xref: /xnu-8019.80.24/bsd/dev/dtrace/scripts/tcp.d (revision a325d9c4a84054e40bbe985afedcb50ab80993ea)
1*a325d9c4SApple OSS Distributions /*
2*a325d9c4SApple OSS Distributions  * Copyright (c) 2006-2008 Apple Computer, Inc.  All Rights Reserved.
3*a325d9c4SApple OSS Distributions  *
4*a325d9c4SApple OSS Distributions  * @APPLE_LICENSE_HEADER_START@
5*a325d9c4SApple OSS Distributions  *
6*a325d9c4SApple OSS Distributions  * This file contains Original Code and/or Modifications of Original Code
7*a325d9c4SApple OSS Distributions  * as defined in and that are subject to the Apple Public Source License
8*a325d9c4SApple OSS Distributions  * Version 2.0 (the 'License'). You may not use this file except in
9*a325d9c4SApple OSS Distributions  * compliance with the License. Please obtain a copy of the License at
10*a325d9c4SApple OSS Distributions  * http://www.opensource.apple.com/apsl/ and read it before using this
11*a325d9c4SApple OSS Distributions  * file.
12*a325d9c4SApple OSS Distributions  *
13*a325d9c4SApple OSS Distributions  * The Original Code and all software distributed under the License are
14*a325d9c4SApple OSS Distributions  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15*a325d9c4SApple OSS Distributions  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16*a325d9c4SApple OSS Distributions  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17*a325d9c4SApple OSS Distributions  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18*a325d9c4SApple OSS Distributions  * Please see the License for the specific language governing rights and
19*a325d9c4SApple OSS Distributions  * limitations under the License.
20*a325d9c4SApple OSS Distributions  *
21*a325d9c4SApple OSS Distributions  * @APPLE_LICENSE_HEADER_END@
22*a325d9c4SApple OSS Distributions  */
23*a325d9c4SApple OSS Distributions 
24*a325d9c4SApple OSS Distributions #pragma D depends_on library darwin.d
25*a325d9c4SApple OSS Distributions #pragma D depends_on module mach_kernel
26*a325d9c4SApple OSS Distributions #pragma D depends_on provider tcp
27*a325d9c4SApple OSS Distributions 
28*a325d9c4SApple OSS Distributions /*
29*a325d9c4SApple OSS Distributions  * TCP flags
30*a325d9c4SApple OSS Distributions  */
31*a325d9c4SApple OSS Distributions inline int TH_FIN = 0x01;
32*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_FIN
33*a325d9c4SApple OSS Distributions inline int TH_SYN = 0x02;
34*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_SYN
35*a325d9c4SApple OSS Distributions inline int TH_RST = 0x04;
36*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_RST
37*a325d9c4SApple OSS Distributions inline int TH_PUSH = 0x08;
38*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_PUSH
39*a325d9c4SApple OSS Distributions inline int TH_ACK = 0x10;
40*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_ACK
41*a325d9c4SApple OSS Distributions inline int TH_URG = 0x20;
42*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_URG
43*a325d9c4SApple OSS Distributions inline int TH_ECE = 0x40;
44*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_ECE
45*a325d9c4SApple OSS Distributions inline int TH_CWR = 0x80;
46*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TH_CWR
47*a325d9c4SApple OSS Distributions 
48*a325d9c4SApple OSS Distributions /*
49*a325d9c4SApple OSS Distributions  * TCP states
50*a325d9c4SApple OSS Distributions  */
51*a325d9c4SApple OSS Distributions inline int TCPS_CLOSED = 0;
52*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSED
53*a325d9c4SApple OSS Distributions inline int TCPS_LISTEN = 1;
54*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_LISTEN
55*a325d9c4SApple OSS Distributions inline int TCPS_SYN_SENT = 2;
56*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_SYN_SENT
57*a325d9c4SApple OSS Distributions inline int TCPS_SYN_RECEIVED = 3;
58*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_SYN_RECEIVED
59*a325d9c4SApple OSS Distributions inline int TCPS_ESTABLISHED = 4;
