xref: /illumos-gate/usr/src/cmd/ipf/tools/ipmon.c (revision ae7a42b1)
17c478bd9Sstevel@tonic-gate /*
2d6c23f6fSyx  * Copyright (C) 2001-2008 by Darren Reed.
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * See the IPFILTER.LICENCE file for details on licencing.
57c478bd9Sstevel@tonic-gate  *
6d6c23f6fSyx  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
77c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
894bdecd9SRob Gulewich  *
994bdecd9SRob Gulewich  * Copyright (c) 2014, Joyent, Inc.  All rights reserved.
107c478bd9Sstevel@tonic-gate  */
117c478bd9Sstevel@tonic-gate 
12*ae7a42b1SToomas Soome #ifdef SOLARIS
13*ae7a42b1SToomas Soome #undef	SOLARIS
14*ae7a42b1SToomas Soome #endif
15*ae7a42b1SToomas Soome #if (defined(sun) && (defined(__svr4__) || defined(__SVR4)))
16*ae7a42b1SToomas Soome #define	SOLARIS	(1)
17*ae7a42b1SToomas Soome #else
18*ae7a42b1SToomas Soome #define	SOLARIS	(0)
197c478bd9Sstevel@tonic-gate #endif
207c478bd9Sstevel@tonic-gate 
217c478bd9Sstevel@tonic-gate #include <sys/types.h>
227c478bd9Sstevel@tonic-gate #include <sys/stat.h>
237c478bd9Sstevel@tonic-gate #include <sys/param.h>
247c478bd9Sstevel@tonic-gate #include <sys/file.h>
257c478bd9Sstevel@tonic-gate #include <sys/time.h>
267c478bd9Sstevel@tonic-gate #define _KERNEL
277c478bd9Sstevel@tonic-gate #include <sys/uio.h>
287c478bd9Sstevel@tonic-gate #undef _KERNEL
297c478bd9Sstevel@tonic-gate #include <sys/socket.h>
307c478bd9Sstevel@tonic-gate #include <sys/ioctl.h>
317c478bd9Sstevel@tonic-gate 
327c478bd9Sstevel@tonic-gate #include <stdio.h>
337c478bd9Sstevel@tonic-gate #include <unistd.h>
347c478bd9Sstevel@tonic-gate #include <string.h>
357c478bd9Sstevel@tonic-gate #include <fcntl.h>
367c478bd9Sstevel@tonic-gate #include <errno.h>
37ab25eeb5Syz #include <time.h>
387c478bd9Sstevel@tonic-gate #if !defined(__SVR4) && !defined(__svr4__)
397c478bd9Sstevel@tonic-gate # if (__FreeBSD_version >= 300000)
407c478bd9Sstevel@tonic-gate #  include <sys/dirent.h>
417c478bd9Sstevel@tonic-gate # else
427c478bd9Sstevel@tonic-gate #  include <sys/dir.h>
437c478bd9Sstevel@tonic-gate # endif
447c478bd9Sstevel@tonic-gate #else
457c478bd9Sstevel@tonic-gate # include <sys/filio.h>
467c478bd9Sstevel@tonic-gate # include <sys/byteorder.h>
477c478bd9Sstevel@tonic-gate #endif
487c478bd9Sstevel@tonic-gate #if !defined(__hpux) && (!defined(__SVR4) && !defined(__GNUC__))
497c478bd9Sstevel@tonic-gate # include <strings.h>
507c478bd9Sstevel@tonic-gate #endif
517c478bd9Sstevel@tonic-gate #include <signal.h>
527c478bd9Sstevel@tonic-gate #include <stdlib.h>
537c478bd9Sstevel@tonic-gate #include <stddef.h>
547c478bd9Sstevel@tonic-gate #include <netinet/in.h>
557c478bd9Sstevel@tonic-gate #include <netinet/in_systm.h>
567c478bd9Sstevel@tonic-gate #include <net/if.h>
577c478bd9Sstevel@tonic-gate #include <netinet/ip.h>
58ab25eeb5Syz #if !defined(__hpux) && !defined(linux)
597c478bd9Sstevel@tonic-gate # include <netinet/tcp_fsm.h>
607c478bd9Sstevel@tonic-gate #endif
617c478bd9Sstevel@tonic-gate #include <netdb.h>
627c478bd9Sstevel@tonic-gate #include <arpa/inet.h>
637c478bd9Sstevel@tonic-gate #include <arpa/nameser.h>
647c478bd9Sstevel@tonic-gate #ifdef	__hpux
657c478bd9Sstevel@tonic-gate # undef	NOERROR
667c478bd9Sstevel@tonic-gate #endif
677c478bd9Sstevel@tonic-gate #include <resolv.h>
687c478bd9Sstevel@tonic-gate 
69ab25eeb5Syz #if !defined(linux)
70ab25eeb5Syz # include <sys/protosw.h>
71ab25eeb5Syz # include <netinet/ip_var.h>
72ab25eeb5Syz #endif
737c478bd9Sstevel@tonic-gate 
747c478bd9Sstevel@tonic-gate #include <netinet/tcp.h>
757c478bd9Sstevel@tonic-gate #include <netinet/ip_icmp.h>
767c478bd9Sstevel@tonic-gate 
777c478bd9Sstevel@tonic-gate #include <ctype.h>
787c478bd9Sstevel@tonic-gate #include <syslog.h>
797c478bd9Sstevel@tonic-gate 
807c478bd9Sstevel@tonic-gate #include "netinet/ip_compat.h"
81ab25eeb5Syz #include <netinet/tcpip.h>
827c478bd9Sstevel@tonic-gate #include "netinet/ip_fil.h"
837c478bd9Sstevel@tonic-gate #include "netinet/ip_nat.h"
847c478bd9Sstevel@tonic-gate #include "netinet/ip_state.h"
857c478bd9Sstevel@tonic-gate #include "netinet/ip_proxy.h"
867c478bd9Sstevel@tonic-gate #include "ipmon.h"
8794bdecd9SRob Gulewich #include "ipfzone.h"
887c478bd9Sstevel@tonic-gate 
897c478bd9Sstevel@tonic-gate #if !defined(lint)
907c478bd9Sstevel@tonic-gate static const char sccsid[] = "@(#)ipmon.c	1.21 6/5/96 (C)1993-2000 Darren Reed";
91ab25eeb5Syz static const char rcsid[] = "@(#)$Id: ipmon.c,v 1.33.2.10 2005/06/18 02:41:35 darrenr Exp $";
927c478bd9Sstevel@tonic-gate #endif
937c478bd9Sstevel@tonic-gate 
947c478bd9Sstevel@tonic-gate 
957c478bd9Sstevel@tonic-gate #if	defined(sun) && !defined(SOLARIS2)
967c478bd9Sstevel@tonic-gate #define	STRERROR(x)	sys_errlist[x]
977c478bd9Sstevel@tonic-gate extern	char	*sys_errlist[];
987c478bd9Sstevel@tonic-gate #else
997c478bd9Sstevel@tonic-gate #define	STRERROR(x)	strerror(x)
1007c478bd9Sstevel@tonic-gate #endif
1017c478bd9Sstevel@tonic-gate 
1027c478bd9Sstevel@tonic-gate 
1037c478bd9Sstevel@tonic-gate struct	flags {
1047c478bd9Sstevel@tonic-gate 	int	value;
1057c478bd9Sstevel@tonic-gate 	char	flag;
1067c478bd9Sstevel@tonic-gate };
1077c478bd9Sstevel@tonic-gate 
1087c478bd9Sstevel@tonic-gate 
1097c478bd9Sstevel@tonic-gate typedef	struct	icmp_subtype {
1107c478bd9Sstevel@tonic-gate 	int	ist_val;
1117c478bd9Sstevel@tonic-gate 	char	*ist_name;
1127c478bd9Sstevel@tonic-gate } icmp_subtype_t;
1137c478bd9Sstevel@tonic-gate 
1147c478bd9Sstevel@tonic-gate typedef	struct	icmp_type {
1157c478bd9Sstevel@tonic-gate 	int	it_val;
1167c478bd9Sstevel@tonic-gate 	struct	icmp_subtype *it_subtable;
1177c478bd9Sstevel@tonic-gate 	size_t	it_stsize;
1187c478bd9Sstevel@tonic-gate 	char	*it_name;
1197c478bd9Sstevel@tonic-gate } icmp_type_t;
1207c478bd9Sstevel@tonic-gate 
1217c478bd9Sstevel@tonic-gate 
1227c478bd9Sstevel@tonic-gate #define	IST_SZ(x)	(sizeof(x)/sizeof(icmp_subtype_t))
