net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 #include "qemu-common.h"
 114 #include "net.h"
 115 #include "monitor.h"
 116 #include "sysemu.h"
 117 #include "qemu-timer.h"
 118 #include "qemu-char.h"
 119 #include "audio/audio.h"
 120 #include "qemu_socket.h"
 121 #include "qemu-log.h"
 122
 123 #if defined(CONFIG_SLIRP)
 124 #include "libslirp.h"
 125 #endif
 126
 127
 128 static VLANState *first_vlan;
 129
 130 /***********************************************************/
 131 /* network device redirectors */
 132
 133 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 134 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 135 {
 136     int len, i, j, c;
 137
 138     for(i=0;i<size;i+=16) {
 139         len = size - i;
 140         if (len > 16)
 141             len = 16;
 142         fprintf(f, "%08x ", i);
 143         for(j=0;j<16;j++) {
 144             if (j < len)
 145                 fprintf(f, " %02x", buf[i+j]);
 146             else
 147                 fprintf(f, "   ");
 148         }
 149         fprintf(f, " ");
 150         for(j=0;j<len;j++) {
 151             c = buf[i+j];
 152             if (c < ' ' || c > '~')
 153                 c = '.';
 154             fprintf(f, "%c", c);
 155         }
 156         fprintf(f, "\n");
 157     }
 158 }
 159 #endif
 160
 161 static int parse_macaddr(uint8_t *macaddr, const char *p)
 162 {
 163     int i;
 164     char *last_char;
 165     long int offset;
 166
 167     errno = 0;
 168     offset = strtol(p, &last_char, 0);
 169     if (0 == errno && '\0' == *last_char &&
 170             offset >= 0 && offset <= 0xFFFFFF) {
 171         macaddr[3] = (offset & 0xFF0000) >> 16;
 172         macaddr[4] = (offset & 0xFF00) >> 8;
 173         macaddr[5] = offset & 0xFF;
 174         return 0;
 175     } else {
 176         for(i = 0; i < 6; i++) {
 177             macaddr[i] = strtol(p, (char **)&p, 16);
 178             if (i == 5) {
 179                 if (*p != '\0')
 180                     return -1;
 181             } else {
 182                 if (*p != ':' && *p != '-')
 183                     return -1;
 184                 p++;
 185             }
 186         }
 187         return 0;
 188     }
 189
 190     return -1;
 191 }
 192
 193 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 194 {
 195     const char *p, *p1;
 196     int len;
 197     p = *pp;
 198     p1 = strchr(p, sep);
 199     if (!p1)
 200         return -1;
 201     len = p1 - p;
 202     p1++;
 203     if (buf_size > 0) {
 204         if (len > buf_size - 1)
 205             len = buf_size - 1;
 206         memcpy(buf, p, len);
 207         buf[len] = '\0';
 208     }
 209     *pp = p1;
 210     return 0;
 211 }
 212
 213 int parse_host_src_port(struct sockaddr_in *haddr,
 214                         struct sockaddr_in *saddr,
 215                         const char *input_str)
 216 {
 217     char *str = strdup(input_str);
 218     char *host_str = str;
 219     char *src_str;
 220     const char *src_str2;
 221     char *ptr;
 222
 223     /*
 224      * Chop off any extra arguments at the end of the string which
 225      * would start with a comma, then fill in the src port information
 226      * if it was provided else use the "any address" and "any port".
 227      */
 228     if ((ptr = strchr(str,',')))
 229         *ptr = '\0';
 230
 231     if ((src_str = strchr(input_str,'@'))) {
 232         *src_str = '\0';
 233         src_str++;
 234     }
 235
 236     if (parse_host_port(haddr, host_str) < 0)
 237         goto fail;
 238
 239     src_str2 = src_str;
 240     if (!src_str || *src_str == '\0')
 241         src_str2 = ":0";
 242
 243     if (parse_host_port(saddr, src_str2) < 0)
 244         goto fail;
 245
 246     free(str);
 247     return(0);
 248
 249 fail:
 250     free(str);
 251     return -1;
 252 }
 253
 254 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 255 {
 256     char buf[512];
 257     struct hostent *he;
 258     const char *p, *r;
 259     int port;
 260
 261     p = str;
 262     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 263         return -1;
 264     saddr->sin_family = AF_INET;
 265     if (buf[0] == '\0') {
 266         saddr->sin_addr.s_addr = 0;
 267     } else {
 268         if (qemu_isdigit(buf[0])) {
 269             if (!inet_aton(buf, &saddr->sin_addr))
 270                 return -1;
 271         } else {
 272             if ((he = gethostbyname(buf)) == NULL)
 273                 return - 1;
 274             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 275         }
 276     }
 277     port = strtol(p, (char **)&r, 0);
 278     if (r == p)
 279         return -1;
 280     saddr->sin_port = htons(port);
 281     return 0;
 282 }
 283
 284 #if !defined(_WIN32) && 0
 285 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 286 {
 287     const char *p;
 288     int len;
 289
 290     len = MIN(108, strlen(str));
 291     p = strchr(str, ',');
 292     if (p)
 293         len = MIN(len, p - str);
 294
 295     memset(uaddr, 0, sizeof(*uaddr));
 296
 297     uaddr->sun_family = AF_UNIX;
 298     memcpy(uaddr->sun_path, str, len);
 299
 300     return 0;
 301 }
 302 #endif
 303
 304 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 305 {
 306     snprintf(vc->info_str, sizeof(vc->info_str),
 307              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 308              vc->model,
 309              macaddr[0], macaddr[1], macaddr[2],
 310              macaddr[3], macaddr[4], macaddr[5]);
 311 }
 312
 313 static char *assign_name(VLANClientState *vc1, const char *model)
 314 {
 315     VLANState *vlan;
 316     char buf[256];
 317     int id = 0;
 318
 319     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 320         VLANClientState *vc;
 321
 322         for (vc = vlan->first_client; vc; vc = vc->next)
 323             if (vc != vc1 && strcmp(vc->model, model) == 0)
 324                 id++;
 325     }
 326
 327     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 328
 329     return strdup(buf);
 330 }
 331
 332 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 333                                       const char *model,
 334                                       const char *name,
 335                                       IOReadHandler *fd_read,
 336                                       IOCanRWHandler *fd_can_read,
 337                                       NetCleanup *cleanup,
 338                                       void *opaque)
 339 {
 340     VLANClientState *vc, **pvc;
 341     vc = qemu_mallocz(sizeof(VLANClientState));
 342     vc->model = strdup(model);
 343     if (name)
 344         vc->name = strdup(name);
 345     else
 346         vc->name = assign_name(vc, model);
 347     vc->fd_read = fd_read;
 348     vc->fd_can_read = fd_can_read;
 349     vc->cleanup = cleanup;
 350     vc->opaque = opaque;
 351     vc->vlan = vlan;
 352
 353     vc->next = NULL;