60*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_ESTABLISHED
61*a325d9c4SApple OSS Distributions inline int TCPS_CLOSE_WAIT = 5;
62*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSE_WAIT
63*a325d9c4SApple OSS Distributions inline int TCPS_FIN_WAIT_1 = 6;
64*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_FIN_WAIT_1
65*a325d9c4SApple OSS Distributions inline int TCPS_CLOSING = 7;
66*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSING
67*a325d9c4SApple OSS Distributions inline int TCPS_LAST_ACK = 8;
68*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_LAST_ACK
69*a325d9c4SApple OSS Distributions inline int TCPS_FIN_WAIT_2 = 9;
70*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_FIN_WAIT_2
71*a325d9c4SApple OSS Distributions inline int TCPS_TIME_WAIT = 10;
72*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCPS_TIME_WAIT
73*a325d9c4SApple OSS Distributions 
74*a325d9c4SApple OSS Distributions /*
75*a325d9c4SApple OSS Distributions  * TCP congestion control events
76*a325d9c4SApple OSS Distributions  */
77*a325d9c4SApple OSS Distributions inline int TCP_CC_CWND_INIT = 0;
78*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_CWND_INIT
79*a325d9c4SApple OSS Distributions inline int TCP_CC_INSEQ_ACK_RCVD = 1;
80*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_INSEQ_ACK_RCVD
81*a325d9c4SApple OSS Distributions inline int TCP_CC_ACK_RCVD = 2;
82*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ACK_RCVD
83*a325d9c4SApple OSS Distributions inline int TCP_CC_ENTER_FASTRECOVERY = 3;
84*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ENTER_FASTRECOVERY
85*a325d9c4SApple OSS Distributions inline int TCP_CC_IN_FASTRECOVERY = 4;
86*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_IN_FASTRECOVERY
87*a325d9c4SApple OSS Distributions inline int TCP_CC_EXIT_FASTRECOVERY = 5;
88*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_EXIT_FASTRECOVERY
89*a325d9c4SApple OSS Distributions inline int TCP_CC_PARTIAL_ACK = 6;
90*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_PARTIAL_ACK
91*a325d9c4SApple OSS Distributions inline int TCP_CC_IDLE_TIMEOUT = 7;
92*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_IDLE_TIMEOUT
93*a325d9c4SApple OSS Distributions inline int TCP_CC_REXMT_TIMEOUT = 8;
94*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_REXMT_TIMEOUT
95*a325d9c4SApple OSS Distributions inline int TCP_CC_ECN_RCVD = 9;
96*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ECN_RCVD
97*a325d9c4SApple OSS Distributions inline int TCP_CC_BAD_REXMT_RECOVERY = 10;
98*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_BAD_REXMT_RECOVERY
99*a325d9c4SApple OSS Distributions inline int TCP_CC_OUTPUT_ERROR = 11;
100*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_OUTPUT_ERROR
101*a325d9c4SApple OSS Distributions inline int TCP_CC_CHANGE_ALGO = 12;
102*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_CHANGE_ALGO
103*a325d9c4SApple OSS Distributions inline int TCP_CC_FLOW_CONTROL = 13;
104*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_FLOW_CONTROL
105*a325d9c4SApple OSS Distributions inline int TCP_CC_SUSPEND = 14;
106*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_SUSPEND
107*a325d9c4SApple OSS Distributions inline int TCP_CC_LIMITED_TRANSMIT = 15;
108*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_LIMITED_TRANSMIT
109*a325d9c4SApple OSS Distributions inline int TCP_CC_EARLY_RETRANSMIT = 16;
110*a325d9c4SApple OSS Distributions #pragma D binding "1.0" TCP_CC_EARLY_RETRANSMIT
111*a325d9c4SApple OSS Distributions 
112*a325d9c4SApple OSS Distributions 
113*a325d9c4SApple OSS Distributions /*
114*a325d9c4SApple OSS Distributions  * tcpinfo is the TCP header field
115*a325d9c4SApple OSS Distributions  */
116*a325d9c4SApple OSS Distributions typedef struct tcpinfo {
117*a325d9c4SApple OSS Distributions 	uint16_t tcp_sport;	/* source port */
118*a325d9c4SApple OSS Distributions 	uint16_t tcp_dport;	/* destination port */
