xref: /xnu-8792.61.2/bsd/dev/dtrace/scripts/tcp.d (revision 42e220869062b56f8d7d0726fd4c88954f87902c)
1*42e22086SApple OSS Distributions /*
2*42e22086SApple OSS Distributions  * Copyright (c) 2006-2008 Apple Computer, Inc.  All Rights Reserved.
3*42e22086SApple OSS Distributions  *
4*42e22086SApple OSS Distributions  * @APPLE_LICENSE_HEADER_START@
5*42e22086SApple OSS Distributions  *
6*42e22086SApple OSS Distributions  * This file contains Original Code and/or Modifications of Original Code
7*42e22086SApple OSS Distributions  * as defined in and that are subject to the Apple Public Source License
8*42e22086SApple OSS Distributions  * Version 2.0 (the 'License'). You may not use this file except in
9*42e22086SApple OSS Distributions  * compliance with the License. Please obtain a copy of the License at
10*42e22086SApple OSS Distributions  * http://www.opensource.apple.com/apsl/ and read it before using this
11*42e22086SApple OSS Distributions  * file.
12*42e22086SApple OSS Distributions  *
13*42e22086SApple OSS Distributions  * The Original Code and all software distributed under the License are
14*42e22086SApple OSS Distributions  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15*42e22086SApple OSS Distributions  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16*42e22086SApple OSS Distributions  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17*42e22086SApple OSS Distributions  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18*42e22086SApple OSS Distributions  * Please see the License for the specific language governing rights and
19*42e22086SApple OSS Distributions  * limitations under the License.
20*42e22086SApple OSS Distributions  *
21*42e22086SApple OSS Distributions  * @APPLE_LICENSE_HEADER_END@
22*42e22086SApple OSS Distributions  */
23*42e22086SApple OSS Distributions 
24*42e22086SApple OSS Distributions #pragma D depends_on library darwin.d
25*42e22086SApple OSS Distributions #pragma D depends_on module mach_kernel
26*42e22086SApple OSS Distributions #pragma D depends_on provider tcp
27*42e22086SApple OSS Distributions 
28*42e22086SApple OSS Distributions /*
29*42e22086SApple OSS Distributions  * TCP flags
30*42e22086SApple OSS Distributions  */
31*42e22086SApple OSS Distributions inline int TH_FIN = 0x01;
32*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_FIN
33*42e22086SApple OSS Distributions inline int TH_SYN = 0x02;
34*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_SYN
35*42e22086SApple OSS Distributions inline int TH_RST = 0x04;
36*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_RST
37*42e22086SApple OSS Distributions inline int TH_PUSH = 0x08;
38*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_PUSH
39*42e22086SApple OSS Distributions inline int TH_ACK = 0x10;
40*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_ACK
41*42e22086SApple OSS Distributions inline int TH_URG = 0x20;
42*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_URG
43*42e22086SApple OSS Distributions inline int TH_ECE = 0x40;
44*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_ECE
45*42e22086SApple OSS Distributions inline int TH_CWR = 0x80;
46*42e22086SApple OSS Distributions #pragma D binding "1.0" TH_CWR
47*42e22086SApple OSS Distributions 
48*42e22086SApple OSS Distributions /*
49*42e22086SApple OSS Distributions  * TCP states
50*42e22086SApple OSS Distributions  */
51*42e22086SApple OSS Distributions inline int TCPS_CLOSED = 0;
52*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSED
53*42e22086SApple OSS Distributions inline int TCPS_LISTEN = 1;
54*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_LISTEN
55*42e22086SApple OSS Distributions inline int TCPS_SYN_SENT = 2;
56*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_SYN_SENT
57*42e22086SApple OSS Distributions inline int TCPS_SYN_RECEIVED = 3;
58*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_SYN_RECEIVED
59*42e22086SApple OSS Distributions inline int TCPS_ESTABLISHED = 4;
