bridge/fdb.c

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 /*
   3  * Get/set/delete fdb table with netlink
   4  *
   5  * TODO: merge/replace this with ip neighbour
   6  *
   7  * Authors:     Stephen Hemminger <shemminger@vyatta.com>
   8  */
   9
  10 #include <stdio.h>
  11 #include <stdlib.h>
  12 #include <unistd.h>
  13 #include <netdb.h>
  14 #include <time.h>
  15 #include <fcntl.h>
  16 #include <sys/socket.h>
  17 #include <sys/time.h>
  18 #include <net/if.h>
  19 #include <netinet/in.h>
  20 #include <linux/if_bridge.h>
  21 #include <linux/if_ether.h>
  22 #include <linux/neighbour.h>
  23 #include <string.h>
  24 #include <limits.h>
  25 #include <stdbool.h>
  26
  27 #include "json_print.h"
  28 #include "libnetlink.h"
  29 #include "br_common.h"
  30 #include "rt_names.h"
  31 #include "utils.h"
  32
  33 static unsigned int filter_index, filter_vlan, filter_state, filter_master;
  34
  35 static void usage(void)
  36 {
  37         fprintf(stderr,
  38                 "Usage: bridge fdb { add | append | del | replace } ADDR dev DEV\n"
  39                 "              [ self ] [ master ] [ use ] [ router ] [ extern_learn ]\n"
  40                 "              [ sticky ] [ local | static | dynamic ] [ dst IPADDR ]\n"
  41                 "              [ vlan VID ] [ port PORT] [ vni VNI ] [ via DEV ]\n"
  42                 "       bridge fdb [ show [ br BRDEV ] [ brport DEV ] [ vlan VID ] [ state STATE ] ]\n");
  43         exit(-1);
  44 }
  45
  46 static const char *state_n2a(unsigned int s)
  47 {
  48         static char buf[32];
  49
  50         if (s & NUD_PERMANENT)
  51                 return "permanent";
  52
  53         if (s & NUD_NOARP)
  54                 return "static";
  55
  56         if (s & NUD_STALE)
  57                 return "stale";
  58
  59         if (s & NUD_REACHABLE)
  60                 return "";
  61
  62         sprintf(buf, "state=%#x", s);
  63         return buf;
  64 }
  65
  66 static int state_a2n(unsigned int *s, const char *arg)
  67 {
  68         if (matches(arg, "permanent") == 0)
  69                 *s = NUD_PERMANENT;
  70         else if (matches(arg, "static") == 0 || matches(arg, "temp") == 0)
  71                 *s = NUD_NOARP;
  72         else if (matches(arg, "stale") == 0)
  73                 *s = NUD_STALE;
  74         else if (matches(arg, "reachable") == 0 || matches(arg, "dynamic") == 0)
  75                 *s = NUD_REACHABLE;
  76         else if (strcmp(arg, "all") == 0)
  77                 *s = ~0;
  78         else if (get_unsigned(s, arg, 0))
  79                 return -1;
  80
  81         return 0;
  82 }
  83
  84 static void fdb_print_flags(FILE *fp, unsigned int flags)
  85 {
  86         open_json_array(PRINT_JSON,
  87                         is_json_context() ?  "flags" : "");
  88
  89         if (flags & NTF_SELF)
  90                 print_string(PRINT_ANY, NULL, "%s ", "self");
  91
  92         if (flags & NTF_ROUTER)
  93                 print_string(PRINT_ANY, NULL, "%s ", "router");
  94
  95         if (flags & NTF_EXT_LEARNED)
  96                 print_string(PRINT_ANY, NULL, "%s ", "extern_learn");
  97
  98         if (flags & NTF_OFFLOADED)
  99                 print_string(PRINT_ANY, NULL, "%s ", "offload");
 100
 101         if (flags & NTF_MASTER)
 102                 print_string(PRINT_ANY, NULL, "%s ", "master");
 103
 104         if (flags & NTF_STICKY)
 105                 print_string(PRINT_ANY, NULL, "%s ", "sticky");
 106
 107         close_json_array(PRINT_JSON, NULL);
 108 }
 109
 110 static void fdb_print_stats(FILE *fp, const struct nda_cacheinfo *ci)
 111 {
 112         static int hz;
 113
 114         if (!hz)
 115                 hz = get_user_hz();
 116
 117         if (is_json_context()) {
 118                 print_uint(PRINT_JSON, "used", NULL,
 119                                  ci->ndm_used / hz);
 120                 print_uint(PRINT_JSON, "updated", NULL,
 121                                 ci->ndm_updated / hz);
 122         } else {
 123                 fprintf(fp, "used %d/%d ", ci->ndm_used / hz,