119*a325d9c4SApple OSS Distributions 	uint32_t tcp_seq;	/* sequence number */
120*a325d9c4SApple OSS Distributions 	uint32_t tcp_ack;	/* acknowledgement number */
121*a325d9c4SApple OSS Distributions 	uint8_t tcp_offset;	/* data offset, in bytes */
122*a325d9c4SApple OSS Distributions 	uint8_t tcp_flags;	/* flags */
123*a325d9c4SApple OSS Distributions 	uint16_t tcp_window;	/* window size */
124*a325d9c4SApple OSS Distributions 	uint16_t tcp_checksum;	/* checksum */
125*a325d9c4SApple OSS Distributions 	uint16_t tcp_urgent;	/* urgent data pointer */
126*a325d9c4SApple OSS Distributions 	struct tcphdr *tcp_hdr;	/* raw TCP header */
127*a325d9c4SApple OSS Distributions } tcpinfo_t;
128*a325d9c4SApple OSS Distributions 
129*a325d9c4SApple OSS Distributions #pragma D binding "1.0" translator
130*a325d9c4SApple OSS Distributions translator tcpinfo_t < struct tcphdr *T > {
131*a325d9c4SApple OSS Distributions 	tcp_sport = ntohs(T->th_sport);
132*a325d9c4SApple OSS Distributions 	tcp_dport = ntohs(T->th_dport);
133*a325d9c4SApple OSS Distributions 	tcp_seq = ntohl(T->th_seq);
134*a325d9c4SApple OSS Distributions 	tcp_ack = ntohl(T->th_ack);
135*a325d9c4SApple OSS Distributions 	tcp_offset = T->th_off << 2;
136*a325d9c4SApple OSS Distributions 	tcp_flags = T->th_flags;
137*a325d9c4SApple OSS Distributions 	tcp_window = ntohs(T->th_win);
138*a325d9c4SApple OSS Distributions 	tcp_checksum = ntohs(T->th_sum);
139*a325d9c4SApple OSS Distributions 	tcp_urgent = ntohs(T->th_urp);
140*a325d9c4SApple OSS Distributions 	tcp_hdr = T;
141*a325d9c4SApple OSS Distributions };
142*a325d9c4SApple OSS Distributions 
143*a325d9c4SApple OSS Distributions /*
144*a325d9c4SApple OSS Distributions  * tcpsinfo contains stable TCP details from TCP control block
145*a325d9c4SApple OSS Distributions  */
146*a325d9c4SApple OSS Distributions typedef struct tcpsinfo {
147*a325d9c4SApple OSS Distributions 	int tcps_local;		/* is delivered locally, boolean */
148*a325d9c4SApple OSS Distributions 	int tcps_active;	/* active open, boolean */
149*a325d9c4SApple OSS Distributions 	string tcps_state;	/* TCP state, as a string */
150*a325d9c4SApple OSS Distributions 	u_int t_flags;		/* flags */
151*a325d9c4SApple OSS Distributions 	uint32_t rcv_nxt;	/* receive next */
152*a325d9c4SApple OSS Distributions 	uint32_t rcv_adv;	/* advertised window */
153*a325d9c4SApple OSS Distributions 	uint32_t rcv_wnd;	/* receive window */
154*a325d9c4SApple OSS Distributions 	uint32_t snd_wnd;	/* send window */
155*a325d9c4SApple OSS Distributions 	uint32_t snd_cwnd;	/* congestion controlled window */
156*a325d9c4SApple OSS Distributions 	uint32_t snd_ssthresh;	/* slow-start threshold */
157*a325d9c4SApple OSS Distributions 	uint32_t snd_una;	/* send unacknowledged */
158*a325d9c4SApple OSS Distributions 	uint32_t snd_nxt;	/* send next */
159*a325d9c4SApple OSS Distributions 	uint32_t snd_max;	/* send max */
160*a325d9c4SApple OSS Distributions 	uint32_t snd_recover;	/* send recover for NewReno */
161*a325d9c4SApple OSS Distributions 	int	t_rxtcur;	/* retransmit timeout in ms */
162*a325d9c4SApple OSS Distributions 	u_int	t_maxseg;	/* maximum segment size */
163*a325d9c4SApple OSS Distributions 	u_int	t_rttbest;	/* best rtt we have seen */
164*a325d9c4SApple OSS Distributions 	int	rcv_numsacks;	/* number of sack blocks present */
165*a325d9c4SApple OSS Distributions 	int	snd_numholes;	/* number of holes seen by sender */
166*a325d9c4SApple OSS Distributions 	struct tcpcb* tcpcb;	/* Pointer to tcp control block */
167*a325d9c4SApple OSS Distributions } tcpsinfo_t;
168*a325d9c4SApple OSS Distributions 
169*a325d9c4SApple OSS Distributions #pragma D binding "1.0" translator
170*a325d9c4SApple OSS Distributions translator tcpsinfo_t < struct tcpcb *T> {
171*a325d9c4SApple OSS Distributions 	tcps_local = 0;		/* Not used */
172*a325d9c4SApple OSS Distributions 	tcps_active = 0;
173*a325d9c4SApple OSS Distributions 	tcps_state = T ?