60*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_ESTABLISHED
61*42e22086SApple OSS Distributions inline int TCPS_CLOSE_WAIT = 5;
62*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSE_WAIT
63*42e22086SApple OSS Distributions inline int TCPS_FIN_WAIT_1 = 6;
64*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_FIN_WAIT_1
65*42e22086SApple OSS Distributions inline int TCPS_CLOSING = 7;
66*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_CLOSING
67*42e22086SApple OSS Distributions inline int TCPS_LAST_ACK = 8;
68*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_LAST_ACK
69*42e22086SApple OSS Distributions inline int TCPS_FIN_WAIT_2 = 9;
70*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_FIN_WAIT_2
71*42e22086SApple OSS Distributions inline int TCPS_TIME_WAIT = 10;
72*42e22086SApple OSS Distributions #pragma D binding "1.0" TCPS_TIME_WAIT
73*42e22086SApple OSS Distributions 
74*42e22086SApple OSS Distributions /*
75*42e22086SApple OSS Distributions  * TCP congestion control events
76*42e22086SApple OSS Distributions  */
77*42e22086SApple OSS Distributions inline int TCP_CC_CWND_INIT = 0;
78*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_CWND_INIT
79*42e22086SApple OSS Distributions inline int TCP_CC_INSEQ_ACK_RCVD = 1;
80*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_INSEQ_ACK_RCVD
81*42e22086SApple OSS Distributions inline int TCP_CC_ACK_RCVD = 2;
82*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ACK_RCVD
83*42e22086SApple OSS Distributions inline int TCP_CC_ENTER_FASTRECOVERY = 3;
84*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ENTER_FASTRECOVERY
85*42e22086SApple OSS Distributions inline int TCP_CC_IN_FASTRECOVERY = 4;
86*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_IN_FASTRECOVERY
87*42e22086SApple OSS Distributions inline int TCP_CC_EXIT_FASTRECOVERY = 5;
88*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_EXIT_FASTRECOVERY
89*42e22086SApple OSS Distributions inline int TCP_CC_PARTIAL_ACK = 6;
90*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_PARTIAL_ACK
91*42e22086SApple OSS Distributions inline int TCP_CC_IDLE_TIMEOUT = 7;
92*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_IDLE_TIMEOUT
93*42e22086SApple OSS Distributions inline int TCP_CC_REXMT_TIMEOUT = 8;
94*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_REXMT_TIMEOUT
95*42e22086SApple OSS Distributions inline int TCP_CC_ECN_RCVD = 9;
96*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_ECN_RCVD
97*42e22086SApple OSS Distributions inline int TCP_CC_BAD_REXMT_RECOVERY = 10;
98*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_BAD_REXMT_RECOVERY
99*42e22086SApple OSS Distributions inline int TCP_CC_OUTPUT_ERROR = 11;
100*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_OUTPUT_ERROR
101*42e22086SApple OSS Distributions inline int TCP_CC_CHANGE_ALGO = 12;
102*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_CHANGE_ALGO
103*42e22086SApple OSS Distributions inline int TCP_CC_FLOW_CONTROL = 13;
104*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_FLOW_CONTROL
105*42e22086SApple OSS Distributions inline int TCP_CC_SUSPEND = 14;
106*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_SUSPEND
107*42e22086SApple OSS Distributions inline int TCP_CC_LIMITED_TRANSMIT = 15;
108*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_LIMITED_TRANSMIT
109*42e22086SApple OSS Distributions inline int TCP_CC_EARLY_RETRANSMIT = 16;
110*42e22086SApple OSS Distributions #pragma D binding "1.0" TCP_CC_EARLY_RETRANSMIT
111*42e22086SApple OSS Distributions 
112*42e22086SApple OSS Distributions 
113*42e22086SApple OSS Distributions /*
114*42e22086SApple OSS Distributions  * tcpinfo is the TCP header field
115*42e22086SApple OSS Distributions  */
116*42e22086SApple OSS Distributions typedef struct tcpinfo {
117*42e22086SApple OSS Distributions 	uint16_t tcp_sport;	/* source port */
118*42e22086SApple OSS Distributions 	uint16_t tcp_dport;	/* destination port */
