[mirror_iproute2.git] / tc / m_mirred.c

/*
 * m_egress.c		ingress/egress packet mirror/redir actions module
 *
 *		This program is free software; you can distribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:  J Hadi Salim (hadi@cyberus.ca)
 *
 * TODO: Add Ingress support
 *
 */

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <syslog.h>
#include <fcntl.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <string.h>
#include "utils.h"
#include "tc_util.h"
#include "tc_common.h"
#include <linux/tc_act/tc_mirred.h>

static void
explain(void)
{
	fprintf(stderr, "Usage: mirred <DIRECTION> <ACTION> [index INDEX] <dev DEVICENAME> \n");
	fprintf(stderr, "where: \n");
	fprintf(stderr, "\tDIRECTION := <ingress | egress>\n");
	fprintf(stderr, "\tACTION := <mirror | redirect>\n");
	fprintf(stderr, "\tINDEX  is the specific policy instance id\n");
	fprintf(stderr, "\tDEVICENAME is the devicename \n");

}

static void
usage(void)
{
	explain();
	exit(-1);
}

char *mirred_n2a(int action)
{
	switch (action) {
	case TCA_EGRESS_REDIR:
		return "Egress Redirect";
	case TCA_INGRESS_REDIR:
		return "Ingress Redirect";
	case TCA_EGRESS_MIRROR:
		return "Egress Mirror";
	case TCA_INGRESS_MIRROR:
		return "Ingress Mirror";
	default:
		return "unknown";
	}
}

int
parse_egress(struct action_util *a, int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
{

	int argc = *argc_p;
	char **argv = *argv_p;
	int ok = 0, iok = 0, mirror=0,redir=0;
	struct tc_mirred p;
	struct rtattr *tail;
	char d[16];

	memset(d,0,sizeof(d)-1);
	memset(&p,0,sizeof(struct tc_mirred));

	while (argc > 0) {

		if (matches(*argv, "action") == 0) {
			break;
		} else if (matches(*argv, "egress") == 0) {
			NEXT_ARG();
			ok++;
			continue;
		} else {

			if (matches(*argv, "index") == 0) {
				NEXT_ARG();
				if (get_u32(&p.index, *argv, 10)) {
					fprintf(stderr, "Illegal \"index\"\n");
					return -1;
				}
				iok++;
				if (!ok) {
					argc--;
					argv++;
					break;
				}
			} else if(!ok) {
				fprintf(stderr, "was expecting egress (%s)\n", *argv);
				break;

			} else if (!mirror && matches(*argv, "mirror") == 0) {
				mirror=1;
				if (redir) {
					fprintf(stderr, "Cant have both mirror and redir\n");
					return -1;
				}
				p.eaction = TCA_EGRESS_MIRROR;
				p.action = TC_ACT_PIPE;
				ok++;
			} else if (!redir && matches(*argv, "redirect") == 0) {
				redir=1;
				if (mirror) {
					fprintf(stderr, "Cant have both mirror and redir\n");
					return -1;
				}
				p.eaction = TCA_EGRESS_REDIR;
				p.action = TC_ACT_STOLEN;
				ok++;
			} else if ((redir || mirror) && matches(*argv, "dev") == 0) {
				NEXT_ARG();
				if (strlen(d))
					duparg("dev", *argv);

				strncpy(d, *argv, sizeof(d)-1);
				argc--;
				argv++;

				break;

			}
		}

		NEXT_ARG();
	}

	if (!ok && !iok) {
		return -1;
	}


	if (d[0])  {
		int idx;
		ll_init_map(&rth);

		if ((idx = ll_name_to_index(d)) == 0) {
			fprintf(stderr, "Cannot find device \"%s\"\n", d);
			return -1;
		}

		p.ifindex = idx;
	}


	if (argc && p.eaction == TCA_EGRESS_MIRROR) {

		if (matches(*argv, "reclassify") == 0) {
			p.action = TC_POLICE_RECLASSIFY;
			NEXT_ARG();
		} else if (matches(*argv, "pipe") == 0) {
			p.action = TC_POLICE_PIPE;
			NEXT_ARG();
		} else if (matches(*argv, "drop") == 0 ||
			   matches(*argv, "shot") == 0) {
			p.action = TC_POLICE_SHOT;
			NEXT_ARG();
		} else if (matches(*argv, "continue") == 0) {
			p.action = TC_POLICE_UNSPEC;
			NEXT_ARG();
		} else if (matches(*argv, "pass") == 0) {
			p.action = TC_POLICE_OK;
			NEXT_ARG();
		}