174*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_CLOSED ? "state-closed" :
175*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_LISTEN ? "state-listen" :
176*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_SYN_SENT ? "state-syn-sent" :
177*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_SYN_RECEIVED ? "state-syn-received" :
178*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_ESTABLISHED ? "state-established" :
179*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_CLOSE_WAIT ? "state-close-wait" :
180*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_FIN_WAIT_1 ? "state-fin-wait1" :
181*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_CLOSING ? "state-closing" :
182*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_LAST_ACK ? "state-last-ack" :
183*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_FIN_WAIT_2 ? "state-fin-wait2" :
184*a325d9c4SApple OSS Distributions 		T->t_state == TCPS_TIME_WAIT ? "state-time-wait" :
185*a325d9c4SApple OSS Distributions 		"<unknown>" : "<null>";
186*a325d9c4SApple OSS Distributions 	t_flags = T->t_flags;
187*a325d9c4SApple OSS Distributions 	rcv_nxt = T->rcv_nxt;
188*a325d9c4SApple OSS Distributions 	rcv_adv = T->rcv_adv;
189*a325d9c4SApple OSS Distributions 	rcv_wnd = T->rcv_wnd;
190*a325d9c4SApple OSS Distributions 	snd_wnd = T->snd_wnd;
191*a325d9c4SApple OSS Distributions 	snd_cwnd = T->snd_cwnd;
192*a325d9c4SApple OSS Distributions 	snd_ssthresh = T->snd_ssthresh;
193*a325d9c4SApple OSS Distributions 	snd_una = T->snd_una;
194*a325d9c4SApple OSS Distributions 	snd_nxt = T->snd_nxt;
195*a325d9c4SApple OSS Distributions 	snd_max = T->snd_max;
196*a325d9c4SApple OSS Distributions 	snd_recover = T->snd_recover;
197*a325d9c4SApple OSS Distributions 	t_rxtcur = T->t_rxtcur;
198*a325d9c4SApple OSS Distributions 	t_maxseg = T->t_maxseg;
199*a325d9c4SApple OSS Distributions 	t_rttbest = T->t_rttbest;
200*a325d9c4SApple OSS Distributions 	rcv_numsacks = T->rcv_numsacks;
201*a325d9c4SApple OSS Distributions 	snd_numholes = T->snd_numholes;
202*a325d9c4SApple OSS Distributions 	tcpcb = T;
203*a325d9c4SApple OSS Distributions };
204*a325d9c4SApple OSS Distributions 
205*a325d9c4SApple OSS Distributions /*
206*a325d9c4SApple OSS Distributions  * tcpnsinfo provides the new tcp state for state changes.
207*a325d9c4SApple OSS Distributions  */
208*a325d9c4SApple OSS Distributions typedef struct tcpnsinfo {
209*a325d9c4SApple OSS Distributions 	string tcps_state;	/* TCP state, as a string */
210*a325d9c4SApple OSS Distributions } tcpnsinfo_t;
211*a325d9c4SApple OSS Distributions 
212*a325d9c4SApple OSS Distributions #pragma D binding "1.0" translator
213*a325d9c4SApple OSS Distributions translator tcpnsinfo_t < int32_t I > {
214*a325d9c4SApple OSS Distributions 	tcps_state = I ?
