net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 #include "qemu-common.h"
 114 #include "net.h"
 115 #include "monitor.h"
 116 #include "sysemu.h"
 117 #include "qemu-timer.h"
 118 #include "qemu-char.h"
 119 #include "audio/audio.h"
 120 #include "qemu_socket.h"
 121 #include "qemu-log.h"
 122
 123 #if defined(CONFIG_SLIRP)
 124 #include "libslirp.h"
 125 #endif
 126
 127
 128 static VLANState *first_vlan;
 129
 130 /***********************************************************/
 131 /* network device redirectors */
 132
 133 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 134 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 135 {
 136     int len, i, j, c;
 137
 138     for(i=0;i<size;i+=16) {
 139         len = size - i;
 140         if (len > 16)
 141             len = 16;
 142         fprintf(f, "%08x ", i);
 143         for(j=0;j<16;j++) {
 144             if (j < len)
 145                 fprintf(f, " %02x", buf[i+j]);
 146             else
 147                 fprintf(f, "   ");
 148         }
 149         fprintf(f, " ");
 150         for(j=0;j<len;j++) {
 151             c = buf[i+j];
 152             if (c < ' ' || c > '~')
 153                 c = '.';
 154             fprintf(f, "%c", c);
 155         }
 156         fprintf(f, "\n");
 157     }
 158 }
 159 #endif
 160
 161 static int parse_macaddr(uint8_t *macaddr, const char *p)
 162 {
 163     int i;
 164     char *last_char;
 165     long int offset;
 166
 167     errno = 0;
 168     offset = strtol(p, &last_char, 0);
 169     if (0 == errno && '\0' == *last_char &&
 170             offset >= 0 && offset <= 0xFFFFFF) {
 171         macaddr[3] = (offset & 0xFF0000) >> 16;
 172         macaddr[4] = (offset & 0xFF00) >> 8;
 173         macaddr[5] = offset & 0xFF;
 174         return 0;
 175     } else {
 176         for(i = 0; i < 6; i++) {
 177             macaddr[i] = strtol(p, (char **)&p, 16);
 178             if (i == 5) {
 179                 if (*p != '\0')
 180                     return -1;
 181             } else {
 182                 if (*p != ':' && *p != '-')
 183                     return -1;
 184                 p++;
 185             }
 186         }
 187         return 0;
 188     }
 189
 190     return -1;
 191 }
 192
 193 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 194 {
 195     const char *p, *p1;
 196     int len;
 197     p = *pp;
 198     p1 = strchr(p, sep);
 199     if (!p1)
 200         return -1;
 201     len = p1 - p;
 202     p1++;
 203     if (buf_size > 0) {
 204         if (len > buf_size - 1)
 205             len = buf_size - 1;
 206         memcpy(buf, p, len);
 207         buf[len] = '\0';
 208     }
 209     *pp = p1;
 210     return 0;
 211 }
 212
 213 int parse_host_src_port(struct sockaddr_in *haddr,
 214                         struct sockaddr_in *saddr,
 215                         const char *input_str)
 216 {
 217     char *str = strdup(input_str);
 218     char *host_str = str;
 219     char *src_str;
 220     const char *src_str2;
 221     char *ptr;
 222
 223     /*
 224      * Chop off any extra arguments at the end of the string which
 225      * would start with a comma, then fill in the src port information
 226      * if it was provided else use the "any address" and "any port".
 227      */
 228     if ((ptr = strchr(str,',')))
 229         *ptr = '\0';
 230
 231     if ((src_str = strchr(input_str,'@'))) {
 232         *src_str = '\0';
 233         src_str++;
 234     }
 235
 236     if (parse_host_port(haddr, host_str) < 0)
 237         goto fail;
 238
 239     src_str2 = src_str;
 240     if (!src_str || *src_str == '\0')
 241         src_str2 = ":0";
 242
 243     if (parse_host_port(saddr, src_str2) < 0)
 244         goto fail;
 245
 246     free(str);
 247     return(0);
 248
 249 fail:
 250     free(str);
 251     return -1;
 252 }
 253
 254 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 255 {
 256     char buf[512];
 257     struct hostent *he;
 258     const char *p, *r;
 259     int port;
 260
 261     p = str;
 262     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 263         return -1;
 264     saddr->sin_family = AF_INET;
 265     if (buf[0] == '\0') {
 266         saddr->sin_addr.s_addr = 0;
 267     } else {
 268         if (qemu_isdigit(buf[0])) {
 269             if (!inet_aton(buf, &saddr->sin_addr))
 270                 return -1;
 271         } else {
 272             if ((he = gethostbyname(buf)) == NULL)
 273                 return - 1;
 274             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 275         }
 276     }
 277     port = strtol(p, (char **)&r, 0);
 278     if (r == p)
 279         return -1;
 280     saddr->sin_port = htons(port);
 281     return 0;
 282 }
 283
 284 #if !defined(_WIN32) && 0
 285 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 286 {
 287     const char *p;
 288     int len;
 289
 290     len = MIN(108, strlen(str));
 291     p = strchr(str, ',');
 292     if (p)
 293         len = MIN(len, p - str);
 294
 295     memset(uaddr, 0, sizeof(*uaddr));
 296
 297     uaddr->sun_family = AF_UNIX;
 298     memcpy(uaddr->sun_path, str, len);
 299
 300     return 0;
 301 }
 302 #endif
 303
 304 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 305 {
 306     snprintf(vc->info_str, sizeof(vc->info_str),
 307              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 308              vc->model,
 309              macaddr[0], macaddr[1], macaddr[2],
 310              macaddr[3], macaddr[4], macaddr[5]);
 311 }
 312
 313 static char *assign_name(VLANClientState *vc1, const char *model)
 314 {
 315     VLANState *vlan;
 316     char buf[256];
 317     int id = 0;
 318
 319     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 320         VLANClientState *vc;
 321
 322         for (vc = vlan->first_client; vc; vc = vc->next)
 323             if (vc != vc1 && strcmp(vc->model, model) == 0)
 324                 id++;
 325     }
 326
 327     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 328
 329     return strdup(buf);
 330 }
 331
 332 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 333                                       const char *model,
 334                                       const char *name,
 335                                       NetCanReceive *can_receive,
 336                                       NetReceive *receive,
 337                                       NetReceiveIOV *receive_iov,
 338                                       NetCleanup *cleanup,
 339                                       void *opaque)
 340 {
 341     VLANClientState *vc, **pvc;
 342     vc = qemu_mallocz(sizeof(VLANClientState));
 343     vc->model = strdup(model);
 344     if (name)
 345         vc->name = strdup(name);
 346     else
 347         vc->name = assign_name(vc, model);
 348     vc->can_receive = can_receive;
 349     vc->receive = receive;
 350     vc->receive_iov = receive_iov;
 351     vc->cleanup = cleanup;
 352     vc->opaque = opaque;
 353     vc->vlan = vlan;
 354
 355     vc->next = NULL;
 356     pvc = &vlan->first_client;
 357     while (*pvc != NULL)
 358         pvc = &(*pvc)->next;
 359     *pvc = vc;
 360     return vc;
 361 }
 362
 363 void qemu_del_vlan_client(VLANClientState *vc)
 364 {
 365     VLANClientState **pvc = &vc->vlan->first_client;
 366
 367     while (*pvc != NULL)
 368         if (*pvc == vc) {
 369             *pvc = vc->next;
 370             if (vc->cleanup) {
 371                 vc->cleanup(vc);
 372             }
 373             free(vc->name);
 374             free(vc->model);
 375             qemu_free(vc);
