#include <sys/socket.h>
#include <sys/sysctl.h>
#include <sys/time.h>
#include <sys/uio.h>
#include <netinet/in.h>
#include <netinet/ip.h>
#include <netinet/ip6.h>
#include <netinet/ip_icmp.h>
#include <netinet/icmp6.h>
#include <netinet/udp.h>
#include <arpa/inet.h>
#include <err.h>
#include <errno.h>
#include <event.h>
#include <limits.h>
#include <netdb.h>
#include <pwd.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include "traceroute.h"
int32_t sec_perturb;
int32_t usec_perturb;
u_char packet[512];
u_char *outpacket;
int rcvsock;
int sndsock;
int rcvhlim;
struct in6_pktinfo *rcvpktinfo;
int datalen;
char *hostname;
u_int16_t srcport;
void usage(void);
#define TRACEROUTE_USER "_traceroute"
void sock_read(int, short, void *);
void send_timer(int, short, void *);
struct tr_conf *conf;
struct tr_result *tr_results;
struct sockaddr_in from4, to4;
struct sockaddr_in6 from6, to6;
struct sockaddr *from, *to;
struct msghdr rcvmhdr;
struct event timer_ev;
int v6flag;
int *waiting_ttls;
int last_tos = 0;
int
main(int argc, char *argv[])
{
int mib[4] = { CTL_NET, PF_INET, IPPROTO_IP, IPCTL_DEFTTL };
char hbuf[NI_MAXHOST];
struct addrinfo hints, *res;
struct ip *ip = NULL;
struct iovec rcviov[2];
static u_char *rcvcmsgbuf;
struct passwd *pw;
struct event sock_ev;
struct timeval tv = {0, 0};
long l;
socklen_t len;
size_t size;
int ch;
int on = 1;
int error;
int headerlen;
int i;
int packetlen;
int rcvcmsglen;
int rcvsock4, rcvsock6;
int sndsock4, sndsock6;
u_int32_t tmprnd;
int v4sock_errno, v6sock_errno;
char *dest;
const char *errstr;
uid_t ouid, uid;
gid_t gid;
if (unveil("/", "r") == -1)
err(1, "unveil /");
if (unveil(NULL, NULL) == -1)
err(1, "unveil");
if ((conf = calloc(1, sizeof(*conf))) == NULL)
err(1,NULL);
conf->first_ttl = 1;
conf->proto = IPPROTO_UDP;
conf->max_ttl = IPDEFTTL;
conf->nprobes = 3;
conf->expected_responses = 2;
conf->port = 32768+666;
memset(&rcvmhdr, 0, sizeof(rcvmhdr));
memset(&rcviov, 0, sizeof(rcviov));
rcvsock4 = rcvsock6 = sndsock4 = sndsock6 = -1;
v4sock_errno = v6sock_errno = 0;
conf->waittime = 3 * 1000;
if ((rcvsock6 = socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6)) == -1)
v6sock_errno = errno;
else if ((sndsock6 = socket(AF_INET6, SOCK_DGRAM, 0)) == -1)
v6sock_errno = errno;
if ((rcvsock4 = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP)) == -1)
v4sock_errno = errno;
else if ((sndsock4 = socket(AF_INET, SOCK_RAW, IPPROTO_RAW)) == -1)
v4sock_errno = errno;
ouid = getuid();
if (ouid == 0 && (pw = getpwnam(TRACEROUTE_USER)) != NULL) {
uid = pw->pw_uid;
gid = pw->pw_gid;
} else {
uid = getuid();
gid = getgid();
}
if (ouid && (setgroups(1, &gid) ||
setresgid(gid, gid, gid) ||
setresuid(uid, uid, uid)))
err(1, "unable to revoke privs");