1237c478bd9Sstevel@tonic-gate 
1247c478bd9Sstevel@tonic-gate 
1257c478bd9Sstevel@tonic-gate struct	flags	tcpfl[] = {
1267c478bd9Sstevel@tonic-gate 	{ TH_ACK, 'A' },
1277c478bd9Sstevel@tonic-gate 	{ TH_RST, 'R' },
1287c478bd9Sstevel@tonic-gate 	{ TH_SYN, 'S' },
1297c478bd9Sstevel@tonic-gate 	{ TH_FIN, 'F' },
1307c478bd9Sstevel@tonic-gate 	{ TH_URG, 'U' },
1317c478bd9Sstevel@tonic-gate 	{ TH_PUSH,'P' },
1327c478bd9Sstevel@tonic-gate 	{ TH_ECN, 'E' },
1337c478bd9Sstevel@tonic-gate 	{ TH_CWR, 'C' },
1347c478bd9Sstevel@tonic-gate 	{ 0, '\0' }
1357c478bd9Sstevel@tonic-gate };
1367c478bd9Sstevel@tonic-gate 
137af5f29ddSToomas Soome #if defined(__hpux) || (defined(SOLARIS) && (SOLARIS2 < 10))
1387c478bd9Sstevel@tonic-gate static	char	*pidfile = "/etc/ipf/ipmon.pid";
1397c478bd9Sstevel@tonic-gate #else
140af5f29ddSToomas Soome # if (BSD >= 199306) || defined(SOLARIS)
1417c478bd9Sstevel@tonic-gate static	char	*pidfile = "/var/run/ipmon.pid";
1427c478bd9Sstevel@tonic-gate # else
1437c478bd9Sstevel@tonic-gate static	char	*pidfile = "/etc/ipmon.pid";
1447c478bd9Sstevel@tonic-gate # endif
1457c478bd9Sstevel@tonic-gate #endif
1467c478bd9Sstevel@tonic-gate 
1477c478bd9Sstevel@tonic-gate static	char	line[2048];
1487c478bd9Sstevel@tonic-gate static	int	opts = 0;
1497c478bd9Sstevel@tonic-gate static	char	*logfile = NULL;
1507c478bd9Sstevel@tonic-gate static	FILE	*binarylog = NULL;
1517c478bd9Sstevel@tonic-gate static	char	*binarylogfile = NULL;
1527c478bd9Sstevel@tonic-gate static	int	donehup = 0;
1537c478bd9Sstevel@tonic-gate static	void	usage __P((char *));
1547c478bd9Sstevel@tonic-gate static	void	handlehup __P((int));
1557c478bd9Sstevel@tonic-gate static	void	flushlogs __P((char *, FILE *));
1567c478bd9Sstevel@tonic-gate static	void	print_log __P((int, FILE *, char *, int));
1577c478bd9Sstevel@tonic-gate static	void	print_ipflog __P((FILE *, char *, int));
1587c478bd9Sstevel@tonic-gate static	void	print_natlog __P((FILE *, char *, int));
1597c478bd9Sstevel@tonic-gate static	void	print_statelog __P((FILE *, char *, int));
1607c478bd9Sstevel@tonic-gate static	int	read_log __P((int, int *, char *, int));
1617c478bd9Sstevel@tonic-gate static	void	write_pid __P((char *));
1627c478bd9Sstevel@tonic-gate static	char	*icmpname __P((u_int, u_int));
1637c478bd9Sstevel@tonic-gate static	char	*icmpname6 __P((u_int, u_int));
1647c478bd9Sstevel@tonic-gate static	icmp_type_t *find_icmptype __P((int, icmp_type_t *, size_t));
1657c478bd9Sstevel@tonic-gate static	icmp_subtype_t *find_icmpsubtype __P((int, icmp_subtype_t *, size_t));
1667c478bd9Sstevel@tonic-gate #ifdef __hpux
1677c478bd9Sstevel@tonic-gate static	struct	tm	*get_tm __P((u_32_t));
1687c478bd9Sstevel@tonic-gate #else
1697c478bd9Sstevel@tonic-gate static	struct	tm	*get_tm __P((time_t));
1707c478bd9Sstevel@tonic-gate #endif
1717c478bd9Sstevel@tonic-gate 
1727c478bd9Sstevel@tonic-gate char	*hostname __P((int, int, u_32_t *));
1737c478bd9Sstevel@tonic-gate char	*portname __P((int, char *, u_int));
1747c478bd9Sstevel@tonic-gate int	main __P((int, char *[]));
1757c478bd9Sstevel@tonic-gate 
1767c478bd9Sstevel@tonic-gate static	void	logopts __P((int, char *));
1777c478bd9Sstevel@tonic-gate static	void	init_tabs __P((void));
1787c478bd9Sstevel@tonic-gate static	char	*getproto __P((u_int));
1797c478bd9Sstevel@tonic-gate 
1807c478bd9Sstevel@tonic-gate static	char	**protocols = NULL;
1817c478bd9Sstevel@tonic-gate static	char	**udp_ports = NULL;
1827c478bd9Sstevel@tonic-gate static	char	**tcp_ports = NULL;
1837c478bd9Sstevel@tonic-gate static	char	*conf_file = NULL;
1847c478bd9Sstevel@tonic-gate 
1857c478bd9Sstevel@tonic-gate 
1867c478bd9Sstevel@tonic-gate #define	OPT_SYSLOG	0x001
1877c478bd9Sstevel@tonic-gate #define	OPT_RESOLVE	0x002
1887c478bd9Sstevel@tonic-gate #define	OPT_HEXBODY	0x004
1897c478bd9Sstevel@tonic-gate #define	OPT_VERBOSE	0x008
1907c478bd9Sstevel@tonic-gate #define	OPT_HEXHDR	0x010
1917c478bd9Sstevel@tonic-gate #define	OPT_TAIL	0x020
1927c478bd9Sstevel@tonic-gate #define	OPT_NAT		0x080
1937c478bd9Sstevel@tonic-gate #define	OPT_STATE	0x100
1947c478bd9Sstevel@tonic-gate #define	OPT_FILTER	0x200
1957c478bd9Sstevel@tonic-gate #define	OPT_PORTNUM	0x400
1967c478bd9Sstevel@tonic-gate #define	OPT_LOGALL	(OPT_NAT|OPT_STATE|OPT_FILTER)
1977c478bd9Sstevel@tonic-gate #define	OPT_LOGBODY	0x800
1987c478bd9Sstevel@tonic-gate 
1997c478bd9Sstevel@tonic-gate #define	HOSTNAME_V4(a,b)	hostname((a), 4, (u_32_t *)&(b))
2007c478bd9Sstevel@tonic-gate 
2017c478bd9Sstevel@tonic-gate #ifndef	LOGFAC
2027c478bd9Sstevel@tonic-gate #define	LOGFAC	LOG_LOCAL0
2037c478bd9Sstevel@tonic-gate #endif
2047c478bd9Sstevel@tonic-gate 
2057c478bd9Sstevel@tonic-gate 
2067c478bd9Sstevel@tonic-gate static icmp_subtype_t icmpunreachnames[] = {
2077c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NET,		"net" },
2087c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_HOST,		"host" },
2097c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_PROTOCOL,	"protocol" },
2107c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_PORT,		"port" },
2117c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NEEDFRAG,	"needfrag" },
2127c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_SRCFAIL,		"srcfail" },
2137c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NET_UNKNOWN,	"net_unknown" },
2147c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_HOST_UNKNOWN,	"host_unknown" },
2157c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NET,		"isolated" },
2167c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NET_PROHIB,	"net_prohib" },
2177c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_NET_PROHIB,	"host_prohib" },
2187c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_TOSNET,		"tosnet" },
2197c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_TOSHOST,		"toshost" },
2207c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH_ADMIN_PROHIBIT,	"admin_prohibit" },