 376             break;
 377         } else
 378             pvc = &(*pvc)->next;
 379 }
 380
 381 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 382 {
 383     VLANClientState **pvc = &vlan->first_client;
 384
 385     while (*pvc != NULL)
 386         if ((*pvc)->opaque == opaque)
 387             return *pvc;
 388         else
 389             pvc = &(*pvc)->next;
 390
 391     return NULL;
 392 }
 393
 394 int qemu_can_send_packet(VLANClientState *sender)
 395 {
 396     VLANState *vlan = sender->vlan;
 397     VLANClientState *vc;
 398
 399     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 400         if (vc == sender) {
 401             continue;
 402         }
 403
 404         /* no can_receive() handler, they can always receive */
 405         if (!vc->can_receive || vc->can_receive(vc)) {
 406             return 1;
 407         }
 408     }
 409     return 0;
 410 }
 411
 412 static int
 413 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size)
 414 {
 415     VLANClientState *vc;
 416     int ret = -1;
 417
 418     sender->vlan->delivering = 1;
 419
 420     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 421         ssize_t len;
 422
 423         if (vc == sender) {
 424             continue;
 425         }
 426
 427         if (vc->link_down) {
 428             ret = size;
 429             continue;
 430         }
 431
 432         len = vc->receive(vc, buf, size);
 433
 434         ret = (ret >= 0) ? ret : len;
 435     }
 436
 437     sender->vlan->delivering = 0;
 438
 439     return ret;
 440 }
 441
 442 void qemu_purge_queued_packets(VLANClientState *vc)
 443 {
 444     VLANPacket **pp = &vc->vlan->send_queue;
 445
 446     while (*pp != NULL) {
 447         VLANPacket *packet = *pp;
 448
 449         if (packet->sender == vc) {
 450             *pp = packet->next;
 451             qemu_free(packet);
 452         } else {
 453             pp = &packet->next;
 454         }
 455     }
 456 }
 457
 458 void qemu_flush_queued_packets(VLANClientState *vc)
 459 {
 460     VLANPacket *packet;
 461
 462     while ((packet = vc->vlan->send_queue) != NULL) {
 463         int ret;
 464
 465         vc->vlan->send_queue = packet->next;
 466
 467         ret = qemu_deliver_packet(packet->sender, packet->data, packet->size);
 468         if (ret == 0 && packet->sent_cb != NULL) {
 469             packet->next = vc->vlan->send_queue;
 470             vc->vlan->send_queue = packet;
 471             break;
 472         }
 473
 474         if (packet->sent_cb)
 475             packet->sent_cb(packet->sender);
 476
 477         qemu_free(packet);
 478     }
 479 }
 480
 481 static void qemu_enqueue_packet(VLANClientState *sender,
 482                                 const uint8_t *buf, int size,
 483                                 NetPacketSent *sent_cb)
 484 {
 485     VLANPacket *packet;
 486
 487     packet = qemu_malloc(sizeof(VLANPacket) + size);
 488     packet->next = sender->vlan->send_queue;
 489     packet->sender = sender;
 490     packet->size = size;
 491     packet->sent_cb = sent_cb;
 492     memcpy(packet->data, buf, size);
 493     sender->vlan->send_queue = packet;
 494 }
 495
 496 ssize_t qemu_send_packet_async(VLANClientState *sender,
 497                                const uint8_t *buf, int size,
 498                                NetPacketSent *sent_cb)
 499 {
 500     int ret;
 501
 502     if (sender->link_down) {
 503         return size;
 504     }
 505
 506 #ifdef DEBUG_NET
 507     printf("vlan %d send:\n", sender->vlan->id);
 508     hex_dump(stdout, buf, size);
 509 #endif
 510
 511     if (sender->vlan->delivering) {
 512         qemu_enqueue_packet(sender, buf, size, NULL);
 513         return size;
 514     }
 515
 516     ret = qemu_deliver_packet(sender, buf, size);
 517     if (ret == 0 && sent_cb != NULL) {
 518         qemu_enqueue_packet(sender, buf, size, sent_cb);
 519         return 0;
 520     }
 521
 522     qemu_flush_queued_packets(sender);
 523
 524     return ret;
 525 }
 526
 527 void qemu_send_packet(VLANClientState *vc, const uint8_t *buf, int size)
 528 {
 529     qemu_send_packet_async(vc, buf, size, NULL);
 530 }
 531
 532 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 533                                int iovcnt)
 534 {
 535     uint8_t buffer[4096];
 536     size_t offset = 0;
 537     int i;
 538
 539     for (i = 0; i < iovcnt; i++) {
 540         size_t len;
 541
 542         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 543         memcpy(buffer + offset, iov[i].iov_base, len);
 544         offset += len;
 545     }
 546
 547     return vc->receive(vc, buffer, offset);
 548 }
 549
 550 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 551 {
 552     size_t offset = 0;
 553     int i;
 554
 555     for (i = 0; i < iovcnt; i++)
 556         offset += iov[i].iov_len;
 557     return offset;
 558 }
 559
 560 static int qemu_deliver_packet_iov(VLANClientState *sender,
 561                                    const struct iovec *iov, int iovcnt)
 562 {
 563     VLANClientState *vc;
 564     int ret = -1;
 565
 566     sender->vlan->delivering = 1;
 567
 568     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 569         ssize_t len;
 570
 571         if (vc == sender) {
 572             continue;
 573         }
 574
 575         if (vc->link_down) {
 576             ret = calc_iov_length(iov, iovcnt);
 577             continue;
 578         }
 579
 580         if (vc->receive_iov) {
 581             len = vc->receive_iov(vc, iov, iovcnt);
 582         } else {
 583             len = vc_sendv_compat(vc, iov, iovcnt);
 584         }
 585
 586         ret = (ret >= 0) ? ret : len;
 587     }
 588
 589     sender->vlan->delivering = 0;
 590
 591     return ret;
 592 }
 593
 594 static ssize_t qemu_enqueue_packet_iov(VLANClientState *sender,
 595                                        const struct iovec *iov, int iovcnt,
 596                                        NetPacketSent *sent_cb)
 597 {
 598     VLANPacket *packet;
 599     size_t max_len = 0;
 600     int i;
 601
 602     max_len = calc_iov_length(iov, iovcnt);
 603
 604     packet = qemu_malloc(sizeof(VLANPacket) + max_len);
 605     packet->next = sender->vlan->send_queue;
 606     packet->sender = sender;
 607     packet->sent_cb = sent_cb;
 608     packet->size = 0;
 609
 610     for (i = 0; i < iovcnt; i++) {
 611         size_t len = iov[i].iov_len;
 612
 613         memcpy(packet->data + packet->size, iov[i].iov_base, len);
 614         packet->size += len;
 615     }
 616
 617     sender->vlan->send_queue = packet;
 618
 619     return packet->size;
 620 }
 621
 622 ssize_t qemu_sendv_packet_async(VLANClientState *sender,
 623                                 const struct iovec *iov, int iovcnt,
 624                                 NetPacketSent *sent_cb)
 625 {
 626     int ret;
 627
 628     if (sender->link_down) {
 629         return calc_iov_length(iov, iovcnt);
 630     }
 631
 632     if (sender->vlan->delivering) {
 633         return qemu_enqueue_packet_iov(sender, iov, iovcnt, NULL);
 634     }
 635
 636     ret = qemu_deliver_packet_iov(sender, iov, iovcnt);
 637     if (ret == 0 && sent_cb != NULL) {
 638         qemu_enqueue_packet_iov(sender, iov, iovcnt, sent_cb);
 639         return 0;
 640     }
 641
 642     qemu_flush_queued_packets(sender);
 643
 644     return ret;
 645 }
 646
 647 ssize_t
 648 qemu_sendv_packet(VLANClientState *vc, const struct iovec *iov, int iovcnt)
 649 {
 650     return qemu_sendv_packet_async(vc, iov, iovcnt, NULL);
 651 }
 652
 653 static void config_error(Monitor *mon, const char *fmt, ...)
