net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 // FIXME: #include "qemu-kvm.h"
 114 #include "qemu-common.h"
 115 #include "net.h"
 116 #include "monitor.h"
 117 #include "sysemu.h"
 118 #include "qemu-timer.h"
 119 #include "qemu-char.h"
 120 #include "audio/audio.h"
 121 #include "qemu_socket.h"
 122 #include "qemu-log.h"
 123
 124 #if defined(CONFIG_SLIRP)
 125 #include "libslirp.h"
 126 #endif
 127
 128
 129 static VLANState *first_vlan;
 130
 131 /***********************************************************/
 132 /* network device redirectors */
 133
 134 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 135 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 136 {
 137     int len, i, j, c;
 138
 139     for(i=0;i<size;i+=16) {
 140         len = size - i;
 141         if (len > 16)
 142             len = 16;
 143         fprintf(f, "%08x ", i);
 144         for(j=0;j<16;j++) {
 145             if (j < len)
 146                 fprintf(f, " %02x", buf[i+j]);
 147             else
 148                 fprintf(f, "   ");
 149         }
 150         fprintf(f, " ");
 151         for(j=0;j<len;j++) {
 152             c = buf[i+j];
 153             if (c < ' ' || c > '~')
 154                 c = '.';
 155             fprintf(f, "%c", c);
 156         }
 157         fprintf(f, "\n");
 158     }
 159 }
 160 #endif
 161
 162 static int parse_macaddr(uint8_t *macaddr, const char *p)
 163 {
 164     int i;
 165     char *last_char;
 166     long int offset;
 167
 168     errno = 0;
 169     offset = strtol(p, &last_char, 0);
 170     if (0 == errno && '\0' == *last_char &&
 171             offset >= 0 && offset <= 0xFFFFFF) {
 172         macaddr[3] = (offset & 0xFF0000) >> 16;
 173         macaddr[4] = (offset & 0xFF00) >> 8;
 174         macaddr[5] = offset & 0xFF;
 175         return 0;
 176     } else {
 177         for(i = 0; i < 6; i++) {
 178             macaddr[i] = strtol(p, (char **)&p, 16);
 179             if (i == 5) {
 180                 if (*p != '\0')
 181                     return -1;
 182             } else {
 183                 if (*p != ':' && *p != '-')
 184                     return -1;
 185                 p++;
 186             }
 187         }
 188         return 0;
 189     }
 190
 191     return -1;
 192 }
 193
 194 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 195 {
 196     const char *p, *p1;
 197     int len;
 198     p = *pp;
 199     p1 = strchr(p, sep);
 200     if (!p1)
 201         return -1;
 202     len = p1 - p;
 203     p1++;
 204     if (buf_size > 0) {
 205         if (len > buf_size - 1)
 206             len = buf_size - 1;
 207         memcpy(buf, p, len);
 208         buf[len] = '\0';
 209     }
 210     *pp = p1;
 211     return 0;
 212 }
 213
 214 int parse_host_src_port(struct sockaddr_in *haddr,
 215                         struct sockaddr_in *saddr,
 216                         const char *input_str)
 217 {
 218     char *str = strdup(input_str);
 219     char *host_str = str;
 220     char *src_str;
 221     const char *src_str2;
 222     char *ptr;
 223
 224     /*
 225      * Chop off any extra arguments at the end of the string which
 226      * would start with a comma, then fill in the src port information
 227      * if it was provided else use the "any address" and "any port".
 228      */
 229     if ((ptr = strchr(str,',')))
 230         *ptr = '\0';
 231
 232     if ((src_str = strchr(input_str,'@'))) {
 233         *src_str = '\0';
 234         src_str++;
 235     }
 236
 237     if (parse_host_port(haddr, host_str) < 0)
 238         goto fail;
 239
 240     src_str2 = src_str;
 241     if (!src_str || *src_str == '\0')
 242         src_str2 = ":0";
 243
 244     if (parse_host_port(saddr, src_str2) < 0)
 245         goto fail;
 246
 247     free(str);
 248     return(0);
 249
 250 fail:
 251     free(str);
 252     return -1;
 253 }
 254
 255 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 256 {
 257     char buf[512];
 258     struct hostent *he;
 259     const char *p, *r;
 260     int port;
 261
 262     p = str;
 263     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 264         return -1;
 265     saddr->sin_family = AF_INET;
 266     if (buf[0] == '\0') {
 267         saddr->sin_addr.s_addr = 0;
 268     } else {
 269         if (qemu_isdigit(buf[0])) {
 270             if (!inet_aton(buf, &saddr->sin_addr))
 271                 return -1;
 272         } else {
 273             if ((he = gethostbyname(buf)) == NULL)
 274                 return - 1;
 275             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 276         }
 277     }
 278     port = strtol(p, (char **)&r, 0);
 279     if (r == p)
 280         return -1;
 281     saddr->sin_port = htons(port);
 282     return 0;
 283 }
 284
 285 #if !defined(_WIN32) && 0
 286 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 287 {
 288     const char *p;
 289     int len;
 290
 291     len = MIN(108, strlen(str));
 292     p = strchr(str, ',');
 293     if (p)
 294         len = MIN(len, p - str);
 295
 296     memset(uaddr, 0, sizeof(*uaddr));
 297
 298     uaddr->sun_family = AF_UNIX;
 299     memcpy(uaddr->sun_path, str, len);
 300
 301     return 0;
 302 }
 303 #endif
 304
 305 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 306 {
 307     snprintf(vc->info_str, sizeof(vc->info_str),
 308              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 309              vc->model,
 310              macaddr[0], macaddr[1], macaddr[2],
 311              macaddr[3], macaddr[4], macaddr[5]);
 312 }
 313
 314 static char *assign_name(VLANClientState *vc1, const char *model)
 315 {
 316     VLANState *vlan;
 317     char buf[256];
 318     int id = 0;
 319
 320     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 321         VLANClientState *vc;
 322
 323         for (vc = vlan->first_client; vc; vc = vc->next)
 324             if (vc != vc1 && strcmp(vc->model, model) == 0)
 325                 id++;
 326     }
 327
 328     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 329
 330     return strdup(buf);
 331 }
 332
 333 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 334                                       const char *model,
 335                                       const char *name,
 336                                       NetCanReceive *can_receive,
 337                                       NetReceive *receive,
 338                                       NetReceiveIOV *receive_iov,
 339                                       NetCleanup *cleanup,
 340                                       void *opaque)
 341 {
 342     VLANClientState *vc, **pvc;
 343     vc = qemu_mallocz(sizeof(VLANClientState));
 344     vc->model = strdup(model);
 345     if (name)
 346         vc->name = strdup(name);
 347     else
 348         vc->name = assign_name(vc, model);
 349     vc->can_receive = can_receive;
 350     vc->receive = receive;
 351     vc->receive_iov = receive_iov;
 352     vc->cleanup = cleanup;
 353     vc->opaque = opaque;
 354     vc->vlan = vlan;
 355
 356     vc->next = NULL;
 357     pvc = &vlan->first_client;
 358     while (*pvc != NULL)
 359         pvc = &(*pvc)->next;
 360     *pvc = vc;
 361     return vc;
 362 }
 363
 364 void qemu_del_vlan_client(VLANClientState *vc)
 365 {
 366     VLANClientState **pvc = &vc->vlan->first_client;
 367
 368     while (*pvc != NULL)
 369         if (*pvc == vc) {
 370             *pvc = vc->next;
 371             if (vc->cleanup) {
 372                 vc->cleanup(vc);
 373             }
 374             free(vc->name);
 375             free(vc->model);
 376             qemu_free(vc);
 377             break;
 378         } else
 379             pvc = &(*pvc)->next;
 380 }
 381
 382 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 383 {
 384     VLANClientState **pvc = &vlan->first_client;
 385
 386     while (*pvc != NULL)
 387         if ((*pvc)->opaque == opaque)
 388             return *pvc;
 389         else
 390             pvc = &(*pvc)->next;
 391
 392     return NULL;
 393 }
 394
 395 int qemu_can_send_packet(VLANClientState *sender)
 396 {
 397     VLANState *vlan = sender->vlan;
 398     VLANClientState *vc;
 399
 400     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 401         if (vc == sender) {
 402             continue;
 403         }
 404
 405         /* no can_receive() handler, they can always receive */
 406         if (!vc->can_receive || vc->can_receive(vc)) {
 407             return 1;