2217c478bd9Sstevel@tonic-gate 	{ -2,				NULL }
2227c478bd9Sstevel@tonic-gate };
2237c478bd9Sstevel@tonic-gate 
2247c478bd9Sstevel@tonic-gate static icmp_subtype_t redirectnames[] = {
2257c478bd9Sstevel@tonic-gate 	{ ICMP_REDIRECT_NET,		"net" },
2267c478bd9Sstevel@tonic-gate 	{ ICMP_REDIRECT_HOST,		"host" },
2277c478bd9Sstevel@tonic-gate 	{ ICMP_REDIRECT_TOSNET,		"tosnet" },
2287c478bd9Sstevel@tonic-gate 	{ ICMP_REDIRECT_TOSHOST,	"toshost" },
2297c478bd9Sstevel@tonic-gate 	{ -2,				NULL }
2307c478bd9Sstevel@tonic-gate };
2317c478bd9Sstevel@tonic-gate 
2327c478bd9Sstevel@tonic-gate static icmp_subtype_t timxceednames[] = {
2337c478bd9Sstevel@tonic-gate 	{ ICMP_TIMXCEED_INTRANS,	"transit" },
2347c478bd9Sstevel@tonic-gate 	{ ICMP_TIMXCEED_REASS,		"reassem" },
2357c478bd9Sstevel@tonic-gate 	{ -2,				NULL }
2367c478bd9Sstevel@tonic-gate };
2377c478bd9Sstevel@tonic-gate 
2387c478bd9Sstevel@tonic-gate static icmp_subtype_t paramnames[] = {
2397c478bd9Sstevel@tonic-gate 	{ ICMP_PARAMPROB_ERRATPTR,	"errata_pointer" },
2407c478bd9Sstevel@tonic-gate 	{ ICMP_PARAMPROB_OPTABSENT,	"optmissing" },
2417c478bd9Sstevel@tonic-gate 	{ ICMP_PARAMPROB_LENGTH,	"length" },
2427c478bd9Sstevel@tonic-gate 	{ -2,				NULL }
2437c478bd9Sstevel@tonic-gate };
2447c478bd9Sstevel@tonic-gate 
2457c478bd9Sstevel@tonic-gate static icmp_type_t icmptypes[] = {
2467c478bd9Sstevel@tonic-gate 	{ ICMP_ECHOREPLY,	NULL,	0,		"echoreply" },
2477c478bd9Sstevel@tonic-gate 	{ -1,			NULL,	0,		NULL },
2487c478bd9Sstevel@tonic-gate 	{ -1,			NULL,	0,		NULL },
2497c478bd9Sstevel@tonic-gate 	{ ICMP_UNREACH,		icmpunreachnames,
2507c478bd9Sstevel@tonic-gate 				IST_SZ(icmpunreachnames),"unreach" },
2517c478bd9Sstevel@tonic-gate 	{ ICMP_SOURCEQUENCH,	NULL,	0,		"sourcequench" },
2527c478bd9Sstevel@tonic-gate 	{ ICMP_REDIRECT,	redirectnames,
2537c478bd9Sstevel@tonic-gate 				IST_SZ(redirectnames),	"redirect" },
2547c478bd9Sstevel@tonic-gate 	{ -1,			NULL,	0,		NULL },
2557c478bd9Sstevel@tonic-gate 	{ -1,			NULL,	0,		NULL },
2567c478bd9Sstevel@tonic-gate 	{ ICMP_ECHO,		NULL,	0,		"echo" },
2577c478bd9Sstevel@tonic-gate 	{ ICMP_ROUTERADVERT,	NULL,	0,		"routeradvert" },
2587c478bd9Sstevel@tonic-gate 	{ ICMP_ROUTERSOLICIT,	NULL,	0,		"routersolicit" },
2597c478bd9Sstevel@tonic-gate 	{ ICMP_TIMXCEED,	timxceednames,
2607c478bd9Sstevel@tonic-gate 				IST_SZ(timxceednames),	"timxceed" },
2617c478bd9Sstevel@tonic-gate 	{ ICMP_PARAMPROB,	paramnames,
2627c478bd9Sstevel@tonic-gate 				IST_SZ(paramnames),	"paramprob" },
2637c478bd9Sstevel@tonic-gate 	{ ICMP_TSTAMP,		NULL,	0,		"timestamp" },
2647c478bd9Sstevel@tonic-gate 	{ ICMP_TSTAMPREPLY,	NULL,	0,		"timestampreply" },
2657c478bd9Sstevel@tonic-gate 	{ ICMP_IREQ,		NULL,	0,		"inforeq" },
2667c478bd9Sstevel@tonic-gate 	{ ICMP_IREQREPLY,	NULL,	0,		"inforeply" },
2677c478bd9Sstevel@tonic-gate 	{ ICMP_MASKREQ,		NULL,	0,		"maskreq" },
2687c478bd9Sstevel@tonic-gate 	{ ICMP_MASKREPLY,	NULL,	0,		"maskreply" },
2697c478bd9Sstevel@tonic-gate 	{ -2,			NULL,	0,		NULL }
2707c478bd9Sstevel@tonic-gate };
2717c478bd9Sstevel@tonic-gate 
2727c478bd9Sstevel@tonic-gate static icmp_subtype_t icmpredirect6[] = {
2737c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH_NOROUTE,		"noroute" },
2747c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH_ADMIN,		"admin" },
2757c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH_NOTNEIGHBOR,	"neighbour" },
2767c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH_ADDR,		"address" },
2777c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH_NOPORT,		"noport" },
2787c478bd9Sstevel@tonic-gate 	{ -2,					NULL }
2797c478bd9Sstevel@tonic-gate };
2807c478bd9Sstevel@tonic-gate 
2817c478bd9Sstevel@tonic-gate static icmp_subtype_t icmptimexceed6[] = {
2827c478bd9Sstevel@tonic-gate 	{ ICMP6_TIME_EXCEED_TRANSIT,		"intransit" },
2837c478bd9Sstevel@tonic-gate 	{ ICMP6_TIME_EXCEED_REASSEMBLY,		"reassem" },
2847c478bd9Sstevel@tonic-gate 	{ -2,					NULL }
2857c478bd9Sstevel@tonic-gate };
2867c478bd9Sstevel@tonic-gate 
2877c478bd9Sstevel@tonic-gate static icmp_subtype_t icmpparamprob6[] = {
2887c478bd9Sstevel@tonic-gate 	{ ICMP6_PARAMPROB_HEADER,		"header" },
2897c478bd9Sstevel@tonic-gate 	{ ICMP6_PARAMPROB_NEXTHEADER,		"nextheader" },
2907c478bd9Sstevel@tonic-gate 	{ ICMP6_PARAMPROB_OPTION,		"option" },
2917c478bd9Sstevel@tonic-gate 	{ -2,					NULL }
2927c478bd9Sstevel@tonic-gate };
2937c478bd9Sstevel@tonic-gate 
2947c478bd9Sstevel@tonic-gate static icmp_subtype_t icmpquerysubject6[] = {
2957c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_SUBJ_IPV6,			"ipv6" },
2967c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_SUBJ_FQDN,			"fqdn" },
2977c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_SUBJ_IPV4,			"ipv4" },
2987c478bd9Sstevel@tonic-gate 	{ -2,					NULL },
2997c478bd9Sstevel@tonic-gate };
3007c478bd9Sstevel@tonic-gate 
3017c478bd9Sstevel@tonic-gate static icmp_subtype_t icmpnodeinfo6[] = {
3027c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_SUCCESS,			"success" },
3037c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_REFUSED,			"refused" },
3047c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_UNKNOWN,			"unknown" },
3057c478bd9Sstevel@tonic-gate 	{ -2,					NULL }
3067c478bd9Sstevel@tonic-gate };
3077c478bd9Sstevel@tonic-gate 
3087c478bd9Sstevel@tonic-gate static icmp_subtype_t icmprenumber6[] = {
3097c478bd9Sstevel@tonic-gate 	{ ICMP6_ROUTER_RENUMBERING_COMMAND,		"command" },
3107c478bd9Sstevel@tonic-gate 	{ ICMP6_ROUTER_RENUMBERING_RESULT,		"result" },
3117c478bd9Sstevel@tonic-gate 	{ ICMP6_ROUTER_RENUMBERING_SEQNUM_RESET,	"seqnum_reset" },
3127c478bd9Sstevel@tonic-gate 	{ -2,						NULL }
3137c478bd9Sstevel@tonic-gate };
3147c478bd9Sstevel@tonic-gate 
3157c478bd9Sstevel@tonic-gate static icmp_type_t icmptypes6[] = {
3167c478bd9Sstevel@tonic-gate 	{ 0,			NULL,	0,		NULL },
3177c478bd9Sstevel@tonic-gate 	{ ICMP6_DST_UNREACH,	icmpredirect6,