 124                                         ci->ndm_updated / hz);
 125
 126         }
 127 }
 128
 129 int print_fdb(struct nlmsghdr *n, void *arg)
 130 {
 131         FILE *fp = arg;
 132         struct ndmsg *r = NLMSG_DATA(n);
 133         int len = n->nlmsg_len;
 134         struct rtattr *tb[NDA_MAX+1];
 135         __u16 vid = 0;
 136
 137         if (n->nlmsg_type != RTM_NEWNEIGH && n->nlmsg_type != RTM_DELNEIGH) {
 138                 fprintf(stderr, "Not RTM_NEWNEIGH: %08x %08x %08x\n",
 139                         n->nlmsg_len, n->nlmsg_type, n->nlmsg_flags);
 140                 return 0;
 141         }
 142
 143         len -= NLMSG_LENGTH(sizeof(*r));
 144         if (len < 0) {
 145                 fprintf(stderr, "BUG: wrong nlmsg len %d\n", len);
 146                 return -1;
 147         }
 148
 149         if (r->ndm_family != AF_BRIDGE)
 150                 return 0;
 151
 152         if (filter_index && filter_index != r->ndm_ifindex)
 153                 return 0;
 154
 155         if (filter_state && !(r->ndm_state & filter_state))
 156                 return 0;
 157
 158         parse_rtattr(tb, NDA_MAX, NDA_RTA(r),
 159                      n->nlmsg_len - NLMSG_LENGTH(sizeof(*r)));
 160
 161         if (tb[NDA_VLAN])
 162                 vid = rta_getattr_u16(tb[NDA_VLAN]);
 163
 164         if (filter_vlan && filter_vlan != vid)
 165                 return 0;
 166
 167         open_json_object(NULL);
 168         if (n->nlmsg_type == RTM_DELNEIGH)
 169                 print_bool(PRINT_ANY, "deleted", "Deleted ", true);
 170
 171         if (tb[NDA_LLADDR]) {
 172                 const char *lladdr;
 173                 SPRINT_BUF(b1);
 174
 175                 lladdr = ll_addr_n2a(RTA_DATA(tb[NDA_LLADDR]),
 176                                      RTA_PAYLOAD(tb[NDA_LLADDR]),
 177                                      ll_index_to_type(r->ndm_ifindex),
 178                                      b1, sizeof(b1));
 179
 180                 print_color_string(PRINT_ANY, COLOR_MAC,
 181                                    "mac", "%s ", lladdr);
 182         }
 183
 184         if (!filter_index && r->ndm_ifindex)
 185                 print_color_string(PRINT_ANY, COLOR_IFNAME,
 186                                    "ifname", "dev %s ",
 187                                    ll_index_to_name(r->ndm_ifindex));
 188
 189         if (tb[NDA_DST]) {
 190                 int family = AF_INET;
 191                 const char *dst;
 192
 193                 if (RTA_PAYLOAD(tb[NDA_DST]) == sizeof(struct in6_addr))
 194                         family = AF_INET6;
 195
 196                 dst = format_host(family,
 197                                   RTA_PAYLOAD(tb[NDA_DST]),
 198                                   RTA_DATA(tb[NDA_DST]));
 199
 200                 print_color_string(PRINT_ANY,
 201                                    ifa_family_color(family),
 202                                     "dst", "dst %s ", dst);
 203         }
 204
 205         if (vid)
 206                 print_uint(PRINT_ANY,
 207                                  "vlan", "vlan %hu ", vid);
 208
 209         if (tb[NDA_PORT])
 210                 print_uint(PRINT_ANY,
 211                                  "port", "port %u ",
 212                                  rta_getattr_be16(tb[NDA_PORT]));
 213
 214         if (tb[NDA_VNI])
 215                 print_uint(PRINT_ANY,
 216                                  "vni", "vni %u ",
 217                                  rta_getattr_u32(tb[NDA_VNI]));
 218
 219         if (tb[NDA_SRC_VNI])
 220                 print_uint(PRINT_ANY,
 221                                  "src_vni", "src_vni %u ",
 222                                 rta_getattr_u32(tb[NDA_SRC_VNI]));
 223
 224         if (tb[NDA_IFINDEX]) {
 225                 unsigned int ifindex = rta_getattr_u32(tb[NDA_IFINDEX]);
 226
 227                 if (tb[NDA_LINK_NETNSID])
 228                         print_uint(PRINT_ANY,
 229                                          "viaIfIndex", "via ifindex %u ",
 230                                          ifindex);
 231                 else
