2005-01-07 01:45:51 +00:00
|
|
|
/*-
|
1994-05-24 10:09:53 +00:00
|
|
|
* Copyright (c) 1982, 1989, 1993
|
|
|
|
* The Regents of the University of California. All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions
|
|
|
|
* are met:
|
|
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer.
|
|
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
|
|
* documentation and/or other materials provided with the distribution.
|
|
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
|
|
* may be used to endorse or promote products derived from this software
|
|
|
|
* without specific prior written permission.
|
|
|
|
*
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
* SUCH DAMAGE.
|
|
|
|
*
|
|
|
|
* @(#)if_ethersubr.c 8.1 (Berkeley) 6/10/93
|
1999-08-28 01:08:13 +00:00
|
|
|
* $FreeBSD$
|
1994-05-24 10:09:53 +00:00
|
|
|
*/
|
|
|
|
|
1998-01-09 00:51:57 +00:00
|
|
|
#include "opt_atalk.h"
|
1998-01-08 23:42:31 +00:00
|
|
|
#include "opt_inet.h"
|
1999-12-07 17:39:16 +00:00
|
|
|
#include "opt_inet6.h"
|
1997-12-15 20:31:25 +00:00
|
|
|
#include "opt_ipx.h"
|
2002-07-31 16:22:02 +00:00
|
|
|
#include "opt_mac.h"
|
1999-10-21 09:06:11 +00:00
|
|
|
#include "opt_netgraph.h"
|
2005-02-22 13:04:05 +00:00
|
|
|
#include "opt_carp.h"
|
1997-12-15 20:31:25 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
#include <sys/param.h>
|
|
|
|
#include <sys/systm.h>
|
|
|
|
#include <sys/kernel.h>
|
|
|
|
#include <sys/malloc.h>
|
2004-05-30 17:57:46 +00:00
|
|
|
#include <sys/module.h>
|
1994-05-24 10:09:53 +00:00
|
|
|
#include <sys/mbuf.h>
|
2001-02-18 17:54:52 +00:00
|
|
|
#include <sys/random.h>
|
1994-05-24 10:09:53 +00:00
|
|
|
#include <sys/socket.h>
|
1997-03-24 11:33:46 +00:00
|
|
|
#include <sys/sockio.h>
|
1995-12-20 21:53:53 +00:00
|
|
|
#include <sys/sysctl.h>
|
1994-05-24 10:09:53 +00:00
|
|
|
|
|
|
|
#include <net/if.h>
|
2004-06-24 10:58:08 +00:00
|
|
|
#include <net/if_arp.h>
|
1994-05-24 10:09:53 +00:00
|
|
|
#include <net/netisr.h>
|
|
|
|
#include <net/route.h>
|
|
|
|
#include <net/if_llc.h>
|
|
|
|
#include <net/if_dl.h>
|
|
|
|
#include <net/if_types.h>
|
2000-05-14 02:18:43 +00:00
|
|
|
#include <net/bpf.h>
|
2000-06-26 23:34:54 +00:00
|
|
|
#include <net/ethernet.h>
|
2005-10-14 02:38:47 +00:00
|
|
|
#include <net/if_bridgevar.h>
|
2002-11-14 23:35:06 +00:00
|
|
|
#include <net/if_vlan_var.h>
|
1994-05-24 10:09:53 +00:00
|
|
|
|
1999-11-22 02:45:11 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
1994-05-24 10:09:53 +00:00
|
|
|
#include <netinet/in.h>
|
|
|
|
#include <netinet/in_var.h>
|
|
|
|
#include <netinet/if_ether.h>
|
2002-05-13 10:37:19 +00:00
|
|
|
#include <netinet/ip_fw.h>
|
|
|
|
#include <netinet/ip_dummynet.h>
|
1998-01-08 23:42:31 +00:00
|
|
|
#endif
|
1999-11-22 02:45:11 +00:00
|
|
|
#ifdef INET6
|
|
|
|
#include <netinet6/nd6.h>
|
|
|
|
#endif
|
1994-05-24 10:09:53 +00:00
|
|
|
|
2005-02-22 13:04:05 +00:00
|
|
|
#ifdef DEV_CARP
|
|
|
|
#include <netinet/ip_carp.h>
|
|
|
|
#endif
|
|
|
|
|
1995-10-26 20:31:59 +00:00
|
|
|
#ifdef IPX
|
|
|
|
#include <netipx/ipx.h>
|
|
|
|
#include <netipx/ipx_if.h>
|
2005-03-06 22:59:40 +00:00
|
|
|
#endif
|
1999-12-13 16:24:22 +00:00
|
|
|
int (*ef_inputp)(struct ifnet*, struct ether_header *eh, struct mbuf *m);
|
2000-04-27 10:13:52 +00:00
|
|
|
int (*ef_outputp)(struct ifnet *ifp, struct mbuf **mp,
|
2000-09-30 14:33:53 +00:00
|
|
|
struct sockaddr *dst, short *tp, int *hlen);
|
1995-10-26 20:31:59 +00:00
|
|
|
|
1996-05-24 01:35:45 +00:00
|
|
|
#ifdef NETATALK
|
|
|
|
#include <netatalk/at.h>
|
|
|
|
#include <netatalk/at_var.h>
|
|
|
|
#include <netatalk/at_extern.h>
|
|
|
|
|
|
|
|
#define llc_snap_org_code llc_un.type_snap.org_code
|
|
|
|
#define llc_snap_ether_type llc_un.type_snap.ether_type
|
|
|
|
|
1998-03-18 01:40:12 +00:00
|
|
|
extern u_char at_org_code[3];
|
|
|
|
extern u_char aarp_org_code[3];
|
|
|
|
#endif /* NETATALK */
|
|
|
|
|
2006-10-22 11:52:19 +00:00
|
|
|
#include <security/mac/mac_framework.h>
|
|
|
|
|
2000-06-26 23:34:54 +00:00
|
|
|
/* netgraph node hooks for ng_ether(4) */
|
2002-11-14 23:35:06 +00:00
|
|
|
void (*ng_ether_input_p)(struct ifnet *ifp, struct mbuf **mp);
|
|
|
|
void (*ng_ether_input_orphan_p)(struct ifnet *ifp, struct mbuf *m);
|
2000-06-26 23:34:54 +00:00
|
|
|
int (*ng_ether_output_p)(struct ifnet *ifp, struct mbuf **mp);
|
|
|
|
void (*ng_ether_attach_p)(struct ifnet *ifp);
|
|
|
|
void (*ng_ether_detach_p)(struct ifnet *ifp);
|
|
|
|
|
2003-05-05 09:15:50 +00:00
|
|
|
void (*vlan_input_p)(struct ifnet *, struct mbuf *);
|
2001-09-05 21:10:28 +00:00
|
|
|
|
2005-10-14 02:38:47 +00:00
|
|
|
/* if_bridge(4) support */
|
2005-06-05 03:13:13 +00:00
|
|
|
struct mbuf *(*bridge_input_p)(struct ifnet *, struct mbuf *);
|
2005-06-10 01:25:22 +00:00
|
|
|
int (*bridge_output_p)(struct ifnet *, struct mbuf *,
|
2005-06-05 03:13:13 +00:00
|
|
|
struct sockaddr *, struct rtentry *);
|
2005-06-10 01:25:22 +00:00
|
|
|
void (*bridge_dn_p)(struct mbuf *, struct ifnet *);
|
2005-06-05 03:13:13 +00:00
|
|
|
|
2004-03-09 23:55:59 +00:00
|
|
|
static const u_char etherbroadcastaddr[ETHER_ADDR_LEN] =
|
2003-03-21 17:53:16 +00:00
|
|
|
{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
|
|
|
|
|
2002-03-19 21:54:18 +00:00
|
|
|
static int ether_resolvemulti(struct ifnet *, struct sockaddr **,
|
2002-06-23 11:19:53 +00:00
|
|
|
struct sockaddr *);
|
2003-03-21 17:53:16 +00:00
|
|
|
|
2005-06-10 16:49:24 +00:00
|
|
|
/* XXX: should be in an arp support file, not here */
|
|
|
|
MALLOC_DEFINE(M_ARPCOM, "arpcom", "802.* interface internals");
|
|
|
|
|
1999-01-31 08:17:16 +00:00
|
|
|
#define senderr(e) do { error = (e); goto bad;} while (0)
|
1994-05-24 10:09:53 +00:00
|
|
|
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2002-05-13 10:37:19 +00:00
|
|
|
int
|
|
|
|
ether_ipfw_chk(struct mbuf **m0, struct ifnet *dst,
|
2002-11-14 23:35:06 +00:00
|
|
|
struct ip_fw **rule, int shared);
|
2002-05-13 10:37:19 +00:00
|
|
|
static int ether_ipfw;
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
2002-05-13 10:37:19 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
/*
|
|
|
|
* Ethernet output routine.
|
|
|
|
* Encapsulate a packet of type family for the local net.
|
|
|
|
* Use trailer local net encapsulation if enough data in first
|
|
|
|
* packet leaves a multiple of 512 bytes of data in remainder.
|
|
|
|
*/
|
|
|
|
int
|
2003-10-23 13:49:10 +00:00
|
|
|
ether_output(struct ifnet *ifp, struct mbuf *m,
|
|
|
|
struct sockaddr *dst, struct rtentry *rt0)
|
1994-05-24 10:09:53 +00:00
|
|
|
{
|
|
|
|
short type;
|
This commit does two things:
1. rt_check() cleanup:
rt_check() is only necessary for some address families to gain access
to the corresponding arp entry, so call it only in/near the *resolve()
routines where it is actually used -- at the moment this is
arpresolve(), nd6_storelladdr() (the call is embedded here),
and atmresolve() (the call is just before atmresolve to reduce
the number of changes).
This change will make it a lot easier to decouple the arp table
from the routing table.
There is an extra call to rt_check() in if_iso88025subr.c to
determine the routing info length. I have left it alone for
the time being.
The interface of arpresolve() and nd6_storelladdr() now changes slightly:
+ the 'rtentry' parameter (really a hint from the upper level layer)
is now passed unchanged from *_output(), so it becomes the route
to the final destination and not to the gateway.
+ the routines will return 0 if resolution is possible, non-zero
otherwise.
+ arpresolve() returns EWOULDBLOCK in case the mbuf is being held
waiting for an arp reply -- in this case the error code is masked
in the caller so the upper layer protocol will not see a failure.
2. arpcom untangling
Where possible, use 'struct ifnet' instead of 'struct arpcom' variables,
and use the IFP2AC macro to access arpcom fields.
This mostly affects the netatalk code.