3187c478bd9Sstevel@tonic-gate 			IST_SZ(icmpredirect6),		"unreach" },
3197c478bd9Sstevel@tonic-gate 	{ ICMP6_PACKET_TOO_BIG,	NULL,	0,		"toobig" },
3207c478bd9Sstevel@tonic-gate 	{ ICMP6_TIME_EXCEEDED,	icmptimexceed6,
3217c478bd9Sstevel@tonic-gate 			IST_SZ(icmptimexceed6),		"timxceed" },
3227c478bd9Sstevel@tonic-gate 	{ ICMP6_PARAM_PROB,	icmpparamprob6,
3237c478bd9Sstevel@tonic-gate 			IST_SZ(icmpparamprob6),		"paramprob" },
3247c478bd9Sstevel@tonic-gate 	{ ICMP6_ECHO_REQUEST,	NULL,	0,		"echo" },
3257c478bd9Sstevel@tonic-gate 	{ ICMP6_ECHO_REPLY,	NULL,	0,		"echoreply" },
3267c478bd9Sstevel@tonic-gate 	{ ICMP6_MEMBERSHIP_QUERY, icmpquerysubject6,
3277c478bd9Sstevel@tonic-gate 			IST_SZ(icmpquerysubject6),	"groupmemberquery" },
3287c478bd9Sstevel@tonic-gate 	{ ICMP6_MEMBERSHIP_REPORT,NULL,	0,		"groupmemberreport" },
3297c478bd9Sstevel@tonic-gate 	{ ICMP6_MEMBERSHIP_REDUCTION,NULL,	0,	"groupmemberterm" },
3307c478bd9Sstevel@tonic-gate 	{ ND_ROUTER_SOLICIT,	NULL,	0,		"routersolicit" },
3317c478bd9Sstevel@tonic-gate 	{ ND_ROUTER_ADVERT,	NULL,	0,		"routeradvert" },
3327c478bd9Sstevel@tonic-gate 	{ ND_NEIGHBOR_SOLICIT,	NULL,	0,		"neighborsolicit" },
3337c478bd9Sstevel@tonic-gate 	{ ND_NEIGHBOR_ADVERT,	NULL,	0,		"neighboradvert" },
3347c478bd9Sstevel@tonic-gate 	{ ND_REDIRECT,		NULL,	0,		"redirect" },
3357c478bd9Sstevel@tonic-gate 	{ ICMP6_ROUTER_RENUMBERING,	icmprenumber6,
3367c478bd9Sstevel@tonic-gate 			IST_SZ(icmprenumber6),		"routerrenumber" },
3377c478bd9Sstevel@tonic-gate 	{ ICMP6_WRUREQUEST,	NULL,	0,		"whoareyourequest" },
3387c478bd9Sstevel@tonic-gate 	{ ICMP6_WRUREPLY,	NULL,	0,		"whoareyoureply" },
3397c478bd9Sstevel@tonic-gate 	{ ICMP6_FQDN_QUERY,	NULL,	0,		"fqdnquery" },
3407c478bd9Sstevel@tonic-gate 	{ ICMP6_FQDN_REPLY,	NULL,	0,		"fqdnreply" },
3417c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_QUERY,	icmpnodeinfo6,
3427c478bd9Sstevel@tonic-gate 			IST_SZ(icmpnodeinfo6),		"nodeinforequest" },
3437c478bd9Sstevel@tonic-gate 	{ ICMP6_NI_REPLY,	NULL,	0,		"nodeinforeply" },
3447c478bd9Sstevel@tonic-gate 	{ MLD6_MTRACE_RESP,	NULL,	0,		"mtraceresponse" },
3457c478bd9Sstevel@tonic-gate 	{ MLD6_MTRACE,		NULL,	0,		"mtracerequest" },
3467c478bd9Sstevel@tonic-gate 	{ -2,			NULL,	0,		NULL }
3477c478bd9Sstevel@tonic-gate };
3487c478bd9Sstevel@tonic-gate 
find_icmpsubtype(type,table,tablesz)3497c478bd9Sstevel@tonic-gate static icmp_subtype_t *find_icmpsubtype(type, table, tablesz)
3507c478bd9Sstevel@tonic-gate int type;
3517c478bd9Sstevel@tonic-gate icmp_subtype_t *table;
3527c478bd9Sstevel@tonic-gate size_t tablesz;
3537c478bd9Sstevel@tonic-gate {
3547c478bd9Sstevel@tonic-gate 	icmp_subtype_t *ist;
3557c478bd9Sstevel@tonic-gate 	int i;
3567c478bd9Sstevel@tonic-gate 
3577c478bd9Sstevel@tonic-gate 	if (tablesz < 2)
3587c478bd9Sstevel@tonic-gate 		return NULL;
3597c478bd9Sstevel@tonic-gate 
3607c478bd9Sstevel@tonic-gate 	if ((type < 0) || (type > table[tablesz - 2].ist_val))
3617c478bd9Sstevel@tonic-gate 		return NULL;
3627c478bd9Sstevel@tonic-gate 
3637c478bd9Sstevel@tonic-gate 	i = type;
3647c478bd9Sstevel@tonic-gate 	if (table[type].ist_val == type)
3657c478bd9Sstevel@tonic-gate 		return table + type;
3667c478bd9Sstevel@tonic-gate 
3677c478bd9Sstevel@tonic-gate 	for (i = 0, ist = table; ist->ist_val != -2; i++, ist++)
3687c478bd9Sstevel@tonic-gate 		if (ist->ist_val == type)
3697c478bd9Sstevel@tonic-gate 			return ist;
3707c478bd9Sstevel@tonic-gate 	return NULL;
3717c478bd9Sstevel@tonic-gate }
3727c478bd9Sstevel@tonic-gate 
3737c478bd9Sstevel@tonic-gate 
find_icmptype(type,table,tablesz)3747c478bd9Sstevel@tonic-gate static icmp_type_t *find_icmptype(type, table, tablesz)
3757c478bd9Sstevel@tonic-gate int type;
3767c478bd9Sstevel@tonic-gate icmp_type_t *table;
3777c478bd9Sstevel@tonic-gate size_t tablesz;
3787c478bd9Sstevel@tonic-gate {
3797c478bd9Sstevel@tonic-gate 	icmp_type_t *it;
3807c478bd9Sstevel@tonic-gate 	int i;
3817c478bd9Sstevel@tonic-gate 
3827c478bd9Sstevel@tonic-gate 	if (tablesz < 2)
3837c478bd9Sstevel@tonic-gate 		return NULL;
3847c478bd9Sstevel@tonic-gate 
3857c478bd9Sstevel@tonic-gate 	if ((type < 0) || (type > table[tablesz - 2].it_val))
3867c478bd9Sstevel@tonic-gate 		return NULL;
3877c478bd9Sstevel@tonic-gate 
3887c478bd9Sstevel@tonic-gate 	i = type;
3897c478bd9Sstevel@tonic-gate 	if (table[type].it_val == type)
3907c478bd9Sstevel@tonic-gate 		return table + type;
3917c478bd9Sstevel@tonic-gate 
3927c478bd9Sstevel@tonic-gate 	for (i = 0, it = table; it->it_val != -2; i++, it++)
3937c478bd9Sstevel@tonic-gate 		if (it->it_val == type)
3947c478bd9Sstevel@tonic-gate 			return it;
3957c478bd9Sstevel@tonic-gate 	return NULL;
3967c478bd9Sstevel@tonic-gate }
3977c478bd9Sstevel@tonic-gate 
3987c478bd9Sstevel@tonic-gate 
handlehup(sig)3997c478bd9Sstevel@tonic-gate static void handlehup(sig)
4007c478bd9Sstevel@tonic-gate int sig;
4017c478bd9Sstevel@tonic-gate {
4027c478bd9Sstevel@tonic-gate 	signal(SIGHUP, handlehup);
4037c478bd9Sstevel@tonic-gate 	donehup = 1;
4047c478bd9Sstevel@tonic-gate }
4057c478bd9Sstevel@tonic-gate 
4067c478bd9Sstevel@tonic-gate 
init_tabs()4077c478bd9Sstevel@tonic-gate static void init_tabs()
4087c478bd9Sstevel@tonic-gate {
4097c478bd9Sstevel@tonic-gate 	struct	protoent	*p;
4107c478bd9Sstevel@tonic-gate 	struct	servent	*s;
4117c478bd9Sstevel@tonic-gate 	char	*name, **tab;
4127c478bd9Sstevel@tonic-gate 	int	port, i;
4137c478bd9Sstevel@tonic-gate 
4147c478bd9Sstevel@tonic-gate 	if (protocols != NULL) {
4157c478bd9Sstevel@tonic-gate 		for (i = 0; i < 256; i++)
4167c478bd9Sstevel@tonic-gate 			if (protocols[i] != NULL) {
4177c478bd9Sstevel@tonic-gate 				free(protocols[i]);
4187c478bd9Sstevel@tonic-gate 				protocols[i] = NULL;
4197c478bd9Sstevel@tonic-gate 			}
4207c478bd9Sstevel@tonic-gate 		free(protocols);
4217c478bd9Sstevel@tonic-gate 		protocols = NULL;
4227c478bd9Sstevel@tonic-gate 	}