	}

	if (argc) {
		if (iok && matches(*argv, "index") == 0) {
			fprintf(stderr, "mirred: Illegal double index\n");
			return -1;
		} else {
			if (matches(*argv, "index") == 0) {
				NEXT_ARG();
				if (get_u32(&p.index, *argv, 10)) {
					fprintf(stderr, "mirred: Illegal \"index\"\n");
					return -1;
				}
				argc--;
				argv++;
			}
		}
	}

	tail = NLMSG_TAIL(n);
	addattr_l(n, MAX_MSG, tca_id, NULL, 0);
	addattr_l(n, MAX_MSG, TCA_MIRRED_PARMS, &p, sizeof (p));
	tail->rta_len = (void *) NLMSG_TAIL(n) - (void *) tail;

	*argc_p = argc;
	*argv_p = argv;
	return 0;
}


int
parse_mirred(struct action_util *a, int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
{

	int argc = *argc_p;
	char **argv = *argv_p;

	if (argc < 0) {
		fprintf(stderr,"mirred bad arguement count %d\n", argc);
		return -1;
	}

	if (matches(*argv, "mirred") == 0) {
		NEXT_ARG();
	} else {
		fprintf(stderr,"mirred bad arguement %s\n", *argv);
		return -1;
	}


	if (matches(*argv, "egress") == 0 || matches(*argv, "index") == 0) {
		int ret = parse_egress(a, &argc, &argv, tca_id, n);
		if (ret == 0) {
			*argc_p = argc;
			*argv_p = argv;
			return 0;
		}

	} else if (matches(*argv, "ingress") == 0) {
		fprintf(stderr,"mirred ingress not supported at the moment\n");
	} else if (matches(*argv, "help") == 0) {
		usage();
	} else {
		fprintf(stderr,"mirred option not supported %s\n", *argv);
	}

	return -1;

}

int
print_mirred(struct action_util *au,FILE * f, struct rtattr *arg)
{
	struct tc_mirred *p;
	struct rtattr *tb[TCA_MIRRED_MAX + 1];
	const char *dev;
	SPRINT_BUF(b1);

	if (arg == NULL)
		return -1;

	parse_rtattr_nested(tb, TCA_MIRRED_MAX, arg);

	if (tb[TCA_MIRRED_PARMS] == NULL) {
		fprintf(f, "[NULL mirred parameters]");
		return -1;
	}
	p = RTA_DATA(tb[TCA_MIRRED_PARMS]);

	/*
	ll_init_map(&rth);
	*/


	if ((dev = ll_index_to_name(p->ifindex)) == 0) {
		fprintf(stderr, "Cannot find device %d\n", p->ifindex);
		return -1;
	}

	fprintf(f, "mirred (%s to device %s) %s", mirred_n2a(p->eaction), dev,action_n2a(p->action, b1, sizeof (b1)));

	fprintf(f, "\n ");
	fprintf(f, "\tindex %d ref %d bind %d",p->index,p->refcnt,p->bindcnt);

	if (show_stats) {
		if (tb[TCA_MIRRED_TM]) {
			struct tcf_t *tm = RTA_DATA(tb[TCA_MIRRED_TM]);
			print_tm(f,tm);
		}
	}
	fprintf(f, "\n ");
	return 0;
}