=== Detailed changes: ===
net/if_arcsubr.c
rt_check() cleanup, remove a useless variable
net/if_atmsubr.c
rt_check() cleanup
net/if_ethersubr.c
rt_check() cleanup, arpcom untangling
net/if_fddisubr.c
rt_check() cleanup, arpcom untangling
net/if_iso88025subr.c
rt_check() cleanup
netatalk/aarp.c
arpcom untangling, remove a block of duplicated code
netatalk/at_extern.h
arpcom untangling
netinet/if_ether.c
rt_check() cleanup (change arpresolve)
netinet6/nd6.c
rt_check() cleanup (change nd6_storelladdr)
2004-04-25 09:24:52 +00:00
|
|
|
int error, hdrcmplt = 0;
|
2003-10-23 15:09:34 +00:00
|
|
|
u_char esrc[ETHER_ADDR_LEN], edst[ETHER_ADDR_LEN];
|
2003-03-03 00:21:52 +00:00
|
|
|
struct ether_header *eh;
|
2005-12-22 12:16:20 +00:00
|
|
|
int loop_copy = 1;
|
2003-10-12 20:51:26 +00:00
|
|
|
int hlen; /* link layer header length */
|
1994-05-24 10:09:53 +00:00
|
|
|
|
2002-07-31 16:22:02 +00:00
|
|
|
#ifdef MAC
|
|
|
|
error = mac_check_ifnet_transmit(ifp, m);
|
|
|
|
if (error)
|
|
|
|
senderr(error);
|
|
|
|
#endif
|
|
|
|
|
2002-09-27 18:57:47 +00:00
|
|
|
if (ifp->if_flags & IFF_MONITOR)
|
|
|
|
senderr(ENETDOWN);
|
2005-08-09 10:20:02 +00:00
|
|
|
if (!((ifp->if_flags & IFF_UP) &&
|
|
|
|
(ifp->if_drv_flags & IFF_DRV_RUNNING)))
|
1994-05-24 10:09:53 +00:00
|
|
|
senderr(ENETDOWN);
|
2003-03-02 21:34:37 +00:00
|
|
|
|
1998-08-04 23:17:05 +00:00
|
|
|
hlen = ETHER_HDR_LEN;
|
1994-05-24 10:09:53 +00:00
|
|
|
switch (dst->sa_family) {
|
|
|
|
#ifdef INET
|
|
|
|
case AF_INET:
|
This commit does two things:
1. rt_check() cleanup:
rt_check() is only necessary for some address families to gain access
to the corresponding arp entry, so call it only in/near the *resolve()
routines where it is actually used -- at the moment this is
arpresolve(), nd6_storelladdr() (the call is embedded here),
and atmresolve() (the call is just before atmresolve to reduce
the number of changes).
This change will make it a lot easier to decouple the arp table
from the routing table.
There is an extra call to rt_check() in if_iso88025subr.c to
determine the routing info length. I have left it alone for
the time being.
The interface of arpresolve() and nd6_storelladdr() now changes slightly:
+ the 'rtentry' parameter (really a hint from the upper level layer)
is now passed unchanged from *_output(), so it becomes the route
to the final destination and not to the gateway.
+ the routines will return 0 if resolution is possible, non-zero
otherwise.
+ arpresolve() returns EWOULDBLOCK in case the mbuf is being held
waiting for an arp reply -- in this case the error code is masked
in the caller so the upper layer protocol will not see a failure.
2. arpcom untangling
Where possible, use 'struct ifnet' instead of 'struct arpcom' variables,
and use the IFP2AC macro to access arpcom fields.
This mostly affects the netatalk code.
=== Detailed changes: ===
net/if_arcsubr.c
rt_check() cleanup, remove a useless variable
net/if_atmsubr.c
rt_check() cleanup
net/if_ethersubr.c
rt_check() cleanup, arpcom untangling
net/if_fddisubr.c
rt_check() cleanup, arpcom untangling
net/if_iso88025subr.c
rt_check() cleanup
netatalk/aarp.c
arpcom untangling, remove a block of duplicated code
netatalk/at_extern.h
arpcom untangling
netinet/if_ether.c
rt_check() cleanup (change arpresolve)
netinet6/nd6.c
rt_check() cleanup (change nd6_storelladdr)
2004-04-25 09:24:52 +00:00
|
|
|
error = arpresolve(ifp, rt0, m, dst, edst);
|
|
|
|
if (error)
|
|
|
|
return (error == EWOULDBLOCK ? 0 : error);
|
1996-06-13 02:54:19 +00:00
|
|
|
type = htons(ETHERTYPE_IP);
|
1994-05-24 10:09:53 +00:00
|
|
|
break;
|
2004-03-14 05:24:54 +00:00
|
|
|
case AF_ARP:
|
|
|
|
{
|
|
|
|
struct arphdr *ah;
|
|
|
|
ah = mtod(m, struct arphdr *);
|
|
|
|
ah->ar_hrd = htons(ARPHRD_ETHER);
|
|
|
|
|
2005-12-22 12:16:20 +00:00
|
|
|
loop_copy = 0; /* if this is for us, don't do it */
|
2004-03-14 05:24:54 +00:00
|
|
|
|
|
|
|
switch(ntohs(ah->ar_op)) {
|
|
|
|
case ARPOP_REVREQUEST:
|
|
|
|
case ARPOP_REVREPLY:
|
|
|
|
type = htons(ETHERTYPE_REVARP);
|
|
|
|
break;
|
|
|
|
case ARPOP_REQUEST:
|
|
|
|
case ARPOP_REPLY:
|
|
|
|
default:
|
|
|
|
type = htons(ETHERTYPE_ARP);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (m->m_flags & M_BCAST)
|
|
|
|
bcopy(ifp->if_broadcastaddr, edst, ETHER_ADDR_LEN);
|
|
|
|
else
|
|
|
|
bcopy(ar_tha(ah), edst, ETHER_ADDR_LEN);
|
|
|
|
|
|
|
|
}
|
|
|
|
break;
|
1994-05-24 10:09:53 +00:00
|
|
|
#endif
|
1999-11-22 02:45:11 +00:00
|
|
|
#ifdef INET6
|
|
|
|
case AF_INET6:
|
This commit does two things:
1. rt_check() cleanup:
rt_check() is only necessary for some address families to gain access
to the corresponding arp entry, so call it only in/near the *resolve()
routines where it is actually used -- at the moment this is
arpresolve(), nd6_storelladdr() (the call is embedded here),
and atmresolve() (the call is just before atmresolve to reduce
the number of changes).
This change will make it a lot easier to decouple the arp table
from the routing table.
There is an extra call to rt_check() in if_iso88025subr.c to
determine the routing info length. I have left it alone for
the time being.
The interface of arpresolve() and nd6_storelladdr() now changes slightly:
+ the 'rtentry' parameter (really a hint from the upper level layer)
is now passed unchanged from *_output(), so it becomes the route
to the final destination and not to the gateway.
+ the routines will return 0 if resolution is possible, non-zero
otherwise.
+ arpresolve() returns EWOULDBLOCK in case the mbuf is being held
waiting for an arp reply -- in this case the error code is masked
in the caller so the upper layer protocol will not see a failure.
2. arpcom untangling
Where possible, use 'struct ifnet' instead of 'struct arpcom' variables,
and use the IFP2AC macro to access arpcom fields.
This mostly affects the netatalk code.
=== Detailed changes: ===
net/if_arcsubr.c
rt_check() cleanup, remove a useless variable
net/if_atmsubr.c
rt_check() cleanup
net/if_ethersubr.c
rt_check() cleanup, arpcom untangling
net/if_fddisubr.c
rt_check() cleanup, arpcom untangling
net/if_iso88025subr.c
rt_check() cleanup
netatalk/aarp.c
arpcom untangling, remove a block of duplicated code
netatalk/at_extern.h
arpcom untangling
netinet/if_ether.c
rt_check() cleanup (change arpresolve)
netinet6/nd6.c
rt_check() cleanup (change nd6_storelladdr)
2004-04-25 09:24:52 +00:00
|
|
|
error = nd6_storelladdr(ifp, rt0, m, dst, (u_char *)edst);
|
|
|
|
if (error)
|
|
|
|
return error;
|
1999-11-22 02:45:11 +00:00
|
|
|
type = htons(ETHERTYPE_IPV6);
|
|
|
|
break;
|
|
|
|
#endif
|
1995-10-26 20:31:59 +00:00
|
|
|
#ifdef IPX
|
|
|
|
case AF_IPX:
|
1999-12-13 16:24:22 +00:00
|
|
|
if (ef_outputp) {
|
2000-09-30 14:33:53 +00:00
|
|
|
error = ef_outputp(ifp, &m, dst, &type, &hlen);
|
2000-04-27 10:13:52 +00:00
|
|
|
if (error)
|
|
|
|
goto bad;
|
1999-12-13 16:24:22 +00:00
|
|
|
} else
|
|
|
|
type = htons(ETHERTYPE_IPX);
|
2003-10-23 13:49:10 +00:00
|
|
|
bcopy((caddr_t)&(((struct sockaddr_ipx *)dst)->sipx_addr.x_host),
|
1995-10-26 20:31:59 +00:00
|
|
|
(caddr_t)edst, sizeof (edst));
|
|
|
|
break;
|
|
|
|
#endif
|
1996-05-24 01:35:45 +00:00
|
|
|
#ifdef NETATALK
|
|
|
|
case AF_APPLETALK:
|
1998-06-12 03:48:19 +00:00
|
|
|
{
|
|
|
|
struct at_ifaddr *aa;
|
1997-10-29 00:30:52 +00:00
|
|
|
|
This commit does two things:
1. rt_check() cleanup:
rt_check() is only necessary for some address families to gain access
to the corresponding arp entry, so call it only in/near the *resolve()
routines where it is actually used -- at the moment this is
arpresolve(), nd6_storelladdr() (the call is embedded here),
and atmresolve() (the call is just before atmresolve to reduce
the number of changes).
This change will make it a lot easier to decouple the arp table
from the routing table.
There is an extra call to rt_check() in if_iso88025subr.c to
determine the routing info length. I have left it alone for
the time being.
The interface of arpresolve() and nd6_storelladdr() now changes slightly:
+ the 'rtentry' parameter (really a hint from the upper level layer)
is now passed unchanged from *_output(), so it becomes the route
to the final destination and not to the gateway.
+ the routines will return 0 if resolution is possible, non-zero
otherwise.
+ arpresolve() returns EWOULDBLOCK in case the mbuf is being held
waiting for an arp reply -- in this case the error code is masked
in the caller so the upper layer protocol will not see a failure.
2. arpcom untangling
Where possible, use 'struct ifnet' instead of 'struct arpcom' variables,
and use the IFP2AC macro to access arpcom fields.
This mostly affects the netatalk code.