if (strcmp("traceroute6", __progname) == 0) {
v6flag = 1;
if (v6sock_errno != 0)
errc(5, v6sock_errno, rcvsock6 < 0 ? "socket(ICMPv6)" :
"socket(SOCK_DGRAM)");
rcvsock = rcvsock6;
sndsock = sndsock6;
if (rcvsock4 >= 0)
close(rcvsock4);
if (sndsock4 >= 0)
close(sndsock4);
} else {
if (v4sock_errno != 0)
errc(5, v4sock_errno, rcvsock4 < 0 ? "icmp socket" :
"raw socket");
rcvsock = rcvsock4;
sndsock = sndsock4;
if (rcvsock6 >= 0)
close(rcvsock6);
if (sndsock6 >= 0)
close(sndsock6);
}
if (v6flag) {
mib[1] = PF_INET6;
mib[2] = IPPROTO_IPV6;
mib[3] = IPV6CTL_DEFHLIM;
if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_RECVPKTINFO, &on,
sizeof(on)) == -1)
err(1, "setsockopt(IPV6_RECVPKTINFO)");
if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on,
sizeof(on)) == -1)
err(1, "setsockopt(IPV6_RECVHOPLIMIT)");
}
size = sizeof(i);
if (sysctl(mib, sizeof(mib)/sizeof(mib[0]), &i, &size, NULL, 0) == -1)
err(1, "sysctl");
conf->max_ttl = i;
while ((ch = getopt(argc, argv, v6flag ? "ADdf:Ilm:np:q:Ss:t:w:vV:" :
"ADdf:g:Ilm:nP:p:q:Ss:t:V:vw:x")) != -1)
switch (ch) {
case 'A':
if (!conf->Aflag) {
conf->Aflag = 1;
conf->expected_responses++;
}
break;
case 'd':
conf->dflag = 1;
break;
case 'D':
conf->dump = 1;
break;
case 'f':
conf->first_ttl = strtonum(optarg, 1, conf->max_ttl,
&errstr);
if (errstr)
errx(1, "min ttl must be 1 to %u.",
conf->max_ttl);
break;
case 'g':
if (conf->lsrr >= MAX_LSRR)
errx(1, "too many gateways; max %d", MAX_LSRR);
memset(&hints, 0, sizeof(hints));
hints.ai_family = AF_INET;
if (getaddrinfo(optarg, NULL, &hints, &res) != 0)
errx(1, "unknown host %s", optarg);
conf->gateway[conf->lsrr] =
((struct sockaddr_in *)res->ai_addr)->sin_addr;
freeaddrinfo(res);
if (++conf->lsrr == 1)
conf->lsrrlen = 4;
conf->lsrrlen += 4;
break;
case 'I':
if (conf->protoset)
errx(1, "protocol already set with -P");
conf->protoset = 1;
conf->proto = IPPROTO_ICMP;
break;
case 'l':
conf->ttl_flag = 1;
break;
case 'm':
conf->max_ttl = strtonum(optarg, conf->first_ttl,
MAXTTL, &errstr);
if (errstr)
errx(1, "max ttl must be %u to %u.",
conf->first_ttl, MAXTTL);
break;
case 'n':
if (!conf->nflag) {
conf->nflag = 1;
conf->expected_responses--;
}
break;
case 'p':
conf->port = strtonum(optarg, 1, 65535, &errstr);
if (errstr)
errx(1, "port must be >0, <65536.");
break;
case 'P':
if (conf->protoset)
errx(1, "protocol already set with -I");
conf->protoset = 1;
conf->proto = strtonum(optarg, 1, IPPROTO_MAX - 1,
&errstr);
if (errstr) {
struct protoent *pent;
pent = getprotobyname(optarg);
if (pent)
conf->proto = pent->p_proto;
else
errx(1, "proto must be >=1, or a "
"name.");
}
break;
case 'q':
conf->nprobes = strtonum(optarg, 1, 1024, &errstr);
if (errstr)
errx(1, "nprobes must be >0.");
break;
case 's':
conf->source = optarg;
break;