 408         }
 409     }
 410     return 0;
 411 }
 412
 413 static int
 414 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size, int raw)
 415 {
 416     VLANClientState *vc;
 417     int ret = -1;
 418
 419     sender->vlan->delivering = 1;
 420
 421     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 422         ssize_t len;
 423
 424         if (vc == sender) {
 425             continue;
 426         }
 427
 428         if (vc->link_down) {
 429             ret = size;
 430             continue;
 431         }
 432
 433         if (raw && vc->receive_raw) {
 434             len = vc->receive_raw(vc, buf, size);
 435         } else {
 436             len = vc->receive(vc, buf, size);
 437         }
 438
 439         ret = (ret >= 0) ? ret : len;
 440     }
 441
 442     sender->vlan->delivering = 0;
 443
 444     return ret;
 445 }
 446
 447 void qemu_flush_queued_packets(VLANClientState *vc)
 448 {
 449     VLANPacket *packet;
 450
 451     while ((packet = vc->vlan->send_queue) != NULL) {
 452         int ret;
 453
 454         vc->vlan->send_queue = packet->next;
 455
 456         ret = qemu_deliver_packet(packet->sender, packet->data,
 457                                   packet->size, packet->raw);
 458         if (ret == 0 && packet->sent_cb != NULL) {
 459             packet->next = vc->vlan->send_queue;
 460             vc->vlan->send_queue = packet;
 461             break;
 462         }
 463
 464         if (packet->sent_cb)
 465             packet->sent_cb(packet->sender);
 466
 467         qemu_free(packet);
 468     }
 469 }
 470
 471 static void qemu_enqueue_packet(VLANClientState *sender,
 472                                 const uint8_t *buf, int size, int raw,
 473                                 NetPacketSent *sent_cb)
 474 {
 475     VLANPacket *packet;
 476
 477     packet = qemu_malloc(sizeof(VLANPacket) + size);
 478     packet->next = sender->vlan->send_queue;
 479     packet->sender = sender;
 480     packet->size = size;
 481     packet->raw = raw;
 482     packet->sent_cb = sent_cb;
 483     memcpy(packet->data, buf, size);
 484     sender->vlan->send_queue = packet;
 485 }
 486
 487 static ssize_t qemu_send_packet_async2(VLANClientState *sender,
 488                                        const uint8_t *buf, int size, int raw,
 489                                        NetPacketSent *sent_cb)
 490 {
 491     int ret;
 492
 493     if (sender->link_down) {
 494         return size;
 495     }
 496
 497 #ifdef DEBUG_NET
 498     printf("vlan %d send:\n", sender->vlan->id);
 499     hex_dump(stdout, buf, size);
 500 #endif
 501
 502     if (sender->vlan->delivering) {
 503         qemu_enqueue_packet(sender, buf, size, raw, NULL);
 504         return size;
 505     }
 506
 507     ret = qemu_deliver_packet(sender, buf, size, raw);
 508     if (ret == 0 && sent_cb != NULL) {
 509         qemu_enqueue_packet(sender, buf, size, raw, sent_cb);
 510         return 0;
 511     }
 512
 513     qemu_flush_queued_packets(sender);
 514
 515     return ret;
 516 }
 517
 518 ssize_t qemu_send_packet_async(VLANClientState *sender,
 519                                const uint8_t *buf, int size,
 520                                NetPacketSent *sent_cb)
 521 {
 522     return qemu_send_packet_async2(sender, buf, size, 0, sent_cb);
 523 }
 524
 525 ssize_t qemu_send_packet(VLANClientState *sender, const uint8_t *buf, int size)
 526 {
 527     return qemu_send_packet_async2(sender, buf, size, 0, NULL);
 528 }
 529
 530 ssize_t qemu_send_packet_raw(VLANClientState *sender, const uint8_t *buf, int size)
 531 {
 532     return qemu_send_packet_async2(sender, buf, size, 1, NULL);
 533 }
 534
 535 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 536                                int iovcnt)
 537 {
 538     uint8_t buffer[4096];
 539     size_t offset = 0;
 540     int i;
 541
 542     for (i = 0; i < iovcnt; i++) {
 543         size_t len;
 544
 545         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 546         memcpy(buffer + offset, iov[i].iov_base, len);
 547         offset += len;
 548     }
 549
 550     return vc->receive(vc, buffer, offset);
 551 }
 552
 553 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 554 {
 555     size_t offset = 0;
 556     int i;
 557
 558     for (i = 0; i < iovcnt; i++)
 559         offset += iov[i].iov_len;
 560     return offset;
 561 }
 562
 563 static int qemu_deliver_packet_iov(VLANClientState *sender,
 564                                    const struct iovec *iov, int iovcnt)
 565 {
 566     VLANClientState *vc;
 567     int ret = -1;
 568
 569     sender->vlan->delivering = 1;
 570
 571     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 572         ssize_t len;
 573
 574         if (vc == sender) {
 575             continue;
 576         }
 577
 578         if (vc->link_down) {
 579             ret = calc_iov_length(iov, iovcnt);
 580             continue;
 581         }
 582
 583         if (vc->receive_iov) {
 584             len = vc->receive_iov(vc, iov, iovcnt);
 585         } else {
 586             len = vc_sendv_compat(vc, iov, iovcnt);
 587         }
 588
 589         ret = (ret >= 0) ? ret : len;
 590     }
 591
 592     sender->vlan->delivering = 0;
 593
 594     return ret;
 595 }
 596
 597 static ssize_t qemu_enqueue_packet_iov(VLANClientState *sender,
 598                                        const struct iovec *iov, int iovcnt,
 599                                        NetPacketSent *sent_cb)
 600 {
 601     VLANPacket *packet;
 602     size_t max_len = 0;
 603     int i;
 604
 605     max_len = calc_iov_length(iov, iovcnt);
 606
 607     packet = qemu_malloc(sizeof(VLANPacket) + max_len);
 608     packet->next = sender->vlan->send_queue;
 609     packet->sender = sender;
 610     packet->sent_cb = sent_cb;
 611     packet->size = 0;
 612     packet->raw = 0;
 613
 614     for (i = 0; i < iovcnt; i++) {
 615         size_t len = iov[i].iov_len;
 616
 617         memcpy(packet->data + packet->size, iov[i].iov_base, len);
 618         packet->size += len;
 619     }
 620
 621     sender->vlan->send_queue = packet;
 622
 623     return packet->size;
 624 }
 625
 626 ssize_t qemu_sendv_packet_async(VLANClientState *sender,
 627                                 const struct iovec *iov, int iovcnt,
 628                                 NetPacketSent *sent_cb)
 629 {
 630     int ret;
 631
 632     if (sender->link_down) {
 633         return calc_iov_length(iov, iovcnt);
 634     }
 635
 636     if (sender->vlan->delivering) {
 637         return qemu_enqueue_packet_iov(sender, iov, iovcnt, NULL);
 638     }
 639
 640     ret = qemu_deliver_packet_iov(sender, iov, iovcnt);
 641     if (ret == 0 && sent_cb != NULL) {
 642         qemu_enqueue_packet_iov(sender, iov, iovcnt, sent_cb);
 643         return 0;
 644     }
 645
 646     qemu_flush_queued_packets(sender);
 647
 648     return ret;
 649 }
 650
 651 ssize_t
 652 qemu_sendv_packet(VLANClientState *vc, const struct iovec *iov, int iovcnt)
 653 {
 654     return qemu_sendv_packet_async(vc, iov, iovcnt, NULL);
 655 }
 656
 657 static void config_error(Monitor *mon, const char *fmt, ...)
 658 {
 659     va_list ap;
 660
 661     va_start(ap, fmt);
 662     if (mon) {
 663         monitor_vprintf(mon, fmt, ap);
 664     } else {
 665         fprintf(stderr, "qemu: ");
 666         vfprintf(stderr, fmt, ap);
 667         exit(1);
 668     }
 669     va_end(ap);
 670 }
 671
 672 #if defined(CONFIG_SLIRP)
 673
 674 /* slirp network adapter */
 675
 676 struct slirp_config_str {
 677     struct slirp_config_str *next;
 678     const char *str;
 679 };
 680
 681 static int slirp_inited;
 682 static struct slirp_config_str *slirp_redirs;
 683 #ifndef _WIN32
 684 static const char *slirp_smb_export;
 685 #endif
 686 static VLANClientState *slirp_vc;
 687
 688 static void slirp_smb(const char *exported_dir);
 689 static void slirp_redirection(Monitor *mon, const char *redir_str);
 690
 691 int slirp_can_output(void)
 692 {
 693     return !slirp_vc || qemu_can_send_packet(slirp_vc);
 694 }
 695
 696 void slirp_output(const uint8_t *pkt, int pkt_len)
 697 {
 698 #ifdef DEBUG_SLIRP
 699     printf("slirp output:\n");
 700     hex_dump(stdout, pkt, pkt_len);
 701 #endif
 702     if (!slirp_vc)
 703         return;
 704     qemu_send_packet(slirp_vc, pkt, pkt_len);
 705 }
 706
 707 int slirp_is_inited(void)
 708 {
 709     return slirp_inited;
 710 }
 711