4237c478bd9Sstevel@tonic-gate 	protocols = (char **)malloc(256 * sizeof(*protocols));
4247c478bd9Sstevel@tonic-gate 	if (protocols != NULL) {
4257c478bd9Sstevel@tonic-gate 		bzero((char *)protocols, 256 * sizeof(*protocols));
4267c478bd9Sstevel@tonic-gate 
4277c478bd9Sstevel@tonic-gate 		setprotoent(1);
4287c478bd9Sstevel@tonic-gate 		while ((p = getprotoent()) != NULL)
4297c478bd9Sstevel@tonic-gate 			if (p->p_proto >= 0 && p->p_proto <= 255 &&
4307c478bd9Sstevel@tonic-gate 			    p->p_name != NULL && protocols[p->p_proto] == NULL)
4317c478bd9Sstevel@tonic-gate 				protocols[p->p_proto] = strdup(p->p_name);
4327c478bd9Sstevel@tonic-gate 		endprotoent();
433ab25eeb5Syz #if defined(_AIX51)
434ab25eeb5Syz 		if (protocols[0])
435ab25eeb5Syz 			free(protocols[0]);
436ab25eeb5Syz 		if (protocols[252])
437ab25eeb5Syz 			free(protocols[252]);
438ab25eeb5Syz 		protocols[0] = "ip";
439ab25eeb5Syz 		protocols[252] = NULL;
440ab25eeb5Syz #endif
4417c478bd9Sstevel@tonic-gate 	}
4427c478bd9Sstevel@tonic-gate 
4437c478bd9Sstevel@tonic-gate 	if (udp_ports != NULL) {
4447c478bd9Sstevel@tonic-gate 		for (i = 0; i < 65536; i++)
4457c478bd9Sstevel@tonic-gate 			if (udp_ports[i] != NULL) {
4467c478bd9Sstevel@tonic-gate 				free(udp_ports[i]);
4477c478bd9Sstevel@tonic-gate 				udp_ports[i] = NULL;
4487c478bd9Sstevel@tonic-gate 			}
4497c478bd9Sstevel@tonic-gate 		free(udp_ports);
4507c478bd9Sstevel@tonic-gate 		udp_ports = NULL;
4517c478bd9Sstevel@tonic-gate 	}
4527c478bd9Sstevel@tonic-gate 	udp_ports = (char **)malloc(65536 * sizeof(*udp_ports));
4537c478bd9Sstevel@tonic-gate 	if (udp_ports != NULL)
4547c478bd9Sstevel@tonic-gate 		bzero((char *)udp_ports, 65536 * sizeof(*udp_ports));
4557c478bd9Sstevel@tonic-gate 
4567c478bd9Sstevel@tonic-gate 	if (tcp_ports != NULL) {
4577c478bd9Sstevel@tonic-gate 		for (i = 0; i < 65536; i++)
4587c478bd9Sstevel@tonic-gate 			if (tcp_ports[i] != NULL) {
4597c478bd9Sstevel@tonic-gate 				free(tcp_ports[i]);
4607c478bd9Sstevel@tonic-gate 				tcp_ports[i] = NULL;
4617c478bd9Sstevel@tonic-gate 			}
4627c478bd9Sstevel@tonic-gate 		free(tcp_ports);
4637c478bd9Sstevel@tonic-gate 		tcp_ports = NULL;
4647c478bd9Sstevel@tonic-gate 	}
4657c478bd9Sstevel@tonic-gate 	tcp_ports = (char **)malloc(65536 * sizeof(*tcp_ports));
4667c478bd9Sstevel@tonic-gate 	if (tcp_ports != NULL)
4677c478bd9Sstevel@tonic-gate 		bzero((char *)tcp_ports, 65536 * sizeof(*tcp_ports));
4687c478bd9Sstevel@tonic-gate 
4697c478bd9Sstevel@tonic-gate 	setservent(1);
4707c478bd9Sstevel@tonic-gate 	while ((s = getservent()) != NULL) {
4717c478bd9Sstevel@tonic-gate 		if (s->s_proto == NULL)
4727c478bd9Sstevel@tonic-gate 			continue;
4737c478bd9Sstevel@tonic-gate 		else if (!strcmp(s->s_proto, "tcp")) {
4747c478bd9Sstevel@tonic-gate 			port = ntohs(s->s_port);
4757c478bd9Sstevel@tonic-gate 			name = s->s_name;
4767c478bd9Sstevel@tonic-gate 			tab = tcp_ports;
4777c478bd9Sstevel@tonic-gate 		} else if (!strcmp(s->s_proto, "udp")) {
4787c478bd9Sstevel@tonic-gate 			port = ntohs(s->s_port);
4797c478bd9Sstevel@tonic-gate 			name = s->s_name;
4807c478bd9Sstevel@tonic-gate 			tab = udp_ports;
4817c478bd9Sstevel@tonic-gate 		} else
4827c478bd9Sstevel@tonic-gate 			continue;
4837c478bd9Sstevel@tonic-gate 		if ((port < 0 || port > 65535) || (name == NULL))
4847c478bd9Sstevel@tonic-gate 			continue;
4857c478bd9Sstevel@tonic-gate 		if (tab != NULL)
4867c478bd9Sstevel@tonic-gate 			tab[port] = strdup(name);
4877c478bd9Sstevel@tonic-gate 	}
4887c478bd9Sstevel@tonic-gate 	endservent();
4897c478bd9Sstevel@tonic-gate }
4907c478bd9Sstevel@tonic-gate 
4917c478bd9Sstevel@tonic-gate 
getproto(p)4927c478bd9Sstevel@tonic-gate static char *getproto(p)
4937c478bd9Sstevel@tonic-gate u_int p;
4947c478bd9Sstevel@tonic-gate {
4957c478bd9Sstevel@tonic-gate 	static char pnum[4];
4967c478bd9Sstevel@tonic-gate 	char *s;
4977c478bd9Sstevel@tonic-gate 
4987c478bd9Sstevel@tonic-gate 	p &= 0xff;
4997c478bd9Sstevel@tonic-gate 	s = protocols ? protocols[p] : NULL;
5007c478bd9Sstevel@tonic-gate 	if (s == NULL) {
5017c478bd9Sstevel@tonic-gate 		sprintf(pnum, "%u", p);
5027c478bd9Sstevel@tonic-gate 		s = pnum;
5037c478bd9Sstevel@tonic-gate 	}
5047c478bd9Sstevel@tonic-gate 	return s;
5057c478bd9Sstevel@tonic-gate }
5067c478bd9Sstevel@tonic-gate 
5077c478bd9Sstevel@tonic-gate 
read_log(fd,lenp,buf,bufsize)5087c478bd9Sstevel@tonic-gate static int read_log(fd, lenp, buf, bufsize)
5097c478bd9Sstevel@tonic-gate int fd, bufsize, *lenp;
5107c478bd9Sstevel@tonic-gate char *buf;
5117c478bd9Sstevel@tonic-gate {
5127c478bd9Sstevel@tonic-gate 	int	nr;
5137c478bd9Sstevel@tonic-gate 
5147c478bd9Sstevel@tonic-gate 	nr = read(fd, buf, bufsize);
5157c478bd9Sstevel@tonic-gate 	if (!nr)
5167c478bd9Sstevel@tonic-gate 		return 2;
5177c478bd9Sstevel@tonic-gate 	if ((nr < 0) && (errno != EINTR))
5187c478bd9Sstevel@tonic-gate 		return -1;
5197c478bd9Sstevel@tonic-gate 	*lenp = nr;
5207c478bd9Sstevel@tonic-gate 	return 0;
5217c478bd9Sstevel@tonic-gate }
5227c478bd9Sstevel@tonic-gate 
5237c478bd9Sstevel@tonic-gate 
hostname(res,v,ip)5247c478bd9Sstevel@tonic-gate char	*hostname(res, v, ip)
5257c478bd9Sstevel@tonic-gate int	res, v;
5267c478bd9Sstevel@tonic-gate u_32_t	*ip;
5277c478bd9Sstevel@tonic-gate {
5287c478bd9Sstevel@tonic-gate # define MAX_INETA	16
5297c478bd9Sstevel@tonic-gate 	static char hname[MAXHOSTNAMELEN + MAX_INETA + 3];
5307c478bd9Sstevel@tonic-gate #ifdef	USE_INET6
5317c478bd9Sstevel@tonic-gate 	static char hostbuf[MAXHOSTNAMELEN+1];
5327c478bd9Sstevel@tonic-gate #endif
5337c478bd9Sstevel@tonic-gate 	struct hostent *hp;
5347c478bd9Sstevel@tonic-gate 	struct in_addr ipa;
5357c478bd9Sstevel@tonic-gate 
5367c478bd9Sstevel@tonic-gate 	if (v == 4) {
5377c478bd9Sstevel@tonic-gate 		ipa.s_addr = *ip;
5387c478bd9Sstevel@tonic-gate 		if (!res)
5397c478bd9Sstevel@tonic-gate 			return inet_ntoa(ipa);
5407c478bd9Sstevel@tonic-gate 		hp = gethostbyaddr((char *)ip, sizeof(*ip), AF_INET);