 232                         print_string(PRINT_ANY,
 233                                            "viaIf", "via %s ",
 234                                            ll_index_to_name(ifindex));
 235         }
 236
 237         if (tb[NDA_LINK_NETNSID])
 238                 print_uint(PRINT_ANY,
 239                                  "linkNetNsId", "link-netnsid %d ",
 240                                  rta_getattr_u32(tb[NDA_LINK_NETNSID]));
 241
 242         if (show_stats && tb[NDA_CACHEINFO])
 243                 fdb_print_stats(fp, RTA_DATA(tb[NDA_CACHEINFO]));
 244
 245         fdb_print_flags(fp, r->ndm_flags);
 246
 247
 248         if (tb[NDA_MASTER])
 249                 print_string(PRINT_ANY, "master", "master %s ",
 250                              ll_index_to_name(rta_getattr_u32(tb[NDA_MASTER])));
 251
 252         print_string(PRINT_ANY, "state", "%s\n",
 253                            state_n2a(r->ndm_state));
 254         close_json_object();
 255         fflush(fp);
 256         return 0;
 257 }
 258
 259 static int fdb_linkdump_filter(struct nlmsghdr *nlh, int reqlen)
 260 {
 261         int err;
 262
 263         if (filter_index) {
 264                 struct ifinfomsg *ifm = NLMSG_DATA(nlh);
 265
 266                 ifm->ifi_index = filter_index;
 267         }
 268
 269         if (filter_master) {
 270                 err = addattr32(nlh, reqlen, IFLA_MASTER, filter_master);
 271                 if (err)
 272                         return err;
 273         }
 274
 275         return 0;
 276 }
 277
 278 static int fdb_dump_filter(struct nlmsghdr *nlh, int reqlen)
 279 {
 280         int err;
 281
 282         if (filter_index) {
 283                 struct ndmsg *ndm = NLMSG_DATA(nlh);
 284
 285                 ndm->ndm_ifindex = filter_index;
 286         }
 287
 288         if (filter_master) {
 289                 err = addattr32(nlh, reqlen, NDA_MASTER, filter_master);
 290                 if (err)
 291                         return err;
 292         }
 293
 294         return 0;
 295 }
 296
 297 static int fdb_show(int argc, char **argv)
 298 {
 299         char *filter_dev = NULL;
 300         char *br = NULL;
 301         int rc;
 302
 303         while (argc > 0) {
 304                 if ((strcmp(*argv, "brport") == 0) || strcmp(*argv, "dev") == 0) {
 305                         NEXT_ARG();
 306                         filter_dev = *argv;
 307                 } else if (strcmp(*argv, "br") == 0) {
 308                         NEXT_ARG();
 309                         br = *argv;
 310                 } else if (strcmp(*argv, "vlan") == 0) {
 311                         NEXT_ARG();
 312                         if (filter_vlan)
 313                                 duparg("vlan", *argv);
 314                         filter_vlan = atoi(*argv);
 315                 } else if (strcmp(*argv, "state") == 0) {
 316                         unsigned int state;
 317
 318                         NEXT_ARG();
 319                         if (state_a2n(&state, *argv))
 320                                 invarg("invalid state", *argv);
 321                         filter_state |= state;
 322                 } else {
 323                         if (matches(*argv, "help") == 0)
 324                                 usage();
 325                 }
 326                 argc--; argv++;
 327         }
 328
 329         if (br) {
 330                 int br_ifindex = ll_name_to_index(br);
 331
 332                 if (br_ifindex == 0) {
 333                         fprintf(stderr, "Cannot find bridge device \"%s\"\n", br);
 334                         return -1;
 335                 }
 336                 filter_master = br_ifindex;
 337         }
 338
 339         /*we'll keep around filter_dev for older kernels */
 340         if (filter_dev) {
 341                 filter_index = ll_name_to_index(filter_dev);
 342                 if (!filter_index)
 343                         return nodev(filter_dev);
 344         }
 345
 346         if (rth.flags & RTNL_HANDLE_F_STRICT_CHK)
 347                 rc = rtnl_neighdump_req(&rth, PF_BRIDGE, fdb_dump_filter);
 348         else