 354     pvc = &vlan->first_client;
 355     while (*pvc != NULL)
 356         pvc = &(*pvc)->next;
 357     *pvc = vc;
 358     return vc;
 359 }
 360
 361 void qemu_del_vlan_client(VLANClientState *vc)
 362 {
 363     VLANClientState **pvc = &vc->vlan->first_client;
 364
 365     while (*pvc != NULL)
 366         if (*pvc == vc) {
 367             *pvc = vc->next;
 368             if (vc->cleanup) {
 369                 vc->cleanup(vc);
 370             }
 371             free(vc->name);
 372             free(vc->model);
 373             qemu_free(vc);
 374             break;
 375         } else
 376             pvc = &(*pvc)->next;
 377 }
 378
 379 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 380 {
 381     VLANClientState **pvc = &vlan->first_client;
 382
 383     while (*pvc != NULL)
 384         if ((*pvc)->opaque == opaque)
 385             return *pvc;
 386         else
 387             pvc = &(*pvc)->next;
 388
 389     return NULL;
 390 }
 391
 392 int qemu_can_send_packet(VLANClientState *vc1)
 393 {
 394     VLANState *vlan = vc1->vlan;
 395     VLANClientState *vc;
 396
 397     for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
 398         if (vc != vc1) {
 399             if (vc->fd_can_read && vc->fd_can_read(vc->opaque))
 400                 return 1;
 401         }
 402     }
 403     return 0;
 404 }
 405
 406 static void
 407 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size)
 408 {
 409     VLANClientState *vc;
 410
 411     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 412         if (vc != sender && !vc->link_down) {
 413             vc->fd_read(vc->opaque, buf, size);
 414         }
 415     }
 416 }
 417
 418 void qemu_send_packet(VLANClientState *vc, const uint8_t *buf, int size)
 419 {
 420     VLANState *vlan = vc->vlan;
 421     VLANPacket *packet;
 422
 423     if (vc->link_down)
 424         return;
 425
 426 #ifdef DEBUG_NET
 427     printf("vlan %d send:\n", vlan->id);
 428     hex_dump(stdout, buf, size);
 429 #endif
 430     if (vlan->delivering) {
 431         packet = qemu_malloc(sizeof(VLANPacket) + size);
 432         packet->next = vlan->send_queue;
 433         packet->sender = vc;
 434         packet->size = size;
 435         memcpy(packet->data, buf, size);
 436         vlan->send_queue = packet;
 437     } else {
 438         vlan->delivering = 1;
 439         qemu_deliver_packet(vc, buf, size);
 440         while ((packet = vlan->send_queue) != NULL) {
 441             qemu_deliver_packet(packet->sender, packet->data, packet->size);
 442             vlan->send_queue = packet->next;
 443             qemu_free(packet);
 444         }
 445         vlan->delivering = 0;
 446     }
 447 }
 448
 449 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 450                                int iovcnt)
 451 {
 452     uint8_t buffer[4096];
 453     size_t offset = 0;
 454     int i;
 455
 456     for (i = 0; i < iovcnt; i++) {
 457         size_t len;
 458
 459         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 460         memcpy(buffer + offset, iov[i].iov_base, len);
 461         offset += len;
 462     }
 463
 464     vc->fd_read(vc->opaque, buffer, offset);
 465
 466     return offset;
 467 }
 468
 469 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 470 {
 471     size_t offset = 0;
 472     int i;
 473
 474     for (i = 0; i < iovcnt; i++)
 475         offset += iov[i].iov_len;
 476     return offset;
 477 }
 478
 479 ssize_t qemu_sendv_packet(VLANClientState *vc1, const struct iovec *iov,
 480                           int iovcnt)
 481 {
 482     VLANState *vlan = vc1->vlan;
 483     VLANClientState *vc;
 484     ssize_t max_len = 0;
 485
 486     if (vc1->link_down)
 487         return calc_iov_length(iov, iovcnt);
 488
 489     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 490         ssize_t len = 0;
 491
 492         if (vc == vc1)
 493             continue;
 494
 495         if (vc->link_down)
 496             len = calc_iov_length(iov, iovcnt);
 497         if (vc->fd_readv)
 498             len = vc->fd_readv(vc->opaque, iov, iovcnt);
 499         else if (vc->fd_read)
 500             len = vc_sendv_compat(vc, iov, iovcnt);
 501
 502         max_len = MAX(max_len, len);
 503     }
 504
 505     return max_len;
 506 }
 507
 508 #if defined(CONFIG_SLIRP)
 509
 510 /* slirp network adapter */
 511
 512 static int slirp_inited;
 513 static int slirp_restrict;
 514 static char *slirp_ip;
 515 static VLANClientState *slirp_vc;
 516
 517 int slirp_can_output(void)
 518 {
 519     return !slirp_vc || qemu_can_send_packet(slirp_vc);
 520 }
 521
 522 void slirp_output(const uint8_t *pkt, int pkt_len)
 523 {
 524 #ifdef DEBUG_SLIRP
 525     printf("slirp output:\n");
 526     hex_dump(stdout, pkt, pkt_len);
 527 #endif
 528     if (!slirp_vc)
 529         return;
 530     qemu_send_packet(slirp_vc, pkt, pkt_len);
 531 }
 532
 533 int slirp_is_inited(void)
 534 {
 535     return slirp_inited;
 536 }
 537
 538 static void slirp_receive(void *opaque, const uint8_t *buf, int size)
 539 {
 540 #ifdef DEBUG_SLIRP
 541     printf("slirp input:\n");
 542     hex_dump(stdout, buf, size);
 543 #endif
 544     slirp_input(buf, size);
 545 }
 546
 547 static int net_slirp_init(VLANState *vlan, const char *model, const char *name)
 548 {
 549     if (!slirp_inited) {
 550         slirp_inited = 1;
 551         slirp_init(slirp_restrict, slirp_ip);
 552     }
 553     slirp_vc = qemu_new_vlan_client(vlan, model, name,
 554                                     slirp_receive, NULL, NULL, NULL);
 555     slirp_vc->info_str[0] = '\0';
 556     return 0;
 557 }
 558
 559 void net_slirp_redir(Monitor *mon, const char *redir_str)
 560 {
 561     int is_udp;
 562     char buf[256], *r;
 563     const char *p, *errmsg;
 564     struct in_addr guest_addr;
 565     int host_port, guest_port;
 566
 567     if (!slirp_inited) {
 568         slirp_inited = 1;
 569         slirp_init(slirp_restrict, slirp_ip);
 570     }
 571
 572     p = redir_str;
 573     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 574         goto fail_syntax;
 575     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 576         is_udp = 0;
 577     } else if (!strcmp(buf, "udp")) {
 578         is_udp = 1;
 579     } else {
 580         goto fail_syntax;
 581     }
 582
 583     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 584         goto fail_syntax;
 585     host_port = strtol(buf, &r, 0);
 586     if (r == buf)
 587         goto fail_syntax;
 588
 589     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 590         goto fail_syntax;
 591     if (buf[0] == '\0') {
 592         pstrcpy(buf, sizeof(buf), "10.0.2.15");
 593     }
 594     if (!inet_aton(buf, &guest_addr))
 595         goto fail_syntax;
 596
 597     guest_port = strtol(p, &r, 0);
 598     if (r == p)
 599         goto fail_syntax;
 600
 601     if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