119*42e22086SApple OSS Distributions 	uint32_t tcp_seq;	/* sequence number */
120*42e22086SApple OSS Distributions 	uint32_t tcp_ack;	/* acknowledgement number */
121*42e22086SApple OSS Distributions 	uint8_t tcp_offset;	/* data offset, in bytes */
122*42e22086SApple OSS Distributions 	uint8_t tcp_flags;	/* flags */
123*42e22086SApple OSS Distributions 	uint16_t tcp_window;	/* window size */
124*42e22086SApple OSS Distributions 	uint16_t tcp_checksum;	/* checksum */
125*42e22086SApple OSS Distributions 	uint16_t tcp_urgent;	/* urgent data pointer */
126*42e22086SApple OSS Distributions 	struct tcphdr *tcp_hdr;	/* raw TCP header */
127*42e22086SApple OSS Distributions } tcpinfo_t;
128*42e22086SApple OSS Distributions 
129*42e22086SApple OSS Distributions #pragma D binding "1.0" translator
130*42e22086SApple OSS Distributions translator tcpinfo_t < struct tcphdr *T > {
131*42e22086SApple OSS Distributions 	tcp_sport = ntohs(T->th_sport);
132*42e22086SApple OSS Distributions 	tcp_dport = ntohs(T->th_dport);
133*42e22086SApple OSS Distributions 	tcp_seq = ntohl(T->th_seq);
134*42e22086SApple OSS Distributions 	tcp_ack = ntohl(T->th_ack);
135*42e22086SApple OSS Distributions 	tcp_offset = T->th_off << 2;
136*42e22086SApple OSS Distributions 	tcp_flags = T->th_flags;
137*42e22086SApple OSS Distributions 	tcp_window = ntohs(T->th_win);
138*42e22086SApple OSS Distributions 	tcp_checksum = ntohs(T->th_sum);
139*42e22086SApple OSS Distributions 	tcp_urgent = ntohs(T->th_urp);
140*42e22086SApple OSS Distributions 	tcp_hdr = T;
141*42e22086SApple OSS Distributions };
142*42e22086SApple OSS Distributions 
143*42e22086SApple OSS Distributions /*
144*42e22086SApple OSS Distributions  * tcpsinfo contains stable TCP details from TCP control block
145*42e22086SApple OSS Distributions  */
146*42e22086SApple OSS Distributions typedef struct tcpsinfo {
147*42e22086SApple OSS Distributions 	int tcps_local;		/* is delivered locally, boolean */
148*42e22086SApple OSS Distributions 	int tcps_active;	/* active open, boolean */
149*42e22086SApple OSS Distributions 	string tcps_state;	/* TCP state, as a string */
150*42e22086SApple OSS Distributions 	u_int t_flags;		/* flags */
151*42e22086SApple OSS Distributions 	uint32_t rcv_nxt;	/* receive next */
152*42e22086SApple OSS Distributions 	uint32_t rcv_adv;	/* advertised window */
153*42e22086SApple OSS Distributions 	uint32_t rcv_wnd;	/* receive window */
154*42e22086SApple OSS Distributions 	uint32_t snd_wnd;	/* send window */
155*42e22086SApple OSS Distributions 	uint32_t snd_cwnd;	/* congestion controlled window */
156*42e22086SApple OSS Distributions 	uint32_t snd_ssthresh;	/* slow-start threshold */
157*42e22086SApple OSS Distributions 	uint32_t snd_una;	/* send unacknowledged */
158*42e22086SApple OSS Distributions 	uint32_t snd_nxt;	/* send next */
159*42e22086SApple OSS Distributions 	uint32_t snd_max;	/* send max */
160*42e22086SApple OSS Distributions 	uint32_t snd_recover;	/* send recover for NewReno */
161*42e22086SApple OSS Distributions 	int	t_rxtcur;	/* retransmit timeout in ms */
162*42e22086SApple OSS Distributions 	u_int	t_maxseg;	/* maximum segment size */
163*42e22086SApple OSS Distributions 	u_int	t_rttbest;	/* best rtt we have seen */
164*42e22086SApple OSS Distributions 	int	rcv_numsacks;	/* number of sack blocks present */
165*42e22086SApple OSS Distributions 	int	snd_numholes;	/* number of holes seen by sender */
166*42e22086SApple OSS Distributions 	struct tcpcb* tcpcb;	/* Pointer to tcp control block */
167*42e22086SApple OSS Distributions } tcpsinfo_t;
168*42e22086SApple OSS Distributions 
169*42e22086SApple OSS Distributions #pragma D binding "1.0" translator
170*42e22086SApple OSS Distributions translator tcpsinfo_t < struct tcpcb *T> {
171*42e22086SApple OSS Distributions 	tcps_local = 0;		/* Not used */
172*42e22086SApple OSS Distributions 	tcps_active = 0;
173*42e22086SApple OSS Distributions 	tcps_state = T ?
