1*aca3beaaSApple OSS Distributions""" Please make sure you read the README COMPLETELY BEFORE reading anything below. 2*aca3beaaSApple OSS Distributions It is very critical that you read coding guidelines in Section E in README file. 3*aca3beaaSApple OSS Distributions""" 4*aca3beaaSApple OSS Distributionsfrom __future__ import absolute_import, print_function 5*aca3beaaSApple OSS Distributions 6*aca3beaaSApple OSS Distributionsfrom builtins import hex 7*aca3beaaSApple OSS Distributionsfrom xnu import * 8*aca3beaaSApple OSS Distributionsfrom utils import * 9*aca3beaaSApple OSS Distributionsfrom string import * 10*aca3beaaSApple OSS Distributionsfrom socket import * 11*aca3beaaSApple OSS Distributions 12*aca3beaaSApple OSS Distributionsimport xnudefines 13*aca3beaaSApple OSS Distributionsfrom netdefines import * 14*aca3beaaSApple OSS Distributionsfrom routedefines import * 15*aca3beaaSApple OSS Distributions 16*aca3beaaSApple OSS Distributionsdef ShowNstatTUShadow(inshadow): 17*aca3beaaSApple OSS Distributions """ Display summary for an nstat_tu_shadow struct 18*aca3beaaSApple OSS Distributions params: 19*aca3beaaSApple OSS Distributions inshadow : cvalue object which points to 'struct nstat_tu_shadow *' 20*aca3beaaSApple OSS Distributions """ 21*aca3beaaSApple OSS Distributions shad = Cast(inshadow, 'struct nstat_tu_shadow *') 22*aca3beaaSApple OSS Distributions procdetails = shad.shad_procdetails 23*aca3beaaSApple OSS Distributions out_string = "" 24*aca3beaaSApple OSS Distributions if shad : 25*aca3beaaSApple OSS Distributions format_string = "nstat_tu_shadow {0: <s}: next={1: <s} prev={2: <s} context (necp_client *)={3: <s} live={4: <d}" 26*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(shad), hex(shad.shad_link.tqe_next), hex(shad.shad_link.tqe_prev), hex(shad.shad_provider_context),shad.shad_live) 27*aca3beaaSApple OSS Distributions 28*aca3beaaSApple OSS Distributions magic = unsigned(shad.shad_magic) 29*aca3beaaSApple OSS Distributions if (magic != 0xfeedf00d) : 30*aca3beaaSApple OSS Distributions format_string = " INVALID shad magic {0: <s}" 31*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(magic)) 32*aca3beaaSApple OSS Distributions 33*aca3beaaSApple OSS Distributions if (procdetails) : 34*aca3beaaSApple OSS Distributions format_string = " --> procdetails {0: <s}: pid={1: <d} name={2: <s} numflows={3: <d}" 35*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(procdetails), procdetails.pdet_pid, procdetails.pdet_procname, procdetails.pdet_numflows) 36*aca3beaaSApple OSS Distributions 37*aca3beaaSApple OSS Distributions procmagic = unsigned(procdetails.pdet_magic) 38*aca3beaaSApple OSS Distributions if (procmagic != 0xfeedc001) : 39*aca3beaaSApple OSS Distributions format_string = " INVALID proc magic {0: <s}" 40*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(procmagic)) 41*aca3beaaSApple OSS Distributions 42*aca3beaaSApple OSS Distributions print(out_string) 43*aca3beaaSApple OSS Distributions 44*aca3beaaSApple OSS Distributionsdef GetNstatProcdetailsBrief(procdetails): 45*aca3beaaSApple OSS Distributions """ Display a brief summary for an nstat_procdetails struct 46*aca3beaaSApple OSS Distributions params: 47*aca3beaaSApple OSS Distributions procdetails : cvalue object which points to 'struct nstat_procdetails *' 48*aca3beaaSApple OSS Distributions returns: 49*aca3beaaSApple OSS Distributions str : A string describing various information for the nstat_procdetails structure 50*aca3beaaSApple OSS Distributions """ 51*aca3beaaSApple OSS Distributions procdetails = Cast(procdetails, 'struct nstat_procdetails *') 52*aca3beaaSApple OSS Distributions out_string = "" 53*aca3beaaSApple OSS Distributions if (procdetails) : 54*aca3beaaSApple OSS Distributions format_string = " --> pid={0: <d} name={1: <s} numflows={2: <d}" 55*aca3beaaSApple OSS Distributions out_string += format_string.format(procdetails.pdet_pid, procdetails.pdet_procname, procdetails.pdet_numflows) 56*aca3beaaSApple OSS Distributions 57*aca3beaaSApple OSS Distributions procmagic = unsigned(procdetails.pdet_magic) 