case 'S':
conf->sump = 1;
break;
case 't':
if (!map_tos(optarg, &conf->tos)) {
if (strlen(optarg) > 1 && optarg[0] == '0' &&
optarg[1] == 'x') {
char *ep;
errno = 0;
ep = NULL;
l = strtol(optarg, &ep, 16);
if (errno || !*optarg || *ep ||
l < 0 || l > 255)
errx(1, "illegal tos value %s",
optarg);
conf->tos = (int)l;
} else {
conf->tos = strtonum(optarg, 0, 255,
&errstr);
if (errstr)
errx(1, "illegal tos value %s",
optarg);
}
}
conf->tflag = 1;
last_tos = conf->tos;
break;
case 'v':
conf->verbose = 1;
break;
case 'V':
conf->rtableid = (unsigned int)strtonum(optarg, 0,
RT_TABLEID_MAX, &errstr);
if (errstr)
errx(1, "rtable value is %s: %s",
errstr, optarg);
if (setsockopt(sndsock, SOL_SOCKET, SO_RTABLE,
&conf->rtableid, sizeof(conf->rtableid)) == -1)
err(1, "setsockopt SO_RTABLE");
if (setsockopt(rcvsock, SOL_SOCKET, SO_RTABLE,
&conf->rtableid, sizeof(conf->rtableid)) == -1)
err(1, "setsockopt SO_RTABLE");
break;
case 'w':
conf->waittime = strtonum(optarg, 1, INT_MAX, &errstr);
if (errstr)
errx(1, "wait must be >=1 sec.");
conf->waittime *= 1000;
break;
case 'x':
conf->xflag = 1;
break;
default:
usage();
}
if (ouid == 0 && (setgroups(1, &gid) ||
setresgid(gid, gid, gid) ||
setresuid(uid, uid, uid)))
err(1, "unable to revoke privs");
argc -= optind;
argv += optind;
if (argc < 1 || argc > 2)
usage();
tr_results = calloc(sizeof(struct tr_result), conf->max_ttl *
conf->nprobes);
if (tr_results == NULL)
err(1, NULL);
waiting_ttls = calloc(sizeof(int), conf->max_ttl);
for (i = 0; i < conf->max_ttl; i++)
waiting_ttls[i] = conf->nprobes * conf->expected_responses;
setvbuf(stdout, NULL, _IOLBF, 0);
conf->ident = (getpid() & 0xffff) | 0x8000;
tmprnd = arc4random();
sec_perturb = (tmprnd & 0x80000000) ? -(tmprnd & 0x7ff) :
(tmprnd & 0x7ff);
usec_perturb = arc4random();
memset(&to4, 0, sizeof(to4));
memset(&to6, 0, sizeof(to6));
dest = *argv;
memset(&hints, 0, sizeof(hints));
hints.ai_family = v6flag ? PF_INET6 : PF_INET;
hints.ai_socktype = SOCK_RAW;
hints.ai_protocol = 0;
hints.ai_flags = AI_CANONNAME;
if ((error = getaddrinfo(dest, NULL, &hints, &res)))
errx(1, "%s", gai_strerror(error));
switch (res->ai_family) {
case AF_INET:
to = (struct sockaddr *)&to4;
from = (struct sockaddr *)&from4;
break;
case AF_INET6:
to = (struct sockaddr *)&to6;
from = (struct sockaddr *)&from6;
break;
default:
errx(1, "unsupported AF: %d", res->ai_family);
break;
}
memcpy(to, res->ai_addr, res->ai_addrlen);
if (!hostname) {
hostname = res->ai_canonname ? strdup(res->ai_canonname) : dest;
if (!hostname)
errx(1, "malloc");
}
if (res->ai_next) {
if (getnameinfo(res->ai_addr, res->ai_addrlen, hbuf,
sizeof(hbuf), NULL, 0, NI_NUMERICHOST) != 0)
strlcpy(hbuf, "?", sizeof(hbuf));
warnx("Warning: %s has multiple "
"addresses; using %s", hostname, hbuf);