 654 {
 655     va_list ap;
 656
 657     va_start(ap, fmt);
 658     if (mon) {
 659         monitor_vprintf(mon, fmt, ap);
 660     } else {
 661         fprintf(stderr, "qemu: ");
 662         vfprintf(stderr, fmt, ap);
 663         exit(1);
 664     }
 665     va_end(ap);
 666 }
 667
 668 #if defined(CONFIG_SLIRP)
 669
 670 /* slirp network adapter */
 671
 672 struct slirp_config_str {
 673     struct slirp_config_str *next;
 674     const char *str;
 675 };
 676
 677 static int slirp_inited;
 678 static struct slirp_config_str *slirp_redirs;
 679 #ifndef _WIN32
 680 static const char *slirp_smb_export;
 681 #endif
 682 static VLANClientState *slirp_vc;
 683
 684 #ifndef _WIN32
 685 static void slirp_smb(const char *exported_dir);
 686 #endif
 687 static void slirp_redirection(Monitor *mon, const char *redir_str);
 688
 689 int slirp_can_output(void)
 690 {
 691     return !slirp_vc || qemu_can_send_packet(slirp_vc);
 692 }
 693
 694 void slirp_output(const uint8_t *pkt, int pkt_len)
 695 {
 696 #ifdef DEBUG_SLIRP
 697     printf("slirp output:\n");
 698     hex_dump(stdout, pkt, pkt_len);
 699 #endif
 700     if (!slirp_vc)
 701         return;
 702     qemu_send_packet(slirp_vc, pkt, pkt_len);
 703 }
 704
 705 int slirp_is_inited(void)
 706 {
 707     return slirp_inited;
 708 }
 709
 710 static ssize_t slirp_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 711 {
 712 #ifdef DEBUG_SLIRP
 713     printf("slirp input:\n");
 714     hex_dump(stdout, buf, size);
 715 #endif
 716     slirp_input(buf, size);
 717     return size;
 718 }
 719
 720 static int slirp_in_use;
 721
 722 static void net_slirp_cleanup(VLANClientState *vc)
 723 {
 724     slirp_in_use = 0;
 725 }
 726
 727 static int net_slirp_init(VLANState *vlan, const char *model, const char *name,
 728                           int restricted, const char *ip)
 729 {
 730     if (slirp_in_use) {
 731         /* slirp only supports a single instance so far */
 732         return -1;
 733     }
 734     if (!slirp_inited) {
 735         slirp_inited = 1;
 736         slirp_init(restricted, ip);
 737
 738         while (slirp_redirs) {
 739             struct slirp_config_str *config = slirp_redirs;
 740
 741             slirp_redirection(NULL, config->str);
 742             slirp_redirs = config->next;
 743             qemu_free(config);
 744         }
 745 #ifndef _WIN32
 746         if (slirp_smb_export) {
 747             slirp_smb(slirp_smb_export);
 748         }
 749 #endif
 750     }
 751
 752     slirp_vc = qemu_new_vlan_client(vlan, model, name, NULL, slirp_receive,
 753                                     NULL, net_slirp_cleanup, NULL);
 754     slirp_vc->info_str[0] = '\0';
 755     slirp_in_use = 1;
 756     return 0;
 757 }
 758
 759 static void net_slirp_redir_print(void *opaque, int is_udp,
 760                                   struct in_addr *laddr, u_int lport,
 761                                   struct in_addr *faddr, u_int fport)
 762 {
 763     Monitor *mon = (Monitor *)opaque;
 764     uint32_t h_addr;
 765     uint32_t g_addr;
 766     char buf[16];
 767
 768     h_addr = ntohl(faddr->s_addr);
 769     g_addr = ntohl(laddr->s_addr);
 770
 771     monitor_printf(mon, "  %s |", is_udp ? "udp" : "tcp" );
 772     snprintf(buf, 15, "%d.%d.%d.%d", (h_addr >> 24) & 0xff,
 773                                      (h_addr >> 16) & 0xff,
 774                                      (h_addr >> 8) & 0xff,
 775                                      (h_addr) & 0xff);
 776     monitor_printf(mon, " %15s |", buf);
 777     monitor_printf(mon, " %5d |", fport);
 778
 779     snprintf(buf, 15, "%d.%d.%d.%d", (g_addr >> 24) & 0xff,
 780                                      (g_addr >> 16) & 0xff,
 781                                      (g_addr >> 8) & 0xff,
 782                                      (g_addr) & 0xff);
 783     monitor_printf(mon, " %15s |", buf);
 784     monitor_printf(mon, " %5d\n", lport);
 785
 786 }
 787
 788 static void net_slirp_redir_list(Monitor *mon)
 789 {
 790     if (!mon)
 791         return;
 792
 793     monitor_printf(mon, " Prot |    Host Addr    | HPort |    Guest Addr   | GPort\n");
 794     monitor_printf(mon, "      |                 |       |                 |      \n");
 795     slirp_redir_loop(net_slirp_redir_print, mon);
 796 }
 797
 798 static void net_slirp_redir_rm(Monitor *mon, const char *port_str)
 799 {
 800     int host_port;
 801     char buf[256] = "";
 802     const char *p = port_str;
 803     int is_udp = 0;
 804     int n;
 805
 806     if (!mon)
 807         return;
 808
 809     if (!port_str || !port_str[0])
 810         goto fail_syntax;
 811
 812     get_str_sep(buf, sizeof(buf), &p, ':');
 813
 814     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 815         is_udp = 0;
 816     } else if (!strcmp(buf, "udp")) {
 817         is_udp = 1;
 818     } else {
 819         goto fail_syntax;
 820     }
 821
 822     host_port = atoi(p);
 823
 824     n = slirp_redir_rm(is_udp, host_port);
 825
 826     monitor_printf(mon, "removed %d redirections to %s port %d\n", n,
 827                         is_udp ? "udp" : "tcp", host_port);
 828     return;
 829
 830  fail_syntax:
 831     monitor_printf(mon, "invalid format\n");
 832 }
 833
 834 static void slirp_redirection(Monitor *mon, const char *redir_str)
 835 {
 836     struct in_addr guest_addr;
 837     int host_port, guest_port;
 838     const char *p;
 839     char buf[256], *r;
 840     int is_udp;
 841
 842     p = redir_str;
 843     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 844         goto fail_syntax;
 845     }
 846     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 847         is_udp = 0;
 848     } else if (!strcmp(buf, "udp")) {
 849         is_udp = 1;
 850     } else {
 851         goto fail_syntax;
 852     }
 853
 854     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 855         goto fail_syntax;
 856     }
 857     host_port = strtol(buf, &r, 0);
 858     if (r == buf) {
 859         goto fail_syntax;
 860     }
 861
 862     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 863         goto fail_syntax;
 864     }
 865     if (buf[0] == '\0') {
 866         pstrcpy(buf, sizeof(buf), "10.0.2.15");
 867     }
 868     if (!inet_aton(buf, &guest_addr)) {
 869         goto fail_syntax;
 870     }
 871
 872     guest_port = strtol(p, &r, 0);
 873     if (r == p) {
 874         goto fail_syntax;
 875     }
 876
 877     if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
 878         config_error(mon, "could not set up redirection '%s'\n", redir_str);
 879     }
 880     return;
 881
 882  fail_syntax:
 883     config_error(mon, "invalid redirection format '%s'\n", redir_str);
 884 }
 885
 886 void net_slirp_redir(Monitor *mon, const char *redir_str, const char *redir_opt2)
 887 {
 888     struct slirp_config_str *config;
 889
 890     if (!slirp_inited) {
 891         if (mon) {
 892             monitor_printf(mon, "user mode network stack not in use\n");
 893         } else {
 894             config = qemu_malloc(sizeof(*config));
 895             config->str = redir_str;
 896             config->next = slirp_redirs;
 897             slirp_redirs = config;
 898         }
 899         return;
 900     }
 901
 902     if (!strcmp(redir_str, "remove")) {
 903         net_slirp_redir_rm(mon, redir_opt2);
 904         return;
 905     }
 906
 907     if (!strcmp(redir_str, "list")) {
 908         net_slirp_redir_list(mon);
 909         return;
 910     }
 911
 912     slirp_redirection(mon, redir_str);
 913 }
 914
 915 #ifndef _WIN32
 916
 917 static char smb_dir[1024];
 918
 919 static void erase_dir(char *dir_name)
 920 {
 921     DIR *d;
 922     struct dirent *de;
 923     char filename[1024];
 924
 925     /* erase all the files in the directory */
 926     if ((d = opendir(dir_name)) != NULL) {
 927         for(;;) {
 928             de = readdir(d);
 929             if (!de)
 930                 break;
 931             if (strcmp(de->d_name, ".") != 0 &&
 932                 strcmp(de->d_name, "..") != 0) {
 933                 snprintf(filename, sizeof(filename), "%s/%s",
 934                          smb_dir, de->d_name);
 935                 if (unlink(filename) != 0)  /* is it a directory? */
 936                     erase_dir(filename);
 937             }
 938         }
 939         closedir(d);
 940         rmdir(dir_name);
 941     }
 942 }
 943
 944 /* automatic user mode samba server configuration */
 945 static void smb_exit(void)
 946 {
 947     erase_dir(smb_dir);
 948 }
 949
 950 static void slirp_smb(const char *exported_dir)
 951 {
 952     char smb_conf[1024];
 953     char smb_cmdline[1024];
 954     FILE *f;
 955
 956     /* XXX: better tmp dir construction */
 957     snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%ld", (long)getpid());
 958     if (mkdir(smb_dir, 0700) < 0) {
 959         fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
 960         exit(1);
 961     }
 962     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
 963
 964     f = fopen(smb_conf, "w");
 965     if (!f) {
 966         fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
 967         exit(1);
 968     }
 969     fprintf(f,
 970             "[global]\n"
 971             "private dir=%s\n"
 972             "smb ports=0\n"
 973             "socket address=127.0.0.1\n"
 974             "pid directory=%s\n"
 975             "lock directory=%s\n"
 976             "log file=%s/log.smbd\n"
 977             "smb passwd file=%s/smbpasswd\n"
 978             "security = share\n"
 979             "[qemu]\n"
 980             "path=%s\n"
 981             "read only=no\n"
 982             "guest ok=yes\n",
 983             smb_dir,
 984             smb_dir,
 985             smb_dir,
 986             smb_dir,
 987             smb_dir,
 988             exported_dir
 989             );
 990     fclose(f);
 991     atexit(smb_exit);
 992
 993     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
 994              SMBD_COMMAND, smb_conf);
 995
 996     slirp_add_exec(0, smb_cmdline, 4, 139);
 997 }
 998
 999 /* automatic user mode samba server configuration */