 602         errmsg = "could not set up redirection\n";
 603         goto fail;
 604     }
 605     return;
 606
 607  fail_syntax:
 608     errmsg = "invalid redirection format\n";
 609  fail:
 610     if (mon) {
 611         monitor_printf(mon, errmsg);
 612     } else {
 613         fprintf(stderr, "qemu: %s", errmsg);
 614         exit(1);
 615     }
 616 }
 617
 618 #ifndef _WIN32
 619
 620 static char smb_dir[1024];
 621
 622 static void erase_dir(char *dir_name)
 623 {
 624     DIR *d;
 625     struct dirent *de;
 626     char filename[1024];
 627
 628     /* erase all the files in the directory */
 629     if ((d = opendir(dir_name)) != NULL) {
 630         for(;;) {
 631             de = readdir(d);
 632             if (!de)
 633                 break;
 634             if (strcmp(de->d_name, ".") != 0 &&
 635                 strcmp(de->d_name, "..") != 0) {
 636                 snprintf(filename, sizeof(filename), "%s/%s",
 637                          smb_dir, de->d_name);
 638                 if (unlink(filename) != 0)  /* is it a directory? */
 639                     erase_dir(filename);
 640             }
 641         }
 642         closedir(d);
 643         rmdir(dir_name);
 644     }
 645 }
 646
 647 /* automatic user mode samba server configuration */
 648 static void smb_exit(void)
 649 {
 650     erase_dir(smb_dir);
 651 }
 652
 653 /* automatic user mode samba server configuration */
 654 void net_slirp_smb(const char *exported_dir)
 655 {
 656     char smb_conf[1024];
 657     char smb_cmdline[1024];
 658     FILE *f;
 659
 660     if (!slirp_inited) {
 661         slirp_inited = 1;
 662         slirp_init(slirp_restrict, slirp_ip);
 663     }
 664
 665     /* XXX: better tmp dir construction */
 666     snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%ld", (long)getpid());
 667     if (mkdir(smb_dir, 0700) < 0) {
 668         fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
 669         exit(1);
 670     }
 671     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
 672
 673     f = fopen(smb_conf, "w");
 674     if (!f) {
 675         fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
 676         exit(1);
 677     }
 678     fprintf(f,
 679             "[global]\n"
 680             "private dir=%s\n"
 681             "smb ports=0\n"
 682             "socket address=127.0.0.1\n"
 683             "pid directory=%s\n"
 684             "lock directory=%s\n"
 685             "log file=%s/log.smbd\n"
 686             "smb passwd file=%s/smbpasswd\n"
 687             "security = share\n"
 688             "[qemu]\n"
 689             "path=%s\n"
 690             "read only=no\n"
 691             "guest ok=yes\n",
 692             smb_dir,
 693             smb_dir,
 694             smb_dir,
 695             smb_dir,
 696             smb_dir,
 697             exported_dir
 698             );
 699     fclose(f);
 700     atexit(smb_exit);
 701
 702     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
 703              SMBD_COMMAND, smb_conf);
 704
 705     slirp_add_exec(0, smb_cmdline, 4, 139);
 706 }
 707
 708 #endif /* !defined(_WIN32) */
 709 void do_info_slirp(Monitor *mon)
 710 {
 711     slirp_stats();
 712 }
 713
 714 struct VMChannel {
 715     CharDriverState *hd;
 716     int port;
 717 };
 718
 719 static int vmchannel_can_read(void *opaque)
 720 {
 721     struct VMChannel *vmc = (struct VMChannel*)opaque;
 722     return slirp_socket_can_recv(4, vmc->port);
 723 }
 724
 725 static void vmchannel_read(void *opaque, const uint8_t *buf, int size)
 726 {
 727     struct VMChannel *vmc = (struct VMChannel*)opaque;
 728     slirp_socket_recv(4, vmc->port, buf, size);
 729 }
 730
 731 #endif /* CONFIG_SLIRP */
 732
 733 #if !defined(_WIN32)
 734
 735 typedef struct TAPState {
 736     VLANClientState *vc;
 737     int fd;
 738     char down_script[1024];
 739     char down_script_arg[128];
 740 } TAPState;
 741
 742 static int launch_script(const char *setup_script, const char *ifname, int fd);
 743
 744 static ssize_t tap_receive_iov(void *opaque, const struct iovec *iov,
 745                                int iovcnt)
 746 {
 747     TAPState *s = opaque;
 748     ssize_t len;
 749
 750     do {
 751         len = writev(s->fd, iov, iovcnt);
 752     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
 753
 754     return len;
 755 }
 756
 757 static void tap_receive(void *opaque, const uint8_t *buf, int size)
 758 {
 759     TAPState *s = opaque;
 760     int ret;
 761     for(;;) {
 762         ret = write(s->fd, buf, size);
 763         if (ret < 0 && (errno == EINTR || errno == EAGAIN)) {
 764         } else {
 765             break;
 766         }
 767     }
 768 }
 769
 770 static void tap_send(void *opaque)
 771 {
 772     TAPState *s = opaque;
 773     uint8_t buf[4096];
 774     int size;
 775
 776 #ifdef __sun__
 777     struct strbuf sbuf;
 778     int f = 0;
 779     sbuf.maxlen = sizeof(buf);
 780     sbuf.buf = (char *)buf;
 781     size = getmsg(s->fd, NULL, &sbuf, &f) >=0 ? sbuf.len : -1;
 782 #else
 783     size = read(s->fd, buf, sizeof(buf));
 784 #endif
 785     if (size > 0) {
 786         qemu_send_packet(s->vc, buf, size);
 787     }
 788 }
 789
 790 static void tap_cleanup(VLANClientState *vc)
 791 {
 792     TAPState *s = vc->opaque;
 793
 794     if (s->down_script[0])
 795         launch_script(s->down_script, s->down_script_arg, s->fd);
 796
 797     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
 798     close(s->fd);
 799     qemu_free(s);
 800 }
 801
 802 /* fd support */
 803
 804 static TAPState *net_tap_fd_init(VLANState *vlan,
 805                                  const char *model,
 806                                  const char *name,
 807                                  int fd)
 808 {
 809     TAPState *s;
 810
 811     s = qemu_mallocz(sizeof(TAPState));
 812     s->fd = fd;
 813     s->vc = qemu_new_vlan_client(vlan, model, name, tap_receive,
 814                                  NULL, tap_cleanup, s);
 815     s->vc->fd_readv = tap_receive_iov;
 816     qemu_set_fd_handler(s->fd, tap_send, NULL, s);
 817     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
 818     return s;
 819 }
 820
 821 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
 822 static int tap_open(char *ifname, int ifname_size)
 823 {
 824     int fd;
 825     char *dev;
 826     struct stat s;
 827
 828     TFR(fd = open("/dev/tap", O_RDWR));
 829     if (fd < 0) {
 830         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
 831         return -1;
 832     }
 833
 834     fstat(fd, &s);
 835     dev = devname(s.st_rdev, S_IFCHR);
 836     pstrcpy(ifname, ifname_size, dev);
 837
 838     fcntl(fd, F_SETFL, O_NONBLOCK);
 839     return fd;
 840 }
 841 #elif defined(__sun__)
 842 #define TUNNEWPPA       (('T'<<16) | 0x0001)
 843 /*
 844  * Allocate TAP device, returns opened fd.
 845  * Stores dev name in the first arg(must be large enough).