}
freeaddrinfo(res);
if (*++argv) {
datalen = strtonum(*argv, 0, INT_MAX, &errstr);
if (errstr)
errx(1, "datalen out of range");
}
switch (to->sa_family) {
case AF_INET:
switch (conf->proto) {
case IPPROTO_UDP:
headerlen = (sizeof(struct ip) + conf->lsrrlen +
sizeof(struct udphdr) + sizeof(struct packetdata));
break;
case IPPROTO_ICMP:
headerlen = (sizeof(struct ip) + conf->lsrrlen +
sizeof(struct icmp) + sizeof(struct packetdata));
break;
default:
headerlen = (sizeof(struct ip) + conf->lsrrlen +
sizeof(struct packetdata));
}
if (datalen < 0 || datalen > IP_MAXPACKET - headerlen)
errx(1, "packet size must be 0 to %d.",
IP_MAXPACKET - headerlen);
datalen += headerlen;
if ((outpacket = calloc(1, datalen)) == NULL)
err(1, "calloc");
rcviov[0].iov_base = (caddr_t)packet;
rcviov[0].iov_len = sizeof(packet);
rcvmhdr.msg_name = (caddr_t)&from4;
rcvmhdr.msg_namelen = sizeof(from4);
rcvmhdr.msg_iov = rcviov;
rcvmhdr.msg_iovlen = 1;
rcvmhdr.msg_control = NULL;
rcvmhdr.msg_controllen = 0;
ip = (struct ip *)outpacket;
if (conf->lsrr != 0) {
u_char *p = (u_char *)(ip + 1);
*p++ = IPOPT_NOP;
*p++ = IPOPT_LSRR;
*p++ = conf->lsrrlen - 1;
*p++ = IPOPT_MINOFF;
conf->gateway[conf->lsrr] = to4.sin_addr;
for (i = 1; i <= conf->lsrr; i++) {
memcpy(p, &conf->gateway[i],
sizeof(struct in_addr));
p += sizeof(struct in_addr);
}
ip->ip_dst = conf->gateway[0];
} else
ip->ip_dst = to4.sin_addr;
ip->ip_off = htons(0);
ip->ip_hl = (sizeof(struct ip) + conf->lsrrlen) >> 2;
ip->ip_p = conf->proto;
ip->ip_v = IPVERSION;
ip->ip_tos = conf->tos;
if (setsockopt(sndsock, IPPROTO_IP, IP_HDRINCL,
&on, sizeof(on)) == -1)
err(6, "IP_HDRINCL");
if (conf->source) {
memset(&from4, 0, sizeof(from4));
from4.sin_family = AF_INET;
if (inet_pton(AF_INET, conf->source, &from4.sin_addr)
!= 1)
errx(1, "unknown host %s", conf->source);
ip->ip_src = from4.sin_addr;
if (ouid != 0 &&
(ntohl(from4.sin_addr.s_addr) & 0xff000000U) ==
0x7f000000U && (ntohl(to4.sin_addr.s_addr) &
0xff000000U) != 0x7f000000U)
errx(1, "source is on 127/8, destination is"
" not");
if (ouid && bind(sndsock, (struct sockaddr *)&from4,
sizeof(from4)) == -1)
err(1, "bind");
}
packetlen = datalen;
break;
case AF_INET6:
packetlen = sizeof(struct ip6_hdr);
switch (conf->proto) {
case IPPROTO_UDP:
headerlen = sizeof(struct packetdata);
packetlen += sizeof(struct udphdr);
break;
case IPPROTO_ICMP:
headerlen = sizeof(struct icmp6_hdr) +
sizeof(struct packetdata);
break;
default:
errx(1, "Unsupported proto: %hhu", conf->proto);
break;
}
if (datalen < 0 || datalen > IP_MAXPACKET - headerlen)
errx(1, "packet size must be 0 to %d.",
IP_MAXPACKET - headerlen);
datalen += headerlen;
packetlen += datalen;
if ((outpacket = calloc(1, datalen)) == NULL)
err(1, "calloc");