 712 static ssize_t slirp_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 713 {
 714 #ifdef DEBUG_SLIRP
 715     printf("slirp input:\n");
 716     hex_dump(stdout, buf, size);
 717 #endif
 718     slirp_input(buf, size);
 719     return size;
 720 }
 721
 722 static int slirp_in_use;
 723
 724 static void net_slirp_cleanup(VLANClientState *vc)
 725 {
 726     slirp_in_use = 0;
 727 }
 728
 729 static int net_slirp_init(VLANState *vlan, const char *model, const char *name,
 730                           int restricted, const char *ip)
 731 {
 732     if (slirp_in_use) {
 733         /* slirp only supports a single instance so far */
 734         return -1;
 735     }
 736     if (!slirp_inited) {
 737         slirp_inited = 1;
 738         slirp_init(restricted, ip);
 739
 740         while (slirp_redirs) {
 741             struct slirp_config_str *config = slirp_redirs;
 742
 743             slirp_redirection(NULL, config->str);
 744             slirp_redirs = config->next;
 745             qemu_free(config);
 746         }
 747 #ifndef _WIN32
 748         if (slirp_smb_export) {
 749             slirp_smb(slirp_smb_export);
 750         }
 751 #endif
 752     }
 753
 754     slirp_vc = qemu_new_vlan_client(vlan, model, name, NULL, slirp_receive,
 755                                     NULL, net_slirp_cleanup, NULL);
 756     slirp_vc->info_str[0] = '\0';
 757     slirp_in_use = 1;
 758     return 0;
 759 }
 760
 761 static void net_slirp_redir_print(void *opaque, int is_udp,
 762                                   struct in_addr *laddr, u_int lport,
 763                                   struct in_addr *faddr, u_int fport)
 764 {
 765     Monitor *mon = (Monitor *)opaque;
 766     uint32_t h_addr;
 767     uint32_t g_addr;
 768     char buf[16];
 769
 770     h_addr = ntohl(faddr->s_addr);
 771     g_addr = ntohl(laddr->s_addr);
 772
 773     monitor_printf(mon, "  %s |", is_udp ? "udp" : "tcp" );
 774     snprintf(buf, 15, "%d.%d.%d.%d", (h_addr >> 24) & 0xff,
 775                                      (h_addr >> 16) & 0xff,
 776                                      (h_addr >> 8) & 0xff,
 777                                      (h_addr) & 0xff);
 778     monitor_printf(mon, " %15s |", buf);
 779     monitor_printf(mon, " %5d |", fport);
 780
 781     snprintf(buf, 15, "%d.%d.%d.%d", (g_addr >> 24) & 0xff,
 782                                      (g_addr >> 16) & 0xff,
 783                                      (g_addr >> 8) & 0xff,
 784                                      (g_addr) & 0xff);
 785     monitor_printf(mon, " %15s |", buf);
 786     monitor_printf(mon, " %5d\n", lport);
 787
 788 }
 789
 790 static void net_slirp_redir_list(Monitor *mon)
 791 {
 792     if (!mon)
 793         return;
 794
 795     monitor_printf(mon, " Prot |    Host Addr    | HPort |    Guest Addr   | GPort\n");
 796     monitor_printf(mon, "      |                 |       |                 |      \n");
 797     slirp_redir_loop(net_slirp_redir_print, mon);
 798 }
 799
 800 static void net_slirp_redir_rm(Monitor *mon, const char *port_str)
 801 {
 802     int host_port;
 803     char buf[256] = "";
 804     const char *p = port_str;
 805     int is_udp = 0;
 806     int n;
 807
 808     if (!mon)
 809         return;
 810
 811     if (!port_str || !port_str[0])
 812         goto fail_syntax;
 813
 814     get_str_sep(buf, sizeof(buf), &p, ':');
 815
 816     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 817         is_udp = 0;
 818     } else if (!strcmp(buf, "udp")) {
 819         is_udp = 1;
 820     } else {
 821         goto fail_syntax;
 822     }
 823
 824     host_port = atoi(p);
 825
 826     n = slirp_redir_rm(is_udp, host_port);
 827
 828     monitor_printf(mon, "removed %d redirections to %s port %d\n", n,
 829                         is_udp ? "udp" : "tcp", host_port);
 830     return;
 831
 832  fail_syntax:
 833     monitor_printf(mon, "invalid format\n");
 834 }
 835
 836 static void slirp_redirection(Monitor *mon, const char *redir_str)
 837 {
 838     struct in_addr guest_addr;
 839     int host_port, guest_port;
 840     const char *p;
 841     char buf[256], *r;
 842     int is_udp;
 843
 844     p = redir_str;
 845     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 846         goto fail_syntax;
 847     }
 848     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 849         is_udp = 0;
 850     } else if (!strcmp(buf, "udp")) {
 851         is_udp = 1;
 852     } else {
 853         goto fail_syntax;
 854     }
 855
 856     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 857         goto fail_syntax;
 858     }
 859     host_port = strtol(buf, &r, 0);
 860     if (r == buf) {
 861         goto fail_syntax;
 862     }
 863
 864     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 865         goto fail_syntax;
 866     }
 867     if (buf[0] == '\0') {
 868         pstrcpy(buf, sizeof(buf), "10.0.2.15");
 869     }
 870     if (!inet_aton(buf, &guest_addr)) {
 871         goto fail_syntax;
 872     }
 873
 874     guest_port = strtol(p, &r, 0);
 875     if (r == p) {
 876         goto fail_syntax;
 877     }
 878
 879     if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
 880         config_error(mon, "could not set up redirection '%s'\n", redir_str);
 881     }
 882     return;
 883
 884  fail_syntax:
 885     config_error(mon, "invalid redirection format '%s'\n", redir_str);
 886 }
 887
 888 void net_slirp_redir(Monitor *mon, const char *redir_str, const char *redir_opt2)
 889 {
 890     struct slirp_config_str *config;
 891
 892     if (!slirp_inited) {
 893         if (mon) {
 894             monitor_printf(mon, "user mode network stack not in use\n");
 895         } else {
 896             config = qemu_malloc(sizeof(*config));
 897             config->str = redir_str;
 898             config->next = slirp_redirs;
 899             slirp_redirs = config;
 900         }
 901         return;
 902     }
 903
 904     if (!strcmp(redir_str, "remove")) {
 905         net_slirp_redir_rm(mon, redir_opt2);
 906         return;
 907     }
 908
 909     if (!strcmp(redir_str, "list")) {
 910         net_slirp_redir_list(mon);
 911         return;
 912     }
 913
 914     slirp_redirection(mon, redir_str);
 915 }
 916
 917 #ifndef _WIN32
 918
 919 static char smb_dir[1024];
 920
 921 static void erase_dir(char *dir_name)
 922 {
 923     DIR *d;
 924     struct dirent *de;
 925     char filename[1024];
 926
 927     /* erase all the files in the directory */
 928     if ((d = opendir(dir_name)) != NULL) {
 929         for(;;) {
 930             de = readdir(d);
 931             if (!de)
 932                 break;
 933             if (strcmp(de->d_name, ".") != 0 &&
 934                 strcmp(de->d_name, "..") != 0) {
 935                 snprintf(filename, sizeof(filename), "%s/%s",
 936                          smb_dir, de->d_name);
 937                 if (unlink(filename) != 0)  /* is it a directory? */
 938                     erase_dir(filename);
 939             }
 940         }
 941         closedir(d);
 942         rmdir(dir_name);
 943     }
 944 }
 945
 946 /* automatic user mode samba server configuration */
 947 static void smb_exit(void)
 948 {
 949     erase_dir(smb_dir);
 950 }
 951
 952 static void slirp_smb(const char *exported_dir)
 953 {
 954     char smb_conf[1024];
 955     char smb_cmdline[1024];
 956     FILE *f;
 957
 958     /* XXX: better tmp dir construction */
 959     snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%ld", (long)getpid());
 960     if (mkdir(smb_dir, 0700) < 0) {
 961         fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
 962         exit(1);
 963     }
 964     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
 965
 966     f = fopen(smb_conf, "w");
 967     if (!f) {
 968         fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
 969         exit(1);
 970     }
 971     fprintf(f,
 972             "[global]\n"
 973             "private dir=%s\n"
 974             "smb ports=0\n"
 975             "socket address=127.0.0.1\n"
 976             "pid directory=%s\n"
 977             "lock directory=%s\n"
 978             "log file=%s/log.smbd\n"
 979             "smb passwd file=%s/smbpasswd\n"
 980             "security = share\n"
 981             "[qemu]\n"
 982             "path=%s\n"
 983             "read only=no\n"
 984             "guest ok=yes\n",
 985             smb_dir,
 986             smb_dir,
 987             smb_dir,
 988             smb_dir,
 989             smb_dir,
