mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-22 22:11:09 +01:00
60d8dbbef0
When debugging network issues one common clue is an unexpectedly
incrementing error counter. This is helpful, in that it gives us an
idea of what might be going wrong, but often these counters may be
incremented in different functions.
Add a static probe point for them so that we can use dtrace to get
futher information (e.g. a stack trace).
For example:
dtrace -n 'mib:ip:count: { printf("%d", arg0); stack(); }'
This can be disabled by setting the following kernel option:
options KDTRACE_NO_MIB_SDT
Reviewed by: gallatin, tuexen (previous version), gnn (previous version)
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D43504
115 lines
4.4 KiB
C
115 lines
4.4 KiB
C
/*-
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*
|
|
* Copyright (c) 1982, 1986, 1993
|
|
* The Regents of the University of California. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifndef _NETINET_ICMP_VAR_H_
|
|
#define _NETINET_ICMP_VAR_H_
|
|
|
|
/*
|
|
* Variables related to this implementation
|
|
* of the internet control message protocol.
|
|
*/
|
|
struct icmpstat {
|
|
/* statistics related to icmp packets generated */
|
|
u_long icps_error; /* # of calls to icmp_error */
|
|
u_long icps_oldshort; /* no error 'cuz old ip too short */
|
|
u_long icps_oldicmp; /* no error 'cuz old was icmp */
|
|
u_long icps_outhist[ICMP_MAXTYPE + 1];
|
|
/* statistics related to input messages processed */
|
|
u_long icps_badcode; /* icmp_code out of range */
|
|
u_long icps_tooshort; /* packet < ICMP_MINLEN */
|
|
u_long icps_checksum; /* bad checksum */
|
|
u_long icps_badlen; /* calculated bound mismatch */
|
|
u_long icps_reflect; /* number of responses */
|
|
u_long icps_inhist[ICMP_MAXTYPE + 1];
|
|
u_long icps_bmcastecho; /* b/mcast echo requests dropped */
|
|
u_long icps_bmcasttstamp; /* b/mcast tstamp requests dropped */
|
|
u_long icps_badaddr; /* bad return address */
|
|
u_long icps_noroute; /* no route back */
|
|
};
|
|
|
|
#ifdef _KERNEL
|
|
#include <sys/counter.h>
|
|
#include <netinet/in_kdtrace.h>
|
|
|
|
VNET_PCPUSTAT_DECLARE(struct icmpstat, icmpstat);
|
|
/*
|
|
* In-kernel consumers can use these accessor macros directly to update
|
|
* stats.
|
|
*/
|
|
#define ICMPSTAT_ADD(name, val) \
|
|
do { \
|
|
MIB_SDT_PROBE1(icmp, count, name, (val)); \
|
|
VNET_PCPUSTAT_ADD(struct icmpstat, icmpstat, name, (val)); \
|
|
} while (0)
|
|
|
|
#define ICMPSTAT_INC(name) ICMPSTAT_ADD(name, 1)
|
|
#define ICMPSTAT_INC2(name, type) \
|
|
do { \
|
|
MIB_SDT_PROBE2(icmp, count, name, 1, type); \
|
|
VNET_PCPUSTAT_ADD(struct icmpstat, icmpstat, name[type], 1); \
|
|
} while (0)
|
|
|
|
/*
|
|
* Kernel module consumers must use this accessor macro.
|
|
*/
|
|
void kmod_icmpstat_inc(int statnum);
|
|
#define KMOD_ICMPSTAT_INC(name) \
|
|
do { \
|
|
MIB_SDT_PROBE1(icmp, count, name, 1); \
|
|
kmod_icmpstat_inc( \
|
|
offsetof(struct icmpstat, name) / sizeof(uint64_t)); \
|
|
} while (0)
|
|
#endif
|
|
|
|
/*
|
|
* Identifiers for ICMP sysctl nodes
|
|
*/
|
|
#define ICMPCTL_MASKREPL 1 /* allow replies to netmask requests */
|
|
#define ICMPCTL_STATS 2 /* statistics (read-only) */
|
|
#define ICMPCTL_ICMPLIM 3
|
|
|
|
#ifdef _KERNEL
|
|
SYSCTL_DECL(_net_inet_icmp);
|
|
|
|
extern int badport_bandlim(int);
|
|
#define BANDLIM_UNLIMITED -1
|
|
#define BANDLIM_ICMP_UNREACH 0
|
|
#define BANDLIM_ICMP_ECHO 1
|
|
#define BANDLIM_ICMP_TSTAMP 2
|
|
#define BANDLIM_RST_CLOSEDPORT 3 /* No connection, and no listeners */
|
|
#define BANDLIM_RST_OPENPORT 4 /* No connection, listener */
|
|
#define BANDLIM_ICMP6_UNREACH 5
|
|
#define BANDLIM_SCTP_OOTB 6
|
|
#define BANDLIM_MAX 7
|
|
#endif
|
|
|
|
#endif
|