=== Detailed changes: ===
net/if_arcsubr.c
rt_check() cleanup, remove a useless variable
net/if_atmsubr.c
rt_check() cleanup
net/if_ethersubr.c
rt_check() cleanup, arpcom untangling
net/if_fddisubr.c
rt_check() cleanup, arpcom untangling
net/if_iso88025subr.c
rt_check() cleanup
netatalk/aarp.c
arpcom untangling, remove a block of duplicated code
netatalk/at_extern.h
arpcom untangling
netinet/if_ether.c
rt_check() cleanup (change arpresolve)
netinet6/nd6.c
rt_check() cleanup (change nd6_storelladdr)
2004-04-25 09:24:52 +00:00
|
|
|
if ((aa = at_ifawithnet((struct sockaddr_at *)dst)) == NULL)
|
|
|
|
senderr(EHOSTUNREACH); /* XXX */
|
|
|
|
if (!aarpresolve(ifp, m, (struct sockaddr_at *)dst, edst))
|
1998-06-12 03:48:19 +00:00
|
|
|
return (0);
|
1996-05-24 01:35:45 +00:00
|
|
|
/*
|
1998-06-12 03:48:19 +00:00
|
|
|
* In the phase 2 case, need to prepend an mbuf for the llc header.
|
1996-05-24 01:35:45 +00:00
|
|
|
*/
|
|
|
|
if ( aa->aa_flags & AFA_PHASE2 ) {
|
|
|
|
struct llc llc;
|
|
|
|
|
2005-02-22 15:03:25 +00:00
|
|
|
M_PREPEND(m, LLC_SNAPFRAMELEN, M_DONTWAIT);
|
2003-08-29 19:12:18 +00:00
|
|
|
if (m == NULL)
|
|
|
|
senderr(ENOBUFS);
|
1996-05-24 01:35:45 +00:00
|
|
|
llc.llc_dsap = llc.llc_ssap = LLC_SNAP_LSAP;
|
|
|
|
llc.llc_control = LLC_UI;
|
|
|
|
bcopy(at_org_code, llc.llc_snap_org_code, sizeof(at_org_code));
|
|
|
|
llc.llc_snap_ether_type = htons( ETHERTYPE_AT );
|
2003-03-03 05:04:57 +00:00
|
|
|
bcopy(&llc, mtod(m, caddr_t), LLC_SNAPFRAMELEN);
|
1996-06-13 02:54:19 +00:00
|
|
|
type = htons(m->m_pkthdr.len);
|
2003-03-03 05:04:57 +00:00
|
|
|
hlen = LLC_SNAPFRAMELEN + ETHER_HDR_LEN;
|
1996-05-24 01:35:45 +00:00
|
|
|
} else {
|
1996-06-13 02:54:19 +00:00
|
|
|
type = htons(ETHERTYPE_AT);
|
1996-05-24 01:35:45 +00:00
|
|
|
}
|
|
|
|
break;
|
1998-06-12 03:48:19 +00:00
|
|
|
}
|
2001-09-10 01:33:03 +00:00
|
|
|
#endif /* NETATALK */
|
1994-05-24 10:09:53 +00:00
|
|
|
|
1999-10-15 05:07:00 +00:00
|
|
|
case pseudo_AF_HDRCMPLT:
|
|
|
|
hdrcmplt = 1;
|
|
|
|
eh = (struct ether_header *)dst->sa_data;
|
|
|
|
(void)memcpy(esrc, eh->ether_shost, sizeof (esrc));
|
|
|
|
/* FALLTHROUGH */
|
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
case AF_UNSPEC:
|
2005-12-22 12:16:20 +00:00
|
|
|
loop_copy = 0; /* if this is for us, don't do it */
|
1994-05-24 10:09:53 +00:00
|
|
|
eh = (struct ether_header *)dst->sa_data;
|
2003-10-23 13:49:10 +00:00
|
|
|
(void)memcpy(edst, eh->ether_dhost, sizeof (edst));
|
1994-05-24 10:09:53 +00:00
|
|
|
type = eh->ether_type;
|
|
|
|
break;
|
|
|
|
|
|
|
|
default:
|
2002-10-21 02:51:56 +00:00
|
|
|
if_printf(ifp, "can't handle af%d\n", dst->sa_family);
|
1994-05-24 10:09:53 +00:00
|
|
|
senderr(EAFNOSUPPORT);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Add local net header. If no space in first mbuf,
|
|
|
|
* allocate another.
|
|
|
|
*/
|
2003-03-03 05:04:57 +00:00
|
|
|
M_PREPEND(m, ETHER_HDR_LEN, M_DONTWAIT);
|
2003-08-29 19:12:18 +00:00
|
|
|
if (m == NULL)
|
1994-05-24 10:09:53 +00:00
|
|
|
senderr(ENOBUFS);
|
|
|
|
eh = mtod(m, struct ether_header *);
|
1995-05-09 13:35:48 +00:00
|
|
|
(void)memcpy(&eh->ether_type, &type,
|
1994-05-24 10:09:53 +00:00
|
|
|
sizeof(eh->ether_type));
|
2003-10-23 13:49:10 +00:00
|
|
|
(void)memcpy(eh->ether_dhost, edst, sizeof (edst));
|
1999-10-15 05:07:00 +00:00
|
|
|
if (hdrcmplt)
|
|
|
|
(void)memcpy(eh->ether_shost, esrc,
|
|
|
|
sizeof(eh->ether_shost));
|
|
|
|
else
|
2005-11-11 16:04:59 +00:00
|
|
|
(void)memcpy(eh->ether_shost, IF_LLADDR(ifp),
|
1999-10-15 05:07:00 +00:00
|
|
|
sizeof(eh->ether_shost));
|
1998-06-12 03:48:19 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* If a simplex interface, and the packet is being sent to our
|
|
|
|
* Ethernet address or a broadcast address, loopback a copy.
|
|
|
|
* XXX To make a simplex device behave exactly like a duplex
|
|
|
|
* device, we should copy in the case of sending to our own
|
|
|
|
* ethernet address (thus letting the original actually appear
|
|
|
|
* on the wire). However, we don't do that here for security
|
|
|
|
* reasons and compatibility with the original behavior.
|
|
|
|
*/
|
2005-12-22 12:16:20 +00:00
|
|
|
if ((ifp->if_flags & IFF_SIMPLEX) && loop_copy &&
|
2005-08-23 14:13:17 +00:00
|
|
|
m_tag_find(m, PACKET_TAG_PF_ROUTED, NULL) == NULL) {
|
2002-01-11 16:04:47 +00:00
|
|
|
int csum_flags = 0;
|
|
|
|
|
|
|
|
if (m->m_pkthdr.csum_flags & CSUM_IP)
|
|
|
|
csum_flags |= (CSUM_IP_CHECKED|CSUM_IP_VALID);
|
|
|
|
if (m->m_pkthdr.csum_flags & CSUM_DELAY_DATA)
|
|
|
|
csum_flags |= (CSUM_DATA_VALID|CSUM_PSEUDO_HDR);
|
2003-03-15 19:37:44 +00:00
|
|
|
|
2005-12-22 12:16:20 +00:00
|
|
|
if (m->m_flags & M_BCAST) {
|
2003-03-15 19:37:44 +00:00
|
|
|
struct mbuf *n;
|
1998-06-12 03:48:19 +00:00
|
|
|
|
2006-12-08 10:36:45 +00:00
|
|
|
/*
|
|
|
|
* Because if_simloop() modifies the packet, we need a
|
|
|
|
* writable copy through m_dup() instead of a readonly
|
|
|
|
* one as m_copy[m] would give us. The alternative would
|
|
|
|
* be to modify if_simloop() to handle the readonly mbuf,
|
|
|
|
* but performancewise it is mostly equivalent (trading
|
|
|
|
* extra data copying vs. extra locking).
|
|
|
|
*/
|
|
|
|
if ((n = m_dup(m, M_DONTWAIT)) != NULL) {
|
2003-04-23 18:35:40 +00:00
|
|
|
n->m_pkthdr.csum_flags |= csum_flags;
|
|
|
|
if (csum_flags & CSUM_DATA_VALID)
|
|
|
|
n->m_pkthdr.csum_data = 0xffff;
|
|
|
|
(void)if_simloop(ifp, n, dst->sa_family, hlen);
|
2003-04-23 23:45:57 +00:00
|
|
|
} else
|
|
|
|
ifp->if_iqdrops++;
|
2003-03-15 19:37:44 +00:00
|
|
|
} else if (bcmp(eh->ether_dhost, eh->ether_shost,
|
|
|
|
ETHER_ADDR_LEN) == 0) {
|
2002-01-11 16:04:47 +00:00
|
|
|
m->m_pkthdr.csum_flags |= csum_flags;
|
|
|
|
if (csum_flags & CSUM_DATA_VALID)
|
|
|
|
m->m_pkthdr.csum_data = 0xffff;
|
2000-05-24 21:16:56 +00:00
|
|
|
(void) if_simloop(ifp, m, dst->sa_family, hlen);
|
1999-01-12 12:07:00 +00:00
|
|
|
return (0); /* XXX */
|
1998-06-12 03:48:19 +00:00
|
|
|
}
|
|
|
|
}
|
2000-05-14 02:18:43 +00:00
|
|
|
|
2006-08-25 20:16:39 +00:00
|
|
|
/*
|
|
|
|
* Bridges require special output handling.
|
|
|
|
*/
|
|
|
|
if (ifp->if_bridge) {
|
|
|
|
BRIDGE_OUTPUT(ifp, m, error);
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
2005-02-22 13:04:05 +00:00
|
|
|
#ifdef DEV_CARP
|
|
|
|
if (ifp->if_carp &&
|
|
|
|
(error = carp_output(ifp, m, dst, NULL)))
|
|
|
|
goto bad;
|
|
|
|
#endif
|
|
|
|
|
2000-06-26 23:34:54 +00:00
|
|
|
/* Handle ng_ether(4) processing, if any */
|
2005-02-14 11:58:54 +00:00
|
|
|
if (IFP2AC(ifp)->ac_netgraph != NULL) {
|
2005-07-21 09:00:51 +00:00
|
|
|
KASSERT(ng_ether_output_p != NULL,
|
|
|
|
("ng_ether_output_p is NULL"));
|
2000-06-26 23:34:54 +00:00
|
|
|
if ((error = (*ng_ether_output_p)(ifp, &m)) != 0) {
|
|
|
|
bad: if (m != NULL)
|
|
|
|
m_freem(m);
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
if (m == NULL)
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Continue with link-layer output */
|
|
|
|
return ether_output_frame(ifp, m);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Ethernet link layer output routine to send a raw frame to the device.
|
|
|
|
*
|
|
|
|
* This assumes that the 14 byte Ethernet header is present and contiguous
|
|
|
|
* in the first mbuf (if BRIDGE'ing).
|
|
|
|
*/
|
|
|
|
int
|
2002-11-14 23:35:06 +00:00
|
|
|
ether_output_frame(struct ifnet *ifp, struct mbuf *m)
|
2000-06-26 23:34:54 +00:00
|
|
|
{
|
2005-10-13 21:48:27 +00:00
|
|
|
int error;
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2004-02-25 19:55:29 +00:00
|
|
|
struct ip_fw *rule = ip_dn_claim_rule(m);
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
|
2002-05-13 10:37:19 +00:00
|
|
|
if (IPFW_LOADED && ether_ipfw != 0) {
|
2002-11-14 23:35:06 +00:00
|
|
|
if (ether_ipfw_chk(&m, ifp, &rule, 0) == 0) {
|
2002-05-13 10:37:19 +00:00
|
|
|
if (m) {
|
|
|
|
m_freem(m);
|
2004-02-15 21:27:27 +00:00
|
|
|
return EACCES; /* pkt dropped */
|
2002-05-13 10:37:19 +00:00
|
|
|
} else
|
|
|
|
return 0; /* consumed e.g. in a pipe */
|
|
|
|
}
|
|
|
|
}
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
/*
|
Lock down the network interface queues. The queue mutex must be obtained
before adding/removing packets from the queue. Also, the if_obytes and
if_omcasts fields should only be manipulated under protection of the mutex.
IF_ENQUEUE, IF_PREPEND, and IF_DEQUEUE perform all necessary locking on
the queue. An IF_LOCK macro is provided, as well as the old (mutex-less)
versions of the macros in the form _IF_ENQUEUE, _IF_QFULL, for code which
needs them, but their use is discouraged.