 349                 rc = rtnl_linkdump_req_filter_fn(&rth, PF_BRIDGE,
 350                                                  fdb_linkdump_filter);
 351         if (rc < 0) {
 352                 perror("Cannot send dump request");
 353                 exit(1);
 354         }
 355
 356         new_json_obj(json);
 357         if (rtnl_dump_filter(&rth, print_fdb, stdout) < 0) {
 358                 fprintf(stderr, "Dump terminated\n");
 359                 exit(1);
 360         }
 361         delete_json_obj();
 362         fflush(stdout);
 363
 364         return 0;
 365 }
 366
 367 static int fdb_modify(int cmd, int flags, int argc, char **argv)
 368 {
 369         struct {
 370                 struct nlmsghdr n;
 371                 struct ndmsg            ndm;
 372                 char                    buf[256];
 373         } req = {
 374                 .n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ndmsg)),
 375                 .n.nlmsg_flags = NLM_F_REQUEST | flags,
 376                 .n.nlmsg_type = cmd,
 377                 .ndm.ndm_family = PF_BRIDGE,
 378                 .ndm.ndm_state = NUD_NOARP,
 379         };
 380         char *addr = NULL;
 381         char *d = NULL;
 382         char abuf[ETH_ALEN];
 383         int dst_ok = 0;
 384         inet_prefix dst;
 385         unsigned long port = 0;
 386         unsigned long vni = ~0;
 387         unsigned int via = 0;
 388         char *endptr;
 389         short vid = -1;
 390
 391         while (argc > 0) {
 392                 if (strcmp(*argv, "dev") == 0) {
 393                         NEXT_ARG();
 394                         d = *argv;
 395                 } else if (strcmp(*argv, "dst") == 0) {
 396                         NEXT_ARG();
 397                         if (dst_ok)
 398                                 duparg2("dst", *argv);
 399                         get_addr(&dst, *argv, preferred_family);
 400                         dst_ok = 1;
 401                 } else if (strcmp(*argv, "port") == 0) {
 402
 403                         NEXT_ARG();
 404                         port = strtoul(*argv, &endptr, 0);
 405                         if (endptr && *endptr) {
 406                                 struct servent *pse;
 407
 408                                 pse = getservbyname(*argv, "udp");
 409                                 if (!pse)
 410                                         invarg("invalid port\n", *argv);
 411                                 port = ntohs(pse->s_port);
 412                         } else if (port > 0xffff)
 413                                 invarg("invalid port\n", *argv);
 414                 } else if (strcmp(*argv, "vni") == 0) {
 415                         NEXT_ARG();
 416                         vni = strtoul(*argv, &endptr, 0);
 417                         if ((endptr && *endptr) ||
 418                             (vni >> 24) || vni == ULONG_MAX)
 419                                 invarg("invalid VNI\n", *argv);
 420                 } else if (strcmp(*argv, "via") == 0) {
 421                         NEXT_ARG();
 422                         via = ll_name_to_index(*argv);
 423                         if (!via)
 424                                 exit(nodev(*argv));
 425                 } else if (strcmp(*argv, "self") == 0) {
 426                         req.ndm.ndm_flags |= NTF_SELF;
 427                 } else if (matches(*argv, "master") == 0) {
 428                         req.ndm.ndm_flags |= NTF_MASTER;
 429                 } else if (matches(*argv, "router") == 0) {
 430                         req.ndm.ndm_flags |= NTF_ROUTER;
 431                 } else if (matches(*argv, "local") == 0 ||
 432                            matches(*argv, "permanent") == 0) {
 433                         req.ndm.ndm_state |= NUD_PERMANENT;
 434                 } else if (matches(*argv, "temp") == 0 ||
 435                            matches(*argv, "static") == 0) {
 436                         req.ndm.ndm_state |= NUD_REACHABLE;
 437                 } else if (matches(*argv, "dynamic") == 0) {
 438                         req.ndm.ndm_state |= NUD_REACHABLE;