 990             exported_dir
 991             );
 992     fclose(f);
 993     atexit(smb_exit);
 994
 995     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
 996              SMBD_COMMAND, smb_conf);
 997
 998     slirp_add_exec(0, smb_cmdline, 4, 139);
 999 }
1000
1001 /* automatic user mode samba server configuration */
1002 void net_slirp_smb(const char *exported_dir)
1003 {
1004     if (slirp_smb_export) {
1005         fprintf(stderr, "-smb given twice\n");
1006         exit(1);
1007     }
1008     slirp_smb_export = exported_dir;
1009     if (slirp_inited) {
1010         slirp_smb(exported_dir);
1011     }
1012 }
1013
1014 #endif /* !defined(_WIN32) */
1015
1016 void do_info_slirp(Monitor *mon)
1017 {
1018     slirp_stats();
1019 }
1020
1021 struct VMChannel {
1022     CharDriverState *hd;
1023     int port;
1024 };
1025
1026 static int vmchannel_can_read(void *opaque)
1027 {
1028     struct VMChannel *vmc = (struct VMChannel*)opaque;
1029     return slirp_socket_can_recv(4, vmc->port);
1030 }
1031
1032 static void vmchannel_read(void *opaque, const uint8_t *buf, int size)
1033 {
1034     struct VMChannel *vmc = (struct VMChannel*)opaque;
1035     slirp_socket_recv(4, vmc->port, buf, size);
1036 }
1037
1038 #endif /* CONFIG_SLIRP */
1039
1040 #ifdef _WIN32
1041
1042 int tap_has_vnet_hdr(void *opaque)
1043 {
1044     return 0;
1045 }
1046
1047 void tap_using_vnet_hdr(void *opaque, int using_vnet_hdr)
1048 {
1049 }
1050
1051 #else /* !defined(_WIN32) */
1052
1053 /* Maximum GSO packet size (64k) plus plenty of room for
1054  * the ethernet and virtio_net headers
1055  */
1056 #define TAP_BUFSIZE (4096 + 65536)
1057
1058 #ifdef IFF_VNET_HDR
1059 #include <linux/virtio_net.h>
1060 #endif
1061
1062 typedef struct TAPState {
1063     VLANClientState *vc;
1064     int fd;
1065     char down_script[1024];
1066     char down_script_arg[128];
1067     uint8_t buf[TAP_BUFSIZE];
1068     unsigned int has_vnet_hdr : 1;
1069     unsigned int using_vnet_hdr : 1;
1070 } TAPState;
1071
1072 static int launch_script(const char *setup_script, const char *ifname, int fd);
1073
1074 static ssize_t tap_receive_iov(VLANClientState *vc, const struct iovec *iov,
1075                                int iovcnt)
1076 {
1077     TAPState *s = vc->opaque;
1078     ssize_t len;
1079
1080     do {
1081         len = writev(s->fd, iov, iovcnt);
1082     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
1083
1084     return len;
1085 }
1086
1087 static ssize_t tap_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1088 {
1089     struct iovec iov[2];
1090     int i = 0;
1091
1092 #ifdef IFF_VNET_HDR
1093     TAPState *s = vc->opaque;
1094     struct virtio_net_hdr hdr = { 0, };
1095
1096     if (s->has_vnet_hdr && !s->using_vnet_hdr) {
1097         iov[i].iov_base = &hdr;
1098         iov[i].iov_len  = sizeof(hdr);
1099         i++;
1100     }
1101 #endif
1102
1103     iov[i].iov_base = (char *) buf;
1104     iov[i].iov_len  = size;
1105     i++;
1106
1107     return tap_receive_iov(vc, iov, i);
1108 }
1109
1110 static ssize_t tap_receive_raw(VLANClientState *vc, const uint8_t *buf, size_t size)
1111 {
1112     struct iovec iov[2];
1113     int i = 0;
1114
1115 #ifdef IFF_VNET_HDR
1116     TAPState *s = vc->opaque;
1117     struct virtio_net_hdr hdr = { 0, };
1118
1119     if (s->has_vnet_hdr && s->using_vnet_hdr) {
1120         iov[i].iov_base = &hdr;
1121         iov[i].iov_len  = sizeof(hdr);
1122         i++;
1123     }
1124 #endif
1125
1126     iov[i].iov_base = (char *) buf;
1127     iov[i].iov_len  = size;
1128     i++;
1129
1130     return tap_receive_iov(vc, iov, i);
1131 }
1132
1133 static int tap_can_send(void *opaque)
1134 {
1135     TAPState *s = opaque;
1136
1137     return qemu_can_send_packet(s->vc);
1138 }
1139
1140 #ifdef __sun__
1141 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1142 {
1143     struct strbuf sbuf;
1144     int f = 0;
1145
1146     sbuf.maxlen = maxlen;
1147     sbuf.buf = (char *)buf;
1148
1149     return getmsg(tapfd, NULL, &sbuf, &f) >= 0 ? sbuf.len : -1;
1150 }
1151 #else
1152 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1153 {
1154     return read(tapfd, buf, maxlen);
1155 }
1156 #endif
1157
1158 static void tap_send(void *opaque);
1159
1160 static void tap_send_completed(VLANClientState *vc)
1161 {
1162     TAPState *s = vc->opaque;
1163
1164     qemu_set_fd_handler2(s->fd, tap_can_send, tap_send, NULL, s);
1165 }
1166
1167 static void tap_send(void *opaque)
1168 {
1169     TAPState *s = opaque;
1170     int size;
1171
1172     do {
1173         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
1174         if (size <= 0) {
1175             break;
1176         }
1177
1178         size = qemu_send_packet_async(s->vc, s->buf, size, tap_send_completed);
1179         if (size == 0) {
1180             qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
1181         }
1182     } while (size > 0);
1183 }
1184
1185 int tap_has_vnet_hdr(void *opaque)
1186 {
1187     VLANClientState *vc = opaque;
1188     TAPState *s = vc->opaque;
1189
1190     return s ? s->has_vnet_hdr : 0;
1191 }
1192
1193 void tap_using_vnet_hdr(void *opaque, int using_vnet_hdr)
1194 {
1195     VLANClientState *vc = opaque;
1196     TAPState *s = vc->opaque;
1197
1198     if (!s || !s->has_vnet_hdr)
1199         return;
1200
1201     s->using_vnet_hdr = using_vnet_hdr != 0;
1202 }
1203
1204 static int tap_probe_vnet_hdr(int fd)
1205 {
1206 #if defined(TUNGETIFF) && defined(IFF_VNET_HDR)
1207     struct ifreq ifr;
1208
1209     if (ioctl(fd, TUNGETIFF, &ifr) != 0) {
1210         fprintf(stderr, "TUNGETIFF ioctl() failed: %s\n", strerror(errno));
1211         return 0;
1212     }
1213
1214     return ifr.ifr_flags & IFF_VNET_HDR;
1215 #else
1216     return 0;
1217 #endif
1218 }
1219
1220 #ifdef TUNSETOFFLOAD
1221 static void tap_set_offload(VLANClientState *vc, int csum, int tso4, int tso6,
1222                             int ecn)
1223 {
1224     TAPState *s = vc->opaque;
1225     unsigned int offload = 0;
1226
1227     if (csum) {
1228         offload |= TUN_F_CSUM;
1229         if (tso4)
1230             offload |= TUN_F_TSO4;
1231         if (tso6)
1232             offload |= TUN_F_TSO6;
1233         if ((tso4 || tso6) && ecn)
1234             offload |= TUN_F_TSO_ECN;
1235     }
1236
1237     if (ioctl(s->fd, TUNSETOFFLOAD, offload) != 0)
1238         fprintf(stderr, "TUNSETOFFLOAD ioctl() failed: %s\n",
1239                 strerror(errno));
1240 }
1241 #endif /* TUNSETOFFLOAD */
1242
1243 static void tap_cleanup(VLANClientState *vc)
1244 {
1245     TAPState *s = vc->opaque;
1246
1247     if (s->down_script[0])
1248         launch_script(s->down_script, s->down_script_arg, s->fd);
1249
1250     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1251     close(s->fd);
1252     qemu_free(s);
1253 }
1254
1255 /* fd support */
1256
1257 static TAPState *net_tap_fd_init(VLANState *vlan,
1258                                  const char *model,
1259                                  const char *name,
1260                                  int fd,
1261                                  int vnet_hdr)
1262 {
1263     TAPState *s;
1264
1265     s = qemu_mallocz(sizeof(TAPState));
1266     s->fd = fd;
1267     s->has_vnet_hdr = vnet_hdr != 0;
1268     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, tap_receive,
1269                                  tap_receive_iov, tap_cleanup, s);
1270     s->vc->receive_raw = tap_receive_raw;
1271 #ifdef TUNSETOFFLOAD
1272     s->vc->set_offload = tap_set_offload;
1273     tap_set_offload(s->vc, 0, 0, 0, 0);
1274 #endif
1275     qemu_set_fd_handler2(s->fd, tap_can_send, tap_send, NULL, s);
1276     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
1277     return s;
1278 }
1279
1280 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
1281 static int tap_open(char *ifname, int ifname_size)
1282 {
1283     int fd;
1284     char *dev;
1285     struct stat s;
1286
1287     TFR(fd = open("/dev/tap", O_RDWR));
1288     if (fd < 0) {
1289         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
1290         return -1;
1291     }
1292
1293     fstat(fd, &s);
1294     dev = devname(s.st_rdev, S_IFCHR);
1295     pstrcpy(ifname, ifname_size, dev);
1296
1297     fcntl(fd, F_SETFL, O_NONBLOCK);
1298     return fd;
1299 }
1300 #elif defined(__sun__)
1301 #define TUNNEWPPA       (('T'<<16) | 0x0001)
1302 /*
1303  * Allocate TAP device, returns opened fd.
1304  * Stores dev name in the first arg(must be large enough).