5417c478bd9Sstevel@tonic-gate 		if (!hp)
5427c478bd9Sstevel@tonic-gate 			return inet_ntoa(ipa);
5437c478bd9Sstevel@tonic-gate 		sprintf(hname, "%.*s[%s]", MAXHOSTNAMELEN, hp->h_name,
5447c478bd9Sstevel@tonic-gate 			inet_ntoa(ipa));
5457c478bd9Sstevel@tonic-gate 		return hname;
5467c478bd9Sstevel@tonic-gate 	}
5477c478bd9Sstevel@tonic-gate #ifdef	USE_INET6
5487c478bd9Sstevel@tonic-gate 	(void) inet_ntop(AF_INET6, ip, hostbuf, sizeof(hostbuf) - 1);
5497c478bd9Sstevel@tonic-gate 	hostbuf[MAXHOSTNAMELEN] = '\0';
5507c478bd9Sstevel@tonic-gate 	return hostbuf;
5517c478bd9Sstevel@tonic-gate #else
5527c478bd9Sstevel@tonic-gate 	return "IPv6";
5537c478bd9Sstevel@tonic-gate #endif
5547c478bd9Sstevel@tonic-gate }
5557c478bd9Sstevel@tonic-gate 
5567c478bd9Sstevel@tonic-gate 
portname(res,proto,port)5577c478bd9Sstevel@tonic-gate char	*portname(res, proto, port)
5587c478bd9Sstevel@tonic-gate int	res;
5597c478bd9Sstevel@tonic-gate char	*proto;
5607c478bd9Sstevel@tonic-gate u_int	port;
5617c478bd9Sstevel@tonic-gate {
5627c478bd9Sstevel@tonic-gate 	static	char	pname[8];
5637c478bd9Sstevel@tonic-gate 	char	*s;
5647c478bd9Sstevel@tonic-gate 
5657c478bd9Sstevel@tonic-gate 	port = ntohs(port);
5667c478bd9Sstevel@tonic-gate 	port &= 0xffff;
5677c478bd9Sstevel@tonic-gate 	(void) sprintf(pname, "%u", port);
5687c478bd9Sstevel@tonic-gate 	if (!res || (opts & OPT_PORTNUM))
5697c478bd9Sstevel@tonic-gate 		return pname;
5707c478bd9Sstevel@tonic-gate 	s = NULL;
5717c478bd9Sstevel@tonic-gate 	if (!strcmp(proto, "tcp"))
5727c478bd9Sstevel@tonic-gate 		s = tcp_ports[port];
5737c478bd9Sstevel@tonic-gate 	else if (!strcmp(proto, "udp"))
5747c478bd9Sstevel@tonic-gate 		s = udp_ports[port];
5757c478bd9Sstevel@tonic-gate 	if (s == NULL)
5767c478bd9Sstevel@tonic-gate 		s = pname;
5777c478bd9Sstevel@tonic-gate 	return s;
5787c478bd9Sstevel@tonic-gate }
5797c478bd9Sstevel@tonic-gate 
5807c478bd9Sstevel@tonic-gate 
icmpname(type,code)5817c478bd9Sstevel@tonic-gate static	char	*icmpname(type, code)
5827c478bd9Sstevel@tonic-gate u_int	type;
5837c478bd9Sstevel@tonic-gate u_int	code;
5847c478bd9Sstevel@tonic-gate {
5857c478bd9Sstevel@tonic-gate 	static char name[80];
5867c478bd9Sstevel@tonic-gate 	icmp_subtype_t *ist;
5877c478bd9Sstevel@tonic-gate 	icmp_type_t *it;
5887c478bd9Sstevel@tonic-gate 	char *s;
5897c478bd9Sstevel@tonic-gate 
5907c478bd9Sstevel@tonic-gate 	s = NULL;
5917c478bd9Sstevel@tonic-gate 	it = find_icmptype(type, icmptypes, sizeof(icmptypes) / sizeof(*it));
5927c478bd9Sstevel@tonic-gate 	if (it != NULL)
5937c478bd9Sstevel@tonic-gate 		s = it->it_name;
5947c478bd9Sstevel@tonic-gate 
5957c478bd9Sstevel@tonic-gate 	if (s == NULL)
5967c478bd9Sstevel@tonic-gate 		sprintf(name, "icmptype(%d)/", type);
5977c478bd9Sstevel@tonic-gate 	else
5987c478bd9Sstevel@tonic-gate 		sprintf(name, "%s/", s);
5997c478bd9Sstevel@tonic-gate 
6007c478bd9Sstevel@tonic-gate 	ist = NULL;
6017c478bd9Sstevel@tonic-gate 	if (it != NULL && it->it_subtable != NULL)
6027c478bd9Sstevel@tonic-gate 		ist = find_icmpsubtype(code, it->it_subtable, it->it_stsize);
6037c478bd9Sstevel@tonic-gate 
6047c478bd9Sstevel@tonic-gate 	if (ist != NULL && ist->ist_name != NULL)
6057c478bd9Sstevel@tonic-gate 		strcat(name, ist->ist_name);
6067c478bd9Sstevel@tonic-gate 	else
6077c478bd9Sstevel@tonic-gate 		sprintf(name + strlen(name), "%d", code);
6087c478bd9Sstevel@tonic-gate 
6097c478bd9Sstevel@tonic-gate 	return name;
6107c478bd9Sstevel@tonic-gate }
6117c478bd9Sstevel@tonic-gate 
icmpname6(type,code)6127c478bd9Sstevel@tonic-gate static	char	*icmpname6(type, code)
6137c478bd9Sstevel@tonic-gate u_int	type;
6147c478bd9Sstevel@tonic-gate u_int	code;
6157c478bd9Sstevel@tonic-gate {
6167c478bd9Sstevel@tonic-gate 	static char name[80];
6177c478bd9Sstevel@tonic-gate 	icmp_subtype_t *ist;
6187c478bd9Sstevel@tonic-gate 	icmp_type_t *it;
6197c478bd9Sstevel@tonic-gate 	char *s;
6207c478bd9Sstevel@tonic-gate 
6217c478bd9Sstevel@tonic-gate 	s = NULL;
6227c478bd9Sstevel@tonic-gate 	it = find_icmptype(type, icmptypes6, sizeof(icmptypes6) / sizeof(*it));
6237c478bd9Sstevel@tonic-gate 	if (it != NULL)
6247c478bd9Sstevel@tonic-gate 		s = it->it_name;
6257c478bd9Sstevel@tonic-gate 
6267c478bd9Sstevel@tonic-gate 	if (s == NULL)
6277c478bd9Sstevel@tonic-gate 		sprintf(name, "icmpv6type(%d)/", type);
6287c478bd9Sstevel@tonic-gate 	else
6297c478bd9Sstevel@tonic-gate 		sprintf(name, "%s/", s);
6307c478bd9Sstevel@tonic-gate 
6317c478bd9Sstevel@tonic-gate 	ist = NULL;
6327c478bd9Sstevel@tonic-gate 	if (it != NULL && it->it_subtable != NULL)
6337c478bd9Sstevel@tonic-gate 		ist = find_icmpsubtype(code, it->it_subtable, it->it_stsize);
6347c478bd9Sstevel@tonic-gate 
6357c478bd9Sstevel@tonic-gate 	if (ist != NULL && ist->ist_name != NULL)
6367c478bd9Sstevel@tonic-gate 		strcat(name, ist->ist_name);
6377c478bd9Sstevel@tonic-gate 	else
6387c478bd9Sstevel@tonic-gate 		sprintf(name + strlen(name), "%d", code);
6397c478bd9Sstevel@tonic-gate 
6407c478bd9Sstevel@tonic-gate 	return name;
6417c478bd9Sstevel@tonic-gate }
6427c478bd9Sstevel@tonic-gate 
6437c478bd9Sstevel@tonic-gate 
dumphex(log,dopts,buf,len)6447c478bd9Sstevel@tonic-gate void	dumphex(log, dopts, buf, len)
6457c478bd9Sstevel@tonic-gate FILE	*log;
6467c478bd9Sstevel@tonic-gate int	dopts;
6477c478bd9Sstevel@tonic-gate char	*buf;
6487c478bd9Sstevel@tonic-gate int	len;
6497c478bd9Sstevel@tonic-gate {
6507c478bd9Sstevel@tonic-gate 	char	hline[80];
6517c478bd9Sstevel@tonic-gate 	int	i, j, k;
6527c478bd9Sstevel@tonic-gate 	u_char	*s = (u_char *)buf, *t = (u_char *)hline;
6537c478bd9Sstevel@tonic-gate 
6547c478bd9Sstevel@tonic-gate 	if (buf == NULL || len == 0)
6557c478bd9Sstevel@tonic-gate 		return;
6567c478bd9Sstevel@tonic-gate 
6577c478bd9Sstevel@tonic-gate 	*hline = '\0';
6587c478bd9Sstevel@tonic-gate 
6597c478bd9Sstevel@tonic-gate 	for (i = len, j = 0; i; i--, j++, s++) {
6607c478bd9Sstevel@tonic-gate 		if (j && !(j & 0xf)) {