Two new macros are introduced: IF_DRAIN() to drain a queue, and IF_HANDOFF,
which takes care of locking/enqueue, and also statistics updating/start
if necessary.
2000-11-25 07:35:38 +00:00
|
|
|
* Queue message on interface, update output statistics if
|
|
|
|
* successful, and start output if interface not yet active.
|
1994-05-24 10:09:53 +00:00
|
|
|
*/
|
2004-06-15 23:57:42 +00:00
|
|
|
IFQ_HANDOFF(ifp, m, error);
|
|
|
|
return (error);
|
1994-05-24 10:09:53 +00:00
|
|
|
}
|
|
|
|
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2002-05-13 10:37:19 +00:00
|
|
|
/*
|
|
|
|
* ipfw processing for ethernet packets (in and out).
|
|
|
|
* The second parameter is NULL from ether_demux, and ifp from
|
2005-09-27 18:10:43 +00:00
|
|
|
* ether_output_frame.
|
2002-05-13 10:37:19 +00:00
|
|
|
*/
|
|
|
|
int
|
|
|
|
ether_ipfw_chk(struct mbuf **m0, struct ifnet *dst,
|
2002-11-14 23:35:06 +00:00
|
|
|
struct ip_fw **rule, int shared)
|
2002-05-13 10:37:19 +00:00
|
|
|
{
|
2002-11-14 23:35:06 +00:00
|
|
|
struct ether_header *eh;
|
|
|
|
struct ether_header save_eh;
|
|
|
|
struct mbuf *m;
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
int i;
|
|
|
|
struct ip_fw_args args;
|
2002-05-13 10:37:19 +00:00
|
|
|
|
2002-11-20 19:07:27 +00:00
|
|
|
if (*rule != NULL && fw_one_pass)
|
2002-09-12 01:05:46 +00:00
|
|
|
return 1; /* dummynet packet, already partially processed */
|
2002-06-23 11:19:53 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* I need some amt of data to be contiguous, and in case others need
|
|
|
|
* the packet (shared==1) also better be in the first mbuf.
|
|
|
|
*/
|
2002-11-14 23:35:06 +00:00
|
|
|
m = *m0;
|
|
|
|
i = min( m->m_pkthdr.len, max_protohdr);
|
|
|
|
if ( shared || m->m_len < i) {
|
|
|
|
m = m_pullup(m, i);
|
|
|
|
if (m == NULL) {
|
|
|
|
*m0 = m;
|
2002-05-13 10:37:19 +00:00
|
|
|
return 0;
|
2002-11-14 23:35:06 +00:00
|
|
|
}
|
2002-06-23 11:19:53 +00:00
|
|
|
}
|
2002-11-14 23:35:06 +00:00
|
|
|
eh = mtod(m, struct ether_header *);
|
|
|
|
save_eh = *eh; /* save copy for restore below */
|
|
|
|
m_adj(m, ETHER_HDR_LEN); /* strip ethernet header */
|
2002-05-13 10:37:19 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
args.m = m; /* the packet we are looking at */
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
args.oif = dst; /* destination, if any */
|
|
|
|
args.rule = *rule; /* matching rule to restart */
|
2002-06-23 11:19:53 +00:00
|
|
|
args.next_hop = NULL; /* we do not support forward yet */
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
args.eh = &save_eh; /* MAC header for bridged/MAC packets */
|
2006-02-03 23:03:07 +00:00
|
|
|
args.inp = NULL; /* used by ipfw uid/gid/jail rules */
|
2002-06-23 11:19:53 +00:00
|
|
|
i = ip_fw_chk_ptr(&args);
|
2002-11-14 23:35:06 +00:00
|
|
|
m = args.m;
|
|
|
|
if (m != NULL) {
|
|
|
|
/*
|
|
|
|
* Restore Ethernet header, as needed, in case the
|
|
|
|
* mbuf chain was replaced by ipfw.
|
|
|
|
*/
|
2003-02-19 05:47:46 +00:00
|
|
|
M_PREPEND(m, ETHER_HDR_LEN, M_DONTWAIT);
|
2002-11-14 23:35:06 +00:00
|
|
|
if (m == NULL) {
|
|
|
|
*m0 = m;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
if (eh != mtod(m, struct ether_header *))
|
|
|
|
bcopy(&save_eh, mtod(m, struct ether_header *),
|
|
|
|
ETHER_HDR_LEN);
|
|
|
|
}
|
|
|
|
*m0 = m;
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
*rule = args.rule;
|
|
|
|
|
2005-01-14 09:00:46 +00:00
|
|
|
if (i == IP_FW_DENY) /* drop */
|
2002-05-13 10:37:19 +00:00
|
|
|
return 0;
|
|
|
|
|
2005-01-14 09:00:46 +00:00
|
|
|
KASSERT(m != NULL, ("ether_ipfw_chk: m is NULL"));
|
|
|
|
|
|
|
|
if (i == IP_FW_PASS) /* a PASS rule. */
|
2002-05-13 10:37:19 +00:00
|
|
|
return 1;
|
|
|
|
|
2005-01-14 09:00:46 +00:00
|
|
|
if (DUMMYNET_LOADED && (i == IP_FW_DUMMYNET)) {
|
2002-05-13 10:37:19 +00:00
|
|
|
/*
|
|
|
|
* Pass the pkt to dummynet, which consumes it.
|
|
|
|
* If shared, make a copy and keep the original.
|
|
|
|
*/
|
|
|
|
if (shared) {
|
2003-02-19 05:47:46 +00:00
|
|
|
m = m_copypacket(m, M_DONTWAIT);
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
if (m == NULL)
|
2002-05-13 10:37:19 +00:00
|
|
|
return 0;
|
|
|
|
} else {
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
|
|
|
* Pass the original to dummynet and
|
|
|
|
* nothing back to the caller
|
|
|
|
*/
|
|
|
|
*m0 = NULL ;
|
2002-05-13 10:37:19 +00:00
|
|
|
}
|
2005-01-16 11:13:18 +00:00
|
|
|
ip_dn_io_ptr(m, dst ? DN_TO_ETH_OUT: DN_TO_ETH_DEMUX, &args);
|
2002-05-13 10:37:19 +00:00
|
|
|
return 0;
|
2002-06-23 11:19:53 +00:00
|
|
|
}
|
|
|
|
/*
|
|
|
|
* XXX at some point add support for divert/forward actions.
|
|
|
|
* If none of the above matches, we have to drop the pkt.
|
|
|
|
*/
|
|
|
|
return 0;
|
2002-05-13 10:37:19 +00:00
|
|
|
}
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
2002-05-13 10:37:19 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
/*
|
2002-11-14 23:35:06 +00:00
|
|
|
* Process a received Ethernet packet; the packet is in the
|
|
|
|
* mbuf chain m with the ethernet header at the front.
|
1994-05-24 10:09:53 +00:00
|
|
|
*/
|
2002-11-14 23:35:06 +00:00
|
|
|
static void
|
|
|
|
ether_input(struct ifnet *ifp, struct mbuf *m)
|
1994-05-24 10:09:53 +00:00
|
|
|
{
|
2002-11-14 23:35:06 +00:00
|
|
|
struct ether_header *eh;
|
|
|
|
u_short etype;
|
1994-05-24 10:09:53 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
|
|
|
* Do consistency checks to verify assumptions
|
|
|
|
* made by code past this point.
|
|
|
|
*/
|
|
|
|
if ((m->m_flags & M_PKTHDR) == 0) {
|
|
|
|
if_printf(ifp, "discard frame w/o packet header\n");
|
|
|
|
ifp->if_ierrors++;
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
2003-03-03 05:04:57 +00:00
|
|
|
if (m->m_len < ETHER_HDR_LEN) {
|
2002-11-14 23:35:06 +00:00
|
|
|
/* XXX maybe should pullup? */
|
|
|
|
if_printf(ifp, "discard frame w/o leading ethernet "
|
|
|
|
"header (len %u pkt len %u)\n",
|
|
|
|
m->m_len, m->m_pkthdr.len);
|
|
|
|
ifp->if_ierrors++;
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
2000-05-14 02:18:43 +00:00
|
|
|
}
|
2002-11-14 23:35:06 +00:00
|
|
|
eh = mtod(m, struct ether_header *);
|
|
|
|
etype = ntohs(eh->ether_type);
|
|
|
|
if (m->m_pkthdr.len >
|
|
|
|
ETHER_MAX_FRAME(ifp, etype, m->m_flags & M_HASFCS)) {
|
|
|
|
if_printf(ifp, "discard oversize frame "
|
|
|
|
"(ether type %x flags %x len %u > max %lu)\n",
|
|
|
|
etype, m->m_flags, m->m_pkthdr.len,
|
|
|
|
ETHER_MAX_FRAME(ifp, etype,
|
|
|
|
m->m_flags & M_HASFCS));
|
|
|
|
ifp->if_ierrors++;
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if (m->m_pkthdr.rcvif == NULL) {
|
|
|
|
if_printf(ifp, "discard frame w/o interface pointer\n");
|
|
|
|
ifp->if_ierrors++;
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
#ifdef DIAGNOSTIC
|
|
|
|
if (m->m_pkthdr.rcvif != ifp) {
|
2003-10-31 18:32:15 +00:00
|
|
|
if_printf(ifp, "Warning, frame marked as received on %s\n",
|
|
|
|
m->m_pkthdr.rcvif->if_xname);
|
2002-11-14 23:35:06 +00:00
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2003-07-13 20:32:58 +00:00
|
|
|
#ifdef MAC
|
|
|
|
/*
|
|
|
|
* Tag the mbuf with an appropriate MAC label before any other
|
|
|
|
* consumers can get to it.
|
|
|
|
*/
|
|
|
|
mac_create_mbuf_from_ifnet(ifp, m);
|
|
|
|
#endif
|
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
|
|
|
* Give bpf a chance at the packet.
|
|
|
|
*/
|
|
|
|
BPF_MTAP(ifp, m);
|
2000-05-14 02:18:43 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
/* If the CRC is still on the packet, trim it off. */
|
|
|
|
if (m->m_flags & M_HASFCS) {
|
|
|
|
m_adj(m, -ETHER_CRC_LEN);
|
|
|
|
m->m_flags &= ~M_HASFCS;
|
|
|
|
}
|
|
|
|
|
|
|
|
ifp->if_ibytes += m->m_pkthdr.len;
|
2001-12-14 04:41:07 +00:00
|
|
|
|
2006-03-03 17:21:08 +00:00
|
|
|
if (ifp->if_flags & IFF_MONITOR) {
|
|
|
|
/*
|
|
|
|
* Interface marked for monitoring; discard packet.
|
|
|
|
*/
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2000-06-26 23:34:54 +00:00
|
|
|
/* Handle ng_ether(4) processing, if any */
|
2005-02-14 11:58:54 +00:00
|
|
|
if (IFP2AC(ifp)->ac_netgraph != NULL) {
|
2005-07-21 09:00:51 +00:00
|
|
|
KASSERT(ng_ether_input_p != NULL,
|
|
|
|
("ng_ether_input_p is NULL"));
|
2002-11-14 23:35:06 +00:00
|
|
|
(*ng_ether_input_p)(ifp, &m);
|
2000-06-26 23:34:54 +00:00
|
|
|
if (m == NULL)
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2005-06-05 03:13:13 +00:00
|
|
|
/*
|
2005-06-05 03:49:23 +00:00
|
|
|
* Tap the packet off here for a bridge. bridge_input()
|
|
|
|
* will return NULL if it has consumed the packet, otherwise
|
|
|
|
* it gets processed as normal. Note that bridge_input()
|
|
|
|
* will always return the original packet if we need to
|
|
|
|
* process it locally.
