_data == NULL)
continue;
hash = (int)((uintptr_t)xf->f_data % HASHSIZE);
for (s = sockhash[hash]; s != NULL; s = s->next)
if ((void *)s->socket == xf->f_data)
break;
if (s == NULL)
continue;
if (!check_ports(s))
continue;
if ((pwd = getpwuid(xf->f_uid)) != NULL)
xprintf("%-8.8s ", pwd->pw_name);
else
xprintf("%-8lu ", (u_long)xf->f_uid);
xprintf("%-10.10s ", getprocname(xf->f_pid));
xprintf("%6lu ", (u_long)xf->f_pid);
xprintf("%5d ", xf->f_fd);
printproto(6, s->family, s->protoname);
xprintf(" ");
switch (s->family) {
case AF_INET:
case AF_INET6:
printaddr(21, s->family, &s->laddr);
xprintf(" ");
printaddr(0, s->family, &s->faddr);
break;
case AF_UNIX:
if (s->laddr.ss_len > 0) {
printaddr(0, s->family, &s->laddr);
break;
}
p = *(void **)&s->faddr;
if (p == NULL) {
xprintf("(not connected)");
break;
}
xprintf("-> ");
for (hash = 0; hash < HASHSIZE; ++hash) {
for (s = sockhash[hash]; s != NULL; s = s->next)
if (s->pcb == p)
break;
if (s != NULL)
break;
}
if (s == NULL || s->laddr.ss_len == 0)
xprintf("??");
else
printaddr(0, s->family, &s->laddr);
break;
default:
abort();
}
xprintf("\n");
}
}
static void
usage(void)
{
fprintf(stderr, "Usage: sockstat [-46clu] [-p ports]\n");
exit(1);
}
int
main(int argc, char *argv[])
{
int o;
while ((o = getopt(argc, argv, "46clp:uv")) != -1)
switch (o) {
case '4':
opt_4 = 1;
break;
case '6':
opt_6 = 1;
break;
case 'c':
opt_c = 1;
break;
case 'l':
opt_l = 1;
break;
case 'p':
parse_ports(optarg);
break;
case 'u':
opt_u = 1;
break;
case 'v':
++opt_v;
break;
default:
usage();
}
argc -= optind;
argv += optind;
if (argc > 0)
usage();
if (!opt_4 && !opt_6 && !opt_u)
opt_4 = opt_6 = opt_u = 1;
if (!opt_c && !opt_l)
opt_c = opt_l = 1;
if (opt_4 || opt_6) {
gather_inet(IPPROTO_TCP);
gather_inet(IPPROTO_UDP);
gather_inet(IPPROTO_DIVERT);
}
if (opt_u) {
gather_unix(SOCK_STREAM);
gather_unix(SOCK_DGRAM);
}
getfiles();
display();
exit(0);
}