6617c478bd9Sstevel@tonic-gate 			*t++ = '\n';
6627c478bd9Sstevel@tonic-gate 			*t = '\0';
6637c478bd9Sstevel@tonic-gate 			if (!(dopts & OPT_SYSLOG))
6647c478bd9Sstevel@tonic-gate 				fputs(hline, log);
6657c478bd9Sstevel@tonic-gate 			else
6667c478bd9Sstevel@tonic-gate 				syslog(LOG_INFO, "%s", hline);
6677c478bd9Sstevel@tonic-gate 			t = (u_char *)hline;
6687c478bd9Sstevel@tonic-gate 			*t = '\0';
6697c478bd9Sstevel@tonic-gate 		}
6707c478bd9Sstevel@tonic-gate 		sprintf((char *)t, "%02x", *s & 0xff);
6717c478bd9Sstevel@tonic-gate 		t += 2;
6727c478bd9Sstevel@tonic-gate 		if (!((j + 1) & 0xf)) {
6737c478bd9Sstevel@tonic-gate 			s -= 15;
6747c478bd9Sstevel@tonic-gate 			sprintf((char *)t, "        ");
6757c478bd9Sstevel@tonic-gate 			t += 8;
6767c478bd9Sstevel@tonic-gate 			for (k = 16; k; k--, s++)
677ab25eeb5Syz 				*t++ = (ISPRINT(*s) ? *s : '.');
6787c478bd9Sstevel@tonic-gate 			s--;
6797c478bd9Sstevel@tonic-gate 		}
6807c478bd9Sstevel@tonic-gate 
6817c478bd9Sstevel@tonic-gate 		if ((j + 1) & 0xf)
6827c478bd9Sstevel@tonic-gate 			*t++ = ' ';;
6837c478bd9Sstevel@tonic-gate 	}
6847c478bd9Sstevel@tonic-gate 
6857c478bd9Sstevel@tonic-gate 	if (j & 0xf) {
6867c478bd9Sstevel@tonic-gate 		for (k = 16 - (j & 0xf); k; k--) {
6877c478bd9Sstevel@tonic-gate 			*t++ = ' ';
6887c478bd9Sstevel@tonic-gate 			*t++ = ' ';
6897c478bd9Sstevel@tonic-gate 			*t++ = ' ';
6907c478bd9Sstevel@tonic-gate 		}
6917c478bd9Sstevel@tonic-gate 		sprintf((char *)t, "       ");
6927c478bd9Sstevel@tonic-gate 		t += 7;
6937c478bd9Sstevel@tonic-gate 		s -= j & 0xf;
6947c478bd9Sstevel@tonic-gate 		for (k = j & 0xf; k; k--, s++)
695ab25eeb5Syz 			*t++ = (ISPRINT(*s) ? *s : '.');
6967c478bd9Sstevel@tonic-gate 		*t++ = '\n';
6977c478bd9Sstevel@tonic-gate 		*t = '\0';
6987c478bd9Sstevel@tonic-gate 	}
6997c478bd9Sstevel@tonic-gate 	if (!(dopts & OPT_SYSLOG)) {
7007c478bd9Sstevel@tonic-gate 		fputs(hline, log);
7017c478bd9Sstevel@tonic-gate 		fflush(log);
7027c478bd9Sstevel@tonic-gate 	} else
7037c478bd9Sstevel@tonic-gate 		syslog(LOG_INFO, "%s", hline);
7047c478bd9Sstevel@tonic-gate }
7057c478bd9Sstevel@tonic-gate 
7067c478bd9Sstevel@tonic-gate 
get_tm(sec)7077c478bd9Sstevel@tonic-gate static	struct	tm	*get_tm(sec)
7087c478bd9Sstevel@tonic-gate #ifdef __hpux
7097c478bd9Sstevel@tonic-gate u_32_t	sec;
7107c478bd9Sstevel@tonic-gate #else
7117c478bd9Sstevel@tonic-gate time_t	sec;
7127c478bd9Sstevel@tonic-gate #endif
7137c478bd9Sstevel@tonic-gate {
7147c478bd9Sstevel@tonic-gate 	struct tm *tm;
7157c478bd9Sstevel@tonic-gate 	time_t t;
7167c478bd9Sstevel@tonic-gate 
7177c478bd9Sstevel@tonic-gate 	t = sec;
7187c478bd9Sstevel@tonic-gate 	tm = localtime(&t);
7197c478bd9Sstevel@tonic-gate 	return tm;
7207c478bd9Sstevel@tonic-gate }
7217c478bd9Sstevel@tonic-gate 
print_natlog(log,buf,blen)7227c478bd9Sstevel@tonic-gate static	void	print_natlog(log, buf, blen)
7237c478bd9Sstevel@tonic-gate FILE	*log;
7247c478bd9Sstevel@tonic-gate char	*buf;
7257c478bd9Sstevel@tonic-gate int	blen;
7267c478bd9Sstevel@tonic-gate {
7277c478bd9Sstevel@tonic-gate 	struct	natlog	*nl;
7287c478bd9Sstevel@tonic-gate 	iplog_t	*ipl = (iplog_t *)buf;
7297c478bd9Sstevel@tonic-gate 	char	*t = line;
7307c478bd9Sstevel@tonic-gate 	struct	tm	*tm;
7317c478bd9Sstevel@tonic-gate 	int	res, i, len;
7327c478bd9Sstevel@tonic-gate 	char	*proto;
7337c478bd9Sstevel@tonic-gate 
7347c478bd9Sstevel@tonic-gate 	nl = (struct natlog *)((char *)ipl + sizeof(*ipl));
7357c478bd9Sstevel@tonic-gate 	res = (opts & OPT_RESOLVE) ? 1 : 0;
7367c478bd9Sstevel@tonic-gate 	tm = get_tm(ipl->ipl_sec);
7377c478bd9Sstevel@tonic-gate 	len = sizeof(line);
7387c478bd9Sstevel@tonic-gate 	if (!(opts & OPT_SYSLOG)) {
7397c478bd9Sstevel@tonic-gate 		(void) strftime(t, len, "%d/%m/%Y ", tm);
7407c478bd9Sstevel@tonic-gate 		i = strlen(t);
7417c478bd9Sstevel@tonic-gate 		len -= i;
7427c478bd9Sstevel@tonic-gate 		t += i;
7437c478bd9Sstevel@tonic-gate 	}
7447c478bd9Sstevel@tonic-gate 	(void) strftime(t, len, "%T", tm);
7457c478bd9Sstevel@tonic-gate 	t += strlen(t);
746d6c23f6fSyx 	(void) sprintf(t, ".%-.6ld @%hd ", ipl->ipl_usec, nl->nlg_rule + 1);
7477c478bd9Sstevel@tonic-gate 	t += strlen(t);
7487c478bd9Sstevel@tonic-gate 
749d6c23f6fSyx 	if (nl->nlg_type == NL_NEWMAP)
7507c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:MAP ");
751d6c23f6fSyx 	else if (nl->nlg_type == NL_NEWRDR)
7527c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:RDR ");
753d6c23f6fSyx 	else if (nl->nlg_type == NL_FLUSH)
7547c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:FLUSH ");
755d6c23f6fSyx 	else if (nl->nlg_type == NL_EXPIRE)
7567c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:EXPIRE ");
757d6c23f6fSyx 	else if (nl->nlg_type == NL_NEWBIMAP)
7587c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:BIMAP ");
759d6c23f6fSyx 	else if (nl->nlg_type == NL_NEWBLOCK)
7607c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:MAPBLOCK ");
761d6c23f6fSyx 	else if (nl->nlg_type == NL_CLONE)
7627c478bd9Sstevel@tonic-gate 		strcpy(t, "NAT:CLONE ");
7637c478bd9Sstevel@tonic-gate 	else
764d6c23f6fSyx 		sprintf(t, "Type: %d ", nl->nlg_type);
7657c478bd9Sstevel@tonic-gate 	t += strlen(t);
7667c478bd9Sstevel@tonic-gate 
767d6c23f6fSyx 	proto = getproto(nl->nlg_p);
7687c478bd9Sstevel@tonic-gate 
769d6c23f6fSyx 	(void) sprintf(t, "%s,%s <- -> ", hostname(res, nl->nlg_v,
770d6c23f6fSyx 		(u_32_t *)&nl->nlg_inip),
771d6c23f6fSyx 		portname(res, proto, (u_int)nl->nlg_inport));
7727c478bd9Sstevel@tonic-gate 	t += strlen(t);
773d6c23f6fSyx 	(void) sprintf(t, "%s,%s ", hostname(res, nl->nlg_v,
774d6c23f6fSyx 		(u_32_t *)&nl->nlg_outip),
775d6c23f6fSyx 		portname(res, proto, (u_int)nl->nlg_outport));
7767c478bd9Sstevel@tonic-gate 	t += strlen(t);
777d6c23f6fSyx 	(void) sprintf(t, "[%s,%s]", hostname(res, nl->nlg_v,
778d6c23f6fSyx 		(u_32_t *)&nl->nlg_origip),
779d6c23f6fSyx 		portname(res, proto, (u_int)nl->nlg_origport));