|
2005-10-07 14:14:47 +00:00
|
|
|
*
|
|
|
|
* XXX: When changing the below block, please also look
|
|
|
|
* at the src/sys/netgraph/ng_ether.c:ng_ether_rcv_upper()
|
2005-06-05 03:49:23 +00:00
|
|
|
*/
|
2005-06-05 03:13:13 +00:00
|
|
|
if (ifp->if_bridge) {
|
2005-10-14 02:38:47 +00:00
|
|
|
BRIDGE_INPUT(ifp, m);
|
2005-06-05 03:13:13 +00:00
|
|
|
if (m == NULL)
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2002-09-26 14:01:50 +00:00
|
|
|
/* First chunk of an mbuf contains good entropy */
|
2001-02-18 17:54:52 +00:00
|
|
|
if (harvest.ethernet)
|
|
|
|
random_harvest(m, 16, 3, 0, RANDOM_NET);
|
2004-10-11 10:21:34 +00:00
|
|
|
ether_demux(ifp, m);
|
2000-06-26 23:34:54 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Upper layer processing for a received Ethernet packet.
|
|
|
|
*/
|
|
|
|
void
|
2002-11-14 23:35:06 +00:00
|
|
|
ether_demux(struct ifnet *ifp, struct mbuf *m)
|
2000-06-26 23:34:54 +00:00
|
|
|
{
|
2002-11-14 23:35:06 +00:00
|
|
|
struct ether_header *eh;
|
2003-03-04 23:19:55 +00:00
|
|
|
int isr;
|
2000-06-26 23:34:54 +00:00
|
|
|
u_short ether_type;
|
|
|
|
#if defined(NETATALK)
|
2003-03-03 00:21:52 +00:00
|
|
|
struct llc *l;
|
2000-06-26 23:34:54 +00:00
|
|
|
#endif
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2004-02-25 19:55:29 +00:00
|
|
|
struct ip_fw *rule = ip_dn_claim_rule(m);
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
2004-02-18 00:04:52 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
KASSERT(ifp != NULL, ("ether_demux: NULL interface pointer"));
|
|
|
|
|
|
|
|
eh = mtod(m, struct ether_header *);
|
2004-06-24 12:31:44 +00:00
|
|
|
ether_type = ntohs(eh->ether_type);
|
2002-11-14 23:35:06 +00:00
|
|
|
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
Remove (almost all) global variables that were used to hold
packet forwarding state ("annotations") during ip processing.
The code is considerably cleaner now.
The variables removed by this change are:
ip_divert_cookie used by divert sockets
ip_fw_fwd_addr used for transparent ip redirection
last_pkt used by dynamic pipes in dummynet
Removal of the first two has been done by carrying the annotations
into volatile structs prepended to the mbuf chains, and adding
appropriate code to add/remove annotations in the routines which
make use of them, i.e. ip_input(), ip_output(), tcp_input(),
bdg_forward(), ether_demux(), ether_output_frame(), div_output().
On passing, remove a bug in divert handling of fragmented packet.
Now it is the fragment at offset 0 which sets the divert status of
the whole packet, whereas formerly it was the last incoming fragment
to decide.
Removal of last_pkt required a change in the interface of ip_fw_chk()
and dummynet_io(). On passing, use the same mechanism for dummynet
annotations and for divert/forward annotations.
option IPFIREWALL_FORWARD is effectively useless, the code to
implement it is very small and is now in by default to avoid the
obfuscation of conditionally compiled code.
NOTES:
* there is at least one global variable left, sro_fwd, in ip_output().
I am not sure if/how this can be removed.
* I have deliberately avoided gratuitous style changes in this commit
to avoid cluttering the diffs. Minor stule cleanup will likely be
necessary
* this commit only focused on the IP layer. I am sure there is a
number of global variables used in the TCP and maybe UDP stack.
* despite the number of files touched, there are absolutely no API's
or data structures changed by this commit (except the interfaces of
ip_fw_chk() and dummynet_io(), which are internal anyways), so
an MFC is quite safe and unintrusive (and desirable, given the
improved readability of the code).
MFC after: 10 days
2002-06-22 11:51:02 +00:00
|
|
|
if (rule) /* packet was already bridged */
|
2002-05-13 10:37:19 +00:00
|
|
|
goto post_stats;
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
2002-05-13 10:37:19 +00:00
|
|
|
|
2005-09-27 18:10:43 +00:00
|
|
|
if (!(ifp->if_bridge) &&
|
2005-02-18 22:31:19 +00:00
|
|
|
!((ether_type == ETHERTYPE_VLAN || m->m_flags & M_VLANTAG) &&
|
Merge the //depot/user/yar/vlan branch into CVS. It contains some collective
work by yar, thompsa and myself. The checksum offloading part also involves
work done by Mihail Balikov.
The most important changes:
o Instead of global linked list of all vlan softc use a per-trunk
hash. The size of hash is dynamically adjusted, depending on
number of entries. This changes struct ifnet, replacing counter
of vlans with a pointer to trunk structure. This change is an
improvement for setups with big number of VLANs, several interfaces
and several CPUs. It is a small regression for a setup with a single
VLAN interface.
An alternative to dynamic hash is a per-trunk static array with
4096 entries, which is a compile time option - VLAN_ARRAY. In my
experiments the array is not an improvement, probably because such
a big trunk structure doesn't fit into CPU cache.
o Introduce an UMA zone for VLAN tags. Since drivers depend on it,
the zone is declared in kern_mbuf.c, not in optional vlan(4) driver.
This change is a big improvement for any setup utilizing vlan(4).
o Use rwlock(9) instead of mutex(9) for locking. We are the first
ones to do this! :)
o Some drivers can do hardware VLAN tagging + hardware checksum
offloading. Add an infrastructure for this. Whenever vlan(4) is
attached to a parent or parent configuration is changed, the flags
on vlan(4) interface are updated.
In collaboration with: yar, thompsa
In collaboration with: Mihail Balikov <mihail.balikov interbgc.com>
2006-01-30 13:45:15 +00:00
|
|
|
ifp->if_vlantrunk != NULL)) {
|
2005-02-22 13:04:05 +00:00
|
|
|
#ifdef DEV_CARP
|
|
|
|
/*
|
2005-02-24 10:15:50 +00:00
|
|
|
* XXX: Okay, we need to call carp_forus() and - if it is for
|
|
|
|
* us jump over code that does the normal check
|
2005-11-11 16:04:59 +00:00
|
|
|
* "IF_LLADDR(ifp) == ether_dhost". The check sequence is a bit
|
2005-02-24 10:15:50 +00:00
|
|
|
* different from OpenBSD, so we jump over as few code as
|
|
|
|
* possible, to catch _all_ sanity checks. This needs
|
|
|
|
* evaluation, to see if the carp ether_dhost values break any
|
|
|
|
* of these checks!
|
2005-02-22 13:04:05 +00:00
|
|
|
*/
|
|
|
|
if (ifp->if_carp && carp_forus(ifp->if_carp, eh->ether_dhost))
|
|
|
|
goto pre_stats;
|
|
|
|
#endif
|
2002-10-16 09:00:53 +00:00
|
|
|
/*
|
|
|
|
* Discard packet if upper layers shouldn't see it because it
|
|
|
|
* was unicast to a different Ethernet address. If the driver
|
2003-10-23 13:49:10 +00:00
|
|
|
* is working properly, then this situation can only happen
|
2002-10-16 09:00:53 +00:00
|
|
|
* when the interface is in promiscuous mode.
|
2004-06-24 12:31:44 +00:00
|
|
|
*
|
|
|
|
* If VLANs are active, and this packet has a VLAN tag, do
|
|
|
|
* not drop it here but pass it on to the VLAN layer, to
|
|
|
|
* give them a chance to consider it as well (e. g. in case
|
|
|
|
* bridging is only active on a VLAN). They will drop it if
|
|
|
|
* it's undesired.
|
2002-10-16 09:00:53 +00:00
|
|
|
*/
|
|
|
|
if ((ifp->if_flags & IFF_PROMISC) != 0
|
2005-02-18 22:31:19 +00:00
|
|
|
&& !ETHER_IS_MULTICAST(eh->ether_dhost)
|
2002-10-16 09:00:53 +00:00
|
|
|
&& bcmp(eh->ether_dhost,
|
2005-11-11 16:04:59 +00:00
|
|
|
IF_LLADDR(ifp), ETHER_ADDR_LEN) != 0
|
2002-10-16 09:00:53 +00:00
|
|
|
&& (ifp->if_flags & IFF_PPROMISC) == 0) {
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
2001-02-08 17:56:49 +00:00
|
|
|
}
|
|
|
|
|
2005-02-22 13:04:05 +00:00
|
|
|
#ifdef DEV_CARP
|
|
|
|
pre_stats:
|
|
|
|
#endif
|
2000-05-14 02:18:43 +00:00
|
|
|
/* Discard packet if interface is not up */
|
1994-05-24 10:09:53 +00:00
|
|
|
if ((ifp->if_flags & IFF_UP) == 0) {
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
2003-08-19 17:04:13 +00:00
|
|
|
if (ETHER_IS_MULTICAST(eh->ether_dhost)) {
|
2003-10-23 15:09:34 +00:00
|
|
|
if (bcmp(etherbroadcastaddr, eh->ether_dhost,
|
|
|
|
sizeof(etherbroadcastaddr)) == 0)
|
1998-03-18 01:40:12 +00:00
|
|
|
m->m_flags |= M_BCAST;
|
|
|
|
else
|
|
|
|
m->m_flags |= M_MCAST;
|
|
|
|
}
|
1994-05-24 10:09:53 +00:00
|
|
|
if (m->m_flags & (M_BCAST|M_MCAST))
|
|
|
|
ifp->if_imcasts++;
|
|
|
|
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2002-05-13 10:37:19 +00:00
|
|
|
post_stats:
|
2002-06-23 11:19:53 +00:00
|
|
|
if (IPFW_LOADED && ether_ipfw != 0) {
|
2002-11-14 23:35:06 +00:00
|
|
|
if (ether_ipfw_chk(&m, NULL, &rule, 0) == 0) {
|
2002-05-13 10:37:19 +00:00
|
|
|
if (m)
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
}
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
2002-05-13 10:37:19 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
2005-02-14 08:29:42 +00:00
|
|
|
* Check to see if the device performed the VLAN decapsulation and
|
2002-11-14 23:35:06 +00:00
|
|
|
* provided us with the tag.
|
|
|
|
*/
|
2005-02-18 22:31:19 +00:00
|
|
|
if (m->m_flags & M_VLANTAG) {
|
2005-02-14 08:29:42 +00:00
|
|
|
/*
|
|
|
|
* If no VLANs are configured, drop.
|
|
|
|
*/
|
Merge the //depot/user/yar/vlan branch into CVS. It contains some collective
work by yar, thompsa and myself. The checksum offloading part also involves
work done by Mihail Balikov.