1000 void net_slirp_smb(const char *exported_dir)
1001 {
1002     if (slirp_smb_export) {
1003         fprintf(stderr, "-smb given twice\n");
1004         exit(1);
1005     }
1006     slirp_smb_export = exported_dir;
1007     if (slirp_inited) {
1008         slirp_smb(exported_dir);
1009     }
1010 }
1011
1012 #endif /* !defined(_WIN32) */
1013
1014 void do_info_slirp(Monitor *mon)
1015 {
1016     slirp_stats();
1017 }
1018
1019 struct VMChannel {
1020     CharDriverState *hd;
1021     int port;
1022 };
1023
1024 static int vmchannel_can_read(void *opaque)
1025 {
1026     struct VMChannel *vmc = (struct VMChannel*)opaque;
1027     return slirp_socket_can_recv(4, vmc->port);
1028 }
1029
1030 static void vmchannel_read(void *opaque, const uint8_t *buf, int size)
1031 {
1032     struct VMChannel *vmc = (struct VMChannel*)opaque;
1033     slirp_socket_recv(4, vmc->port, buf, size);
1034 }
1035
1036 #endif /* CONFIG_SLIRP */
1037
1038 #if !defined(_WIN32)
1039
1040 typedef struct TAPState {
1041     VLANClientState *vc;
1042     int fd;
1043     char down_script[1024];
1044     char down_script_arg[128];
1045     uint8_t buf[4096];
1046 } TAPState;
1047
1048 static int launch_script(const char *setup_script, const char *ifname, int fd);
1049
1050 static ssize_t tap_receive_iov(VLANClientState *vc, const struct iovec *iov,
1051                                int iovcnt)
1052 {
1053     TAPState *s = vc->opaque;
1054     ssize_t len;
1055
1056     do {
1057         len = writev(s->fd, iov, iovcnt);
1058     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
1059
1060     return len;
1061 }
1062
1063 static ssize_t tap_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1064 {
1065     TAPState *s = vc->opaque;
1066     ssize_t len;
1067
1068     do {
1069         len = write(s->fd, buf, size);
1070     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
1071
1072     return len;
1073 }
1074
1075 static int tap_can_send(void *opaque)
1076 {
1077     TAPState *s = opaque;
1078
1079     return qemu_can_send_packet(s->vc);
1080 }
1081
1082 #ifdef __sun__
1083 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1084 {
1085     struct strbuf sbuf;
1086     int f = 0;
1087
1088     sbuf.maxlen = maxlen;
1089     sbuf.buf = (char *)buf;
1090
1091     return getmsg(tapfd, NULL, &sbuf, &f) >= 0 ? sbuf.len : -1;
1092 }
1093 #else
1094 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1095 {
1096     return read(tapfd, buf, maxlen);
1097 }
1098 #endif
1099
1100 static void tap_send(void *opaque);
1101
1102 static void tap_send_completed(VLANClientState *vc)
1103 {
1104     TAPState *s = vc->opaque;
1105
1106     qemu_set_fd_handler2(s->fd, tap_can_send, tap_send, NULL, s);
1107 }
1108
1109 static void tap_send(void *opaque)
1110 {
1111     TAPState *s = opaque;
1112     int size;
1113
1114     do {
1115         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
1116         if (size <= 0) {
1117             break;
1118         }
1119
1120         size = qemu_send_packet_async(s->vc, s->buf, size, tap_send_completed);
1121         if (size == 0) {
1122             qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
1123         }
1124     } while (size > 0);
1125 }
1126
1127 static void tap_cleanup(VLANClientState *vc)
1128 {
1129     TAPState *s = vc->opaque;
1130
1131     qemu_purge_queued_packets(vc);
1132
1133     if (s->down_script[0])
1134         launch_script(s->down_script, s->down_script_arg, s->fd);
1135
1136     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1137     close(s->fd);
1138     qemu_free(s);
1139 }
1140
1141 /* fd support */
1142
1143 static TAPState *net_tap_fd_init(VLANState *vlan,
1144                                  const char *model,
1145                                  const char *name,
1146                                  int fd)
1147 {
1148     TAPState *s;
1149
1150     s = qemu_mallocz(sizeof(TAPState));
1151     s->fd = fd;
1152     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, tap_receive,
1153                                  tap_receive_iov, tap_cleanup, s);
1154     qemu_set_fd_handler2(s->fd, tap_can_send, tap_send, NULL, s);
1155     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
1156     return s;
1157 }
1158
1159 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
1160 static int tap_open(char *ifname, int ifname_size)
1161 {
1162     int fd;
1163     char *dev;
1164     struct stat s;
1165
1166     TFR(fd = open("/dev/tap", O_RDWR));
1167     if (fd < 0) {
1168         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
1169         return -1;
1170     }
1171
1172     fstat(fd, &s);
1173     dev = devname(s.st_rdev, S_IFCHR);
1174     pstrcpy(ifname, ifname_size, dev);
1175
1176     fcntl(fd, F_SETFL, O_NONBLOCK);
1177     return fd;
1178 }
1179 #elif defined(__sun__)
1180 #define TUNNEWPPA       (('T'<<16) | 0x0001)
1181 /*
1182  * Allocate TAP device, returns opened fd.
1183  * Stores dev name in the first arg(must be large enough).
1184  */
1185 static int tap_alloc(char *dev, size_t dev_size)
1186 {
1187     int tap_fd, if_fd, ppa = -1;
1188     static int ip_fd = 0;
1189     char *ptr;
1190
1191     static int arp_fd = 0;
1192     int ip_muxid, arp_muxid;
1193     struct strioctl  strioc_if, strioc_ppa;
1194     int link_type = I_PLINK;;
1195     struct lifreq ifr;
1196     char actual_name[32] = "";
1197
1198     memset(&ifr, 0x0, sizeof(ifr));
1199
1200     if( *dev ){
1201        ptr = dev;
1202        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
1203        ppa = atoi(ptr);
1204     }
1205
1206     /* Check if IP device was opened */
1207     if( ip_fd )
1208        close(ip_fd);
1209
1210     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
1211     if (ip_fd < 0) {
1212        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
1213        return -1;
1214     }
1215
1216     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
1217     if (tap_fd < 0) {
1218        syslog(LOG_ERR, "Can't open /dev/tap");
1219        return -1;
1220     }
1221
1222     /* Assign a new PPA and get its unit number. */
1223     strioc_ppa.ic_cmd = TUNNEWPPA;
1224     strioc_ppa.ic_timout = 0;
1225     strioc_ppa.ic_len = sizeof(ppa);
1226     strioc_ppa.ic_dp = (char *)&ppa;
1227     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
1228        syslog (LOG_ERR, "Can't assign new interface");
1229
1230     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
1231     if (if_fd < 0) {
1232        syslog(LOG_ERR, "Can't open /dev/tap (2)");
1233        return -1;
1234     }
1235     if(ioctl(if_fd, I_PUSH, "ip") < 0){
1236        syslog(LOG_ERR, "Can't push IP module");
1237        return -1;
1238     }
1239
1240     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
1241         syslog(LOG_ERR, "Can't get flags\n");
1242
1243     snprintf (actual_name, 32, "tap%d", ppa);
1244     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1245
1246     ifr.lifr_ppa = ppa;
1247     /* Assign ppa according to the unit number returned by tun device */
1248
1249     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
1250         syslog (LOG_ERR, "Can't set PPA %d", ppa);
1251     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
1252         syslog (LOG_ERR, "Can't get flags\n");
1253     /* Push arp module to if_fd */
1254     if (ioctl (if_fd, I_PUSH, "arp") < 0)
1255         syslog (LOG_ERR, "Can't push ARP module (2)");
1256
1257     /* Push arp module to ip_fd */
1258     if (ioctl (ip_fd, I_POP, NULL) < 0)
1259         syslog (LOG_ERR, "I_POP failed\n");
1260     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
1261         syslog (LOG_ERR, "Can't push ARP module (3)\n");
1262     /* Open arp_fd */
1263     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
1264     if (arp_fd < 0)
1265        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
1266
1267     /* Set ifname to arp */
1268     strioc_if.ic_cmd = SIOCSLIFNAME;
1269     strioc_if.ic_timout = 0;
1270     strioc_if.ic_len = sizeof(ifr);
1271     strioc_if.ic_dp = (char *)&ifr;
1272     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
1273         syslog (LOG_ERR, "Can't set ifname to arp\n");
1274     }
1275
1276     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
1277        syslog(LOG_ERR, "Can't link TAP device to IP");
1278        return -1;
1279     }
1280
1281     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
1282         syslog (LOG_ERR, "Can't link TAP device to ARP");
1283
1284     close (if_fd);
1285
1286     memset(&ifr, 0x0, sizeof(ifr));
1287     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1288     ifr.lifr_ip_muxid  = ip_muxid;
1289     ifr.lifr_arp_muxid = arp_muxid;
1290
1291     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
1292     {
1293       ioctl (ip_fd, I_PUNLINK , arp_muxid);
1294       ioctl (ip_fd, I_PUNLINK, ip_muxid);
1295       syslog (LOG_ERR, "Can't set multiplexor id");
1296     }
1297
1298     snprintf(dev, dev_size, "tap%d", ppa);
1299     return tap_fd;
1300 }
1301
1302 static int tap_open(char *ifname, int ifname_size)
1303 {
1304     char  dev[10]="";
1305     int fd;
1306     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
1307        fprintf(stderr, "Cannot allocate TAP device\n");
1308        return -1;
1309     }
1310     pstrcpy(ifname, ifname_size, dev);
1311     fcntl(fd, F_SETFL, O_NONBLOCK);
1312     return fd;
1313 }
1314 #elif defined (_AIX)
1315 static int tap_open(char *ifname, int ifname_size)
1316 {
1317     fprintf (stderr, "no tap on AIX\n");
1318     return -1;
1319 }
1320 #else
1321 static int tap_open(char *ifname, int ifname_size)
1322 {
1323     struct ifreq ifr;
1324     int fd, ret;
1325
1326     TFR(fd = open("/dev/net/tun", O_RDWR));
1327     if (fd < 0) {
1328         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1329         return -1;
1330     }
1331     memset(&ifr, 0, sizeof(ifr));
1332     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
1333     if (ifname[0] != '\0')
1334         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
1335     else
1336         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