rcviov[0].iov_base = (caddr_t)packet;
rcviov[0].iov_len = sizeof(packet);
rcvmhdr.msg_name = (caddr_t)&from6;
rcvmhdr.msg_namelen = sizeof(from6);
rcvmhdr.msg_iov = rcviov;
rcvmhdr.msg_iovlen = 1;
rcvcmsglen = CMSG_SPACE(sizeof(struct in6_pktinfo)) +
CMSG_SPACE(sizeof(int));
if ((rcvcmsgbuf = malloc(rcvcmsglen)) == NULL)
errx(1, "malloc");
rcvmhdr.msg_control = (caddr_t) rcvcmsgbuf;
rcvmhdr.msg_controllen = rcvcmsglen;
if (conf->proto == IPPROTO_ICMP) {
close(sndsock);
sndsock = rcvsock;
}
memset(&from6, 0, sizeof(from6));
if (conf->source) {
memset(&hints, 0, sizeof(hints));
hints.ai_family = AF_INET6;
hints.ai_socktype = SOCK_DGRAM;
hints.ai_flags = AI_NUMERICHOST;
if ((error = getaddrinfo(conf->source, "0", &hints,
&res)))
errx(1, "%s: %s", conf->source,
gai_strerror(error));
memcpy(&from6, res->ai_addr, res->ai_addrlen);
freeaddrinfo(res);
} else {
struct sockaddr_in6 nxt;
int dummy;
nxt = to6;
nxt.sin6_port = htons(DUMMY_PORT);
if ((dummy = socket(AF_INET6, SOCK_DGRAM, 0)) == -1)
err(1, "socket");
if (conf->rtableid > 0 &&
setsockopt(dummy, SOL_SOCKET, SO_RTABLE,
&conf->rtableid, sizeof(conf->rtableid)) == -1)
err(1, "setsockopt(SO_RTABLE)");
if (connect(dummy, (struct sockaddr *)&nxt,
nxt.sin6_len) == -1)
err(1, "connect");
len = sizeof(from6);
if (getsockname(dummy, (struct sockaddr *)&from6,
&len) == -1)
err(1, "getsockname");
close(dummy);
}
from6.sin6_port = htons(0);
if (bind(sndsock, (struct sockaddr *)&from6, from6.sin6_len) == -1)
err(1, "bind sndsock");
if (conf->tflag) {
if (setsockopt(sndsock, IPPROTO_IPV6, IPV6_TCLASS,
&conf->tos, sizeof(conf->tos)) == -1)
err(6, "IPV6_TCLASS");
}
len = sizeof(from6);
if (getsockname(sndsock, (struct sockaddr *)&from6, &len) == -1)
err(1, "getsockname");
srcport = ntohs(from6.sin6_port);
break;
default:
errx(1, "unsupported AF: %d", to->sa_family);
break;
}
if (conf->dflag) {
(void) setsockopt(rcvsock, SOL_SOCKET, SO_DEBUG,
&on, sizeof(on));
(void) setsockopt(sndsock, SOL_SOCKET, SO_DEBUG,
&on, sizeof(on));
}
if (setsockopt(sndsock, SOL_SOCKET, SO_SNDBUF,
&datalen, sizeof(datalen)) == -1)
err(6, "SO_SNDBUF");
if (conf->nflag && !conf->Aflag) {
if (pledge("stdio inet", NULL) == -1)
err(1, "pledge");
} else {
if (pledge("stdio inet dns", NULL) == -1)
err(1, "pledge");
}
if (getnameinfo(to, to->sa_len, hbuf,
sizeof(hbuf), NULL, 0, NI_NUMERICHOST))
strlcpy(hbuf, "(invalid)", sizeof(hbuf));
fprintf(stderr, "%s to %s (%s)", __progname, hostname, hbuf);
if (conf->source)
fprintf(stderr, " from %s", conf->source);
fprintf(stderr, ", %u hops max, %d byte packets\n", conf->max_ttl,
packetlen);
(void) fflush(stderr);
if (conf->first_ttl > 1)
printf("Skipping %u intermediate hops\n", conf->first_ttl - 1);
event_init();
event_set(&sock_ev, rcvsock, EV_READ | EV_PERSIST, sock_read, NULL);