1305  */
1306 static int tap_alloc(char *dev, size_t dev_size)
1307 {
1308     int tap_fd, if_fd, ppa = -1;
1309     static int ip_fd = 0;
1310     char *ptr;
1311
1312     static int arp_fd = 0;
1313     int ip_muxid, arp_muxid;
1314     struct strioctl  strioc_if, strioc_ppa;
1315     int link_type = I_PLINK;;
1316     struct lifreq ifr;
1317     char actual_name[32] = "";
1318
1319     memset(&ifr, 0x0, sizeof(ifr));
1320
1321     if( *dev ){
1322        ptr = dev;
1323        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
1324        ppa = atoi(ptr);
1325     }
1326
1327     /* Check if IP device was opened */
1328     if( ip_fd )
1329        close(ip_fd);
1330
1331     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
1332     if (ip_fd < 0) {
1333        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
1334        return -1;
1335     }
1336
1337     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
1338     if (tap_fd < 0) {
1339        syslog(LOG_ERR, "Can't open /dev/tap");
1340        return -1;
1341     }
1342
1343     /* Assign a new PPA and get its unit number. */
1344     strioc_ppa.ic_cmd = TUNNEWPPA;
1345     strioc_ppa.ic_timout = 0;
1346     strioc_ppa.ic_len = sizeof(ppa);
1347     strioc_ppa.ic_dp = (char *)&ppa;
1348     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
1349        syslog (LOG_ERR, "Can't assign new interface");
1350
1351     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
1352     if (if_fd < 0) {
1353        syslog(LOG_ERR, "Can't open /dev/tap (2)");
1354        return -1;
1355     }
1356     if(ioctl(if_fd, I_PUSH, "ip") < 0){
1357        syslog(LOG_ERR, "Can't push IP module");
1358        return -1;
1359     }
1360
1361     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
1362         syslog(LOG_ERR, "Can't get flags\n");
1363
1364     snprintf (actual_name, 32, "tap%d", ppa);
1365     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1366
1367     ifr.lifr_ppa = ppa;
1368     /* Assign ppa according to the unit number returned by tun device */
1369
1370     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
1371         syslog (LOG_ERR, "Can't set PPA %d", ppa);
1372     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
1373         syslog (LOG_ERR, "Can't get flags\n");
1374     /* Push arp module to if_fd */
1375     if (ioctl (if_fd, I_PUSH, "arp") < 0)
1376         syslog (LOG_ERR, "Can't push ARP module (2)");
1377
1378     /* Push arp module to ip_fd */
1379     if (ioctl (ip_fd, I_POP, NULL) < 0)
1380         syslog (LOG_ERR, "I_POP failed\n");
1381     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
1382         syslog (LOG_ERR, "Can't push ARP module (3)\n");
1383     /* Open arp_fd */
1384     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
1385     if (arp_fd < 0)
1386        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
1387
1388     /* Set ifname to arp */
1389     strioc_if.ic_cmd = SIOCSLIFNAME;
1390     strioc_if.ic_timout = 0;
1391     strioc_if.ic_len = sizeof(ifr);
1392     strioc_if.ic_dp = (char *)&ifr;
1393     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
1394         syslog (LOG_ERR, "Can't set ifname to arp\n");
1395     }
1396
1397     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
1398        syslog(LOG_ERR, "Can't link TAP device to IP");
1399        return -1;
1400     }
1401
1402     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
1403         syslog (LOG_ERR, "Can't link TAP device to ARP");
1404
1405     close (if_fd);
1406
1407     memset(&ifr, 0x0, sizeof(ifr));
1408     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1409     ifr.lifr_ip_muxid  = ip_muxid;
1410     ifr.lifr_arp_muxid = arp_muxid;
1411
1412     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
1413     {
1414       ioctl (ip_fd, I_PUNLINK , arp_muxid);
1415       ioctl (ip_fd, I_PUNLINK, ip_muxid);
1416       syslog (LOG_ERR, "Can't set multiplexor id");
1417     }
1418
1419     snprintf(dev, dev_size, "tap%d", ppa);
1420     return tap_fd;
1421 }
1422
1423 static int tap_open(char *ifname, int ifname_size, int *vnet_hdr)
1424 {
1425     char  dev[10]="";
1426     int fd;
1427     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
1428        fprintf(stderr, "Cannot allocate TAP device\n");
1429        return -1;
1430     }
1431     pstrcpy(ifname, ifname_size, dev);
1432     fcntl(fd, F_SETFL, O_NONBLOCK);
1433     return fd;
1434 }
1435 #elif defined (_AIX)
1436 static int tap_open(char *ifname, int ifname_size)
1437 {
1438     fprintf (stderr, "no tap on AIX\n");
1439     return -1;
1440 }
1441 #else
1442 static int tap_open(char *ifname, int ifname_size, int *vnet_hdr)
1443 {
1444     struct ifreq ifr;
1445     int fd, ret;
1446
1447     TFR(fd = open("/dev/net/tun", O_RDWR));
1448     if (fd < 0) {
1449         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1450         return -1;
1451     }
1452     memset(&ifr, 0, sizeof(ifr));
1453     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
1454
1455 #if defined(TUNGETFEATURES) && defined(IFF_VNET_HDR)
1456     {
1457         unsigned int features;
1458
1459         if (ioctl(fd, TUNGETFEATURES, &features) == 0 &&
1460             features & IFF_VNET_HDR) {
1461             *vnet_hdr = 1;
1462             ifr.ifr_flags |= IFF_VNET_HDR;
1463         }
1464     }
1465 #endif
1466
1467     if (ifname[0] != '\0')
1468         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
1469     else
1470         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
1471     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1472     if (ret != 0) {
1473         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1474         close(fd);
1475         return -1;
1476     }
1477     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1478     fcntl(fd, F_SETFL, O_NONBLOCK);
1479     return fd;
1480 }
1481 #endif
1482
1483 static int launch_script(const char *setup_script, const char *ifname, int fd)
1484 {
1485     sigset_t oldmask, mask;
1486     int pid, status;
1487     char *args[3];
1488     char **parg;
1489
1490     sigemptyset(&mask);
1491     sigaddset(&mask, SIGCHLD);
1492     sigprocmask(SIG_BLOCK, &mask, &oldmask);
1493
1494     /* try to launch network script */
1495     pid = fork();
1496     if (pid == 0) {
1497         int open_max = sysconf(_SC_OPEN_MAX), i;
1498
1499         for (i = 0; i < open_max; i++) {
1500             if (i != STDIN_FILENO &&
1501                 i != STDOUT_FILENO &&
1502                 i != STDERR_FILENO &&
1503                 i != fd) {
1504                 close(i);
1505             }
1506         }
1507         parg = args;
1508         *parg++ = (char *)setup_script;
1509         *parg++ = (char *)ifname;
1510         *parg++ = NULL;
1511         execv(setup_script, args);
1512         _exit(1);
1513     } else if (pid > 0) {
1514         while (waitpid(pid, &status, 0) != pid) {
1515             /* loop */
1516         }
1517         sigprocmask(SIG_SETMASK, &oldmask, NULL);
1518
1519         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
1520             return 0;
1521         }
1522     }
1523     fprintf(stderr, "%s: could not launch network script\n", setup_script);
1524     return -1;
1525 }
1526
1527 static int net_tap_init(VLANState *vlan, const char *model,
1528                         const char *name, const char *ifname1,
1529                         const char *setup_script, const char *down_script)
1530 {
1531     TAPState *s;
1532     int fd;
1533     int vnet_hdr;
1534     char ifname[128];
1535
1536     if (ifname1 != NULL)
1537         pstrcpy(ifname, sizeof(ifname), ifname1);
1538     else
1539         ifname[0] = '\0';
1540     vnet_hdr = 0;
1541     TFR(fd = tap_open(ifname, sizeof(ifname), &vnet_hdr));
1542     if (fd < 0)
1543         return -1;
1544
1545     if (!setup_script || !strcmp(setup_script, "no"))
1546         setup_script = "";
1547     if (setup_script[0] != '\0') {
1548         if (launch_script(setup_script, ifname, fd))
1549             return -1;
1550     }
1551     s = net_tap_fd_init(vlan, model, name, fd, vnet_hdr);
1552     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1553              "ifname=%s,script=%s,downscript=%s",
1554              ifname, setup_script, down_script);
1555     if (down_script && strcmp(down_script, "no")) {
1556         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1557         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1558     }
1559     return 0;
1560 }
1561
1562 #endif /* !_WIN32 */
1563
1564 #if defined(CONFIG_VDE)
1565 typedef struct VDEState {
1566     VLANClientState *vc;
1567     VDECONN *vde;
1568 } VDEState;
1569
1570 static void vde_to_qemu(void *opaque)
1571 {
1572     VDEState *s = opaque;
1573     uint8_t buf[4096];
1574     int size;
1575
1576     size = vde_recv(s->vde, (char *)buf, sizeof(buf), 0);
1577     if (size > 0) {
1578         qemu_send_packet(s->vc, buf, size);
1579     }
1580 }
1581
1582 static ssize_t vde_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1583 {
1584     VDEState *s = vc->opaque;
1585     ssize_t ret;
1586
1587     do {
1588       ret = vde_send(s->vde, (const char *)buf, size, 0);
1589     } while (ret < 0 && errno == EINTR);
1590
1591     return ret;
1592 }
1593
1594 static void vde_cleanup(VLANClientState *vc)
1595 {
1596     VDEState *s = vc->opaque;
1597     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1598     vde_close(s->vde);
1599     qemu_free(s);
1600 }
1601
1602 static int net_vde_init(VLANState *vlan, const char *model,
1603                         const char *name, const char *sock,
1604                         int port, const char *group, int mode)
1605 {
1606     VDEState *s;
1607     char *init_group = strlen(group) ? (char *)group : NULL;
1608     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1609
1610     struct vde_open_args args = {
1611         .port = port,
1612         .group = init_group,
1613         .mode = mode,
1614     };
1615
1616     s = qemu_mallocz(sizeof(VDEState));
1617     s->vde = vde_open(init_sock, (char *)"QEMU", &args);
1618     if (!s->vde){
1619         free(s);
1620         return -1;
1621     }
1622     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, vde_receive,
1623                                  NULL, vde_cleanup, s);
1624     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1625     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1626              sock, vde_datafd(s->vde));
1627     return 0;
1628 }
1629 #endif
1630
1631 /* network connection */
1632 typedef struct NetSocketState {
1633     VLANClientState *vc;
1634     int fd;
1635     int state; /* 0 = getting length, 1 = getting data */
1636     unsigned int index;
1637     unsigned int packet_len;
1638     uint8_t buf[4096];
1639     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1640 } NetSocketState;
1641
1642 typedef struct NetSocketListenState {
1643     VLANState *vlan;
1644     char *model;
1645     char *name;
1646     int fd;
1647 } NetSocketListenState;
1648
1649 /* XXX: we consider we can send the whole packet without blocking */
1650 static ssize_t net_socket_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1651 {
1652     NetSocketState *s = vc->opaque;
1653     uint32_t len;
1654     len = htonl(size);
1655