174*42e22086SApple OSS Distributions 		T->t_state == TCPS_CLOSED ? "state-closed" :
175*42e22086SApple OSS Distributions 		T->t_state == TCPS_LISTEN ? "state-listen" :
176*42e22086SApple OSS Distributions 		T->t_state == TCPS_SYN_SENT ? "state-syn-sent" :
177*42e22086SApple OSS Distributions 		T->t_state == TCPS_SYN_RECEIVED ? "state-syn-received" :
178*42e22086SApple OSS Distributions 		T->t_state == TCPS_ESTABLISHED ? "state-established" :
179*42e22086SApple OSS Distributions 		T->t_state == TCPS_CLOSE_WAIT ? "state-close-wait" :
180*42e22086SApple OSS Distributions 		T->t_state == TCPS_FIN_WAIT_1 ? "state-fin-wait1" :
181*42e22086SApple OSS Distributions 		T->t_state == TCPS_CLOSING ? "state-closing" :
182*42e22086SApple OSS Distributions 		T->t_state == TCPS_LAST_ACK ? "state-last-ack" :
183*42e22086SApple OSS Distributions 		T->t_state == TCPS_FIN_WAIT_2 ? "state-fin-wait2" :
184*42e22086SApple OSS Distributions 		T->t_state == TCPS_TIME_WAIT ? "state-time-wait" :
185*42e22086SApple OSS Distributions 		"<unknown>" : "<null>";
186*42e22086SApple OSS Distributions 	t_flags = T->t_flags;
187*42e22086SApple OSS Distributions 	rcv_nxt = T->rcv_nxt;
188*42e22086SApple OSS Distributions 	rcv_adv = T->rcv_adv;
189*42e22086SApple OSS Distributions 	rcv_wnd = T->rcv_wnd;
190*42e22086SApple OSS Distributions 	snd_wnd = T->snd_wnd;
191*42e22086SApple OSS Distributions 	snd_cwnd = T->snd_cwnd;
192*42e22086SApple OSS Distributions 	snd_ssthresh = T->snd_ssthresh;
193*42e22086SApple OSS Distributions 	snd_una = T->snd_una;
194*42e22086SApple OSS Distributions 	snd_nxt = T->snd_nxt;
195*42e22086SApple OSS Distributions 	snd_max = T->snd_max;
196*42e22086SApple OSS Distributions 	snd_recover = T->snd_recover;
197*42e22086SApple OSS Distributions 	t_rxtcur = T->t_rxtcur;
198*42e22086SApple OSS Distributions 	t_maxseg = T->t_maxseg;
199*42e22086SApple OSS Distributions 	t_rttbest = T->t_rttbest;
200*42e22086SApple OSS Distributions 	rcv_numsacks = T->rcv_numsacks;
201*42e22086SApple OSS Distributions 	snd_numholes = T->snd_numholes;
202*42e22086SApple OSS Distributions 	tcpcb = T;
203*42e22086SApple OSS Distributions };
204*42e22086SApple OSS Distributions 
205*42e22086SApple OSS Distributions /*
206*42e22086SApple OSS Distributions  * tcpnsinfo provides the new tcp state for state changes.
207*42e22086SApple OSS Distributions  */
208*42e22086SApple OSS Distributions typedef struct tcpnsinfo {
209*42e22086SApple OSS Distributions 	string tcps_state;	/* TCP state, as a string */
210*42e22086SApple OSS Distributions } tcpnsinfo_t;
211*42e22086SApple OSS Distributions 
212*42e22086SApple OSS Distributions #pragma D binding "1.0" translator
213*42e22086SApple OSS Distributions translator tcpnsinfo_t < int32_t I > {
214*42e22086SApple OSS Distributions 	tcps_state = I ?