event_add(&sock_ev, NULL);
evtimer_set(&timer_ev, send_timer, &timer_ev);
evtimer_add(&timer_ev, &tv);
event_dispatch();
}
void
usage(void)
{
if (v6flag) {
fprintf(stderr, "usage: %s "
"[-ADdIlnSv] [-f first_hop] [-m max_hop] [-p port]\n"
"\t[-q nqueries] [-s sourceaddr] [-t toskeyword] [-V rtable] "
"[-w waittime]\n\thost [datalen]\n", __progname);
} else {
fprintf(stderr,
"usage: %s [-ADdIlnSvx] [-f first_ttl] [-g gateway_addr] "
"[-m max_ttl]\n"
"\t[-P proto] [-p port] [-q nqueries] [-s sourceaddr]\n"
"\t[-t toskeyword] "
"[-V rtable] [-w waittime] host [datalen]\n",
__progname);
}
exit(1);
}
void
sock_read(int fd, short events, void *arg)
{
struct ip *ip;
struct timeval t2, tv = {0, 0};
int pkg_ok, cc, recv_seq, recv_seq_row;
char hbuf[NI_MAXHOST];
cc = recvmsg(rcvsock, &rcvmhdr, 0);
if (cc == 0)
return;
evtimer_add(&timer_ev, &tv);
gettime(&t2);
pkg_ok = packet_ok(conf, to->sa_family, &rcvmhdr, cc, &recv_seq);
if (pkg_ok == 0)
goto out;
if (recv_seq < 0 || recv_seq >= conf->max_ttl * conf->nprobes)
goto out;
recv_seq_row = recv_seq / conf->nprobes;
if (tr_results[recv_seq].dup++)
goto out;
switch (to->sa_family) {
case AF_INET:
ip = (struct ip *)packet;
print(conf, from, cc - (ip->ip_hl << 2), inet_ntop(AF_INET,
&ip->ip_dst, hbuf, sizeof(hbuf)), &tr_results[recv_seq]);
break;
case AF_INET6:
print(conf, from, cc, rcvpktinfo ? inet_ntop(AF_INET6,
&rcvpktinfo->ipi6_addr, hbuf, sizeof(hbuf)) : "?",
&tr_results[recv_seq]);
break;
default:
errx(1, "unsupported AF: %d", to->sa_family);
}
tr_results[recv_seq].t2 = t2;
tr_results[recv_seq].resp_ttl = v6flag ? rcvhlim : ip->ip_ttl;
waiting_ttls[recv_seq_row]--;
if (pkg_ok == -2) {
if ((v6flag && rcvhlim <= 1) ||
(!v6flag && ip->ip_ttl <=1))
snprintf(tr_results[recv_seq].icmp_code,
sizeof(tr_results[recv_seq].icmp_code), "%s", " !");
tr_results[recv_seq].got_there++;
} else {
if (to->sa_family == AF_INET && conf->tflag)
check_tos(ip, &last_tos, &tr_results[recv_seq]);
if (pkg_ok != -1) {
icmp_code(to->sa_family, pkg_ok - 1,
&tr_results[recv_seq].got_there,
&tr_results[recv_seq].unreachable,
&tr_results[recv_seq]);
}
}
if (cc && ((recv_seq + 1) % conf->nprobes) == 0 &&
(conf->xflag || conf->verbose))
print_exthdr(packet, cc, &tr_results[recv_seq]);
out:
catchup_result_rows(tr_results, conf);
}
void
send_timer(int fd, short events, void *arg)
{
static int seq;
struct timeval tv = {0, 30000}, t1;
struct event *ev = arg;
int ttl;
evtimer_add(ev, &tv);
ttl = conf->first_ttl + seq / conf->nprobes;
if (ttl <= conf->max_ttl) {
gettime(&t1);
tr_results[seq].seq = seq;
tr_results[seq].row = seq / conf->nprobes;
tr_results[seq].ttl = ttl;
tr_results[seq].t1 = t1;
send_probe(conf, seq, ttl, to);
seq++;
}
catchup_result_rows(tr_results, conf);
}