 846  */
 847 static int tap_alloc(char *dev, size_t dev_size)
 848 {
 849     int tap_fd, if_fd, ppa = -1;
 850     static int ip_fd = 0;
 851     char *ptr;
 852
 853     static int arp_fd = 0;
 854     int ip_muxid, arp_muxid;
 855     struct strioctl  strioc_if, strioc_ppa;
 856     int link_type = I_PLINK;;
 857     struct lifreq ifr;
 858     char actual_name[32] = "";
 859
 860     memset(&ifr, 0x0, sizeof(ifr));
 861
 862     if( *dev ){
 863        ptr = dev;
 864        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
 865        ppa = atoi(ptr);
 866     }
 867
 868     /* Check if IP device was opened */
 869     if( ip_fd )
 870        close(ip_fd);
 871
 872     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
 873     if (ip_fd < 0) {
 874        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
 875        return -1;
 876     }
 877
 878     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
 879     if (tap_fd < 0) {
 880        syslog(LOG_ERR, "Can't open /dev/tap");
 881        return -1;
 882     }
 883
 884     /* Assign a new PPA and get its unit number. */
 885     strioc_ppa.ic_cmd = TUNNEWPPA;
 886     strioc_ppa.ic_timout = 0;
 887     strioc_ppa.ic_len = sizeof(ppa);
 888     strioc_ppa.ic_dp = (char *)&ppa;
 889     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
 890        syslog (LOG_ERR, "Can't assign new interface");
 891
 892     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
 893     if (if_fd < 0) {
 894        syslog(LOG_ERR, "Can't open /dev/tap (2)");
 895        return -1;
 896     }
 897     if(ioctl(if_fd, I_PUSH, "ip") < 0){
 898        syslog(LOG_ERR, "Can't push IP module");
 899        return -1;
 900     }
 901
 902     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
 903         syslog(LOG_ERR, "Can't get flags\n");
 904
 905     snprintf (actual_name, 32, "tap%d", ppa);
 906     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
 907
 908     ifr.lifr_ppa = ppa;
 909     /* Assign ppa according to the unit number returned by tun device */
 910
 911     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
 912         syslog (LOG_ERR, "Can't set PPA %d", ppa);
 913     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
 914         syslog (LOG_ERR, "Can't get flags\n");
 915     /* Push arp module to if_fd */
 916     if (ioctl (if_fd, I_PUSH, "arp") < 0)
 917         syslog (LOG_ERR, "Can't push ARP module (2)");
 918
 919     /* Push arp module to ip_fd */
 920     if (ioctl (ip_fd, I_POP, NULL) < 0)
 921         syslog (LOG_ERR, "I_POP failed\n");
 922     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
 923         syslog (LOG_ERR, "Can't push ARP module (3)\n");
 924     /* Open arp_fd */
 925     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
 926     if (arp_fd < 0)
 927        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
 928
 929     /* Set ifname to arp */
 930     strioc_if.ic_cmd = SIOCSLIFNAME;
 931     strioc_if.ic_timout = 0;
 932     strioc_if.ic_len = sizeof(ifr);
 933     strioc_if.ic_dp = (char *)&ifr;
 934     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
 935         syslog (LOG_ERR, "Can't set ifname to arp\n");
 936     }
 937
 938     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
 939        syslog(LOG_ERR, "Can't link TAP device to IP");
 940        return -1;
 941     }
 942
 943     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
 944         syslog (LOG_ERR, "Can't link TAP device to ARP");
 945
 946     close (if_fd);
 947
 948     memset(&ifr, 0x0, sizeof(ifr));
 949     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
 950     ifr.lifr_ip_muxid  = ip_muxid;
 951     ifr.lifr_arp_muxid = arp_muxid;
 952
 953     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
 954     {
 955       ioctl (ip_fd, I_PUNLINK , arp_muxid);
 956       ioctl (ip_fd, I_PUNLINK, ip_muxid);
 957       syslog (LOG_ERR, "Can't set multiplexor id");
 958     }
 959
 960     snprintf(dev, dev_size, "tap%d", ppa);
 961     return tap_fd;
 962 }
 963
 964 static int tap_open(char *ifname, int ifname_size)
 965 {
 966     char  dev[10]="";
 967     int fd;
 968     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
 969        fprintf(stderr, "Cannot allocate TAP device\n");
 970        return -1;
 971     }
 972     pstrcpy(ifname, ifname_size, dev);
 973     fcntl(fd, F_SETFL, O_NONBLOCK);
 974     return fd;
 975 }
 976 #elif defined (_AIX)
 977 static int tap_open(char *ifname, int ifname_size)
 978 {
 979     fprintf (stderr, "no tap on AIX\n");
 980     return -1;
 981 }
 982 #else
 983 static int tap_open(char *ifname, int ifname_size)
 984 {
 985     struct ifreq ifr;
 986     int fd, ret;
 987
 988     TFR(fd = open("/dev/net/tun", O_RDWR));
 989     if (fd < 0) {
 990         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
 991         return -1;
 992     }
 993     memset(&ifr, 0, sizeof(ifr));
 994     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
 995     if (ifname[0] != '\0')
 996         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
 997     else
 998         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
 999     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1000     if (ret != 0) {
1001         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1002         close(fd);
1003         return -1;
1004     }
1005     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1006     fcntl(fd, F_SETFL, O_NONBLOCK);
1007     return fd;
1008 }
1009 #endif
1010
1011 static int launch_script(const char *setup_script, const char *ifname, int fd)
1012 {
1013     int pid, status;
1014     char *args[3];
1015     char **parg;
1016
1017         /* try to launch network script */
1018         pid = fork();
1019         if (pid >= 0) {
1020             if (pid == 0) {
1021                 int open_max = sysconf (_SC_OPEN_MAX), i;
1022                 for (i = 0; i < open_max; i++)
1023                     if (i != STDIN_FILENO &&
1024                         i != STDOUT_FILENO &&
1025                         i != STDERR_FILENO &&
1026                         i != fd)
1027                         close(i);
1028
1029                 parg = args;
1030                 *parg++ = (char *)setup_script;
1031                 *parg++ = (char *)ifname;
1032                 *parg++ = NULL;
1033                 execv(setup_script, args);
1034                 _exit(1);
1035             }
1036             while (waitpid(pid, &status, 0) != pid);
1037             if (!WIFEXITED(status) ||
1038                 WEXITSTATUS(status) != 0) {
1039                 fprintf(stderr, "%s: could not launch network script\n",
1040                         setup_script);
1041                 return -1;
1042             }
1043         }
1044     return 0;
1045 }
1046
1047 static int net_tap_init(VLANState *vlan, const char *model,
1048                         const char *name, const char *ifname1,
1049                         const char *setup_script, const char *down_script)
1050 {
1051     TAPState *s;
1052     int fd;
1053     char ifname[128];
1054
1055     if (ifname1 != NULL)
1056         pstrcpy(ifname, sizeof(ifname), ifname1);
1057     else
1058         ifname[0] = '\0';
1059     TFR(fd = tap_open(ifname, sizeof(ifname)));
1060     if (fd < 0)
1061         return -1;
1062
1063     if (!setup_script || !strcmp(setup_script, "no"))
1064         setup_script = "";
1065     if (setup_script[0] != '\0') {
1066         if (launch_script(setup_script, ifname, fd))
1067             return -1;
1068     }
1069     s = net_tap_fd_init(vlan, model, name, fd);
1070     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1071              "ifname=%s,script=%s,downscript=%s",
1072              ifname, setup_script, down_script);
1073     if (down_script && strcmp(down_script, "no")) {
1074         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1075         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1076     }
1077     return 0;
1078 }
1079
1080 #endif /* !_WIN32 */
1081
1082 #if defined(CONFIG_VDE)
1083 typedef struct VDEState {
1084     VLANClientState *vc;
1085     VDECONN *vde;
1086 } VDEState;
1087
1088 static void vde_to_qemu(void *opaque)
1089 {
1090     VDEState *s = opaque;
1091     uint8_t buf[4096];
1092     int size;
1093
1094     size = vde_recv(s->vde, buf, sizeof(buf), 0);
1095     if (size > 0) {
1096         qemu_send_packet(s->vc, buf, size);
1097     }
1098 }
1099
1100 static void vde_from_qemu(void *opaque, const uint8_t *buf, int size)
1101 {
1102     VDEState *s = opaque;
1103     int ret;
1104     for(;;) {
1105         ret = vde_send(s->vde, buf, size, 0);
1106         if (ret < 0 && errno == EINTR) {
1107         } else {
1108             break;
1109         }
1110     }
1111 }
1112
1113 static void vde_cleanup(VLANClientState *vc)
1114 {
1115     VDEState *s = vc->opaque;
1116     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1117     vde_close(s->vde);
