/* device.c -- Interaction with Linux ethertap and tun/tap device Copyright (C) 2001-2002 Ivo Timmermans , 2001-2002 Guus Sliepen This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. $Id: device.c,v 1.1.2.14 2003/06/11 19:09:52 guus Exp $ */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #ifdef HAVE_TUNTAP #ifdef LINUX_IF_TUN_H #include LINUX_IF_TUN_H #else #include #endif #define DEFAULT_DEVICE "/dev/net/tun" #else #define DEFAULT_DEVICE "/dev/tap0" #endif #include #include "conf.h" #include "net.h" #include "subnet.h" #include "route.h" #include "system.h" enum { DEVICE_TYPE_ETHERTAP, DEVICE_TYPE_TUN, DEVICE_TYPE_TAP, }; int device_fd = -1; int device_type; char *device; char *interface; char ifrname[IFNAMSIZ]; char *device_info; int device_total_in = 0; int device_total_out = 0; extern subnet_t mymac; /* open the local ethertap device */ int setup_device(void) { struct ifreq ifr; cp(); if(!get_config_string(lookup_config(config_tree, "Device"), &device)) device = DEFAULT_DEVICE; if(!get_config_string(lookup_config(config_tree, "Interface"), &interface)) #ifdef HAVE_TUNTAP interface = netname; #else interface = rindex(device, '/') ? rindex(device, '/') + 1 : device; #endif device_fd = open(device, O_RDWR | O_NONBLOCK); if(device_fd < 0) { syslog(LOG_ERR, _("Could not open %s: %s"), device, strerror(errno)); return -1; } /* Set default MAC address for ethertap devices */ mymac.type = SUBNET_MAC; mymac.net.mac.address.x[0] = 0xfe; mymac.net.mac.address.x[1] = 0xfd; mymac.net.mac.address.x[2] = 0x00; mymac.net.mac.address.x[3] = 0x00; mymac.net.mac.address.x[4] = 0x00; mymac.net.mac.address.x[5] = 0x00; #ifdef HAVE_TUNTAP /* Ok now check if this is an old ethertap or a new tun/tap thingie */ memset(&ifr, 0, sizeof(ifr)); if(routing_mode == RMODE_ROUTER) { ifr.ifr_flags = IFF_TUN; device_type = DEVICE_TYPE_TUN; device_info = _("Linux tun/tap device (tun mode)"); } else { ifr.ifr_flags = IFF_TAP | IFF_NO_PI; device_type = DEVICE_TYPE_TAP; device_info = _("Linux tun/tap device (tap mode)"); } if(interface) strncpy(ifr.ifr_name, interface, IFNAMSIZ); if(!ioctl(device_fd, TUNSETIFF, (void *) &ifr)) { strncpy(ifrname, ifr.ifr_name, IFNAMSIZ); interface = ifrname; } else if(!ioctl(device_fd, (('T' << 8) | 202), (void *) &ifr)) { syslog(LOG_WARNING, _("Old ioctl() request was needed for %s"), device); strncpy(ifrname, ifr.ifr_name, IFNAMSIZ); interface = ifrname; } else #endif { device_info = _("Linux ethertap device"); device_type = DEVICE_TYPE_ETHERTAP; interface = rindex(device, '/') ? rindex(device, '/') + 1 : device; } syslog(LOG_INFO, _("%s is a %s"), device, device_info); return 0; } void close_device(void) { cp(); close(device_fd); } /* read, encrypt and send data that is available through the ethertap device */ int read_packet(vpn_packet_t *packet) { int lenin; cp(); switch(device_type) { case DEVICE_TYPE_TUN: lenin = read(device_fd, packet->data + 10, MTU - 10); if(lenin <= 0) { syslog(LOG_ERR, _("Error while reading from %s %s: %s"), device_info, device, strerror(errno)); return -1; } packet->len = lenin + 10; break; case DEVICE_TYPE_TAP: lenin = read(device_fd, packet->data, MTU); if(lenin <= 0) { syslog(LOG_ERR, _("Error while reading from %s %s: %s"), device_info, device, strerror(errno)); return -1; } packet->len = lenin; break; case DEVICE_TYPE_ETHERTAP: lenin = read(device_fd, packet->data - 2, MTU + 2); if(lenin <= 0) { syslog(LOG_ERR, _("Error while reading from %s %s: %s"), device_info, device, strerror(errno)); return -1; } packet->len = lenin - 2; break; } device_total_in += packet->len; if(debug_lvl >= DEBUG_TRAFFIC) { syslog(LOG_DEBUG, _("Read packet of %d bytes from %s"), packet->len, device_info); } return 0; } int write_packet(vpn_packet_t *packet) { cp(); if(debug_lvl >= DEBUG_TRAFFIC) syslog(LOG_DEBUG, _("Writing packet of %d bytes to %s"), packet->len, device_info); switch(device_type) { case DEVICE_TYPE_TUN: packet->data[10] = packet->data[11] = 0; if(write(device_fd, packet->data + 10, packet->len - 10) < 0) { syslog(LOG_ERR, _("Can't write to %s %s: %s"), device_info, device, strerror(errno)); return -1; } break; case DEVICE_TYPE_TAP: if(write(device_fd, packet->data, packet->len) < 0) { syslog(LOG_ERR, _("Can't write to %s %s: %s"), device_info, device, strerror(errno)); return -1; } break; case DEVICE_TYPE_ETHERTAP: *(short int *)(packet->data - 2) = packet->len; if(write(device_fd, packet->data - 2, packet->len + 2) < 0) { syslog(LOG_ERR, _("Can't write to %s %s: %s"), device_info, device, strerror(errno)); return -1; } break; } device_total_out += packet->len; return 0; } void dump_device_stats(void) { cp(); syslog(LOG_DEBUG, _("Statistics for %s %s:"), device_info, device); syslog(LOG_DEBUG, _(" total bytes in: %10d"), device_total_in); syslog(LOG_DEBUG, _(" total bytes out: %10d"), device_total_out); }