1337     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1338     if (ret != 0) {
1339         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1340         close(fd);
1341         return -1;
1342     }
1343     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1344     fcntl(fd, F_SETFL, O_NONBLOCK);
1345     return fd;
1346 }
1347 #endif
1348
1349 static int launch_script(const char *setup_script, const char *ifname, int fd)
1350 {
1351     sigset_t oldmask, mask;
1352     int pid, status;
1353     char *args[3];
1354     char **parg;
1355
1356     sigemptyset(&mask);
1357     sigaddset(&mask, SIGCHLD);
1358     sigprocmask(SIG_BLOCK, &mask, &oldmask);
1359
1360     /* try to launch network script */
1361     pid = fork();
1362     if (pid == 0) {
1363         int open_max = sysconf(_SC_OPEN_MAX), i;
1364
1365         for (i = 0; i < open_max; i++) {
1366             if (i != STDIN_FILENO &&
1367                 i != STDOUT_FILENO &&
1368                 i != STDERR_FILENO &&
1369                 i != fd) {
1370                 close(i);
1371             }
1372         }
1373         parg = args;
1374         *parg++ = (char *)setup_script;
1375         *parg++ = (char *)ifname;
1376         *parg++ = NULL;
1377         execv(setup_script, args);
1378         _exit(1);
1379     } else if (pid > 0) {
1380         while (waitpid(pid, &status, 0) != pid) {
1381             /* loop */
1382         }
1383         sigprocmask(SIG_SETMASK, &oldmask, NULL);
1384
1385         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
1386             return 0;
1387         }
1388     }
1389     fprintf(stderr, "%s: could not launch network script\n", setup_script);
1390     return -1;
1391 }
1392
1393 static int net_tap_init(VLANState *vlan, const char *model,
1394                         const char *name, const char *ifname1,
1395                         const char *setup_script, const char *down_script)
1396 {
1397     TAPState *s;
1398     int fd;
1399     char ifname[128];
1400
1401     if (ifname1 != NULL)
1402         pstrcpy(ifname, sizeof(ifname), ifname1);
1403     else
1404         ifname[0] = '\0';
1405     TFR(fd = tap_open(ifname, sizeof(ifname)));
1406     if (fd < 0)
1407         return -1;
1408
1409     if (!setup_script || !strcmp(setup_script, "no"))
1410         setup_script = "";
1411     if (setup_script[0] != '\0') {
1412         if (launch_script(setup_script, ifname, fd))
1413             return -1;
1414     }
1415     s = net_tap_fd_init(vlan, model, name, fd);
1416     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1417              "ifname=%s,script=%s,downscript=%s",
1418              ifname, setup_script, down_script);
1419     if (down_script && strcmp(down_script, "no")) {
1420         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1421         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1422     }
1423     return 0;
1424 }
1425
1426 #endif /* !_WIN32 */
1427
1428 #if defined(CONFIG_VDE)
1429 typedef struct VDEState {
1430     VLANClientState *vc;
1431     VDECONN *vde;
1432 } VDEState;
1433
1434 static void vde_to_qemu(void *opaque)
1435 {
1436     VDEState *s = opaque;
1437     uint8_t buf[4096];
1438     int size;
1439
1440     size = vde_recv(s->vde, (char *)buf, sizeof(buf), 0);
1441     if (size > 0) {
1442         qemu_send_packet(s->vc, buf, size);
1443     }
1444 }
1445
1446 static ssize_t vde_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1447 {
1448     VDEState *s = vc->opaque;
1449     ssize_t ret;
1450
1451     do {
1452       ret = vde_send(s->vde, (const char *)buf, size, 0);
1453     } while (ret < 0 && errno == EINTR);
1454
1455     return ret;
1456 }
1457
1458 static void vde_cleanup(VLANClientState *vc)
1459 {
1460     VDEState *s = vc->opaque;
1461     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1462     vde_close(s->vde);
1463     qemu_free(s);
1464 }
1465
1466 static int net_vde_init(VLANState *vlan, const char *model,
1467                         const char *name, const char *sock,
1468                         int port, const char *group, int mode)
1469 {
1470     VDEState *s;
1471     char *init_group = strlen(group) ? (char *)group : NULL;
1472     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1473
1474     struct vde_open_args args = {
1475         .port = port,
1476         .group = init_group,
1477         .mode = mode,
1478     };
1479
1480     s = qemu_mallocz(sizeof(VDEState));
1481     s->vde = vde_open(init_sock, (char *)"QEMU", &args);
1482     if (!s->vde){
1483         free(s);
1484         return -1;
1485     }
1486     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, vde_receive,
1487                                  NULL, vde_cleanup, s);
1488     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1489     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1490              sock, vde_datafd(s->vde));
1491     return 0;
1492 }
1493 #endif
1494
1495 /* network connection */
1496 typedef struct NetSocketState {
1497     VLANClientState *vc;
1498     int fd;
1499     int state; /* 0 = getting length, 1 = getting data */
1500     unsigned int index;
1501     unsigned int packet_len;
1502     uint8_t buf[4096];
1503     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1504 } NetSocketState;
1505
1506 typedef struct NetSocketListenState {
1507     VLANState *vlan;
1508     char *model;
1509     char *name;
1510     int fd;
1511 } NetSocketListenState;
1512
1513 /* XXX: we consider we can send the whole packet without blocking */
1514 static ssize_t net_socket_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1515 {
1516     NetSocketState *s = vc->opaque;
1517     uint32_t len;
1518     len = htonl(size);
1519
1520     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1521     return send_all(s->fd, buf, size);
1522 }
1523
1524 static ssize_t net_socket_receive_dgram(VLANClientState *vc, const uint8_t *buf, size_t size)
1525 {
1526     NetSocketState *s = vc->opaque;
1527
1528     return sendto(s->fd, (const void *)buf, size, 0,
1529                   (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1530 }
1531
1532 static void net_socket_send(void *opaque)
1533 {
1534     NetSocketState *s = opaque;
1535     int size, err;
1536     unsigned l;
1537     uint8_t buf1[4096];
1538     const uint8_t *buf;
1539
1540     size = recv(s->fd, (void *)buf1, sizeof(buf1), 0);
1541     if (size < 0) {
1542         err = socket_error();
1543         if (err != EWOULDBLOCK)
1544             goto eoc;
1545     } else if (size == 0) {
1546         /* end of connection */
1547     eoc:
1548         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1549         closesocket(s->fd);
1550         return;
1551     }
1552     buf = buf1;
1553     while (size > 0) {
1554         /* reassemble a packet from the network */
1555         switch(s->state) {
1556         case 0:
1557             l = 4 - s->index;
1558             if (l > size)
1559                 l = size;
1560             memcpy(s->buf + s->index, buf, l);
1561             buf += l;
1562             size -= l;
1563             s->index += l;
1564             if (s->index == 4) {
1565                 /* got length */
1566                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1567                 s->index = 0;
1568                 s->state = 1;
1569             }
1570             break;
1571         case 1:
1572             l = s->packet_len - s->index;
1573             if (l > size)
1574                 l = size;
1575             if (s->index + l <= sizeof(s->buf)) {
1576                 memcpy(s->buf + s->index, buf, l);
1577             } else {
1578                 fprintf(stderr, "serious error: oversized packet received,"
1579                     "connection terminated.\n");
1580                 s->state = 0;
1581                 goto eoc;
1582             }
1583
1584             s->index += l;
1585             buf += l;
1586             size -= l;
1587             if (s->index >= s->packet_len) {
1588                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1589                 s->index = 0;
1590                 s->state = 0;
1591             }
1592             break;
1593         }
1594     }
1595 }
1596
1597 static void net_socket_send_dgram(void *opaque)
1598 {
1599     NetSocketState *s = opaque;
1600     int size;
1601
1602     size = recv(s->fd, (void *)s->buf, sizeof(s->buf), 0);
1603     if (size < 0)
1604         return;
1605     if (size == 0) {
1606         /* end of connection */
1607         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1608         return;
1609     }
1610     qemu_send_packet(s->vc, s->buf, size);
1611 }
1612
1613 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1614 {
1615     struct ip_mreq imr;
1616     int fd;
1617     int val, ret;
1618     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1619         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1620                 inet_ntoa(mcastaddr->sin_addr),
1621                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1622         return -1;
1623
1624     }
1625     fd = socket(PF_INET, SOCK_DGRAM, 0);
1626     if (fd < 0) {
1627         perror("socket(PF_INET, SOCK_DGRAM)");
1628         return -1;
1629     }
1630
1631     val = 1;
1632     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1633                    (const char *)&val, sizeof(val));
1634     if (ret < 0) {
1635         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1636         goto fail;
1637     }
1638
1639     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1640     if (ret < 0) {
1641         perror("bind");
1642         goto fail;
1643     }
1644
1645     /* Add host to multicast group */
1646     imr.imr_multiaddr = mcastaddr->sin_addr;
1647     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1648
1649     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1650                      (const char *)&imr, sizeof(struct ip_mreq));
1651     if (ret < 0) {
1652         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1653         goto fail;
1654     }
1655