1118     qemu_free(s);
1119 }
1120
1121 static int net_vde_init(VLANState *vlan, const char *model,
1122                         const char *name, const char *sock,
1123                         int port, const char *group, int mode)
1124 {
1125     VDEState *s;
1126     char *init_group = strlen(group) ? (char *)group : NULL;
1127     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1128
1129     struct vde_open_args args = {
1130         .port = port,
1131         .group = init_group,
1132         .mode = mode,
1133     };
1134
1135     s = qemu_mallocz(sizeof(VDEState));
1136     s->vde = vde_open(init_sock, "QEMU", &args);
1137     if (!s->vde){
1138         free(s);
1139         return -1;
1140     }
1141     s->vc = qemu_new_vlan_client(vlan, model, name, vde_from_qemu,
1142                                  NULL, vde_cleanup, s);
1143     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1144     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1145              sock, vde_datafd(s->vde));
1146     return 0;
1147 }
1148 #endif
1149
1150 /* network connection */
1151 typedef struct NetSocketState {
1152     VLANClientState *vc;
1153     int fd;
1154     int state; /* 0 = getting length, 1 = getting data */
1155     unsigned int index;
1156     unsigned int packet_len;
1157     uint8_t buf[4096];
1158     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1159 } NetSocketState;
1160
1161 typedef struct NetSocketListenState {
1162     VLANState *vlan;
1163     char *model;
1164     char *name;
1165     int fd;
1166 } NetSocketListenState;
1167
1168 /* XXX: we consider we can send the whole packet without blocking */
1169 static void net_socket_receive(void *opaque, const uint8_t *buf, int size)
1170 {
1171     NetSocketState *s = opaque;
1172     uint32_t len;
1173     len = htonl(size);
1174
1175     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1176     send_all(s->fd, buf, size);
1177 }
1178
1179 static void net_socket_receive_dgram(void *opaque, const uint8_t *buf, int size)
1180 {
1181     NetSocketState *s = opaque;
1182     sendto(s->fd, buf, size, 0,
1183            (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1184 }
1185
1186 static void net_socket_send(void *opaque)
1187 {
1188     NetSocketState *s = opaque;
1189     int size, err;
1190     unsigned l;
1191     uint8_t buf1[4096];
1192     const uint8_t *buf;
1193
1194     size = recv(s->fd, buf1, sizeof(buf1), 0);
1195     if (size < 0) {
1196         err = socket_error();
1197         if (err != EWOULDBLOCK)
1198             goto eoc;
1199     } else if (size == 0) {
1200         /* end of connection */
1201     eoc:
1202         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1203         closesocket(s->fd);
1204         return;
1205     }
1206     buf = buf1;
1207     while (size > 0) {
1208         /* reassemble a packet from the network */
1209         switch(s->state) {
1210         case 0:
1211             l = 4 - s->index;
1212             if (l > size)
1213                 l = size;
1214             memcpy(s->buf + s->index, buf, l);
1215             buf += l;
1216             size -= l;
1217             s->index += l;
1218             if (s->index == 4) {
1219                 /* got length */
1220                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1221                 s->index = 0;
1222                 s->state = 1;
1223             }
1224             break;
1225         case 1:
1226             l = s->packet_len - s->index;
1227             if (l > size)
1228                 l = size;
1229             if (s->index + l <= sizeof(s->buf)) {
1230                 memcpy(s->buf + s->index, buf, l);
1231             } else {
1232                 fprintf(stderr, "serious error: oversized packet received,"
1233                     "connection terminated.\n");
1234                 s->state = 0;
1235                 goto eoc;
1236             }
1237
1238             s->index += l;
1239             buf += l;
1240             size -= l;
1241             if (s->index >= s->packet_len) {
1242                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1243                 s->index = 0;
1244                 s->state = 0;
1245             }
1246             break;
1247         }
1248     }
1249 }
1250
1251 static void net_socket_send_dgram(void *opaque)
1252 {
1253     NetSocketState *s = opaque;
1254     int size;
1255
1256     size = recv(s->fd, s->buf, sizeof(s->buf), 0);
1257     if (size < 0)
1258         return;
1259     if (size == 0) {
1260         /* end of connection */
1261         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1262         return;
1263     }
1264     qemu_send_packet(s->vc, s->buf, size);
1265 }
1266
1267 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1268 {
1269     struct ip_mreq imr;
1270     int fd;
1271     int val, ret;
1272     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1273         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1274                 inet_ntoa(mcastaddr->sin_addr),
1275                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1276         return -1;
1277
1278     }
1279     fd = socket(PF_INET, SOCK_DGRAM, 0);
1280     if (fd < 0) {
1281         perror("socket(PF_INET, SOCK_DGRAM)");
1282         return -1;
1283     }
1284
1285     val = 1;
1286     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1287                    (const char *)&val, sizeof(val));
1288     if (ret < 0) {
1289         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1290         goto fail;
1291     }
1292
1293     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1294     if (ret < 0) {
1295         perror("bind");
1296         goto fail;
1297     }
1298
1299     /* Add host to multicast group */
1300     imr.imr_multiaddr = mcastaddr->sin_addr;
1301     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1302
1303     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1304                      (const char *)&imr, sizeof(struct ip_mreq));
1305     if (ret < 0) {
1306         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1307         goto fail;
1308     }
1309
1310     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1311     val = 1;
1312     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1313                    (const char *)&val, sizeof(val));
1314     if (ret < 0) {
1315         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1316         goto fail;
1317     }
1318
1319     socket_set_nonblock(fd);
1320     return fd;
1321 fail:
1322     if (fd >= 0)
1323         closesocket(fd);
1324     return -1;
1325 }
1326
1327 static void net_socket_cleanup(VLANClientState *vc)
1328 {
1329     NetSocketState *s = vc->opaque;
1330     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1331     close(s->fd);
1332     qemu_free(s);
1333 }
1334
1335 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1336                                                 const char *model,
1337                                                 const char *name,
1338                                                 int fd, int is_connected)
1339 {
1340     struct sockaddr_in saddr;
1341     int newfd;
1342     socklen_t saddr_len;
1343     NetSocketState *s;
1344
1345     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
1346      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
1347      * by ONLY ONE process: we must "clone" this dgram socket --jjo
1348      */
1349
1350     if (is_connected) {
1351         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
1352             /* must be bound */
1353             if (saddr.sin_addr.s_addr==0) {
1354                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
1355                         fd);
1356                 return NULL;
1357             }
1358             /* clone dgram socket */
1359             newfd = net_socket_mcast_create(&saddr);
1360             if (newfd < 0) {
1361                 /* error already reported by net_socket_mcast_create() */
1362                 close(fd);
1363                 return NULL;
1364             }
1365             /* clone newfd to fd, close newfd */
1366             dup2(newfd, fd);
1367             close(newfd);
1368
1369         } else {
1370             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
1371                     fd, strerror(errno));
1372             return NULL;
1373         }
1374     }
1375
1376     s = qemu_mallocz(sizeof(NetSocketState));
1377     s->fd = fd;
1378
1379     s->vc = qemu_new_vlan_client(vlan, model, name, net_socket_receive_dgram,
1380                                  NULL, net_socket_cleanup, s);
1381     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
1382
1383     /* mcast: save bound address as dst */
1384     if (is_connected) s->dgram_dst=saddr;
1385
1386     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1387             "socket: fd=%d (%s mcast=%s:%d)",