struct action_util mirred_action_util = {
	.id = "mirred",
	.parse_aopt = parse_mirred,
	.print_aopt = print_mirred,
};
Commit	Line	Data
00fa8480	1	/*
ae665a52	2	* m_egress.c ingress/egress packet mirror/redir actions module
00fa8480	3	*
	4	* This program is free software; you can distribute it and/or
	5	* modify it under the terms of the GNU General Public License
	6	* as published by the Free Software Foundation; either version
	7	* 2 of the License, or (at your option) any later version.
	8	*
ae665a52 SH	9	* Authors: J Hadi Salim (hadi@cyberus.ca)
ae665a52 SH	10	*
00fa8480	11	* TODO: Add Ingress support
	12	*
	13	*/
	14
	15	#include <stdio.h>
	16	#include <stdlib.h>
	17	#include <unistd.h>
	18	#include <syslog.h>
	19	#include <fcntl.h>
	20	#include <sys/socket.h>
	21	#include <netinet/in.h>
	22	#include <arpa/inet.h>
	23	#include <string.h>
	24	#include "utils.h"
	25	#include "tc_util.h"
c1027a75	26	#include "tc_common.h"
00fa8480	27	#include <linux/tc_act/tc_mirred.h>
00fa8480	28
00fa8480	29	static void
	30	explain(void)
	31	{
	32	fprintf(stderr, "Usage: mirred <DIRECTION> <ACTION> [index INDEX] <dev DEVICENAME> \n");
	33	fprintf(stderr, "where: \n");
ebf32083 JHS	34	fprintf(stderr, "\tDIRECTION := <ingress \| egress>\n");
	35	fprintf(stderr, "\tACTION := <mirror \| redirect>\n");
	36	fprintf(stderr, "\tINDEX is the specific policy instance id\n");
	37	fprintf(stderr, "\tDEVICENAME is the devicename \n");
	38
00fa8480	39	}
00fa8480	40
ebf32083 JHS	41	static void
	42	usage(void)
	43	{
	44	explain();
	45	exit(-1);
	46	}
00fa8480	47
	48	char *mirred_n2a(int action)
	49	{
	50	switch (action) {
	51	case TCA_EGRESS_REDIR:
	52	return "Egress Redirect";
	53	case TCA_INGRESS_REDIR:
	54	return "Ingress Redirect";
	55	case TCA_EGRESS_MIRROR:
	56	return "Egress Mirror";
	57	case TCA_INGRESS_MIRROR:
	58	return "Ingress Mirror";
	59	default:
	60	return "unknown";
	61	}
	62	}
	63
	64	int
	65	parse_egress(struct action_util a, int argc_p, char **argv_p, int tca_id, struct nlmsghdr n)
	66	{
	67
	68	int argc = *argc_p;
	69	char *argv = argv_p;
	70	int ok = 0, iok = 0, mirror=0,redir=0;
	71	struct tc_mirred p;
	72	struct rtattr *tail;
	73	char d[16];
00fa8480	74
	75	memset(d,0,sizeof(d)-1);
	76	memset(&p,0,sizeof(struct tc_mirred));
	77
	78	while (argc > 0) {
	79
	80	if (matches(*argv, "action") == 0) {
	81	break;
	82	} else if (matches(*argv, "egress") == 0) {
	83	NEXT_ARG();
	84	ok++;
	85	continue;
	86	} else {
	87
	88	if (matches(*argv, "index") == 0) {
	89	NEXT_ARG();
	90	if (get_u32(&p.index, *argv, 10)) {
	91	fprintf(stderr, "Illegal \"index\"\n");
	92	return -1;
	93	}
	94	iok++;
	95	if (!ok) {
	96	argc--;
	97	argv++;
	98	break;
	99	}
	100	} else if(!ok) {
	101	fprintf(stderr, "was expecting egress (%s)\n", *argv);
	102	break;
	103
	104	} else if (!mirror && matches(*argv, "mirror") == 0) {
	105	mirror=1;
	106	if (redir) {
	107	fprintf(stderr, "Cant have both mirror and redir\n");
	108	return -1;
	109	}
	110	p.eaction = TCA_EGRESS_MIRROR;
	111	p.action = TC_ACT_PIPE;
	112	ok++;
	113	} else if (!redir && matches(*argv, "redirect") == 0) {
	114	redir=1;
	115	if (mirror) {
	116	fprintf(stderr, "Cant have both mirror and redir\n");
	117	return -1;
	118	}
	119	p.eaction = TCA_EGRESS_REDIR;
	120	p.action = TC_ACT_STOLEN;
	121	ok++;
	122	} else if ((redir \|\| mirror) && matches(*argv, "dev") == 0) {
	123	NEXT_ARG();
	124	if (strlen(d))
	125	duparg("dev", *argv);
	126
	127	strncpy(d, *argv, sizeof(d)-1);
	128	argc--;
	129	argv++;
	130
	131	break;
	132
	133	}
	134	}
	135
	136	NEXT_ARG();
	137	}
138
139	if (!ok && !iok) {
00fa8480	140	return -1;
	141	}
	142
	143
	144
	145	if (d[0]) {
	146	int idx;
00fa8480	147	ll_init_map(&rth);
00fa8480	148
00fa8480	149	if ((idx = ll_name_to_index(d)) == 0) {