58*aca3beaaSApple OSS Distributions if (procmagic != 0xfeedc001) : 59*aca3beaaSApple OSS Distributions format_string = " INVALID proc magic {0: <s}" 60*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(procmagic)) 61*aca3beaaSApple OSS Distributions 62*aca3beaaSApple OSS Distributions return out_string 63*aca3beaaSApple OSS Distributions 64*aca3beaaSApple OSS Distributionsdef ShowNstatProcdetails(procdetails): 65*aca3beaaSApple OSS Distributions """ Display a summary for an nstat_procdetails struct 66*aca3beaaSApple OSS Distributions params: 67*aca3beaaSApple OSS Distributions procdetails : cvalue object which points to 'struct nstat_procdetails *' 68*aca3beaaSApple OSS Distributions """ 69*aca3beaaSApple OSS Distributions procdetails = Cast(procdetails, 'struct nstat_procdetails *') 70*aca3beaaSApple OSS Distributions out_string = "" 71*aca3beaaSApple OSS Distributions if (procdetails) : 72*aca3beaaSApple OSS Distributions format_string = "nstat_procdetails: {0: <s} next={1: <s} prev={2: <s} " 73*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(procdetails), hex(procdetails.pdet_link.tqe_next), hex(procdetails.pdet_link.tqe_prev)) 74*aca3beaaSApple OSS Distributions out_string += GetNstatProcdetailsBrief(procdetails) 75*aca3beaaSApple OSS Distributions 76*aca3beaaSApple OSS Distributions print(out_string) 77*aca3beaaSApple OSS Distributions 78*aca3beaaSApple OSS Distributionsdef GetNstatTUShadowBrief(shadow): 79*aca3beaaSApple OSS Distributions """ Display a summary for an nstat_tu_shadow struct 80*aca3beaaSApple OSS Distributions params: 81*aca3beaaSApple OSS Distributions shadow : cvalue object which points to 'struct nstat_tu_shadow *' 82*aca3beaaSApple OSS Distributions returns: 83*aca3beaaSApple OSS Distributions str : A string describing various information for the nstat_tu_shadow structure 84*aca3beaaSApple OSS Distributions """ 85*aca3beaaSApple OSS Distributions out_string = "" 86*aca3beaaSApple OSS Distributions shad = Cast(shadow, 'struct nstat_tu_shadow *') 87*aca3beaaSApple OSS Distributions procdetails = shad.shad_procdetails 88*aca3beaaSApple OSS Distributions procdetails = Cast(procdetails, 'struct nstat_procdetails *') 89*aca3beaaSApple OSS Distributions out_string = "" 90*aca3beaaSApple OSS Distributions if shad : 91*aca3beaaSApple OSS Distributions format_string = " shadow {0: <s}: necp_client ={1: <s} live={2: <d}" 92*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(shad),hex(shad.shad_provider_context),shad.shad_live) 93*aca3beaaSApple OSS Distributions magic = unsigned(shad.shad_magic) 94*aca3beaaSApple OSS Distributions if (magic != 0xfeedf00d) : 95*aca3beaaSApple OSS Distributions format_string = " INVALID shad magic {0: <s}" 96*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(magic)) 97*aca3beaaSApple OSS Distributions elif (procdetails) : 98*aca3beaaSApple OSS Distributions out_string += GetNstatProcdetailsBrief(procdetails) 99*aca3beaaSApple OSS Distributions 100*aca3beaaSApple OSS Distributions return out_string 101*aca3beaaSApple OSS Distributions 102*aca3beaaSApple OSS Distributionsdef ShowNstatSrc(insrc): 103*aca3beaaSApple OSS Distributions """ Display summary for an nstat_src struct 104*aca3beaaSApple OSS Distributions params: 105*aca3beaaSApple OSS Distributions insrc : cvalue object which points to 'struct nstat_src *' 106*aca3beaaSApple OSS Distributions """ 107*aca3beaaSApple OSS Distributions src = Cast(insrc, 'nstat_src *') 108*aca3beaaSApple OSS Distributions prov = src.provider 109*aca3beaaSApple OSS Distributions prov = Cast(prov, 'nstat_provider *') 110*aca3beaaSApple OSS Distributions prov_string = "?" 