1388             fd, is_connected? "cloned" : "",
1389             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1390     return s;
1391 }
1392
1393 static void net_socket_connect(void *opaque)
1394 {
1395     NetSocketState *s = opaque;
1396     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
1397 }
1398
1399 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
1400                                                  const char *model,
1401                                                  const char *name,
1402                                                  int fd, int is_connected)
1403 {
1404     NetSocketState *s;
1405     s = qemu_mallocz(sizeof(NetSocketState));
1406     s->fd = fd;
1407     s->vc = qemu_new_vlan_client(vlan, model, name, net_socket_receive,
1408                                  NULL, net_socket_cleanup, s);
1409     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1410              "socket: fd=%d", fd);
1411     if (is_connected) {
1412         net_socket_connect(s);
1413     } else {
1414         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
1415     }
1416     return s;
1417 }
1418
1419 static NetSocketState *net_socket_fd_init(VLANState *vlan,
1420                                           const char *model, const char *name,
1421                                           int fd, int is_connected)
1422 {
1423     int so_type=-1, optlen=sizeof(so_type);
1424
1425     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
1426         (socklen_t *)&optlen)< 0) {
1427         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
1428         return NULL;
1429     }
1430     switch(so_type) {
1431     case SOCK_DGRAM:
1432         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
1433     case SOCK_STREAM:
1434         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1435     default:
1436         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
1437         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
1438         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1439     }
1440     return NULL;
1441 }
1442
1443 static void net_socket_accept(void *opaque)
1444 {
1445     NetSocketListenState *s = opaque;
1446     NetSocketState *s1;
1447     struct sockaddr_in saddr;
1448     socklen_t len;
1449     int fd;
1450
1451     for(;;) {
1452         len = sizeof(saddr);
1453         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
1454         if (fd < 0 && errno != EINTR) {
1455             return;
1456         } else if (fd >= 0) {
1457             break;
1458         }
1459     }
1460     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
1461     if (!s1) {
1462         closesocket(fd);
1463     } else {
1464         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
1465                  "socket: connection from %s:%d",
1466                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1467     }
1468 }
1469
1470 static int net_socket_listen_init(VLANState *vlan,
1471                                   const char *model,
1472                                   const char *name,
1473                                   const char *host_str)
1474 {
1475     NetSocketListenState *s;
1476     int fd, val, ret;
1477     struct sockaddr_in saddr;
1478
1479     if (parse_host_port(&saddr, host_str) < 0)
1480         return -1;
1481
1482     s = qemu_mallocz(sizeof(NetSocketListenState));
1483
1484     fd = socket(PF_INET, SOCK_STREAM, 0);
1485     if (fd < 0) {
1486         perror("socket");
1487         return -1;
1488     }
1489     socket_set_nonblock(fd);
1490
1491     /* allow fast reuse */
1492     val = 1;
1493     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
1494
1495     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1496     if (ret < 0) {
1497         perror("bind");
1498         return -1;
1499     }
1500     ret = listen(fd, 0);
1501     if (ret < 0) {
1502         perror("listen");
1503         return -1;
1504     }
1505     s->vlan = vlan;
1506     s->model = strdup(model);
1507     s->name = name ? strdup(name) : NULL;
1508     s->fd = fd;
1509     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
1510     return 0;
1511 }
1512
1513 static int net_socket_connect_init(VLANState *vlan,
1514                                    const char *model,
1515                                    const char *name,
1516                                    const char *host_str)
1517 {
1518     NetSocketState *s;
1519     int fd, connected, ret, err;
1520     struct sockaddr_in saddr;
1521
1522     if (parse_host_port(&saddr, host_str) < 0)
1523         return -1;
1524
1525     fd = socket(PF_INET, SOCK_STREAM, 0);
1526     if (fd < 0) {
1527         perror("socket");
1528         return -1;
1529     }
1530     socket_set_nonblock(fd);
1531
1532     connected = 0;
1533     for(;;) {
1534         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1535         if (ret < 0) {
1536             err = socket_error();
1537             if (err == EINTR || err == EWOULDBLOCK) {
1538             } else if (err == EINPROGRESS) {
1539                 break;
1540 #ifdef _WIN32
1541             } else if (err == WSAEALREADY) {
1542                 break;
1543 #endif
1544             } else {
1545                 perror("connect");
1546                 closesocket(fd);
1547                 return -1;
1548             }
1549         } else {
1550             connected = 1;
1551             break;
1552         }
1553     }
1554     s = net_socket_fd_init(vlan, model, name, fd, connected);
1555     if (!s)
1556         return -1;
1557     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1558              "socket: connect to %s:%d",
1559              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1560     return 0;
1561 }
1562
1563 static int net_socket_mcast_init(VLANState *vlan,
1564                                  const char *model,
1565                                  const char *name,
1566                                  const char *host_str)
1567 {
1568     NetSocketState *s;
1569     int fd;
1570     struct sockaddr_in saddr;
1571
1572     if (parse_host_port(&saddr, host_str) < 0)
1573         return -1;
1574
1575
1576     fd = net_socket_mcast_create(&saddr);
1577     if (fd < 0)
1578         return -1;
1579
1580     s = net_socket_fd_init(vlan, model, name, fd, 0);
1581     if (!s)
1582         return -1;
1583
1584     s->dgram_dst = saddr;
1585
1586     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1587              "socket: mcast=%s:%d",
1588              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1589     return 0;
1590
1591 }
1592
1593 typedef struct DumpState {
1594     VLANClientState *pcap_vc;
1595     int fd;
1596     int pcap_caplen;
1597 } DumpState;
1598
1599 #define PCAP_MAGIC 0xa1b2c3d4
1600
1601 struct pcap_file_hdr {
1602     uint32_t magic;
1603     uint16_t version_major;
1604     uint16_t version_minor;
1605     int32_t thiszone;
1606     uint32_t sigfigs;
1607     uint32_t snaplen;
1608     uint32_t linktype;
1609 };
1610
1611 struct pcap_sf_pkthdr {
1612     struct {
1613         int32_t tv_sec;
1614         int32_t tv_usec;
1615     } ts;
1616     uint32_t caplen;
1617     uint32_t len;
1618 };
1619
1620 static void dump_receive(void *opaque, const uint8_t *buf, int size)
1621 {
1622     DumpState *s = opaque;
1623     struct pcap_sf_pkthdr hdr;
1624     int64_t ts;
1625     int caplen;
1626
1627     /* Early return in case of previous error. */
1628     if (s->fd < 0) {
1629         return;
1630     }
1631
1632     ts = muldiv64 (qemu_get_clock(vm_clock),1000000, ticks_per_sec);
1633     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
1634
1635     hdr.ts.tv_sec = ts / 1000000000LL;
1636     hdr.ts.tv_usec = ts % 1000000;
1637     hdr.caplen = caplen;
1638     hdr.len = size;
1639     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
1640         write(s->fd, buf, caplen) != caplen) {
1641         qemu_log("-net dump write error - stop dump\n");
1642         close(s->fd);
1643         s->fd = -1;
1644     }
1645 }
1646
1647 static void net_dump_cleanup(VLANClientState *vc)
1648 {
1649     DumpState *s = vc->opaque;
1650
1651     close(s->fd);
1652     qemu_free(s);
1653 }
1654
1655 static int net_dump_init(VLANState *vlan, const char *device,
1656                          const char *name, const char *filename, int len)
1657 {
1658     struct pcap_file_hdr hdr;
1659     DumpState *s;
1660
1661     s = qemu_malloc(sizeof(DumpState));
1662
1663     s->fd = open(filename, O_CREAT | O_WRONLY, 0644);
1664     if (s->fd < 0) {
1665         fprintf(stderr, "-net dump: can't open %s\n", filename);
1666         return -1;
1667     }
1668
1669     s->pcap_caplen = len;
1670
1671     hdr.magic = PCAP_MAGIC;
1672     hdr.version_major = 2;
1673     hdr.version_minor = 4;
1674     hdr.thiszone = 0;
1675     hdr.sigfigs = 0;