00fa8480	150	fprintf(stderr, "Cannot find device \"%s\"\n", d);
00fa8480	151	return -1;
	152	}
	153
	154	p.ifindex = idx;
00fa8480	155	}
	156
	157
	158	if (argc && p.eaction == TCA_EGRESS_MIRROR) {
	159
	160	if (matches(*argv, "reclassify") == 0) {
	161	p.action = TC_POLICE_RECLASSIFY;
	162	NEXT_ARG();
	163	} else if (matches(*argv, "pipe") == 0) {
	164	p.action = TC_POLICE_PIPE;
	165	NEXT_ARG();
	166	} else if (matches(*argv, "drop") == 0 \|\|
	167	matches(*argv, "shot") == 0) {
	168	p.action = TC_POLICE_SHOT;
	169	NEXT_ARG();
	170	} else if (matches(*argv, "continue") == 0) {
	171	p.action = TC_POLICE_UNSPEC;
	172	NEXT_ARG();
	173	} else if (matches(*argv, "pass") == 0) {
	174	p.action = TC_POLICE_OK;
	175	NEXT_ARG();
	176	}
	177
	178	}
	179
	180	if (argc) {
	181	if (iok && matches(*argv, "index") == 0) {
	182	fprintf(stderr, "mirred: Illegal double index\n");
	183	return -1;
	184	} else {
	185	if (matches(*argv, "index") == 0) {
	186	NEXT_ARG();
	187	if (get_u32(&p.index, *argv, 10)) {
	188	fprintf(stderr, "mirred: Illegal \"index\"\n");
	189	return -1;
	190	}
	191	argc--;
	192	argv++;
	193	}
	194	}
	195	}
	196
60a383ae	197	tail = NLMSG_TAIL(n);
00fa8480	198	addattr_l(n, MAX_MSG, tca_id, NULL, 0);
00fa8480	199	addattr_l(n, MAX_MSG, TCA_MIRRED_PARMS, &p, sizeof (p));
60a383ae	200	tail->rta_len = (void ) NLMSG_TAIL(n) - (void ) tail;
00fa8480	201
	202	*argc_p = argc;
	203	*argv_p = argv;
	204	return 0;
	205	}
	206
	207
	208	int
	209	parse_mirred(struct action_util a, int argc_p, char **argv_p, int tca_id, struct nlmsghdr n)
	210	{
	211
	212	int argc = *argc_p;
	213	char *argv = argv_p;
	214
	215	if (argc < 0) {
	216	fprintf(stderr,"mirred bad arguement count %d\n", argc);
	217	return -1;
	218	}
	219
	220	if (matches(*argv, "mirred") == 0) {
	221	NEXT_ARG();
	222	} else {
	223	fprintf(stderr,"mirred bad arguement %s\n", *argv);
	224	return -1;
	225	}
	226
	227
	228	if (matches(argv, "egress") == 0 \|\| matches(argv, "index") == 0) {
	229	int ret = parse_egress(a, &argc, &argv, tca_id, n);
	230	if (ret == 0) {
	231	*argc_p = argc;
	232	*argv_p = argv;
	233	return 0;
	234	}
	235
	236	} else if (matches(*argv, "ingress") == 0) {
	237	fprintf(stderr,"mirred ingress not supported at the moment\n");
ebf32083 JHS	238	} else if (matches(*argv, "help") == 0) {
ebf32083 JHS	239	usage();
00fa8480	240	} else {
ebf32083	241	fprintf(stderr,"mirred option not supported %s\n", *argv);
00fa8480	242	}
	243
	244	return -1;
ae665a52	245
00fa8480	246	}
	247
	248	int
	249	print_mirred(struct action_util au,FILE f, struct rtattr *arg)
	250	{
	251	struct tc_mirred *p;
	252	struct rtattr *tb[TCA_MIRRED_MAX + 1];
00fa8480	253	const char *dev;
	254	SPRINT_BUF(b1);
	255
	256	if (arg == NULL)
	257	return -1;
	258
5cb5ee34	259	parse_rtattr_nested(tb, TCA_MIRRED_MAX, arg);
00fa8480	260
	261	if (tb[TCA_MIRRED_PARMS] == NULL) {
	262	fprintf(f, "[NULL mirred parameters]");
	263	return -1;
	264	}
	265	p = RTA_DATA(tb[TCA_MIRRED_PARMS]);
	266
6ce88ca6	267	/*
00fa8480	268	ll_init_map(&rth);
6ce88ca6 SH	269	*/
6ce88ca6 SH	270
00fa8480	271
00fa8480	272	if ((dev = ll_index_to_name(p->ifindex)) == 0) {
00fa8480	273	fprintf(stderr, "Cannot find device %d\n", p->ifindex);
00fa8480	274	return -1;
	275	}
	276
	277	fprintf(f, "mirred (%s to device %s) %s", mirred_n2a(p->eaction), dev,action_n2a(p->action, b1, sizeof (b1)));
	278
	279	fprintf(f, "\n ");
	280	fprintf(f, "\tindex %d ref %d bind %d",p->index,p->refcnt,p->bindcnt);
	281
	282	if (show_stats) {
	283	if (tb[TCA_MIRRED_TM]) {
	284	struct tcf_t *tm = RTA_DATA(tb[TCA_MIRRED_TM]);
	285	print_tm(f,tm);
	286	}
	287	}
	288	fprintf(f, "\n ");
00fa8480	289	return 0;
	290	}
	291
6ce88ca6	292	struct action_util mirred_action_util = {
00fa8480	293	.id = "mirred",
	294	.parse_aopt = parse_mirred,
	295	.print_aopt = print_mirred,
	296	};