215*a325d9c4SApple OSS Distributions 		I == TCPS_LISTEN ? "state-listen" :
216*a325d9c4SApple OSS Distributions 		I == TCPS_SYN_SENT ? "state-syn-sent" :
217*a325d9c4SApple OSS Distributions 		I == TCPS_SYN_RECEIVED ? "state-syn-received" :
218*a325d9c4SApple OSS Distributions 		I == TCPS_ESTABLISHED ? "state-established" :
219*a325d9c4SApple OSS Distributions 		I == TCPS_CLOSE_WAIT ? "state-close-wait" :
220*a325d9c4SApple OSS Distributions 		I == TCPS_FIN_WAIT_1 ? "state-fin-wait1" :
221*a325d9c4SApple OSS Distributions 		I == TCPS_CLOSING ? "state-closing" :
222*a325d9c4SApple OSS Distributions 		I == TCPS_LAST_ACK ? "state-last-ack" :
223*a325d9c4SApple OSS Distributions 		I == TCPS_FIN_WAIT_2 ? "state-fin-wait2" :
224*a325d9c4SApple OSS Distributions 		I == TCPS_TIME_WAIT ? "state-time-wait" :
225*a325d9c4SApple OSS Distributions 		"<unknown>" : "state-closed";
226*a325d9c4SApple OSS Distributions };
227*a325d9c4SApple OSS Distributions 
228*a325d9c4SApple OSS Distributions /*
229*a325d9c4SApple OSS Distributions  * tcpccevent provides the congestion control event for TCP cc probes
230*a325d9c4SApple OSS Distributions  */
231*a325d9c4SApple OSS Distributions typedef struct tcpccevent {
232*a325d9c4SApple OSS Distributions 	string tcp_cc;		/* TCP congestion control event, as a string */
233*a325d9c4SApple OSS Distributions } tcpccevent_t;
234*a325d9c4SApple OSS Distributions 
235*a325d9c4SApple OSS Distributions #pragma D binding "1.0" translator
236*a325d9c4SApple OSS Distributions translator tcpccevent_t < int32_t I > {
237*a325d9c4SApple OSS Distributions 	tcp_cc = I ?
238*a325d9c4SApple OSS Distributions 		I == TCP_CC_INSEQ_ACK_RCVD ? "inseq-ack-rcvd" :
239*a325d9c4SApple OSS Distributions 		I == TCP_CC_ACK_RCVD ? "ack-rcvd" :
240*a325d9c4SApple OSS Distributions 		I == TCP_CC_ENTER_FASTRECOVERY ? "enter-fastrecovery" :
241*a325d9c4SApple OSS Distributions 		I == TCP_CC_EXIT_FASTRECOVERY ? "exit-fastrecovery" :
242*a325d9c4SApple OSS Distributions 		I == TCP_CC_PARTIAL_ACK ? "partial-ack" :
243*a325d9c4SApple OSS Distributions 		I == TCP_CC_IDLE_TIMEOUT ? "idle-timeout" :
244*a325d9c4SApple OSS Distributions 		I == TCP_CC_REXMT_TIMEOUT ? "rexmt-timeout" :
245*a325d9c4SApple OSS Distributions 		I == TCP_CC_ECN_RCVD ? "ecn-rcvd" :
246*a325d9c4SApple OSS Distributions 		I == TCP_CC_BAD_REXMT_RECOVERY ? "bad-rexmt" :
247*a325d9c4SApple OSS Distributions 		I == TCP_CC_OUTPUT_ERROR ? "output-error" :
248*a325d9c4SApple OSS Distributions 		I == TCP_CC_CHANGE_ALGO ? "change-algo" :
249*a325d9c4SApple OSS Distributions 		I == TCP_CC_FLOW_CONTROL ? "flow-control" :
250*a325d9c4SApple OSS Distributions 		I == TCP_CC_SUSPEND ? "suspend" :
251*a325d9c4SApple OSS Distributions 		I == TCP_CC_LIMITED_TRANSMIT ? "limited-transmit" :
252*a325d9c4SApple OSS Distributions 		I == TCP_CC_EARLY_RETRANSMIT ? "early-rexmt" :
253*a325d9c4SApple OSS Distributions 		"<unknown>" : "cwnd-init";
254*a325d9c4SApple OSS Distributions };
255