1676     hdr.snaplen = s->pcap_caplen;
1677     hdr.linktype = 1;
1678
1679     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
1680         perror("-net dump write error");
1681         close(s->fd);
1682         qemu_free(s);
1683         return -1;
1684     }
1685
1686     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, dump_receive, NULL,
1687                                       net_dump_cleanup, s);
1688     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
1689              "dump to %s (len=%d)", filename, len);
1690     return 0;
1691 }
1692
1693 /* find or alloc a new VLAN */
1694 VLANState *qemu_find_vlan(int id)
1695 {
1696     VLANState **pvlan, *vlan;
1697     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
1698         if (vlan->id == id)
1699             return vlan;
1700     }
1701     vlan = qemu_mallocz(sizeof(VLANState));
1702     vlan->id = id;
1703     vlan->next = NULL;
1704     pvlan = &first_vlan;
1705     while (*pvlan != NULL)
1706         pvlan = &(*pvlan)->next;
1707     *pvlan = vlan;
1708     return vlan;
1709 }
1710
1711 static int nic_get_free_idx(void)
1712 {
1713     int index;
1714
1715     for (index = 0; index < MAX_NICS; index++)
1716         if (!nd_table[index].used)
1717             return index;
1718     return -1;
1719 }
1720
1721 void qemu_check_nic_model(NICInfo *nd, const char *model)
1722 {
1723     const char *models[2];
1724
1725     models[0] = model;
1726     models[1] = NULL;
1727
1728     qemu_check_nic_model_list(nd, models, model);
1729 }
1730
1731 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
1732                                const char *default_model)
1733 {
1734     int i, exit_status = 0;
1735
1736     if (!nd->model)
1737         nd->model = strdup(default_model);
1738
1739     if (strcmp(nd->model, "?") != 0) {
1740         for (i = 0 ; models[i]; i++)
1741             if (strcmp(nd->model, models[i]) == 0)
1742                 return;
1743
1744         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
1745         exit_status = 1;
1746     }
1747
1748     fprintf(stderr, "qemu: Supported NIC models: ");
1749     for (i = 0 ; models[i]; i++)
1750         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
1751
1752     exit(exit_status);
1753 }
1754
1755 int net_client_init(const char *device, const char *p)
1756 {
1757     static const char * const fd_params[] = {
1758         "vlan", "name", "fd", NULL
1759     };
1760     char buf[1024];
1761     int vlan_id, ret;
1762     VLANState *vlan;
1763     char *name = NULL;
1764
1765     vlan_id = 0;
1766     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
1767         vlan_id = strtol(buf, NULL, 0);
1768     }
1769     vlan = qemu_find_vlan(vlan_id);
1770
1771     if (get_param_value(buf, sizeof(buf), "name", p)) {
1772         name = strdup(buf);
1773     }
1774     if (!strcmp(device, "nic")) {
1775         static const char * const nic_params[] = {
1776             "vlan", "name", "macaddr", "model", NULL
1777         };
1778         NICInfo *nd;
1779         uint8_t *macaddr;
1780         int idx = nic_get_free_idx();
1781
1782         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
1783             fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1784                     buf, p);
1785             return -1;
1786         }
1787         if (idx == -1 || nb_nics >= MAX_NICS) {
1788             fprintf(stderr, "Too Many NICs\n");
1789             ret = -1;
1790             goto out;
1791         }
1792         nd = &nd_table[idx];
1793         macaddr = nd->macaddr;
1794         macaddr[0] = 0x52;
1795         macaddr[1] = 0x54;
1796         macaddr[2] = 0x00;
1797         macaddr[3] = 0x12;
1798         macaddr[4] = 0x34;
1799         macaddr[5] = 0x56 + idx;
1800
1801         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
1802             if (parse_macaddr(macaddr, buf) < 0) {
1803                 fprintf(stderr, "invalid syntax for ethernet address\n");
1804                 ret = -1;
1805                 goto out;
1806             }
1807         }
1808         if (get_param_value(buf, sizeof(buf), "model", p)) {
1809             nd->model = strdup(buf);
1810         }
1811         nd->vlan = vlan;
1812         nd->name = name;
1813         nd->used = 1;
1814         name = NULL;
1815         nb_nics++;
1816         vlan->nb_guest_devs++;
1817         ret = idx;
1818     } else
1819     if (!strcmp(device, "none")) {
1820         if (*p != '\0') {
1821             fprintf(stderr, "qemu: 'none' takes no parameters\n");
1822             return -1;
1823         }
1824         /* does nothing. It is needed to signal that no network cards
1825            are wanted */
1826         ret = 0;
1827     } else
1828 #ifdef CONFIG_SLIRP
1829     if (!strcmp(device, "user")) {
1830         static const char * const slirp_params[] = {
1831             "vlan", "name", "hostname", "restrict", "ip", NULL
1832         };
1833         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
1834             fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1835                     buf, p);
1836             return -1;
1837         }
1838         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
1839             pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
1840         }
1841         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
1842             slirp_restrict = (buf[0] == 'y') ? 1 : 0;
1843         }
1844         if (get_param_value(buf, sizeof(buf), "ip", p)) {
1845             slirp_ip = strdup(buf);
1846         }
1847         vlan->nb_host_devs++;
1848         ret = net_slirp_init(vlan, device, name);
1849     } else if (!strcmp(device, "channel")) {
1850         long port;
1851         char name[20], *devname;
1852         struct VMChannel *vmc;
1853
1854         port = strtol(p, &devname, 10);
1855         devname++;
1856         if (port < 1 || port > 65535) {
1857             fprintf(stderr, "vmchannel wrong port number\n");
1858             ret = -1;
1859             goto out;
1860         }
1861         vmc = malloc(sizeof(struct VMChannel));
1862         snprintf(name, 20, "vmchannel%ld", port);
1863         vmc->hd = qemu_chr_open(name, devname, NULL);
1864         if (!vmc->hd) {
1865             fprintf(stderr, "qemu: could not open vmchannel device"
1866                     "'%s'\n", devname);
1867             ret = -1;
1868             goto out;
1869         }
1870         vmc->port = port;
1871         slirp_add_exec(3, vmc->hd, 4, port);
1872         qemu_chr_add_handlers(vmc->hd, vmchannel_can_read, vmchannel_read,
1873                 NULL, vmc);
1874         ret = 0;
1875     } else
1876 #endif
1877 #ifdef _WIN32
1878     if (!strcmp(device, "tap")) {
1879         static const char * const tap_params[] = {
1880             "vlan", "name", "ifname", NULL
1881         };
1882         char ifname[64];
1883
1884         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
1885             fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1886                     buf, p);
1887             return -1;
1888         }
1889         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
1890             fprintf(stderr, "tap: no interface name\n");
1891             ret = -1;
1892             goto out;
1893         }
1894         vlan->nb_host_devs++;
1895         ret = tap_win32_init(vlan, device, name, ifname);
1896     } else
1897 #elif defined (_AIX)
1898 #else
1899     if (!strcmp(device, "tap")) {
1900         char ifname[64];
1901         char setup_script[1024], down_script[1024];
1902         int fd;
1903         vlan->nb_host_devs++;
1904         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
1905             if (check_params(buf, sizeof(buf), fd_params, p) < 0) {
1906                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1907                         buf, p);
1908                 return -1;
1909             }
1910             fd = strtol(buf, NULL, 0);
1911             fcntl(fd, F_SETFL, O_NONBLOCK);
1912             net_tap_fd_init(vlan, device, name, fd);
1913             ret = 0;
1914         } else {
1915             static const char * const tap_params[] = {
1916                 "vlan", "name", "ifname", "script", "downscript", NULL
1917             };
1918             if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
1919                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1920                         buf, p);
1921                 return -1;
1922             }
1923             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
1924                 ifname[0] = '\0';
1925             }
1926             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
1927                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
1928             }
1929             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
1930                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