1656     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1657     val = 1;
1658     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1659                    (const char *)&val, sizeof(val));
1660     if (ret < 0) {
1661         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1662         goto fail;
1663     }
1664
1665     socket_set_nonblock(fd);
1666     return fd;
1667 fail:
1668     if (fd >= 0)
1669         closesocket(fd);
1670     return -1;
1671 }
1672
1673 static void net_socket_cleanup(VLANClientState *vc)
1674 {
1675     NetSocketState *s = vc->opaque;
1676     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1677     close(s->fd);
1678     qemu_free(s);
1679 }
1680
1681 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1682                                                 const char *model,
1683                                                 const char *name,
1684                                                 int fd, int is_connected)
1685 {
1686     struct sockaddr_in saddr;
1687     int newfd;
1688     socklen_t saddr_len;
1689     NetSocketState *s;
1690
1691     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
1692      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
1693      * by ONLY ONE process: we must "clone" this dgram socket --jjo
1694      */
1695
1696     if (is_connected) {
1697         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
1698             /* must be bound */
1699             if (saddr.sin_addr.s_addr==0) {
1700                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
1701                         fd);
1702                 return NULL;
1703             }
1704             /* clone dgram socket */
1705             newfd = net_socket_mcast_create(&saddr);
1706             if (newfd < 0) {
1707                 /* error already reported by net_socket_mcast_create() */
1708                 close(fd);
1709                 return NULL;
1710             }
1711             /* clone newfd to fd, close newfd */
1712             dup2(newfd, fd);
1713             close(newfd);
1714
1715         } else {
1716             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
1717                     fd, strerror(errno));
1718             return NULL;
1719         }
1720     }
1721
1722     s = qemu_mallocz(sizeof(NetSocketState));
1723     s->fd = fd;
1724
1725     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive_dgram,
1726                                  NULL, net_socket_cleanup, s);
1727     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
1728
1729     /* mcast: save bound address as dst */
1730     if (is_connected) s->dgram_dst=saddr;
1731
1732     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1733             "socket: fd=%d (%s mcast=%s:%d)",
1734             fd, is_connected? "cloned" : "",
1735             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1736     return s;
1737 }
1738
1739 static void net_socket_connect(void *opaque)
1740 {
1741     NetSocketState *s = opaque;
1742     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
1743 }
1744
1745 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
1746                                                  const char *model,
1747                                                  const char *name,
1748                                                  int fd, int is_connected)
1749 {
1750     NetSocketState *s;
1751     s = qemu_mallocz(sizeof(NetSocketState));
1752     s->fd = fd;
1753     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive,
1754                                  NULL, net_socket_cleanup, s);
1755     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1756              "socket: fd=%d", fd);
1757     if (is_connected) {
1758         net_socket_connect(s);
1759     } else {
1760         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
1761     }
1762     return s;
1763 }
1764
1765 static NetSocketState *net_socket_fd_init(VLANState *vlan,
1766                                           const char *model, const char *name,
1767                                           int fd, int is_connected)
1768 {
1769     int so_type=-1, optlen=sizeof(so_type);
1770
1771     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
1772         (socklen_t *)&optlen)< 0) {
1773         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
1774         return NULL;
1775     }
1776     switch(so_type) {
1777     case SOCK_DGRAM:
1778         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
1779     case SOCK_STREAM:
1780         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1781     default:
1782         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
1783         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
1784         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1785     }
1786     return NULL;
1787 }
1788
1789 static void net_socket_accept(void *opaque)
1790 {
1791     NetSocketListenState *s = opaque;
1792     NetSocketState *s1;
1793     struct sockaddr_in saddr;
1794     socklen_t len;
1795     int fd;
1796
1797     for(;;) {
1798         len = sizeof(saddr);
1799         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
1800         if (fd < 0 && errno != EINTR) {
1801             return;
1802         } else if (fd >= 0) {
1803             break;
1804         }
1805     }
1806     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
1807     if (!s1) {
1808         closesocket(fd);
1809     } else {
1810         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
1811                  "socket: connection from %s:%d",
1812                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1813     }
1814 }
1815
1816 static int net_socket_listen_init(VLANState *vlan,
1817                                   const char *model,
1818                                   const char *name,
1819                                   const char *host_str)
1820 {
1821     NetSocketListenState *s;
1822     int fd, val, ret;
1823     struct sockaddr_in saddr;
1824
1825     if (parse_host_port(&saddr, host_str) < 0)
1826         return -1;
1827
1828     s = qemu_mallocz(sizeof(NetSocketListenState));
1829
1830     fd = socket(PF_INET, SOCK_STREAM, 0);
1831     if (fd < 0) {
1832         perror("socket");
1833         return -1;
1834     }
1835     socket_set_nonblock(fd);
1836
1837     /* allow fast reuse */
1838     val = 1;
1839     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
1840
1841     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1842     if (ret < 0) {
1843         perror("bind");
1844         return -1;
1845     }
1846     ret = listen(fd, 0);
1847     if (ret < 0) {
1848         perror("listen");
1849         return -1;
1850     }
1851     s->vlan = vlan;
1852     s->model = strdup(model);
1853     s->name = name ? strdup(name) : NULL;
1854     s->fd = fd;
1855     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
1856     return 0;
1857 }
1858
1859 static int net_socket_connect_init(VLANState *vlan,
1860                                    const char *model,
1861                                    const char *name,
1862                                    const char *host_str)
1863 {
1864     NetSocketState *s;
1865     int fd, connected, ret, err;
1866     struct sockaddr_in saddr;
1867
1868     if (parse_host_port(&saddr, host_str) < 0)
1869         return -1;
1870
1871     fd = socket(PF_INET, SOCK_STREAM, 0);
1872     if (fd < 0) {
1873         perror("socket");
1874         return -1;
1875     }
1876     socket_set_nonblock(fd);
1877
1878     connected = 0;
1879     for(;;) {
1880         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1881         if (ret < 0) {
1882             err = socket_error();
1883             if (err == EINTR || err == EWOULDBLOCK) {
1884             } else if (err == EINPROGRESS) {
1885                 break;
1886 #ifdef _WIN32
1887             } else if (err == WSAEALREADY) {
1888                 break;
1889 #endif
1890             } else {
1891                 perror("connect");
1892                 closesocket(fd);
1893                 return -1;
1894             }
1895         } else {
1896             connected = 1;
1897             break;
1898         }
1899     }
1900     s = net_socket_fd_init(vlan, model, name, fd, connected);
1901     if (!s)
1902         return -1;
1903     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1904              "socket: connect to %s:%d",
1905              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1906     return 0;
1907 }
1908
1909 static int net_socket_mcast_init(VLANState *vlan,
1910                                  const char *model,
1911                                  const char *name,
1912                                  const char *host_str)
1913 {
1914     NetSocketState *s;
1915     int fd;
1916     struct sockaddr_in saddr;
1917
1918     if (parse_host_port(&saddr, host_str) < 0)
1919         return -1;
1920
1921
1922     fd = net_socket_mcast_create(&saddr);
1923     if (fd < 0)
1924         return -1;
1925
1926     s = net_socket_fd_init(vlan, model, name, fd, 0);
1927     if (!s)
1928         return -1;
1929
1930     s->dgram_dst = saddr;
1931
1932     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1933              "socket: mcast=%s:%d",
1934              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1935     return 0;
1936
1937 }
1938
1939 typedef struct DumpState {
1940     VLANClientState *pcap_vc;
1941     int fd;
1942     int pcap_caplen;
1943 } DumpState;
1944
1945 #define PCAP_MAGIC 0xa1b2c3d4
1946
1947 struct pcap_file_hdr {
1948     uint32_t magic;
1949     uint16_t version_major;
1950     uint16_t version_minor;
1951     int32_t thiszone;
1952     uint32_t sigfigs;
1953     uint32_t snaplen;
1954     uint32_t linktype;
1955 };
1956
1957 struct pcap_sf_pkthdr {
1958     struct {
1959         int32_t tv_sec;
1960         int32_t tv_usec;
1961     } ts;
1962     uint32_t caplen;
1963     uint32_t len;
1964 };
1965
1966 static ssize_t dump_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1967 {
1968     DumpState *s = vc->opaque;
1969     struct pcap_sf_pkthdr hdr;