215*42e22086SApple OSS Distributions 		I == TCPS_LISTEN ? "state-listen" :
216*42e22086SApple OSS Distributions 		I == TCPS_SYN_SENT ? "state-syn-sent" :
217*42e22086SApple OSS Distributions 		I == TCPS_SYN_RECEIVED ? "state-syn-received" :
218*42e22086SApple OSS Distributions 		I == TCPS_ESTABLISHED ? "state-established" :
219*42e22086SApple OSS Distributions 		I == TCPS_CLOSE_WAIT ? "state-close-wait" :
220*42e22086SApple OSS Distributions 		I == TCPS_FIN_WAIT_1 ? "state-fin-wait1" :
221*42e22086SApple OSS Distributions 		I == TCPS_CLOSING ? "state-closing" :
222*42e22086SApple OSS Distributions 		I == TCPS_LAST_ACK ? "state-last-ack" :
223*42e22086SApple OSS Distributions 		I == TCPS_FIN_WAIT_2 ? "state-fin-wait2" :
224*42e22086SApple OSS Distributions 		I == TCPS_TIME_WAIT ? "state-time-wait" :
225*42e22086SApple OSS Distributions 		"<unknown>" : "state-closed";
226*42e22086SApple OSS Distributions };
227*42e22086SApple OSS Distributions 
228*42e22086SApple OSS Distributions /*
229*42e22086SApple OSS Distributions  * tcpccevent provides the congestion control event for TCP cc probes
230*42e22086SApple OSS Distributions  */
231*42e22086SApple OSS Distributions typedef struct tcpccevent {
232*42e22086SApple OSS Distributions 	string tcp_cc;		/* TCP congestion control event, as a string */
233*42e22086SApple OSS Distributions } tcpccevent_t;
234*42e22086SApple OSS Distributions 
235*42e22086SApple OSS Distributions #pragma D binding "1.0" translator
236*42e22086SApple OSS Distributions translator tcpccevent_t < int32_t I > {
237*42e22086SApple OSS Distributions 	tcp_cc = I ?
238*42e22086SApple OSS Distributions 		I == TCP_CC_INSEQ_ACK_RCVD ? "inseq-ack-rcvd" :
239*42e22086SApple OSS Distributions 		I == TCP_CC_ACK_RCVD ? "ack-rcvd" :
240*42e22086SApple OSS Distributions 		I == TCP_CC_ENTER_FASTRECOVERY ? "enter-fastrecovery" :
241*42e22086SApple OSS Distributions 		I == TCP_CC_EXIT_FASTRECOVERY ? "exit-fastrecovery" :
242*42e22086SApple OSS Distributions 		I == TCP_CC_PARTIAL_ACK ? "partial-ack" :
243*42e22086SApple OSS Distributions 		I == TCP_CC_IDLE_TIMEOUT ? "idle-timeout" :
244*42e22086SApple OSS Distributions 		I == TCP_CC_REXMT_TIMEOUT ? "rexmt-timeout" :
245*42e22086SApple OSS Distributions 		I == TCP_CC_ECN_RCVD ? "ecn-rcvd" :
246*42e22086SApple OSS Distributions 		I == TCP_CC_BAD_REXMT_RECOVERY ? "bad-rexmt" :
247*42e22086SApple OSS Distributions 		I == TCP_CC_OUTPUT_ERROR ? "output-error" :
248*42e22086SApple OSS Distributions 		I == TCP_CC_CHANGE_ALGO ? "change-algo" :
249*42e22086SApple OSS Distributions 		I == TCP_CC_FLOW_CONTROL ? "flow-control" :
250*42e22086SApple OSS Distributions 		I == TCP_CC_SUSPEND ? "suspend" :
251*42e22086SApple OSS Distributions 		I == TCP_CC_LIMITED_TRANSMIT ? "limited-transmit" :
252*42e22086SApple OSS Distributions 		I == TCP_CC_EARLY_RETRANSMIT ? "early-rexmt" :
253*42e22086SApple OSS Distributions 		"<unknown>" : "cwnd-init";
254*42e22086SApple OSS Distributions };
255