1931             }
1932             ret = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
1933         }
1934     } else
1935 #endif
1936     if (!strcmp(device, "socket")) {
1937         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
1938             int fd;
1939             if (check_params(buf, sizeof(buf), fd_params, p) < 0) {
1940                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1941                         buf, p);
1942                 return -1;
1943             }
1944             fd = strtol(buf, NULL, 0);
1945             ret = -1;
1946             if (net_socket_fd_init(vlan, device, name, fd, 1))
1947                 ret = 0;
1948         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
1949             static const char * const listen_params[] = {
1950                 "vlan", "name", "listen", NULL
1951             };
1952             if (check_params(buf, sizeof(buf), listen_params, p) < 0) {
1953                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1954                         buf, p);
1955                 return -1;
1956             }
1957             ret = net_socket_listen_init(vlan, device, name, buf);
1958         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
1959             static const char * const connect_params[] = {
1960                 "vlan", "name", "connect", NULL
1961             };
1962             if (check_params(buf, sizeof(buf), connect_params, p) < 0) {
1963                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1964                         buf, p);
1965                 return -1;
1966             }
1967             ret = net_socket_connect_init(vlan, device, name, buf);
1968         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
1969             static const char * const mcast_params[] = {
1970                 "vlan", "name", "mcast", NULL
1971             };
1972             if (check_params(buf, sizeof(buf), mcast_params, p) < 0) {
1973                 fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1974                         buf, p);
1975                 return -1;
1976             }
1977             ret = net_socket_mcast_init(vlan, device, name, buf);
1978         } else {
1979             fprintf(stderr, "Unknown socket options: %s\n", p);
1980             ret = -1;
1981             goto out;
1982         }
1983         vlan->nb_host_devs++;
1984     } else
1985 #ifdef CONFIG_VDE
1986     if (!strcmp(device, "vde")) {
1987         static const char * const vde_params[] = {
1988             "vlan", "name", "sock", "port", "group", "mode", NULL
1989         };
1990         char vde_sock[1024], vde_group[512];
1991         int vde_port, vde_mode;
1992
1993         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
1994             fprintf(stderr, "qemu: invalid parameter '%s' in '%s'\n",
1995                     buf, p);
1996             return -1;
1997         }
1998         vlan->nb_host_devs++;
1999         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2000             vde_sock[0] = '\0';
2001         }
2002         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2003             vde_port = strtol(buf, NULL, 10);
2004         } else {
2005             vde_port = 0;
2006         }
2007         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2008             vde_group[0] = '\0';
2009         }
2010         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2011             vde_mode = strtol(buf, NULL, 8);
2012         } else {
2013             vde_mode = 0700;
2014         }
2015         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2016     } else
2017 #endif
2018     if (!strcmp(device, "dump")) {
2019         int len = 65536;
2020
2021         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2022             len = strtol(buf, NULL, 0);
2023         }
2024         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2025             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2026         }
2027         ret = net_dump_init(vlan, device, name, buf, len);
2028     } else {
2029         fprintf(stderr, "Unknown network device: %s\n", device);
2030         ret = -1;
2031         goto out;
2032     }
2033     if (ret < 0) {
2034         fprintf(stderr, "Could not initialize device '%s'\n", device);
2035     }
2036 out:
2037     if (name)
2038         free(name);
2039     return ret;
2040 }
2041
2042 void net_client_uninit(NICInfo *nd)
2043 {
2044     nd->vlan->nb_guest_devs--;
2045     nb_nics--;
2046     nd->used = 0;
2047     free((void *)nd->model);
2048 }
2049
2050 static int net_host_check_device(const char *device)
2051 {
2052     int i;
2053     const char *valid_param_list[] = { "tap", "socket", "dump"
2054 #ifdef CONFIG_SLIRP
2055                                        ,"user"
2056 #endif
2057 #ifdef CONFIG_VDE
2058                                        ,"vde"
2059 #endif
2060     };
2061     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2062         if (!strncmp(valid_param_list[i], device,
2063                      strlen(valid_param_list[i])))
2064             return 1;
2065     }
2066
2067     return 0;
2068 }
2069
2070 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2071 {
2072     if (!net_host_check_device(device)) {
2073         monitor_printf(mon, "invalid host network device %s\n", device);
2074         return;
2075     }
2076     if (net_client_init(device, opts ? : "") < 0) {
2077         monitor_printf(mon, "adding host network device %s failed\n", device);
2078     }
2079 }
2080
2081 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2082 {
2083     VLANState *vlan;
2084     VLANClientState *vc;
2085
2086     vlan = qemu_find_vlan(vlan_id);
2087
2088     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
2089         if (!strcmp(vc->name, device)) {
2090             break;
2091         }
2092     }
2093
2094     if (!vc) {
2095         monitor_printf(mon, "can't find device %s\n", device);
2096         return;
2097     }
2098     if (!net_host_check_device(vc->model)) {
2099         monitor_printf(mon, "invalid host network device %s\n", device);
2100         return;
2101     }
2102     qemu_del_vlan_client(vc);
2103 }
2104
2105 int net_client_parse(const char *str)
2106 {
2107     const char *p;
2108     char *q;
2109     char device[64];
2110
2111     p = str;
2112     q = device;
2113     while (*p != '\0' && *p != ',') {
2114         if ((q - device) < sizeof(device) - 1)
2115             *q++ = *p;
2116         p++;
2117     }
2118     *q = '\0';
2119     if (*p == ',')
2120         p++;
2121
2122     return net_client_init(device, p);
2123 }
2124
2125 void do_info_network(Monitor *mon)
2126 {
2127     VLANState *vlan;
2128     VLANClientState *vc;
2129
2130     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2131         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2132         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2133             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2134     }
2135 }
2136
2137 int do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2138 {
2139     VLANState *vlan;
2140     VLANClientState *vc = NULL;
2141
2142     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2143         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2144             if (strcmp(vc->name, name) == 0)
2145                 goto done;
2146 done:
2147
2148     if (!vc) {
2149         monitor_printf(mon, "could not find network device '%s'", name);
2150         return 0;
2151     }
2152
2153     if (strcmp(up_or_down, "up") == 0)
2154         vc->link_down = 0;
2155     else if (strcmp(up_or_down, "down") == 0)
2156         vc->link_down = 1;
2157     else
2158         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2159                        "valid\n", up_or_down);
2160
2161     if (vc->link_status_changed)
2162         vc->link_status_changed(vc);
2163
2164     return 1;
2165 }
2166
2167 void net_cleanup(void)
2168 {
2169     VLANState *vlan;
2170
2171     /* close network clients */
2172     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2173         VLANClientState *vc = vlan->first_client;
2174
2175         while (vc) {
2176             VLANClientState *next = vc->next;
2177
2178             qemu_del_vlan_client(vc);
2179
2180             vc = next;
2181         }
2182     }
2183 }
2184
2185 void net_client_check(void)
2186 {
2187     VLANState *vlan;
2188
2189     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2190         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2191             continue;
2192         if (vlan->nb_guest_devs == 0)
2193             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2194         if (vlan->nb_host_devs == 0)
2195             fprintf(stderr,
2196                     "Warning: vlan %d is not connected to host network\n",
2197                     vlan->id);
2198     }
2199 }