111*aca3beaaSApple OSS Distributions if (prov.nstat_provider_id == 2): 112*aca3beaaSApple OSS Distributions prov_string = "TCP k" 113*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 3): 114*aca3beaaSApple OSS Distributions prov_string = "TCP u" 115*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 4): 116*aca3beaaSApple OSS Distributions prov_string = "UDP k" 117*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 5): 118*aca3beaaSApple OSS Distributions prov_string = "UDP u" 119*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 1): 120*aca3beaaSApple OSS Distributions prov_string = "Route" 121*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 6): 122*aca3beaaSApple OSS Distributions prov_string = "ifnet" 123*aca3beaaSApple OSS Distributions elif (prov.nstat_provider_id == 7): 124*aca3beaaSApple OSS Distributions prov_string = "sysinfo" 125*aca3beaaSApple OSS Distributions else: 126*aca3beaaSApple OSS Distributions prov_string = "unknown-provider" 127*aca3beaaSApple OSS Distributions 128*aca3beaaSApple OSS Distributions out_string = "" 129*aca3beaaSApple OSS Distributions if src : 130*aca3beaaSApple OSS Distributions format_string = " nstat_src {0: <s}: prov={1: <s} next={2: <s} prev={3: <s} ref={4: <d}" 131*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(src), prov_string, hex(src.ns_control_link.tqe_next), hex(src.ns_control_link.tqe_prev), src.srcref) 132*aca3beaaSApple OSS Distributions 133*aca3beaaSApple OSS Distributions if (prov.nstat_provider_id == 3): 134*aca3beaaSApple OSS Distributions out_string += GetNstatTUShadowBrief(src.cookie); 135*aca3beaaSApple OSS Distributions 136*aca3beaaSApple OSS Distributions print(out_string) 137*aca3beaaSApple OSS Distributions 138*aca3beaaSApple OSS Distributionsdef ShowNstatCtrl(inctrl): 139*aca3beaaSApple OSS Distributions """ Display an nstat_control_state struct 140*aca3beaaSApple OSS Distributions params: 141*aca3beaaSApple OSS Distributions ctrl : value object representing an nstat_control_state in the kernel 142*aca3beaaSApple OSS Distributions """ 143*aca3beaaSApple OSS Distributions ctrl = Cast(inctrl, 'nstat_control_state *') 144*aca3beaaSApple OSS Distributions out_string = "" 145*aca3beaaSApple OSS Distributions if ctrl : 146*aca3beaaSApple OSS Distributions format_string = "nstat_control_state {0: <s}: next={1: <s} src head={2: <s} tail={3: <s}" 147*aca3beaaSApple OSS Distributions out_string += format_string.format(hex(ctrl), hex(ctrl.ncs_next), hex(ctrl.ncs_src_queue.tqh_first), hex(ctrl.ncs_src_queue.tqh_last)) 148*aca3beaaSApple OSS Distributions 149*aca3beaaSApple OSS Distributions print(out_string) 150*aca3beaaSApple OSS Distributions 151*aca3beaaSApple OSS Distributions for src in IterateTAILQ_HEAD(ctrl.ncs_src_queue, 'ns_control_link'): 152*aca3beaaSApple OSS Distributions ShowNstatSrc(src) 153*aca3beaaSApple OSS Distributions 154*aca3beaaSApple OSS Distributions# Macro: showallntstat 155*aca3beaaSApple OSS Distributions 156*aca3beaaSApple OSS Distributions@lldb_command('showallntstat') 157*aca3beaaSApple OSS Distributionsdef ShowAllNtstat(cmd_args=None) : 158*aca3beaaSApple OSS Distributions """ Show the contents of various ntstat (network statistics) data structures 159*aca3beaaSApple OSS Distributions """ 160*aca3beaaSApple OSS Distributions print("nstat_controls list:\n") 161*aca3beaaSApple OSS Distributions ctrl = kern.globals.nstat_controls 162*aca3beaaSApple OSS Distributions ctrl = cast(ctrl, 'nstat_control_state *') 163*aca3beaaSApple OSS Distributions while ctrl != 0: 164*aca3beaaSApple OSS Distributions ShowNstatCtrl(ctrl) 165*aca3beaaSApple OSS Distributions ctrl = cast(ctrl.ncs_next, 'nstat_control_state *') 166*aca3beaaSApple OSS Distributions 167*aca3beaaSApple OSS Distributions print("\nnstat_userprot_shad list:\n") 168*aca3beaaSApple OSS Distributions shadows = kern.globals.nstat_userprot_shad_head 169*aca3beaaSApple OSS Distributions for shad in IterateTAILQ_HEAD(shadows, 'shad_link'): 170*aca3beaaSApple OSS Distributions ShowNstatTUShadow(shad) 171*aca3beaaSApple OSS Distributions 172*aca3beaaSApple OSS Distributions print("\nnstat_procdetails list:\n") 173*aca3beaaSApple OSS Distributions procdetails_head = kern.globals.nstat_procdetails_head 174*aca3beaaSApple OSS Distributions for procdetails in IterateTAILQ_HEAD(procdetails_head, 'pdet_link'): 175*aca3beaaSApple OSS Distributions ShowNstatProcdetails(procdetails) 176*aca3beaaSApple OSS Distributions 177*aca3beaaSApple OSS Distributions# EndMacro: showallntstat 178