// SPDX-License-Identifier: GPL-2.0 /* Copyright (c) 2020 Facebook */ #include "bpf_iter.h" #include "bpf_tracing_net.h" #include <bpf/bpf_helpers.h> #include <bpf/bpf_endian.h> char _license[] SEC("license") = "GPL"; static long sock_i_ino(const struct sock *sk) { const struct socket *sk_socket = sk->sk_socket; const struct inode *inode; unsigned long ino; if (!sk_socket) return 0; inode = &container_of(sk_socket, struct socket_alloc, socket)->vfs_inode; bpf_probe_read_kernel(&ino, sizeof(ino), &inode->i_ino); return ino; } SEC("iter/udp") int dump_udp4(struct bpf_iter__udp *ctx) { struct seq_file *seq = ctx->meta->seq; struct udp_sock *udp_sk = ctx->udp_sk; struct inet_sock *inet; __u16 srcp, destp; __be32 dest, src; __u32 seq_num; int rqueue; if (udp_sk == (void *)0) return 0; seq_num = ctx->meta->seq_num; if (seq_num == 0) BPF_SEQ_PRINTF(seq, " sl local_address rem_address st tx_queue " "rx_queue tr tm->when retrnsmt uid timeout " "inode ref pointer drops\n"); /* filter out udp6 sockets */ inet = &udp_sk->inet; if (inet->sk.sk_family == AF_INET6) return 0; inet = &udp_sk->inet; dest = inet->inet_daddr; src = inet->inet_rcv_saddr; srcp = bpf_ntohs(inet->inet_sport); destp = bpf_ntohs(inet->inet_dport); rqueue = inet->sk.sk_rmem_alloc.counter - udp_sk->forward_deficit; BPF_SEQ_PRINTF(seq, "%5d: %08X:%04X %08X:%04X ", ctx->bucket, src, srcp, dest, destp); BPF_SEQ_PRINTF(seq, "%02X %08X:%08X %02X:%08lX %08X %5u %8d %lu %d %pK %u\n", inet->sk.sk_state, inet->sk.sk_wmem_alloc.refs.counter - 1, rqueue, 0, 0L, 0, ctx->uid, 0, sock_i_ino(&inet->sk), inet->sk.sk_refcnt.refs.counter, udp_sk, inet->sk.sk_drops.counter); return 0; }