1656     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1657     return send_all(s->fd, buf, size);
1658 }
1659
1660 static ssize_t net_socket_receive_dgram(VLANClientState *vc, const uint8_t *buf, size_t size)
1661 {
1662     NetSocketState *s = vc->opaque;
1663
1664     return sendto(s->fd, buf, size, 0,
1665                   (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1666 }
1667
1668 static void net_socket_send(void *opaque)
1669 {
1670     NetSocketState *s = opaque;
1671     int size, err;
1672     unsigned l;
1673     uint8_t buf1[4096];
1674     const uint8_t *buf;
1675
1676     size = recv(s->fd, buf1, sizeof(buf1), 0);
1677     if (size < 0) {
1678         err = socket_error();
1679         if (err != EWOULDBLOCK)
1680             goto eoc;
1681     } else if (size == 0) {
1682         /* end of connection */
1683     eoc:
1684         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1685         closesocket(s->fd);
1686         return;
1687     }
1688     buf = buf1;
1689     while (size > 0) {
1690         /* reassemble a packet from the network */
1691         switch(s->state) {
1692         case 0:
1693             l = 4 - s->index;
1694             if (l > size)
1695                 l = size;
1696             memcpy(s->buf + s->index, buf, l);
1697             buf += l;
1698             size -= l;
1699             s->index += l;
1700             if (s->index == 4) {
1701                 /* got length */
1702                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1703                 s->index = 0;
1704                 s->state = 1;
1705             }
1706             break;
1707         case 1:
1708             l = s->packet_len - s->index;
1709             if (l > size)
1710                 l = size;
1711             if (s->index + l <= sizeof(s->buf)) {
1712                 memcpy(s->buf + s->index, buf, l);
1713             } else {
1714                 fprintf(stderr, "serious error: oversized packet received,"
1715                     "connection terminated.\n");
1716                 s->state = 0;
1717                 goto eoc;
1718             }
1719
1720             s->index += l;
1721             buf += l;
1722             size -= l;
1723             if (s->index >= s->packet_len) {
1724                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1725                 s->index = 0;
1726                 s->state = 0;
1727             }
1728             break;
1729         }
1730     }
1731 }
1732
1733 static void net_socket_send_dgram(void *opaque)
1734 {
1735     NetSocketState *s = opaque;
1736     int size;
1737
1738     size = recv(s->fd, s->buf, sizeof(s->buf), 0);
1739     if (size < 0)
1740         return;
1741     if (size == 0) {
1742         /* end of connection */
1743         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1744         return;
1745     }
1746     qemu_send_packet(s->vc, s->buf, size);
1747 }
1748
1749 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1750 {
1751     struct ip_mreq imr;
1752     int fd;
1753     int val, ret;
1754     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1755         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1756                 inet_ntoa(mcastaddr->sin_addr),
1757                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1758         return -1;
1759
1760     }
1761     fd = socket(PF_INET, SOCK_DGRAM, 0);
1762     if (fd < 0) {
1763         perror("socket(PF_INET, SOCK_DGRAM)");
1764         return -1;
1765     }
1766
1767     val = 1;
1768     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1769                    (const char *)&val, sizeof(val));
1770     if (ret < 0) {
1771         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1772         goto fail;
1773     }
1774
1775     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1776     if (ret < 0) {
1777         perror("bind");
1778         goto fail;
1779     }
1780
1781     /* Add host to multicast group */
1782     imr.imr_multiaddr = mcastaddr->sin_addr;
1783     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1784
1785     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1786                      (const char *)&imr, sizeof(struct ip_mreq));
1787     if (ret < 0) {
1788         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1789         goto fail;
1790     }
1791
1792     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1793     val = 1;
1794     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1795                    (const char *)&val, sizeof(val));
1796     if (ret < 0) {
1797         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1798         goto fail;
1799     }
1800
1801     socket_set_nonblock(fd);
1802     return fd;
1803 fail:
1804     if (fd >= 0)
1805         closesocket(fd);
1806     return -1;
1807 }
1808
1809 static void net_socket_cleanup(VLANClientState *vc)
1810 {
1811     NetSocketState *s = vc->opaque;
1812     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1813     close(s->fd);
1814     qemu_free(s);
1815 }
1816
1817 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1818                                                 const char *model,
1819                                                 const char *name,
1820                                                 int fd, int is_connected)
1821 {
1822     struct sockaddr_in saddr;
1823     int newfd;
1824     socklen_t saddr_len;
1825     NetSocketState *s;
1826
1827     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
1828      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
1829      * by ONLY ONE process: we must "clone" this dgram socket --jjo
1830      */
1831
1832     if (is_connected) {
1833         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
1834             /* must be bound */
1835             if (saddr.sin_addr.s_addr==0) {
1836                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
1837                         fd);
1838                 return NULL;
1839             }
1840             /* clone dgram socket */
1841             newfd = net_socket_mcast_create(&saddr);
1842             if (newfd < 0) {
1843                 /* error already reported by net_socket_mcast_create() */
1844                 close(fd);
1845                 return NULL;
1846             }
1847             /* clone newfd to fd, close newfd */
1848             dup2(newfd, fd);
1849             close(newfd);
1850
1851         } else {
1852             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
1853                     fd, strerror(errno));
1854             return NULL;
1855         }
1856     }
1857
1858     s = qemu_mallocz(sizeof(NetSocketState));
1859     s->fd = fd;
1860
1861     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive_dgram,
1862                                  NULL, net_socket_cleanup, s);
1863     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
1864
1865     /* mcast: save bound address as dst */
1866     if (is_connected) s->dgram_dst=saddr;
1867
1868     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1869             "socket: fd=%d (%s mcast=%s:%d)",
1870             fd, is_connected? "cloned" : "",
1871             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1872     return s;
1873 }
1874
1875 static void net_socket_connect(void *opaque)
1876 {
1877     NetSocketState *s = opaque;
1878     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
1879 }
1880
1881 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
1882                                                  const char *model,
1883                                                  const char *name,
1884                                                  int fd, int is_connected)
1885 {
1886     NetSocketState *s;
1887     s = qemu_mallocz(sizeof(NetSocketState));
1888     s->fd = fd;
1889     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive,
1890                                  NULL, net_socket_cleanup, s);
1891     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1892              "socket: fd=%d", fd);
1893     if (is_connected) {
1894         net_socket_connect(s);
1895     } else {
1896         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
1897     }
1898     return s;
1899 }
1900
1901 static NetSocketState *net_socket_fd_init(VLANState *vlan,
1902                                           const char *model, const char *name,
1903                                           int fd, int is_connected)
1904 {
1905     int so_type=-1, optlen=sizeof(so_type);
1906
1907     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
1908         (socklen_t *)&optlen)< 0) {
1909         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
1910         return NULL;
1911     }
1912     switch(so_type) {
1913     case SOCK_DGRAM:
1914         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
1915     case SOCK_STREAM:
1916         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1917     default:
1918         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
1919         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
1920         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1921     }
1922     return NULL;
1923 }
1924
1925 static void net_socket_accept(void *opaque)
1926 {
1927     NetSocketListenState *s = opaque;
1928     NetSocketState *s1;
1929     struct sockaddr_in saddr;
1930     socklen_t len;
1931     int fd;
1932
1933     for(;;) {
1934         len = sizeof(saddr);
1935         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
1936         if (fd < 0 && errno != EINTR) {
1937             return;
1938         } else if (fd >= 0) {
1939             break;
1940         }
1941     }
1942     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
1943     if (!s1) {
1944         closesocket(fd);
1945     } else {
1946         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
1947                  "socket: connection from %s:%d",
1948                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1949     }
1950 }
1951
1952 static int net_socket_listen_init(VLANState *vlan,
1953                                   const char *model,
1954                                   const char *name,
1955                                   const char *host_str)
1956 {
1957     NetSocketListenState *s;
1958     int fd, val, ret;
1959     struct sockaddr_in saddr;
1960
1961     if (parse_host_port(&saddr, host_str) < 0)
1962         return -1;
1963
1964     s = qemu_mallocz(sizeof(NetSocketListenState));
1965
1966     fd = socket(PF_INET, SOCK_STREAM, 0);
1967     if (fd < 0) {
1968         perror("socket");
1969         return -1;
1970     }
1971     socket_set_nonblock(fd);
1972
1973     /* allow fast reuse */
1974     val = 1;
1975     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
1976
1977     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1978     if (ret < 0) {
1979         perror("bind");
1980         return -1;
1981     }
1982     ret = listen(fd, 0);
1983     if (ret < 0) {
1984         perror("listen");
1985         return -1;
1986     }
1987     s->vlan = vlan;
1988     s->model = strdup(model);
1989     s->name = name ? strdup(name) : NULL;
1990     s->fd = fd;
1991     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
1992     return 0;
1993 }
1994
1995 static int net_socket_connect_init(VLANState *vlan,