7807c478bd9Sstevel@tonic-gate 	t += strlen(t);
781d6c23f6fSyx 	if (nl->nlg_type == NL_EXPIRE) {
7827c478bd9Sstevel@tonic-gate #ifdef	USE_QUAD_T
7837c478bd9Sstevel@tonic-gate 		(void) sprintf(t, " Pkts %qd/%qd Bytes %qd/%qd",
784d6c23f6fSyx 				(long long)nl->nlg_pkts[0],
785d6c23f6fSyx 				(long long)nl->nlg_pkts[1],
786d6c23f6fSyx 				(long long)nl->nlg_bytes[0],
787d6c23f6fSyx 				(long long)nl->nlg_bytes[1]);
7887c478bd9Sstevel@tonic-gate #else
789ab25eeb5Syz 		(void) sprintf(t, " Pkts %ld/%ld Bytes %ld/%ld",
790d6c23f6fSyx 				nl->nlg_pkts[0], nl->nlg_pkts[1],
791d6c23f6fSyx 				nl->nlg_bytes[0], nl->nlg_bytes[1]);
7927c478bd9Sstevel@tonic-gate #endif
7937c478bd9Sstevel@tonic-gate 		t += strlen(t);
7947c478bd9Sstevel@tonic-gate 	}
7957c478bd9Sstevel@tonic-gate 
7967c478bd9Sstevel@tonic-gate 	*t++ = '\n';
7977c478bd9Sstevel@tonic-gate 	*t++ = '\0';
7987c478bd9Sstevel@tonic-gate 	if (opts & OPT_SYSLOG)
7997c478bd9Sstevel@tonic-gate 		syslog(LOG_INFO, "%s", line);
8007c478bd9Sstevel@tonic-gate 	else
8017c478bd9Sstevel@tonic-gate 		(void) fprintf(log, "%s", line);
8027c478bd9Sstevel@tonic-gate }
8037c478bd9Sstevel@tonic-gate 
8047c478bd9Sstevel@tonic-gate 
print_statelog(log,buf,blen)8057c478bd9Sstevel@tonic-gate static	void	print_statelog(log, buf, blen)
8067c478bd9Sstevel@tonic-gate FILE	*log;
8077c478bd9Sstevel@tonic-gate char	*buf;
8087c478bd9Sstevel@tonic-gate int	blen;
8097c478bd9Sstevel@tonic-gate {
8107c478bd9Sstevel@tonic-gate 	struct	ipslog *sl;
8117c478bd9Sstevel@tonic-gate 	iplog_t	*ipl = (iplog_t *)buf;
8127c478bd9Sstevel@tonic-gate 	char	*t = line, *proto;
8137c478bd9Sstevel@tonic-gate 	struct	tm	*tm;
8147c478bd9Sstevel@tonic-gate 	int	res, i, len;
8157c478bd9Sstevel@tonic-gate 
8167c478bd9Sstevel@tonic-gate 	sl = (struct ipslog *)((char *)ipl + sizeof(*ipl));
8177c478bd9Sstevel@tonic-gate 	res = (opts & OPT_RESOLVE) ? 1 : 0;
8187c478bd9Sstevel@tonic-gate 	tm = get_tm(ipl->ipl_sec);
8197c478bd9Sstevel@tonic-gate 	len = sizeof(line);
8207c478bd9Sstevel@tonic-gate 	if (!(opts & OPT_SYSLOG)) {
8217c478bd9Sstevel@tonic-gate 		(void) strftime(t, len, "%d/%m/%Y ", tm);
8227c478bd9Sstevel@tonic-gate 		i = strlen(t);
8237c478bd9Sstevel@tonic-gate 		len -= i;
8247c478bd9Sstevel@tonic-gate 		t += i;
8257c478bd9Sstevel@tonic-gate 	}
8267c478bd9Sstevel@tonic-gate 	(void) strftime(t, len, "%T", tm);
8277c478bd9Sstevel@tonic-gate 	t += strlen(t);
8287c478bd9Sstevel@tonic-gate 	(void) sprintf(t, ".%-.6ld ", ipl->ipl_usec);
8297c478bd9Sstevel@tonic-gate 	t += strlen(t);
8307c478bd9Sstevel@tonic-gate 
8317c478bd9Sstevel@tonic-gate 	if (sl->isl_type == ISL_NEW)
8327c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:NEW ");
8337c478bd9Sstevel@tonic-gate 	else if (sl->isl_type == ISL_CLONE)
8347c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:CLONED ");
8357c478bd9Sstevel@tonic-gate 	else if (sl->isl_type == ISL_EXPIRE) {
8367c478bd9Sstevel@tonic-gate 		if ((sl->isl_p == IPPROTO_TCP) &&
8377c478bd9Sstevel@tonic-gate 		    (sl->isl_state[0] > IPF_TCPS_ESTABLISHED ||
8387c478bd9Sstevel@tonic-gate 		     sl->isl_state[1] > IPF_TCPS_ESTABLISHED))
8397c478bd9Sstevel@tonic-gate 			strcpy(t, "STATE:CLOSE ");
8407c478bd9Sstevel@tonic-gate 		else
8417c478bd9Sstevel@tonic-gate 			strcpy(t, "STATE:EXPIRE ");
8427c478bd9Sstevel@tonic-gate 	} else if (sl->isl_type == ISL_FLUSH)
8437c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:FLUSH ");
8447c478bd9Sstevel@tonic-gate 	else if (sl->isl_type == ISL_INTERMEDIATE)
8457c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:INTERMEDIATE ");
8467c478bd9Sstevel@tonic-gate 	else if (sl->isl_type == ISL_REMOVE)
8477c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:REMOVE ");
8487c478bd9Sstevel@tonic-gate 	else if (sl->isl_type == ISL_KILLED)
8497c478bd9Sstevel@tonic-gate 		strcpy(t, "STATE:KILLED ");
8507c478bd9Sstevel@tonic-gate 	else
8517c478bd9Sstevel@tonic-gate 		sprintf(t, "Type: %d ", sl->isl_type);
8527c478bd9Sstevel@tonic-gate 	t += strlen(t);
8537c478bd9Sstevel@tonic-gate 
8547c478bd9Sstevel@tonic-gate 	proto = getproto(sl->isl_p);
8557c478bd9Sstevel@tonic-gate 
8567c478bd9Sstevel@tonic-gate 	if (sl->isl_p == IPPROTO_TCP || sl->isl_p == IPPROTO_UDP) {
8577c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s,%s -> ",
8587c478bd9Sstevel@tonic-gate 			hostname(res, sl->isl_v, (u_32_t *)&sl->isl_src),
8597c478bd9Sstevel@tonic-gate 			portname(res, proto, (u_int)sl->isl_sport));
8607c478bd9Sstevel@tonic-gate 		t += strlen(t);
8617c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s,%s PR %s",
8627c478bd9Sstevel@tonic-gate 			hostname(res, sl->isl_v, (u_32_t *)&sl->isl_dst),
8637c478bd9Sstevel@tonic-gate 			portname(res, proto, (u_int)sl->isl_dport), proto);
8647c478bd9Sstevel@tonic-gate 	} else if (sl->isl_p == IPPROTO_ICMP) {
8657c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s -> ", hostname(res, sl->isl_v,
8667c478bd9Sstevel@tonic-gate 						     (u_32_t *)&sl->isl_src));
8677c478bd9Sstevel@tonic-gate 		t += strlen(t);
8687c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s PR icmp %d",
8697c478bd9Sstevel@tonic-gate 			hostname(res, sl->isl_v, (u_32_t *)&sl->isl_dst),
8707c478bd9Sstevel@tonic-gate 			sl->isl_itype);
8717c478bd9Sstevel@tonic-gate 	} else if (sl->isl_p == IPPROTO_ICMPV6) {
8727c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s -> ", hostname(res, sl->isl_v,
8737c478bd9Sstevel@tonic-gate 						     (u_32_t *)&sl->isl_src));
8747c478bd9Sstevel@tonic-gate 		t += strlen(t);
8757c478bd9Sstevel@tonic-gate 		(void) sprintf(t, "%s PR icmpv6 %d",
8767c478bd9Sstevel@tonic-gate 			hostname(res, sl->isl_v, (u_32_t *)&sl->isl_dst),
8777c478bd9Sstevel@tonic-gate 			sl->isl_itype);
878ab25eeb5Syz 	} else {
879ab25eeb5Syz 		(void) sprintf(t, "%s -> ",
880ab25eeb5Syz 			hostname(res, sl->isl_v, (u_32_t *)&sl->isl_src));
881ab25eeb5Syz 		t += strlen(t);
882ab25eeb5Syz