The most important changes:
o Instead of global linked list of all vlan softc use a per-trunk
hash. The size of hash is dynamically adjusted, depending on
number of entries. This changes struct ifnet, replacing counter
of vlans with a pointer to trunk structure. This change is an
improvement for setups with big number of VLANs, several interfaces
and several CPUs. It is a small regression for a setup with a single
VLAN interface.
An alternative to dynamic hash is a per-trunk static array with
4096 entries, which is a compile time option - VLAN_ARRAY. In my
experiments the array is not an improvement, probably because such
a big trunk structure doesn't fit into CPU cache.
o Introduce an UMA zone for VLAN tags. Since drivers depend on it,
the zone is declared in kern_mbuf.c, not in optional vlan(4) driver.
This change is a big improvement for any setup utilizing vlan(4).
o Use rwlock(9) instead of mutex(9) for locking. We are the first
ones to do this! :)
o Some drivers can do hardware VLAN tagging + hardware checksum
offloading. Add an infrastructure for this. Whenever vlan(4) is
attached to a parent or parent configuration is changed, the flags
on vlan(4) interface are updated.
In collaboration with: yar, thompsa
In collaboration with: Mihail Balikov <mihail.balikov interbgc.com>
2006-01-30 13:45:15 +00:00
|
|
|
if (ifp->if_vlantrunk == NULL) {
|
2005-02-14 08:29:42 +00:00
|
|
|
ifp->if_noproto++;
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
|
|
|
* vlan_input() will either recursively call ether_input()
|
|
|
|
* or drop the packet.
|
|
|
|
*/
|
|
|
|
KASSERT(vlan_input_p != NULL,("ether_input: VLAN not loaded!"));
|
|
|
|
(*vlan_input_p)(ifp, m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Handle protocols that expect to have the Ethernet header
|
|
|
|
* (and possibly FCS) intact.
|
|
|
|
*/
|
|
|
|
switch (ether_type) {
|
|
|
|
case ETHERTYPE_VLAN:
|
Merge the //depot/user/yar/vlan branch into CVS. It contains some collective
work by yar, thompsa and myself. The checksum offloading part also involves
work done by Mihail Balikov.
The most important changes:
o Instead of global linked list of all vlan softc use a per-trunk
hash. The size of hash is dynamically adjusted, depending on
number of entries. This changes struct ifnet, replacing counter
of vlans with a pointer to trunk structure. This change is an
improvement for setups with big number of VLANs, several interfaces
and several CPUs. It is a small regression for a setup with a single
VLAN interface.
An alternative to dynamic hash is a per-trunk static array with
4096 entries, which is a compile time option - VLAN_ARRAY. In my
experiments the array is not an improvement, probably because such
a big trunk structure doesn't fit into CPU cache.
o Introduce an UMA zone for VLAN tags. Since drivers depend on it,
the zone is declared in kern_mbuf.c, not in optional vlan(4) driver.
This change is a big improvement for any setup utilizing vlan(4).
o Use rwlock(9) instead of mutex(9) for locking. We are the first
ones to do this! :)
o Some drivers can do hardware VLAN tagging + hardware checksum
offloading. Add an infrastructure for this. Whenever vlan(4) is
attached to a parent or parent configuration is changed, the flags
on vlan(4) interface are updated.
In collaboration with: yar, thompsa
In collaboration with: Mihail Balikov <mihail.balikov interbgc.com>
2006-01-30 13:45:15 +00:00
|
|
|
if (ifp->if_vlantrunk != NULL) {
|
2002-11-14 23:35:06 +00:00
|
|
|
KASSERT(vlan_input_p,("ether_input: VLAN not loaded!"));
|
|
|
|
(*vlan_input_p)(ifp, m);
|
|
|
|
} else {
|
|
|
|
ifp->if_noproto++;
|
|
|
|
m_freem(m);
|
|
|
|
}
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Strip off Ethernet header. */
|
2003-03-03 05:04:57 +00:00
|
|
|
m_adj(m, ETHER_HDR_LEN);
|
2002-11-14 23:35:06 +00:00
|
|
|
|
|
|
|
/* If the CRC is still on the packet, trim it off. */
|
|
|
|
if (m->m_flags & M_HASFCS) {
|
|
|
|
m_adj(m, -ETHER_CRC_LEN);
|
|
|
|
m->m_flags &= ~M_HASFCS;
|
|
|
|
}
|
|
|
|
|
2005-11-18 16:23:26 +00:00
|
|
|
/* Reset layer specific mbuf flags to avoid confusing upper layers. */
|
|
|
|
m->m_flags &= ~(M_PROTOFLAGS);
|
|
|
|
|
1994-11-24 14:29:38 +00:00
|
|
|
switch (ether_type) {
|
1994-05-24 10:09:53 +00:00
|
|
|
#ifdef INET
|
|
|
|
case ETHERTYPE_IP:
|
2006-01-18 14:24:39 +00:00
|
|
|
if ((m = ip_fastforward(m)) == NULL)
|
1998-05-19 14:04:36 +00:00
|
|
|
return;
|
2003-03-04 23:19:55 +00:00
|
|
|
isr = NETISR_IP;
|
1994-05-24 10:09:53 +00:00
|
|
|
break;
|
|
|
|
|
|
|
|
case ETHERTYPE_ARP:
|
2001-06-15 21:00:32 +00:00
|
|
|
if (ifp->if_flags & IFF_NOARP) {
|
|
|
|
/* Discard packet if ARP is disabled on interface */
|
|
|
|
m_freem(m);
|
|
|
|
return;
|
|
|
|
}
|
2003-03-04 23:19:55 +00:00
|
|
|
isr = NETISR_ARP;
|
1994-05-24 10:09:53 +00:00
|
|
|
break;
|
|
|
|
#endif
|
1995-10-26 20:31:59 +00:00
|
|
|
#ifdef IPX
|
|
|
|
case ETHERTYPE_IPX:
|
1999-12-13 16:24:22 +00:00
|
|
|
if (ef_inputp && ef_inputp(ifp, eh, m) == 0)
|
|
|
|
return;
|
2003-03-04 23:19:55 +00:00
|
|
|
isr = NETISR_IPX;
|
1995-10-26 20:31:59 +00:00
|
|
|
break;
|
|
|
|
#endif
|
1999-11-22 02:45:11 +00:00
|
|
|
#ifdef INET6
|
|
|
|
case ETHERTYPE_IPV6:
|
2003-03-04 23:19:55 +00:00
|
|
|
isr = NETISR_IPV6;
|
1999-11-22 02:45:11 +00:00
|
|
|
break;
|
|
|
|
#endif
|
1996-05-24 01:35:45 +00:00
|
|
|
#ifdef NETATALK
|
2003-03-04 23:19:55 +00:00
|
|
|
case ETHERTYPE_AT:
|
|
|
|
isr = NETISR_ATALK1;
|
|
|
|
break;
|
|
|
|
case ETHERTYPE_AARP:
|
|
|
|
isr = NETISR_AARP;
|
|
|
|
break;
|
2001-09-10 01:33:03 +00:00
|
|
|
#endif /* NETATALK */
|
1994-05-24 10:09:53 +00:00
|
|
|
default:
|
1999-12-13 16:24:22 +00:00
|
|
|
#ifdef IPX
|
|
|
|
if (ef_inputp && ef_inputp(ifp, eh, m) == 0)
|
|
|
|
return;
|
|
|
|
#endif /* IPX */
|
2000-02-13 03:32:07 +00:00
|
|
|
#if defined(NETATALK)
|
1994-11-24 14:29:38 +00:00
|
|
|
if (ether_type > ETHERMTU)
|
2002-11-14 23:35:06 +00:00
|
|
|
goto discard;
|
1994-05-24 10:09:53 +00:00
|
|
|
l = mtod(m, struct llc *);
|
2003-03-04 23:19:55 +00:00
|
|
|
if (l->llc_dsap == LLC_SNAP_LSAP &&
|
|
|
|
l->llc_ssap == LLC_SNAP_LSAP &&
|
|
|
|
l->llc_control == LLC_UI) {
|
2004-04-18 11:01:15 +00:00
|
|
|
if (bcmp(&(l->llc_snap_org_code)[0], at_org_code,
|
2003-03-04 23:19:55 +00:00
|
|
|
sizeof(at_org_code)) == 0 &&
|
|
|
|
ntohs(l->llc_snap_ether_type) == ETHERTYPE_AT) {
|
2003-10-23 13:49:10 +00:00
|
|
|
m_adj(m, LLC_SNAPFRAMELEN);
|
2003-03-04 23:19:55 +00:00
|
|
|
isr = NETISR_ATALK2;
|
2003-10-23 13:49:10 +00:00
|
|
|
break;
|
1996-05-24 01:35:45 +00:00
|
|
|
}
|
2004-04-18 11:01:15 +00:00
|
|
|
if (bcmp(&(l->llc_snap_org_code)[0], aarp_org_code,
|
2003-03-04 23:19:55 +00:00
|
|
|
sizeof(aarp_org_code)) == 0 &&
|
|
|
|
ntohs(l->llc_snap_ether_type) == ETHERTYPE_AARP) {
|
|
|
|
m_adj(m, LLC_SNAPFRAMELEN);
|
|
|
|
isr = NETISR_AARP;
|
|
|
|
break;
|
1996-05-24 01:35:45 +00:00
|
|
|
}
|
1994-05-24 10:09:53 +00:00
|
|
|
}
|
2000-02-13 03:32:07 +00:00
|
|
|
#endif /* NETATALK */
|
2003-03-04 23:19:55 +00:00
|
|
|
goto discard;
|
1994-05-24 10:09:53 +00:00
|
|
|
}
|
2003-03-04 23:19:55 +00:00
|
|
|
netisr_dispatch(isr, m);
|
2002-11-14 23:35:06 +00:00
|
|
|
return;
|
2003-03-04 23:19:55 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
discard:
|
|
|
|
/*
|
|
|
|
* Packet is to be discarded. If netgraph is present,
|
|
|
|
* hand the packet to it for last chance processing;
|
|
|
|
* otherwise dispose of it.
|
|
|
|
*/
|
2005-02-14 11:58:54 +00:00
|
|
|
if (IFP2AC(ifp)->ac_netgraph != NULL) {
|
2005-07-21 09:00:51 +00:00
|
|
|
KASSERT(ng_ether_input_orphan_p != NULL,
|
|
|
|
("ng_ether_input_orphan_p is NULL"));
|
2002-11-14 23:35:06 +00:00
|
|
|
/*
|
|
|
|
* Put back the ethernet header so netgraph has a
|
|
|
|
* consistent view of inbound packets.
|
|
|
|
*/
|
2003-03-03 05:04:57 +00:00
|
|
|
M_PREPEND(m, ETHER_HDR_LEN, M_DONTWAIT);
|
2002-11-14 23:35:06 +00:00
|
|
|
(*ng_ether_input_orphan_p)(ifp, m);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
m_freem(m);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Convert Ethernet address to printable (loggable) representation.
|
|
|
|
* This routine is for compatibility; it's better to just use
|
|
|
|
*
|
|
|
|
* printf("%6D", <pointer to address>, ":");
|
|
|
|
*
|
|
|
|
* since there's no static buffer involved.