1996                                    const char *model,
1997                                    const char *name,
1998                                    const char *host_str)
1999 {
2000     NetSocketState *s;
2001     int fd, connected, ret, err;
2002     struct sockaddr_in saddr;
2003
2004     if (parse_host_port(&saddr, host_str) < 0)
2005         return -1;
2006
2007     fd = socket(PF_INET, SOCK_STREAM, 0);
2008     if (fd < 0) {
2009         perror("socket");
2010         return -1;
2011     }
2012     socket_set_nonblock(fd);
2013
2014     connected = 0;
2015     for(;;) {
2016         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2017         if (ret < 0) {
2018             err = socket_error();
2019             if (err == EINTR || err == EWOULDBLOCK) {
2020             } else if (err == EINPROGRESS) {
2021                 break;
2022 #ifdef _WIN32
2023             } else if (err == WSAEALREADY) {
2024                 break;
2025 #endif
2026             } else {
2027                 perror("connect");
2028                 closesocket(fd);
2029                 return -1;
2030             }
2031         } else {
2032             connected = 1;
2033             break;
2034         }
2035     }
2036     s = net_socket_fd_init(vlan, model, name, fd, connected);
2037     if (!s)
2038         return -1;
2039     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2040              "socket: connect to %s:%d",
2041              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2042     return 0;
2043 }
2044
2045 static int net_socket_mcast_init(VLANState *vlan,
2046                                  const char *model,
2047                                  const char *name,
2048                                  const char *host_str)
2049 {
2050     NetSocketState *s;
2051     int fd;
2052     struct sockaddr_in saddr;
2053
2054     if (parse_host_port(&saddr, host_str) < 0)
2055         return -1;
2056
2057
2058     fd = net_socket_mcast_create(&saddr);
2059     if (fd < 0)
2060         return -1;
2061
2062     s = net_socket_fd_init(vlan, model, name, fd, 0);
2063     if (!s)
2064         return -1;
2065
2066     s->dgram_dst = saddr;
2067
2068     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2069              "socket: mcast=%s:%d",
2070              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2071     return 0;
2072
2073 }
2074
2075 typedef struct DumpState {
2076     VLANClientState *pcap_vc;
2077     int fd;
2078     int pcap_caplen;
2079 } DumpState;
2080
2081 #define PCAP_MAGIC 0xa1b2c3d4
2082
2083 struct pcap_file_hdr {
2084     uint32_t magic;
2085     uint16_t version_major;
2086     uint16_t version_minor;
2087     int32_t thiszone;
2088     uint32_t sigfigs;
2089     uint32_t snaplen;
2090     uint32_t linktype;
2091 };
2092
2093 struct pcap_sf_pkthdr {
2094     struct {
2095         int32_t tv_sec;
2096         int32_t tv_usec;
2097     } ts;
2098     uint32_t caplen;
2099     uint32_t len;
2100 };
2101
2102 static ssize_t dump_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
2103 {
2104     DumpState *s = vc->opaque;
2105     struct pcap_sf_pkthdr hdr;
2106     int64_t ts;
2107     int caplen;
2108
2109     /* Early return in case of previous error. */
2110     if (s->fd < 0) {
2111         return size;
2112     }
2113
2114     ts = muldiv64(qemu_get_clock(vm_clock), 1000000, ticks_per_sec);
2115     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
2116
2117     hdr.ts.tv_sec = ts / 1000000;
2118     hdr.ts.tv_usec = ts % 1000000;
2119     hdr.caplen = caplen;
2120     hdr.len = size;
2121     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
2122         write(s->fd, buf, caplen) != caplen) {
2123         qemu_log("-net dump write error - stop dump\n");
2124         close(s->fd);
2125         s->fd = -1;
2126     }
2127
2128     return size;
2129 }
2130
2131 static void net_dump_cleanup(VLANClientState *vc)
2132 {
2133     DumpState *s = vc->opaque;
2134
2135     close(s->fd);
2136     qemu_free(s);
2137 }
2138
2139 static int net_dump_init(Monitor *mon, VLANState *vlan, const char *device,
2140                          const char *name, const char *filename, int len)
2141 {
2142     struct pcap_file_hdr hdr;
2143     DumpState *s;
2144
2145     s = qemu_malloc(sizeof(DumpState));
2146
2147     s->fd = open(filename, O_CREAT | O_WRONLY, 0644);
2148     if (s->fd < 0) {
2149         config_error(mon, "-net dump: can't open %s\n", filename);
2150         return -1;
2151     }
2152
2153     s->pcap_caplen = len;
2154
2155     hdr.magic = PCAP_MAGIC;
2156     hdr.version_major = 2;
2157     hdr.version_minor = 4;
2158     hdr.thiszone = 0;
2159     hdr.sigfigs = 0;
2160     hdr.snaplen = s->pcap_caplen;
2161     hdr.linktype = 1;
2162
2163     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
2164         config_error(mon, "-net dump write error: %s\n", strerror(errno));
2165         close(s->fd);
2166         qemu_free(s);
2167         return -1;
2168     }
2169
2170     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, NULL, dump_receive, NULL,
2171                                       net_dump_cleanup, s);
2172     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
2173              "dump to %s (len=%d)", filename, len);
2174     return 0;
2175 }
2176
2177 /* find or alloc a new VLAN */
2178 VLANState *qemu_find_vlan(int id)
2179 {
2180     VLANState **pvlan, *vlan;
2181     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2182         if (vlan->id == id)
2183             return vlan;
2184     }
2185     vlan = qemu_mallocz(sizeof(VLANState));
2186     vlan->id = id;
2187     vlan->next = NULL;
2188     pvlan = &first_vlan;
2189     while (*pvlan != NULL)
2190         pvlan = &(*pvlan)->next;
2191     *pvlan = vlan;
2192     return vlan;
2193 }
2194
2195 static int nic_get_free_idx(void)
2196 {
2197     int index;
2198
2199     for (index = 0; index < MAX_NICS; index++)
2200         if (!nd_table[index].used)
2201             return index;
2202     return -1;
2203 }
2204
2205 void qemu_check_nic_model(NICInfo *nd, const char *model)
2206 {
2207     const char *models[2];
2208
2209     models[0] = model;
2210     models[1] = NULL;
2211
2212     qemu_check_nic_model_list(nd, models, model);
2213 }
2214
2215 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
2216                                const char *default_model)
2217 {
2218     int i, exit_status = 0;
2219
2220     if (!nd->model)
2221         nd->model = strdup(default_model);
2222
2223     if (strcmp(nd->model, "?") != 0) {
2224         for (i = 0 ; models[i]; i++)
2225             if (strcmp(nd->model, models[i]) == 0)
2226                 return;
2227
2228         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
2229         exit_status = 1;
2230     }
2231
2232     fprintf(stderr, "qemu: Supported NIC models: ");
2233     for (i = 0 ; models[i]; i++)
2234         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
2235
2236     exit(exit_status);
2237 }
2238
2239 int net_client_init(Monitor *mon, const char *device, const char *p)
2240 {
2241     static const char * const fd_params[] = {
2242         "vlan", "name", "fd", NULL
2243     };
2244     char buf[1024];
2245     int vlan_id, ret;
2246     VLANState *vlan;
2247     char *name = NULL;
2248
2249     vlan_id = 0;
2250     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
2251         vlan_id = strtol(buf, NULL, 0);
2252     }
2253     vlan = qemu_find_vlan(vlan_id);
2254
2255     if (get_param_value(buf, sizeof(buf), "name", p)) {
2256         name = qemu_strdup(buf);
2257     }
2258     if (!strcmp(device, "nic")) {
2259         static const char * const nic_params[] = {
2260             "vlan", "name", "macaddr", "model", NULL
2261         };
2262         NICInfo *nd;
2263         uint8_t *macaddr;
2264         int idx = nic_get_free_idx();
2265
2266         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
2267             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2268             ret = -1;
2269             goto out;
2270         }
2271         if (idx == -1 || nb_nics >= MAX_NICS) {
2272             config_error(mon, "Too Many NICs\n");
2273             ret = -1;
2274             goto out;
2275         }
2276         nd = &nd_table[idx];
2277         macaddr = nd->macaddr;
2278         macaddr[0] = 0x52;
2279         macaddr[1] = 0x54;
2280         macaddr[2] = 0x00;
2281         macaddr[3] = 0x12;
2282         macaddr[4] = 0x34;
2283         macaddr[5] = 0x56 + idx;
2284
2285         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2286             if (parse_macaddr(macaddr, buf) < 0) {
2287                 config_error(mon, "invalid syntax for ethernet address\n");
2288                 ret = -1;
2289                 goto out;
2290             }
2291         }
2292         if (get_param_value(buf, sizeof(buf), "model", p)) {
2293             nd->model = strdup(buf);
2294         }
2295         nd->vlan = vlan;
2296         nd->name = name;
2297         nd->used = 1;
2298         name = NULL;
2299         nb_nics++;
2300         vlan->nb_guest_devs++;
2301         ret = idx;
2302     } else
2303     if (!strcmp(device, "none")) {
2304         if (*p != '\0') {
2305             config_error(mon, "'none' takes no parameters\n");
2306             ret = -1;
2307             goto out;
2308         }
2309         /* does nothing. It is needed to signal that no network cards
2310            are wanted */
2311         ret = 0;
2312     } else
2313 #ifdef CONFIG_SLIRP
2314     if (!strcmp(device, "user")) {
2315         static const char * const slirp_params[] = {
2316             "vlan", "name", "hostname", "restrict", "ip", NULL
2317         };
2318         int restricted = 0;
2319         char *ip = NULL;
2320
2321         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
2322             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2323             ret = -1;
2324             goto out;
2325         }
2326         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
2327             pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
2328         }
2329         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
2330             restricted = (buf[0] == 'y') ? 1 : 0;
2331         }
2332         if (get_param_value(buf, sizeof(buf), "ip", p)) {
2333             ip = qemu_strdup(buf);
2334         }
2335         vlan->nb_host_devs++;
2336         ret = net_slirp_init(vlan, device, name, restricted, ip);
2337         qemu_free(ip);
2338     } else if (!strcmp(device, "channel")) {
2339         long port;
2340         char name[20], *devname;
2341         struct VMChannel *vmc;
2342
2343         port = strtol(p, &devname, 10);
2344         devname++;
2345         if (port < 1 || port > 65535) {
2346             config_error(mon, "vmchannel wrong port number\n");
2347             ret = -1;
2348             goto out;
2349         }
2350         vmc = malloc(sizeof(struct VMChannel));
2351         snprintf(name, 20, "vmchannel%ld", port);
2352         vmc->hd = qemu_chr_open(name, devname, NULL);
2353         if (!vmc->hd) {
2354             config_error(mon, "could not open vmchannel device '%s'\n",
2355                          devname);
2356             ret = -1;
2357             goto out;
2358         }
2359         vmc->port = port;
2360         slirp_add_exec(3, vmc->hd, 4, port);