 439                         req.ndm.ndm_state &= ~NUD_NOARP;
 440                 } else if (matches(*argv, "vlan") == 0) {
 441                         if (vid >= 0)
 442                                 duparg2("vlan", *argv);
 443                         NEXT_ARG();
 444                         vid = atoi(*argv);
 445                 } else if (matches(*argv, "use") == 0) {
 446                         req.ndm.ndm_flags |= NTF_USE;
 447                 } else if (matches(*argv, "extern_learn") == 0) {
 448                         req.ndm.ndm_flags |= NTF_EXT_LEARNED;
 449                 } else if (matches(*argv, "sticky") == 0) {
 450                         req.ndm.ndm_flags |= NTF_STICKY;
 451                 } else {
 452                         if (strcmp(*argv, "to") == 0)
 453                                 NEXT_ARG();
 454
 455                         if (matches(*argv, "help") == 0)
 456                                 usage();
 457                         if (addr)
 458                                 duparg2("to", *argv);
 459                         addr = *argv;
 460                 }
 461                 argc--; argv++;
 462         }
 463
 464         if (d == NULL || addr == NULL) {
 465                 fprintf(stderr, "Device and address are required arguments.\n");
 466                 return -1;
 467         }
 468
 469         /* Assume self */
 470         if (!(req.ndm.ndm_flags&(NTF_SELF|NTF_MASTER)))
 471                 req.ndm.ndm_flags |= NTF_SELF;
 472
 473         /* Assume permanent */
 474         if (!(req.ndm.ndm_state&(NUD_PERMANENT|NUD_REACHABLE)))
 475                 req.ndm.ndm_state |= NUD_PERMANENT;
 476
 477         if (sscanf(addr, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx",
 478                    abuf, abuf+1, abuf+2,
 479                    abuf+3, abuf+4, abuf+5) != 6) {
 480                 fprintf(stderr, "Invalid mac address %s\n", addr);
 481                 return -1;
 482         }
 483
 484         addattr_l(&req.n, sizeof(req), NDA_LLADDR, abuf, ETH_ALEN);
 485         if (dst_ok)
 486                 addattr_l(&req.n, sizeof(req), NDA_DST, &dst.data, dst.bytelen);
 487
 488         if (vid >= 0)
 489                 addattr16(&req.n, sizeof(req), NDA_VLAN, vid);
 490
 491         if (port) {
 492                 unsigned short dport;
 493
 494                 dport = htons((unsigned short)port);
 495                 addattr16(&req.n, sizeof(req), NDA_PORT, dport);
 496         }
 497         if (vni != ~0)
 498                 addattr32(&req.n, sizeof(req), NDA_VNI, vni);
 499         if (via)
 500                 addattr32(&req.n, sizeof(req), NDA_IFINDEX, via);
 501
 502         req.ndm.ndm_ifindex = ll_name_to_index(d);
 503         if (!req.ndm.ndm_ifindex)
 504                 return nodev(d);
 505
 506         if (rtnl_talk(&rth, &req.n, NULL) < 0)
 507                 return -1;
 508
 509         return 0;
 510 }
 511
 512 int do_fdb(int argc, char **argv)
 513 {
 514         ll_init_map(&rth);
 515
 516         if (argc > 0) {
 517                 if (matches(*argv, "add") == 0)
 518                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_EXCL, argc-1, argv+1);
 519                 if (matches(*argv, "append") == 0)
 520                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_APPEND, argc-1, argv+1);
 521                 if (matches(*argv, "replace") == 0)
 522                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_REPLACE, argc-1, argv+1);
 523                 if (matches(*argv, "delete") == 0)
 524                         return fdb_modify(RTM_DELNEIGH, 0, argc-1, argv+1);
 525                 if (matches(*argv, "show") == 0 ||
 526                     matches(*argv, "lst") == 0 ||
 527                     matches(*argv, "list") == 0)
 528                         return fdb_show(argc-1, argv+1);
 529                 if (matches(*argv, "help") == 0)
 530                         usage();
 531         } else
 532                 return fdb_show(0, NULL);
 533
 534         fprintf(stderr, "Command \"%s\" is unknown, try \"bridge fdb help\".\n", *argv);
 535         exit(-1);
 536 }