|
|
|
|
*/
|
|
|
|
char *
|
|
|
|
ether_sprintf(const u_char *ap)
|
|
|
|
{
|
|
|
|
static char etherbuf[18];
|
|
|
|
snprintf(etherbuf, sizeof (etherbuf), "%6D", ap, ":");
|
|
|
|
return (etherbuf);
|
1994-05-24 10:09:53 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Perform common duties while attaching to interface list
|
|
|
|
*/
|
|
|
|
void
|
2005-11-11 07:36:14 +00:00
|
|
|
ether_ifattach(struct ifnet *ifp, const u_int8_t *lla)
|
1994-05-24 10:09:53 +00:00
|
|
|
{
|
2004-07-02 19:44:59 +00:00
|
|
|
int i;
|
2003-03-03 00:21:52 +00:00
|
|
|
struct ifaddr *ifa;
|
|
|
|
struct sockaddr_dl *sdl;
|
1994-05-24 10:09:53 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
ifp->if_addrlen = ETHER_ADDR_LEN;
|
|
|
|
ifp->if_hdrlen = ETHER_HDR_LEN;
|
2001-10-11 05:37:59 +00:00
|
|
|
if_attach(ifp);
|
1994-05-24 10:09:53 +00:00
|
|
|
ifp->if_mtu = ETHERMTU;
|
2002-11-14 23:35:06 +00:00
|
|
|
ifp->if_output = ether_output;
|
|
|
|
ifp->if_input = ether_input;
|
1997-01-07 19:15:32 +00:00
|
|
|
ifp->if_resolvemulti = ether_resolvemulti;
|
1996-06-01 23:25:10 +00:00
|
|
|
if (ifp->if_baudrate == 0)
|
2002-11-14 23:35:06 +00:00
|
|
|
ifp->if_baudrate = IF_Mbps(10); /* just a default */
|
2001-10-14 20:17:53 +00:00
|
|
|
ifp->if_broadcastaddr = etherbroadcastaddr;
|
2002-11-14 23:35:06 +00:00
|
|
|
|
2005-11-11 16:04:59 +00:00
|
|
|
ifa = ifp->if_addr;
|
2001-12-10 08:09:49 +00:00
|
|
|
KASSERT(ifa != NULL, ("%s: no lladdr!\n", __func__));
|
1996-12-13 21:29:07 +00:00
|
|
|
sdl = (struct sockaddr_dl *)ifa->ifa_addr;
|
|
|
|
sdl->sdl_type = IFT_ETHER;
|
|
|
|
sdl->sdl_alen = ifp->if_addrlen;
|
2005-11-11 07:36:14 +00:00
|
|
|
bcopy(lla, LLADDR(sdl), ifp->if_addrlen);
|
2002-11-14 23:35:06 +00:00
|
|
|
|
2003-03-03 05:04:57 +00:00
|
|
|
bpfattach(ifp, DLT_EN10MB, ETHER_HDR_LEN);
|
2000-06-26 23:34:54 +00:00
|
|
|
if (ng_ether_attach_p != NULL)
|
|
|
|
(*ng_ether_attach_p)(ifp);
|
2004-03-14 07:12:25 +00:00
|
|
|
|
2004-07-02 19:44:59 +00:00
|
|
|
/* Announce Ethernet MAC address if non-zero. */
|
|
|
|
for (i = 0; i < ifp->if_addrlen; i++)
|
2005-11-11 07:36:14 +00:00
|
|
|
if (lla[i] != 0)
|
2004-07-02 19:44:59 +00:00
|
|
|
break;
|
|
|
|
if (i != ifp->if_addrlen)
|
2005-11-11 07:36:14 +00:00
|
|
|
if_printf(ifp, "Ethernet address: %6D\n", lla, ":");
|
2004-07-27 23:20:45 +00:00
|
|
|
if (debug_mpsafenet && (ifp->if_flags & IFF_NEEDSGIANT) != 0)
|
|
|
|
if_printf(ifp, "if_start running deferred for Giant\n");
|
2000-06-26 23:34:54 +00:00
|
|
|
}
|
|
|
|
|
2000-07-13 22:54:34 +00:00
|
|
|
/*
|
|
|
|
* Perform common duties while detaching an Ethernet interface
|
|
|
|
*/
|
|
|
|
void
|
2002-11-14 23:35:06 +00:00
|
|
|
ether_ifdetach(struct ifnet *ifp)
|
2000-07-13 22:54:34 +00:00
|
|
|
{
|
2005-07-21 09:00:51 +00:00
|
|
|
if (IFP2AC(ifp)->ac_netgraph != NULL) {
|
|
|
|
KASSERT(ng_ether_detach_p != NULL,
|
|
|
|
("ng_ether_detach_p is NULL"));
|
2000-07-13 22:54:34 +00:00
|
|
|
(*ng_ether_detach_p)(ifp);
|
2005-07-21 09:00:51 +00:00
|
|
|
}
|
2005-10-13 23:05:55 +00:00
|
|
|
|
2002-11-14 23:35:06 +00:00
|
|
|
bpfdetach(ifp);
|
2000-07-13 22:54:34 +00:00
|
|
|
if_detach(ifp);
|
|
|
|
}
|
|
|
|
|
1999-02-16 10:49:55 +00:00
|
|
|
SYSCTL_DECL(_net_link);
|
1995-12-20 21:53:53 +00:00
|
|
|
SYSCTL_NODE(_net_link, IFT_ETHER, ether, CTLFLAG_RW, 0, "Ethernet");
|
2004-06-24 10:58:08 +00:00
|
|
|
#if defined(INET) || defined(INET6)
|
2002-05-13 10:37:19 +00:00
|
|
|
SYSCTL_INT(_net_link_ether, OID_AUTO, ipfw, CTLFLAG_RW,
|
2002-06-23 11:19:53 +00:00
|
|
|
ðer_ipfw,0,"Pass ether pkts through firewall");
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
1996-08-04 10:54:13 +00:00
|
|
|
|
2004-06-02 21:34:14 +00:00
|
|
|
#if 0
|
|
|
|
/*
|
|
|
|
* This is for reference. We have a table-driven version
|
|
|
|
* of the little-endian crc32 generator, which is faster
|
|
|
|
* than the double-loop.
|
|
|
|
*/
|
|
|
|
uint32_t
|
|
|
|
ether_crc32_le(const uint8_t *buf, size_t len)
|
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
uint32_t crc;
|
|
|
|
int bit;
|
|
|
|
uint8_t data;
|
|
|
|
|
|
|
|
crc = 0xffffffff; /* initial value */
|
|
|
|
|
|
|
|
for (i = 0; i < len; i++) {
|
|
|
|
for (data = *buf++, bit = 0; bit < 8; bit++, data >>= 1)
|
|
|
|
carry = (crc ^ data) & 1;
|
|
|
|
crc >>= 1;
|
|
|
|
if (carry)
|
|
|
|
crc = (crc ^ ETHER_CRC_POLY_LE);
|
|
|
|
}
|
|
|
|
|
|
|
|
return (crc);
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
uint32_t
|
|
|
|
ether_crc32_le(const uint8_t *buf, size_t len)
|
|
|
|
{
|
|
|
|
static const uint32_t crctab[] = {
|
|
|
|
0x00000000, 0x1db71064, 0x3b6e20c8, 0x26d930ac,
|
|
|
|
0x76dc4190, 0x6b6b51f4, 0x4db26158, 0x5005713c,
|
|
|
|
0xedb88320, 0xf00f9344, 0xd6d6a3e8, 0xcb61b38c,
|
|
|
|
0x9b64c2b0, 0x86d3d2d4, 0xa00ae278, 0xbdbdf21c
|
|
|
|
};
|
|
|
|
size_t i;
|
|
|
|
uint32_t crc;
|
|
|
|
|
|
|
|
crc = 0xffffffff; /* initial value */
|
|
|
|
|
|
|
|
for (i = 0; i < len; i++) {
|
|
|
|
crc ^= buf[i];
|
|
|
|
crc = (crc >> 4) ^ crctab[crc & 0xf];
|
|
|
|
crc = (crc >> 4) ^ crctab[crc & 0xf];
|
|
|
|
}
|
|
|
|
|
|
|
|
return (crc);
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
uint32_t
|
|
|
|
ether_crc32_be(const uint8_t *buf, size_t len)
|
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
uint32_t crc, carry;
|
|
|
|
int bit;
|
|
|
|
uint8_t data;
|
|
|
|
|
|
|
|
crc = 0xffffffff; /* initial value */
|
|
|
|
|
|
|
|
for (i = 0; i < len; i++) {
|
|
|
|
for (data = *buf++, bit = 0; bit < 8; bit++, data >>= 1) {
|
|
|
|
carry = ((crc & 0x80000000) ? 1 : 0) ^ (data & 0x01);
|
|
|
|
crc <<= 1;
|
|
|
|
if (carry)
|
|
|
|
crc = (crc ^ ETHER_CRC_POLY_BE) | carry;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return (crc);
|
|
|
|
}
|
|
|
|
|
1996-12-10 07:29:50 +00:00
|
|
|
int
|
2003-10-23 13:49:10 +00:00
|
|
|
ether_ioctl(struct ifnet *ifp, int command, caddr_t data)
|
1996-08-04 10:54:13 +00:00
|
|
|
{
|
|
|
|
struct ifaddr *ifa = (struct ifaddr *) data;
|
|
|
|
struct ifreq *ifr = (struct ifreq *) data;
|
1996-12-10 07:29:50 +00:00
|
|
|
int error = 0;
|
1996-08-04 10:54:13 +00:00
|
|
|
|
|
|
|
switch (command) {
|
|
|
|
case SIOCSIFADDR:
|
|
|
|
ifp->if_flags |= IFF_UP;
|
|
|
|
|
|
|
|
switch (ifa->ifa_addr->sa_family) {
|
|
|
|
#ifdef INET
|
|
|
|
case AF_INET:
|
|
|
|
ifp->if_init(ifp->if_softc); /* before arpwhohas */
|
2001-10-14 20:17:53 +00:00
|
|
|
arp_ifinit(ifp, ifa);
|
1996-08-04 10:54:13 +00:00
|
|
|
break;
|
|
|
|
#endif
|
|
|
|
#ifdef IPX
|
|
|
|
/*
|
|
|
|
* XXX - This code is probably wrong
|
|
|
|
*/
|
|
|
|
case AF_IPX:
|
|
|
|
{
|
2003-03-03 00:21:52 +00:00
|
|
|
struct ipx_addr *ina = &(IA_SIPX(ifa)->sipx_addr);
|
1996-08-04 10:54:13 +00:00
|
|
|
|
|
|
|
if (ipx_nullhost(*ina))
|
|
|
|
ina->x_host =
|
1999-11-22 02:45:11 +00:00
|
|
|
*(union ipx_host *)
|
2005-11-11 16:04:59 +00:00
|
|
|
IF_LLADDR(ifp);
|
1996-08-04 10:54:13 +00:00
|
|
|
else {
|
|
|
|
bcopy((caddr_t) ina->x_host.c_host,
|
2005-11-11 16:04:59 +00:00
|
|
|
(caddr_t) IF_LLADDR(ifp),
|
2005-06-10 16:49:24 +00:00
|
|
|
ETHER_ADDR_LEN);
|
1996-08-04 10:54:13 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Set new address
|
|
|
|
*/
|
|
|
|
ifp->if_init(ifp->if_softc);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
default:
|
|
|
|
ifp->if_init(ifp->if_softc);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
|
|
|
|
case SIOCGIFADDR:
|
|
|
|
{
|
|
|
|
struct sockaddr *sa;
|
|
|
|
|
|
|
|
sa = (struct sockaddr *) & ifr->ifr_data;
|
2005-11-11 16:04:59 +00:00
|
|
|
bcopy(IF_LLADDR(ifp),
|
1996-08-04 10:54:13 +00:00
|
|
|
(caddr_t) sa->sa_data, ETHER_ADDR_LEN);
|
|
|
|
}
|
|
|
|
break;
|
1996-12-10 07:29:50 +00:00
|
|
|
|
|
|
|
case SIOCSIFMTU:
|
|
|
|
/*
|
|
|
|
* Set the interface MTU.