1970     int64_t ts;
1971     int caplen;
1972
1973     /* Early return in case of previous error. */
1974     if (s->fd < 0) {
1975         return size;
1976     }
1977
1978     ts = muldiv64(qemu_get_clock(vm_clock), 1000000, ticks_per_sec);
1979     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
1980
1981     hdr.ts.tv_sec = ts / 1000000;
1982     hdr.ts.tv_usec = ts % 1000000;
1983     hdr.caplen = caplen;
1984     hdr.len = size;
1985     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
1986         write(s->fd, buf, caplen) != caplen) {
1987         qemu_log("-net dump write error - stop dump\n");
1988         close(s->fd);
1989         s->fd = -1;
1990     }
1991
1992     return size;
1993 }
1994
1995 static void net_dump_cleanup(VLANClientState *vc)
1996 {
1997     DumpState *s = vc->opaque;
1998
1999     close(s->fd);
2000     qemu_free(s);
2001 }
2002
2003 static int net_dump_init(Monitor *mon, VLANState *vlan, const char *device,
2004                          const char *name, const char *filename, int len)
2005 {
2006     struct pcap_file_hdr hdr;
2007     DumpState *s;
2008
2009     s = qemu_malloc(sizeof(DumpState));
2010
2011     s->fd = open(filename, O_CREAT | O_WRONLY | O_BINARY, 0644);
2012     if (s->fd < 0) {
2013         config_error(mon, "-net dump: can't open %s\n", filename);
2014         return -1;
2015     }
2016
2017     s->pcap_caplen = len;
2018
2019     hdr.magic = PCAP_MAGIC;
2020     hdr.version_major = 2;
2021     hdr.version_minor = 4;
2022     hdr.thiszone = 0;
2023     hdr.sigfigs = 0;
2024     hdr.snaplen = s->pcap_caplen;
2025     hdr.linktype = 1;
2026
2027     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
2028         config_error(mon, "-net dump write error: %s\n", strerror(errno));
2029         close(s->fd);
2030         qemu_free(s);
2031         return -1;
2032     }
2033
2034     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, NULL, dump_receive, NULL,
2035                                       net_dump_cleanup, s);
2036     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
2037              "dump to %s (len=%d)", filename, len);
2038     return 0;
2039 }
2040
2041 /* find or alloc a new VLAN */
2042 VLANState *qemu_find_vlan(int id)
2043 {
2044     VLANState **pvlan, *vlan;
2045     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2046         if (vlan->id == id)
2047             return vlan;
2048     }
2049     vlan = qemu_mallocz(sizeof(VLANState));
2050     vlan->id = id;
2051     vlan->next = NULL;
2052     pvlan = &first_vlan;
2053     while (*pvlan != NULL)
2054         pvlan = &(*pvlan)->next;
2055     *pvlan = vlan;
2056     return vlan;
2057 }
2058
2059 static int nic_get_free_idx(void)
2060 {
2061     int index;
2062
2063     for (index = 0; index < MAX_NICS; index++)
2064         if (!nd_table[index].used)
2065             return index;
2066     return -1;
2067 }
2068
2069 void qemu_check_nic_model(NICInfo *nd, const char *model)
2070 {
2071     const char *models[2];
2072
2073     models[0] = model;
2074     models[1] = NULL;
2075
2076     qemu_check_nic_model_list(nd, models, model);
2077 }
2078
2079 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
2080                                const char *default_model)
2081 {
2082     int i, exit_status = 0;
2083
2084     if (!nd->model)
2085         nd->model = strdup(default_model);
2086
2087     if (strcmp(nd->model, "?") != 0) {
2088         for (i = 0 ; models[i]; i++)
2089             if (strcmp(nd->model, models[i]) == 0)
2090                 return;
2091
2092         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
2093         exit_status = 1;
2094     }
2095
2096     fprintf(stderr, "qemu: Supported NIC models: ");
2097     for (i = 0 ; models[i]; i++)
2098         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
2099
2100     exit(exit_status);
2101 }
2102
2103 int net_client_init(Monitor *mon, const char *device, const char *p)
2104 {
2105     static const char * const fd_params[] = {
2106         "vlan", "name", "fd", NULL
2107     };
2108     char buf[1024];
2109     int vlan_id, ret;
2110     VLANState *vlan;
2111     char *name = NULL;
2112
2113     vlan_id = 0;
2114     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
2115         vlan_id = strtol(buf, NULL, 0);
2116     }
2117     vlan = qemu_find_vlan(vlan_id);
2118
2119     if (get_param_value(buf, sizeof(buf), "name", p)) {
2120         name = qemu_strdup(buf);
2121     }
2122     if (!strcmp(device, "nic")) {
2123         static const char * const nic_params[] = {
2124             "vlan", "name", "macaddr", "model", "addr", NULL
2125         };
2126         NICInfo *nd;
2127         uint8_t *macaddr;
2128         int idx = nic_get_free_idx();
2129
2130         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
2131             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2132             ret = -1;
2133             goto out;
2134         }
2135         if (idx == -1 || nb_nics >= MAX_NICS) {
2136             config_error(mon, "Too Many NICs\n");
2137             ret = -1;
2138             goto out;
2139         }
2140         nd = &nd_table[idx];
2141         macaddr = nd->macaddr;
2142         macaddr[0] = 0x52;
2143         macaddr[1] = 0x54;
2144         macaddr[2] = 0x00;
2145         macaddr[3] = 0x12;
2146         macaddr[4] = 0x34;
2147         macaddr[5] = 0x56 + idx;
2148
2149         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2150             if (parse_macaddr(macaddr, buf) < 0) {
2151                 config_error(mon, "invalid syntax for ethernet address\n");
2152                 ret = -1;
2153                 goto out;
2154             }
2155         }
2156         if (get_param_value(buf, sizeof(buf), "model", p)) {
2157             nd->model = strdup(buf);
2158         }
2159         if (get_param_value(buf, sizeof(buf), "addr", p)) {
2160             nd->devaddr = strdup(buf);
2161         }
2162         nd->vlan = vlan;
2163         nd->name = name;
2164         nd->used = 1;
2165         name = NULL;
2166         nb_nics++;
2167         vlan->nb_guest_devs++;
2168         ret = idx;
2169     } else
2170     if (!strcmp(device, "none")) {
2171         if (*p != '\0') {
2172             config_error(mon, "'none' takes no parameters\n");
2173             ret = -1;
2174             goto out;
2175         }
2176         /* does nothing. It is needed to signal that no network cards
2177            are wanted */
2178         ret = 0;
2179     } else
2180 #ifdef CONFIG_SLIRP
2181     if (!strcmp(device, "user")) {
2182         static const char * const slirp_params[] = {
2183             "vlan", "name", "hostname", "restrict", "ip", NULL
2184         };
2185         int restricted = 0;
2186         char *ip = NULL;
2187
2188         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
2189             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2190             ret = -1;
2191             goto out;
2192         }
2193         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
2194             pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
2195         }
2196         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
2197             restricted = (buf[0] == 'y') ? 1 : 0;
2198         }
2199         if (get_param_value(buf, sizeof(buf), "ip", p)) {
2200             ip = qemu_strdup(buf);
2201         }
2202         vlan->nb_host_devs++;
2203         ret = net_slirp_init(vlan, device, name, restricted, ip);
2204         qemu_free(ip);
2205     } else if (!strcmp(device, "channel")) {
2206         long port;
2207         char name[20], *devname;
2208         struct VMChannel *vmc;
2209
2210         port = strtol(p, &devname, 10);
2211         devname++;
2212         if (port < 1 || port > 65535) {
2213             config_error(mon, "vmchannel wrong port number\n");
2214             ret = -1;
2215             goto out;
2216         }
2217         vmc = malloc(sizeof(struct VMChannel));
2218         snprintf(name, 20, "vmchannel%ld", port);
2219         vmc->hd = qemu_chr_open(name, devname, NULL);
2220         if (!vmc->hd) {
2221             config_error(mon, "could not open vmchannel device '%s'\n",
2222                          devname);
2223             ret = -1;
2224             goto out;
2225         }
2226         vmc->port = port;
2227         slirp_add_exec(3, vmc->hd, 4, port);
2228         qemu_chr_add_handlers(vmc->hd, vmchannel_can_read, vmchannel_read,
2229                 NULL, vmc);
2230         ret = 0;
2231     } else
2232 #endif
2233 #ifdef _WIN32
2234     if (!strcmp(device, "tap")) {
2235         static const char * const tap_params[] = {
2236             "vlan", "name", "ifname", NULL
2237         };
2238         char ifname[64];
2239
2240         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
2241             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2242             ret = -1;
2243             goto out;
2244         }
2245         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2246             config_error(mon, "tap: no interface name\n");
2247             ret = -1;
2248             goto out;
2249         }
2250         vlan->nb_host_devs++;
2251         ret = tap_win32_init(vlan, device, name, ifname);
2252     } else
2253 #elif defined (_AIX)
2254 #else
2255     if (!strcmp(device, "tap")) {
2256         char ifname[64], chkbuf[64];
2257         char setup_script[1024], down_script[1024];
2258         int fd;
2259         vlan->nb_host_devs++;
2260         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2261             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2262                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2263                 ret = -1;
2264                 goto out;
2265             }
2266             fd = strtol(buf, NULL, 0);
2267             fcntl(fd, F_SETFL, O_NONBLOCK);
2268             net_tap_fd_init(vlan, device, name, fd);
2269             ret = 0;
2270         } else {
2271             static const char * const tap_params[] = {
2272                 "vlan", "name", "ifname", "script", "downscript", NULL
