| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
kvm_getfiles. This allows to run netstat without any extra privileges
and removes another setgid program from base..
There is still kvm reader code in there which is used for debugging
purposes (crashdump). netstat should still behave mostly the same.
deraadt@ and sthen@ agree that it is time to get this puppy in.
|
|
|
|
| |
the new sysctls. Looks good deraadt@
|
|
|
|
| |
OK deraadt@
|
|
|
|
|
|
|
|
|
| |
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)
|
|
|
|
|
|
| |
In particular, do not call getnetbyaddr(3), use gethostbyaddr(3) only.
Do not call setnetent(3) and the dummy sethostent(3).
OK henning@; and deraadt@ agrees with the general direction.
|
|
|
|
| |
inconsistent usage in route(8) noted by Gregor Best (gbe (at) ring0.de)
|
| |
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
ok benno
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- convert netstat from kvm_getfiles() to kvm_getfile2() using that
- delete kvm_getfiles() and KERN_FILE as no longer used (bump libkvm's major)
- rename kvm_getfile2() to kvm_getfiles(), kinfo_file2 to kinfo_file
and KERN_FILE2 to KERN_FILE.
ok deraadt@, millert@
ports scan sthen@
|
|
|
|
| |
print 0x0 instead. Hides a lot stuff people don't need to see.
|
| |
|
| |
|
| |
|
|
|
|
| |
reminded by Andreas Bartelt.
|
|
|
|
|
| |
Prompted by the mail from Andreas Bartelt, tested by Andreas and me.
ok henning
|
| |
|
|
|
|
|
|
| |
With feedback from bluhm@
ok bluhm@ sthen@
|
|
|
|
|
| |
with -v. Also netstat -P supports more than TCP now.
ok markus@ jmc@
|
|
|
|
|
| |
most expected rtable when doing a netstat -rn.
OK henning@
|
|
|
|
|
|
| |
fixes printing active connections twice.
ok claudio@
|
|
|
|
|
| |
name list work properly.
ok deraadt@ millert@
|
|
|
|
|
|
| |
directly to the appropriate print functions.
Found by jdixon@, tested jdixon@ and weerd@, ok krw@ deraadt@
|
|
|
|
|
|
| |
add a -c count option to netstat.
tweak spacing to not smear fields in vmstat.
ok deraadt sthen
|
|
|
|
|
|
| |
tested by phessler@ pyr@
ok claudio@
"go ahead" deraadt@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- queue packets from pf(4) to a userspace application
- reinject packets from the application into the kernel stack.
The divert socket can be bound to a special "divert port" and will
receive every packet diverted to that port by pf(4).
The pf syntax is pretty simple, e.g.:
pass on em0 inet proto tcp from any to any port 80 divert-packet port 1
A lot of discussion have happened since my last commit that resulted
in many changes and improvements.
I would *really* like to thank everyone who took part in the discussion
especially canacar@ who spotted out which are the limitations of this approach.
OpenBSD divert(4) is meant to be compatible with software running on
top of FreeBSD's divert sockets even though they are pretty different and will
become even more with time.
discusses with many, but mainly reyk@ canacar@ deraadt@ dlg@ claudio@ beck@
tested by reyk@ and myself
ok reyk@ claudio@ beck@
manpage help and ok by jmc@
|
|
|
|
|
| |
default to table 0 by default. Makes debugging alternate tables possible.
OK jsg@
|
| |
|
|
|
|
|
| |
and while there use a better type for the plural{,es}() functions.
OK henning@
|
|
|
|
| |
ok cluadio@ henning@
|
| |
|
|
|
|
|
|
| |
and ospfd. What is not yet covered is the -d and -t flags to show interface
queue drops and the if_timer.
OK deraadt@
|
|
|
|
|
|
| |
While there remove the ugly rflag checks and make it more consistent with
the rest of the code. Another step in making netstat setgid free.
OK deraadt@
|
| |
|
|
|
|
|
| |
turn on INET6 the default (remove the #ifdef's)
ok claudio reyk
|
|
|
|
| |
ok claudio pyr
|
|
|
|
| |
ok jmc@
|
|
|
|
| |
comes from route(8) which already had the -T option. OK henning@
|
|
|
|
|
| |
symbols from the table. This fixes the netstat issues some people reported.
OK henning@
|
| |
|
| |
|
|
|
|
|
| |
with -r to routes in the same address family as the destination.
ok henning@, claudio@
|
|
|
|
| |
"support". This makes netstat -A work again. OK markus@ henning@
|
|
|
|
|
| |
sysctl. Most code is stolen from route -- which was stolen from netstat.
kvm snooping code is still in and useable. Put it in deraadt@ henning@
|
|
|
|
| |
ok deraadt@ millert@ moritz@
|
| |
|
| |
|
| |
|
|
|
|
| |
- tweak a spacing issue in usage()
|