|
|
|
|
*/
|
|
|
|
if (ifr->ifr_mtu > ETHERMTU) {
|
|
|
|
error = EINVAL;
|
|
|
|
} else {
|
|
|
|
ifp->if_mtu = ifr->ifr_mtu;
|
|
|
|
}
|
|
|
|
break;
|
2002-11-14 23:35:06 +00:00
|
|
|
default:
|
|
|
|
error = EINVAL; /* XXX netbsd has ENOTTY??? */
|
|
|
|
break;
|
1996-08-04 10:54:13 +00:00
|
|
|
}
|
1996-12-10 07:29:50 +00:00
|
|
|
return (error);
|
1996-08-04 10:54:13 +00:00
|
|
|
}
|
1997-01-07 19:15:32 +00:00
|
|
|
|
2002-09-28 17:15:38 +00:00
|
|
|
static int
|
2003-10-23 13:49:10 +00:00
|
|
|
ether_resolvemulti(struct ifnet *ifp, struct sockaddr **llsa,
|
|
|
|
struct sockaddr *sa)
|
1997-01-07 19:15:32 +00:00
|
|
|
{
|
|
|
|
struct sockaddr_dl *sdl;
|
2004-06-24 10:58:08 +00:00
|
|
|
#ifdef INET
|
1997-01-07 19:15:32 +00:00
|
|
|
struct sockaddr_in *sin;
|
2004-06-24 10:58:08 +00:00
|
|
|
#endif
|
1999-11-22 02:45:11 +00:00
|
|
|
#ifdef INET6
|
|
|
|
struct sockaddr_in6 *sin6;
|
|
|
|
#endif
|
1997-01-07 19:15:32 +00:00
|
|
|
u_char *e_addr;
|
|
|
|
|
|
|
|
switch(sa->sa_family) {
|
|
|
|
case AF_LINK:
|
1999-11-22 02:45:11 +00:00
|
|
|
/*
|
1997-07-15 23:25:32 +00:00
|
|
|
* No mapping needed. Just check that it's a valid MC address.
|
|
|
|
*/
|
1997-01-07 19:15:32 +00:00
|
|
|
sdl = (struct sockaddr_dl *)sa;
|
|
|
|
e_addr = LLADDR(sdl);
|
2004-07-09 05:26:27 +00:00
|
|
|
if (!ETHER_IS_MULTICAST(e_addr))
|
1997-01-07 19:15:32 +00:00
|
|
|
return EADDRNOTAVAIL;
|
|
|
|
*llsa = 0;
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
#ifdef INET
|
|
|
|
case AF_INET:
|
|
|
|
sin = (struct sockaddr_in *)sa;
|
|
|
|
if (!IN_MULTICAST(ntohl(sin->sin_addr.s_addr)))
|
|
|
|
return EADDRNOTAVAIL;
|
|
|
|
MALLOC(sdl, struct sockaddr_dl *, sizeof *sdl, M_IFMADDR,
|
2005-08-02 17:52:52 +00:00
|
|
|
M_NOWAIT|M_ZERO);
|
|
|
|
if (sdl == NULL)
|
|
|
|
return ENOMEM;
|
1997-01-07 19:15:32 +00:00
|
|
|
sdl->sdl_len = sizeof *sdl;
|
|
|
|
sdl->sdl_family = AF_LINK;
|
|
|
|
sdl->sdl_index = ifp->if_index;
|
|
|
|
sdl->sdl_type = IFT_ETHER;
|
|
|
|
sdl->sdl_alen = ETHER_ADDR_LEN;
|
|
|
|
e_addr = LLADDR(sdl);
|
|
|
|
ETHER_MAP_IP_MULTICAST(&sin->sin_addr, e_addr);
|
|
|
|
*llsa = (struct sockaddr *)sdl;
|
|
|
|
return 0;
|
|
|
|
#endif
|
1999-11-22 02:45:11 +00:00
|
|
|
#ifdef INET6
|
|
|
|
case AF_INET6:
|
|
|
|
sin6 = (struct sockaddr_in6 *)sa;
|
2000-07-09 11:17:17 +00:00
|
|
|
if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
|
|
|
|
/*
|
|
|
|
* An IP6 address of 0 means listen to all
|
|
|
|
* of the Ethernet multicast address used for IP6.
|
|
|
|
* (This is used for multicast routers.)
|
|
|
|
*/
|
|
|
|
ifp->if_flags |= IFF_ALLMULTI;
|
|
|
|
*llsa = 0;
|
|
|
|
return 0;
|
|
|
|
}
|
1999-11-22 02:45:11 +00:00
|
|
|
if (!IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr))
|
|
|
|
return EADDRNOTAVAIL;
|
|
|
|
MALLOC(sdl, struct sockaddr_dl *, sizeof *sdl, M_IFMADDR,
|
2005-08-02 17:52:52 +00:00
|
|
|
M_NOWAIT|M_ZERO);
|
|
|
|
if (sdl == NULL)
|
|
|
|
return (ENOMEM);
|
1999-11-22 02:45:11 +00:00
|
|
|
sdl->sdl_len = sizeof *sdl;
|
|
|
|
sdl->sdl_family = AF_LINK;
|
|
|
|
sdl->sdl_index = ifp->if_index;
|
|
|
|
sdl->sdl_type = IFT_ETHER;
|
|
|
|
sdl->sdl_alen = ETHER_ADDR_LEN;
|
|
|
|
e_addr = LLADDR(sdl);
|
|
|
|
ETHER_MAP_IPV6_MULTICAST(&sin6->sin6_addr, e_addr);
|
|
|
|
*llsa = (struct sockaddr *)sdl;
|
|
|
|
return 0;
|
|
|
|
#endif
|
1997-01-07 19:15:32 +00:00
|
|
|
|
|
|
|
default:
|
1999-11-22 02:45:11 +00:00
|
|
|
/*
|
1997-01-07 19:15:32 +00:00
|
|
|
* Well, the text isn't quite right, but it's the name
|
|
|
|
* that counts...
|
|
|
|
*/
|
|
|
|
return EAFNOSUPPORT;
|
|
|
|
}
|
|
|
|
}
|
2003-03-15 15:38:02 +00:00
|
|
|
|
2005-06-10 16:49:24 +00:00
|
|
|
static void*
|
|
|
|
ether_alloc(u_char type, struct ifnet *ifp)
|
|
|
|
{
|
|
|
|
struct arpcom *ac;
|
|
|
|
|
|
|
|
ac = malloc(sizeof(struct arpcom), M_ARPCOM, M_WAITOK | M_ZERO);
|
|
|
|
ac->ac_ifp = ifp;
|
|
|
|
|
|
|
|
return (ac);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
|
|
|
ether_free(void *com, u_char type)
|
|
|
|
{
|
|
|
|
|
|
|
|
free(com, M_ARPCOM);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
ether_modevent(module_t mod, int type, void *data)
|
|
|
|
{
|
|
|
|
|
|
|
|
switch (type) {
|
|
|
|
case MOD_LOAD:
|
|
|
|
if_register_com_alloc(IFT_ETHER, ether_alloc, ether_free);
|
|
|
|
break;
|
|
|
|
case MOD_UNLOAD:
|
|
|
|
if_deregister_com_alloc(IFT_ETHER);
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
return EOPNOTSUPP;
|
|
|
|
}
|
|
|
|
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
2003-03-15 15:38:02 +00:00
|
|
|
static moduledata_t ether_mod = {
|
2003-10-23 13:49:10 +00:00
|
|
|
"ether",
|
2005-06-10 16:49:24 +00:00
|
|
|
ether_modevent,
|
2003-10-23 13:49:10 +00:00
|
|
|
0
|
2003-03-15 15:38:02 +00:00
|
|
|
};
|
2003-10-23 13:49:10 +00:00
|
|
|
|
2006-11-18 23:17:22 +00:00
|
|
|
void
|
|
|
|
ether_vlan_mtap(struct bpf_if *bp, struct mbuf *m, void *data, u_int dlen)
|
|
|
|
{
|
|
|
|
struct ether_vlan_header vlan;
|
|
|
|
struct mbuf mv, mb;
|
|
|
|
|
|
|
|
KASSERT((m->m_flags & M_VLANTAG) != 0,
|
|
|
|
("%s: vlan information not present", __func__));
|
|
|
|
KASSERT(m->m_len >= sizeof(struct ether_header),
|
|
|
|
("%s: mbuf not large enough for header", __func__));
|
|
|
|
bcopy(mtod(m, char *), &vlan, sizeof(struct ether_header));
|
|
|
|
vlan.evl_proto = vlan.evl_encap_proto;
|
|
|
|
vlan.evl_encap_proto = htons(ETHERTYPE_VLAN);
|
|
|
|
vlan.evl_tag = htons(m->m_pkthdr.ether_vtag);
|
|
|
|
m->m_len -= sizeof(struct ether_header);
|
|
|
|
m->m_data += sizeof(struct ether_header);
|
|
|
|
/*
|
|
|
|
* If a data link has been supplied by the caller, then we will need to
|
|
|
|
* re-create a stack allocated mbuf chain with the following structure:
|
|
|
|
*
|
|
|
|
* (1) mbuf #1 will contain the supplied data link
|
|
|
|
* (2) mbuf #2 will contain the vlan header
|
|
|
|
* (3) mbuf #3 will contain the original mbuf's packet data
|
|
|
|
*
|
|
|
|
* Otherwise, submit the packet and vlan header via bpf_mtap2().
|
|
|
|
*/
|
|
|
|
if (data != NULL) {
|
|
|
|
mv.m_next = m;
|
|
|
|
mv.m_data = (caddr_t)&vlan;
|
|
|
|
mv.m_len = sizeof(vlan);
|
|
|
|
mb.m_next = &mv;
|
|
|
|
mb.m_data = data;
|
|
|
|
mb.m_len = dlen;
|
|
|
|
bpf_mtap(bp, &mb);
|
|
|
|
} else
|
|
|
|
bpf_mtap2(bp, &vlan, sizeof(vlan), m);
|
|
|
|
m->m_len += sizeof(struct ether_header);
|
|
|
|
m->m_data -= sizeof(struct ether_header);
|
|
|
|
}
|
|
|
|
|
2005-06-10 16:49:24 +00:00
|
|
|
DECLARE_MODULE(ether, ether_mod, SI_SUB_INIT_IF, SI_ORDER_ANY);
|
2003-03-15 15:38:02 +00:00
|
|
|
MODULE_VERSION(ether, 1);
|