2273             };
2274             if (check_params(chkbuf, sizeof(chkbuf), tap_params, p) < 0) {
2275                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2276                 ret = -1;
2277                 goto out;
2278             }
2279             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2280                 ifname[0] = '\0';
2281             }
2282             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2283                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2284             }
2285             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
2286                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
2287             }
2288             ret = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
2289         }
2290     } else
2291 #endif
2292     if (!strcmp(device, "socket")) {
2293         char chkbuf[64];
2294         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2295             int fd;
2296             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2297                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2298                 ret = -1;
2299                 goto out;
2300             }
2301             fd = strtol(buf, NULL, 0);
2302             ret = -1;
2303             if (net_socket_fd_init(vlan, device, name, fd, 1))
2304                 ret = 0;
2305         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2306             static const char * const listen_params[] = {
2307                 "vlan", "name", "listen", NULL
2308             };
2309             if (check_params(chkbuf, sizeof(chkbuf), listen_params, p) < 0) {
2310                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2311                 ret = -1;
2312                 goto out;
2313             }
2314             ret = net_socket_listen_init(vlan, device, name, buf);
2315         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2316             static const char * const connect_params[] = {
2317                 "vlan", "name", "connect", NULL
2318             };
2319             if (check_params(chkbuf, sizeof(chkbuf), connect_params, p) < 0) {
2320                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2321                 ret = -1;
2322                 goto out;
2323             }
2324             ret = net_socket_connect_init(vlan, device, name, buf);
2325         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2326             static const char * const mcast_params[] = {
2327                 "vlan", "name", "mcast", NULL
2328             };
2329             if (check_params(chkbuf, sizeof(chkbuf), mcast_params, p) < 0) {
2330                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2331                 ret = -1;
2332                 goto out;
2333             }
2334             ret = net_socket_mcast_init(vlan, device, name, buf);
2335         } else {
2336             config_error(mon, "Unknown socket options: %s\n", p);
2337             ret = -1;
2338             goto out;
2339         }
2340         vlan->nb_host_devs++;
2341     } else
2342 #ifdef CONFIG_VDE
2343     if (!strcmp(device, "vde")) {
2344         static const char * const vde_params[] = {
2345             "vlan", "name", "sock", "port", "group", "mode", NULL
2346         };
2347         char vde_sock[1024], vde_group[512];
2348         int vde_port, vde_mode;
2349
2350         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
2351             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2352             ret = -1;
2353             goto out;
2354         }
2355         vlan->nb_host_devs++;
2356         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2357             vde_sock[0] = '\0';
2358         }
2359         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2360             vde_port = strtol(buf, NULL, 10);
2361         } else {
2362             vde_port = 0;
2363         }
2364         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2365             vde_group[0] = '\0';
2366         }
2367         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2368             vde_mode = strtol(buf, NULL, 8);
2369         } else {
2370             vde_mode = 0700;
2371         }
2372         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2373     } else
2374 #endif
2375     if (!strcmp(device, "dump")) {
2376         int len = 65536;
2377
2378         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2379             len = strtol(buf, NULL, 0);
2380         }
2381         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2382             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2383         }
2384         ret = net_dump_init(mon, vlan, device, name, buf, len);
2385     } else {
2386         config_error(mon, "Unknown network device: %s\n", device);
2387         ret = -1;
2388         goto out;
2389     }
2390     if (ret < 0) {
2391         config_error(mon, "Could not initialize device '%s'\n", device);
2392     }
2393 out:
2394     qemu_free(name);
2395     return ret;
2396 }
2397
2398 void net_client_uninit(NICInfo *nd)
2399 {
2400     nd->vlan->nb_guest_devs--;
2401     nb_nics--;
2402     nd->used = 0;
2403     free((void *)nd->model);
2404 }
2405
2406 static int net_host_check_device(const char *device)
2407 {
2408     int i;
2409     const char *valid_param_list[] = { "tap", "socket", "dump"
2410 #ifdef CONFIG_SLIRP
2411                                        ,"user"
2412 #endif
2413 #ifdef CONFIG_VDE
2414                                        ,"vde"
2415 #endif
2416     };
2417     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2418         if (!strncmp(valid_param_list[i], device,
2419                      strlen(valid_param_list[i])))
2420             return 1;
2421     }
2422
2423     return 0;
2424 }
2425
2426 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2427 {
2428     if (!net_host_check_device(device)) {
2429         monitor_printf(mon, "invalid host network device %s\n", device);
2430         return;
2431     }
2432     if (net_client_init(mon, device, opts ? opts : "") < 0) {
2433         monitor_printf(mon, "adding host network device %s failed\n", device);
2434     }
2435 }
2436
2437 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2438 {
2439     VLANState *vlan;
2440     VLANClientState *vc;
2441
2442     vlan = qemu_find_vlan(vlan_id);
2443
2444     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
2445         if (!strcmp(vc->name, device)) {
2446             break;
2447         }
2448     }
2449
2450     if (!vc) {
2451         monitor_printf(mon, "can't find device %s\n", device);
2452         return;
2453     }
2454     if (!net_host_check_device(vc->model)) {
2455         monitor_printf(mon, "invalid host network device %s\n", device);
2456         return;
2457     }
2458     qemu_del_vlan_client(vc);
2459 }
2460
2461 int net_client_parse(const char *str)
2462 {
2463     const char *p;
2464     char *q;
2465     char device[64];
2466
2467     p = str;
2468     q = device;
2469     while (*p != '\0' && *p != ',') {
2470         if ((q - device) < sizeof(device) - 1)
2471             *q++ = *p;
2472         p++;
2473     }
2474     *q = '\0';
2475     if (*p == ',')
2476         p++;
2477
2478     return net_client_init(NULL, device, p);
2479 }
2480
2481 void net_set_boot_mask(int net_boot_mask)
2482 {
2483     int i;
2484
2485     /* Only the first four NICs may be bootable */
2486     net_boot_mask = net_boot_mask & 0xF;
2487
2488     for (i = 0; i < nb_nics; i++) {
2489         if (net_boot_mask & (1 << i)) {
2490             nd_table[i].bootable = 1;
2491             net_boot_mask &= ~(1 << i);
2492         }
2493     }
2494
2495     if (net_boot_mask) {
2496         fprintf(stderr, "Cannot boot from non-existent NIC\n");
2497         exit(1);
2498     }
2499 }
2500
2501 void do_info_network(Monitor *mon)
2502 {
2503     VLANState *vlan;
2504     VLANClientState *vc;
2505
2506     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2507         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2508         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2509             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2510     }
2511 }
2512
2513 int do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2514 {
2515     VLANState *vlan;
2516     VLANClientState *vc = NULL;
2517
2518     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2519         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2520             if (strcmp(vc->name, name) == 0)
2521                 goto done;
2522 done:
2523
2524     if (!vc) {
2525         monitor_printf(mon, "could not find network device '%s'", name);
2526         return 0;
2527     }
2528
2529     if (strcmp(up_or_down, "up") == 0)
2530         vc->link_down = 0;
2531     else if (strcmp(up_or_down, "down") == 0)
2532         vc->link_down = 1;
2533     else
2534         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2535                        "valid\n", up_or_down);
2536
2537     if (vc->link_status_changed)
2538         vc->link_status_changed(vc);
2539
2540     return 1;
2541 }
2542
2543 void net_cleanup(void)
2544 {
2545     VLANState *vlan;
2546
2547     /* close network clients */
2548     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2549         VLANClientState *vc = vlan->first_client;
2550
2551         while (vc) {
2552             VLANClientState *next = vc->next;
2553
2554             qemu_del_vlan_client(vc);
2555
2556             vc = next;
2557         }
2558     }
2559 }
2560
2561 void net_client_check(void)
2562 {
2563     VLANState *vlan;
2564
2565     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2566         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2567             continue;
2568         if (vlan->nb_guest_devs == 0)
2569             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2570         if (vlan->nb_host_devs == 0)
2571             fprintf(stderr,
2572                     "Warning: vlan %d is not connected to host network\n",
2573                     vlan->id);
2574     }
2575 }