2361         qemu_chr_add_handlers(vmc->hd, vmchannel_can_read, vmchannel_read,
2362                 NULL, vmc);
2363         ret = 0;
2364     } else
2365 #endif
2366 #ifdef _WIN32
2367     if (!strcmp(device, "tap")) {
2368         static const char * const tap_params[] = {
2369             "vlan", "name", "ifname", NULL
2370         };
2371         char ifname[64];
2372
2373         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
2374             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2375             ret = -1;
2376             goto out;
2377         }
2378         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2379             config_error(mon, "tap: no interface name\n");
2380             ret = -1;
2381             goto out;
2382         }
2383         vlan->nb_host_devs++;
2384         ret = tap_win32_init(vlan, device, name, ifname);
2385     } else
2386 #elif defined (_AIX)
2387 #else
2388     if (!strcmp(device, "tap")) {
2389         char ifname[64], chkbuf[64];
2390         char setup_script[1024], down_script[1024];
2391         int fd;
2392         vlan->nb_host_devs++;
2393         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2394             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2395                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2396                 ret = -1;
2397                 goto out;
2398             }
2399             fd = strtol(buf, NULL, 0);
2400             fcntl(fd, F_SETFL, O_NONBLOCK);
2401             net_tap_fd_init(vlan, device, name, fd, tap_probe_vnet_hdr(fd));
2402             ret = 0;
2403         } else {
2404             static const char * const tap_params[] = {
2405                 "vlan", "name", "ifname", "script", "downscript", NULL
2406             };
2407             if (check_params(chkbuf, sizeof(chkbuf), tap_params, p) < 0) {
2408                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2409                 ret = -1;
2410                 goto out;
2411             }
2412             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2413                 ifname[0] = '\0';
2414             }
2415             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2416                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2417             }
2418             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
2419                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
2420             }
2421             ret = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
2422         }
2423     } else
2424 #endif
2425     if (!strcmp(device, "socket")) {
2426         char chkbuf[64];
2427         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2428             int fd;
2429             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2430                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2431                 ret = -1;
2432                 goto out;
2433             }
2434             fd = strtol(buf, NULL, 0);
2435             ret = -1;
2436             if (net_socket_fd_init(vlan, device, name, fd, 1))
2437                 ret = 0;
2438         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2439             static const char * const listen_params[] = {
2440                 "vlan", "name", "listen", NULL
2441             };
2442             if (check_params(chkbuf, sizeof(chkbuf), listen_params, p) < 0) {
2443                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2444                 ret = -1;
2445                 goto out;
2446             }
2447             ret = net_socket_listen_init(vlan, device, name, buf);
2448         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2449             static const char * const connect_params[] = {
2450                 "vlan", "name", "connect", NULL
2451             };
2452             if (check_params(chkbuf, sizeof(chkbuf), connect_params, p) < 0) {
2453                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2454                 ret = -1;
2455                 goto out;
2456             }
2457             ret = net_socket_connect_init(vlan, device, name, buf);
2458         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2459             static const char * const mcast_params[] = {
2460                 "vlan", "name", "mcast", NULL
2461             };
2462             if (check_params(chkbuf, sizeof(chkbuf), mcast_params, p) < 0) {
2463                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2464                 ret = -1;
2465                 goto out;
2466             }
2467             ret = net_socket_mcast_init(vlan, device, name, buf);
2468         } else {
2469             config_error(mon, "Unknown socket options: %s\n", p);
2470             ret = -1;
2471             goto out;
2472         }
2473         vlan->nb_host_devs++;
2474     } else
2475 #ifdef CONFIG_VDE
2476     if (!strcmp(device, "vde")) {
2477         static const char * const vde_params[] = {
2478             "vlan", "name", "sock", "port", "group", "mode", NULL
2479         };
2480         char vde_sock[1024], vde_group[512];
2481         int vde_port, vde_mode;
2482
2483         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
2484             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2485             ret = -1;
2486             goto out;
2487         }
2488         vlan->nb_host_devs++;
2489         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2490             vde_sock[0] = '\0';
2491         }
2492         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2493             vde_port = strtol(buf, NULL, 10);
2494         } else {
2495             vde_port = 0;
2496         }
2497         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2498             vde_group[0] = '\0';
2499         }
2500         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2501             vde_mode = strtol(buf, NULL, 8);
2502         } else {
2503             vde_mode = 0700;
2504         }
2505         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2506     } else
2507 #endif
2508     if (!strcmp(device, "dump")) {
2509         int len = 65536;
2510
2511         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2512             len = strtol(buf, NULL, 0);
2513         }
2514         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2515             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2516         }
2517         ret = net_dump_init(mon, vlan, device, name, buf, len);
2518     } else {
2519         config_error(mon, "Unknown network device: %s\n", device);
2520         ret = -1;
2521         goto out;
2522     }
2523     if (ret < 0) {
2524         config_error(mon, "Could not initialize device '%s'\n", device);
2525     }
2526 out:
2527     qemu_free(name);
2528     return ret;
2529 }
2530
2531 void net_client_uninit(NICInfo *nd)
2532 {
2533     nd->vlan->nb_guest_devs--;
2534     nb_nics--;
2535     nd->used = 0;
2536     free((void *)nd->model);
2537 }
2538
2539 static int net_host_check_device(const char *device)
2540 {
2541     int i;
2542     const char *valid_param_list[] = { "tap", "socket", "dump"
2543 #ifdef CONFIG_SLIRP
2544                                        ,"user"
2545 #endif
2546 #ifdef CONFIG_VDE
2547                                        ,"vde"
2548 #endif
2549     };
2550     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2551         if (!strncmp(valid_param_list[i], device,
2552                      strlen(valid_param_list[i])))
2553             return 1;
2554     }
2555
2556     return 0;
2557 }
2558
2559 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2560 {
2561     if (!net_host_check_device(device)) {
2562         monitor_printf(mon, "invalid host network device %s\n", device);
2563         return;
2564     }
2565     if (net_client_init(mon, device, opts ? opts : "") < 0) {
2566         monitor_printf(mon, "adding host network device %s failed\n", device);
2567     }
2568 }
2569
2570 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2571 {
2572     VLANState *vlan;
2573     VLANClientState *vc;
2574
2575     vlan = qemu_find_vlan(vlan_id);
2576
2577     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
2578         if (!strcmp(vc->name, device)) {
2579             break;
2580         }
2581     }
2582
2583     if (!vc) {
2584         monitor_printf(mon, "can't find device %s\n", device);
2585         return;
2586     }
2587     if (!net_host_check_device(vc->model)) {
2588         monitor_printf(mon, "invalid host network device %s\n", device);
2589         return;
2590     }
2591     qemu_del_vlan_client(vc);
2592 }
2593
2594 int net_client_parse(const char *str)
2595 {
2596     const char *p;
2597     char *q;
2598     char device[64];
2599
2600     p = str;
2601     q = device;
2602     while (*p != '\0' && *p != ',') {
2603         if ((q - device) < sizeof(device) - 1)
2604             *q++ = *p;
2605         p++;
2606     }
2607     *q = '\0';
2608     if (*p == ',')
2609         p++;
2610
2611     return net_client_init(NULL, device, p);
2612 }
2613
2614 void do_info_network(Monitor *mon)
2615 {
2616     VLANState *vlan;
2617     VLANClientState *vc;
2618
2619     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2620         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2621         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2622             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2623     }
2624 }
2625
2626 int do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2627 {
2628     VLANState *vlan;
2629     VLANClientState *vc = NULL;
2630
2631     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2632         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2633             if (strcmp(vc->name, name) == 0)
2634                 goto done;
2635 done:
2636
2637     if (!vc) {
2638         monitor_printf(mon, "could not find network device '%s'", name);
2639         return 0;
2640     }
2641
2642     if (strcmp(up_or_down, "up") == 0)
2643         vc->link_down = 0;
2644     else if (strcmp(up_or_down, "down") == 0)
2645         vc->link_down = 1;
2646     else
2647         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2648                        "valid\n", up_or_down);
2649
2650     if (vc->link_status_changed)
2651         vc->link_status_changed(vc);
2652
2653     return 1;
2654 }
2655
2656 void net_cleanup(void)
2657 {
2658     VLANState *vlan;
2659
2660     /* close network clients */
2661     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2662         VLANClientState *vc = vlan->first_client;
2663
2664         while (vc) {
2665             VLANClientState *next = vc->next;
2666
2667             qemu_del_vlan_client(vc);
2668
2669             vc = next;
2670         }
2671     }
2672 }
2673
2674 void net_client_check(void)
2675 {
2676     VLANState *vlan;
2677
2678     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2679         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2680             continue;
2681         if (vlan->nb_guest_devs == 0)
2682             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2683         if (vlan->nb_host_devs == 0)
2684             fprintf(stderr,
2685                     "Warning: vlan %d is not connected to host network\n",
2686                     vlan->id);
2687     }
2688 }