errx(1, ipsec_strerror());
errx(1, "%s", ipsec_strerror());
main(argc, argv)	int argc;	char *argv[];{	struct hostent *hp;	int error;	struct addrinfo hints, *res;	int ch, i, on, probe, seq, hops, rcvcmsglen;	static u_char *rcvcmsgbuf;	char hbuf[NI_MAXHOST], src0[NI_MAXHOST];	/*	 * Receive ICMP	 */	if ((rcvsock = socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6)) < 0) {		perror("socket(ICMPv6)");		exit(5);	}	/* set a minimum set of socket options */	on = 1;	/* specify to tell receiving interface */#ifdef IPV6_RECVPKTINFO	if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_RECVPKTINFO, &on,		       sizeof(on)) < 0)		err(1, "setsockopt(IPV6_RECVPKTINFO)");#else  /* old adv. API */	if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_PKTINFO, &on,		       sizeof(on)) < 0)		err(1, "setsockopt(IPV6_PKTINFO)");#endif	/* specify to tell value of hoplimit field of received IP6 hdr */#ifdef IPV6_RECVHOPLIMIT	if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on,		       sizeof(on)) < 0)		err(1, "setsockopt(IPV6_RECVHOPLIMIT)");#else  /* old adv. API */	if (setsockopt(rcvsock, IPPROTO_IPV6, IPV6_HOPLIMIT, &on,		       sizeof(on)) < 0)		err(1, "setsockopt(IPV6_HOPLIMIT)");#endif	/* revoke privs */	seteuid(getuid());	setuid(getuid());	seq = 0;		while ((ch = getopt(argc, argv, "df:g:lm:np:q:rs:w:v")) != EOF)		switch(ch) {		case 'd':			options |= SO_DEBUG;			break;		case 'f':			first_hop = atoi(optarg);			if (first_hop > max_hops) {				Fprintf(stderr,				    "traceroute6: min hoplimit must be <= %d.\n", max_hops);				exit(1);			}			break;		case 'g':			hp = getipnodebyname(optarg, AF_INET6, 0, &h_errno);			if (hp == NULL) {				Fprintf(stderr,				    "traceroute6: unknown host %s\n", optarg);				exit(1);			}#ifdef USE_RFC2292BIS			if (rth == NULL) {				/*				 * XXX: We can't detect the number of				 * intermediate nodes yet.				 */				if ((rth = inet6_rth_init((void *)rtbuf,							 sizeof(rtbuf),							 IPV6_RTHDR_TYPE_0,							 0)) == NULL) {					Fprintf(stderr,						"inet6_rth_init failed.\n");					exit(1);				}			}			if (inet6_rth_add((void *)rth,					  (struct in6_addr *)hp->h_addr)) {				Fprintf(stderr,					"inet6_rth_add failed for %s\n",					optarg);				exit(1);			}#else  /* old advanced API */			if (cmsg == NULL)				cmsg = inet6_rthdr_init(rtbuf, IPV6_RTHDR_TYPE_0);			inet6_rthdr_add(cmsg, (struct in6_addr *)hp->h_addr, IPV6_RTHDR_LOOSE);#endif			freehostent(hp);			break;		case 'l':			lflag++;			break;		case 'm':			max_hops = atoi(optarg);			if (max_hops < first_hop) {				Fprintf(stderr,				    "traceroute6: max hoplimit must be >= %d.\n", first_hop);				exit(1);			}			break;		case 'n':			nflag++;			break;		case 'p':			port = atoi(optarg);			if (port < 1) {				Fprintf(stderr,				    "traceroute6: port must be >0.\n");				exit(1);			}			break;		case 'q':			nprobes = atoi(optarg);			if (nprobes < 1) {				Fprintf(stderr,				    "traceroute6: nprobes must be >0.\n");				exit(1);			}			break;		case 'r':			options |= SO_DONTROUTE;			break;		case 's':			/*			 * set the ip source address of the outbound			 * probe (e.g., on a multi-homed host).			 */			source = optarg;			break;		case 'v':			verbose++;			break;		case 'w':			waittime = atoi(optarg);			if (waittime <= 1) {				Fprintf(stderr,				    "traceroute6: wait must be >1 sec.\n");				exit(1);			}			break;		default:			usage();		}	argc -= optind;	argv += optind;	if (argc < 1)		usage();#if 1	setvbuf(stdout, NULL, _IOLBF, BUFSIZ);#else	setlinebuf (stdout);#endif	memset(&hints, 0, sizeof(hints));	hints.ai_family = PF_INET6;	hints.ai_socktype = SOCK_RAW;	hints.ai_protocol = IPPROTO_ICMPV6;	hints.ai_flags = AI_CANONNAME;	error = getaddrinfo(*argv, NULL, &hints, &res);	if (error) {		(void)fprintf(stderr,			      "traceroute6: %s\n", gai_strerror(error));		exit(1);	}	if (res->ai_addrlen != sizeof(Dst)) {		(void)fprintf(stderr,			      "traceroute6: size of sockaddr mismatch\n");		exit(1);	}	memcpy(&Dst, res->ai_addr, res->ai_addrlen);	hostname = res->ai_canonname ? strdup(res->ai_canonname) : *argv;	if (*++argv)		datalen = atoi(*argv);	if (datalen < 0 || datalen >= MAXPACKET - sizeof(struct opacket)) {		Fprintf(stderr,		    "traceroute6: packet size must be 0 <= s < %ld.\n",		    (long)(MAXPACKET - sizeof(struct opacket)));		exit(1);	}	datalen += sizeof(struct opacket);	outpacket = (struct opacket *)malloc((unsigned)datalen);	if (! outpacket) {		perror("malloc");		exit(1);	}	(void) bzero((char *)outpacket, datalen);	/* initialize msghdr for receiving packets */	rcviov[0].iov_base = (caddr_t)packet;	rcviov[0].iov_len = sizeof(packet);	rcvmhdr.msg_name = (caddr_t)&Rcv;	rcvmhdr.msg_namelen = sizeof(Rcv);	rcvmhdr.msg_iov = rcviov;	rcvmhdr.msg_iovlen = 1;	rcvcmsglen = CMSG_SPACE(sizeof(struct in6_pktinfo))		+ CMSG_SPACE(sizeof(int));	if ((rcvcmsgbuf = malloc(rcvcmsglen)) == NULL) {		Fprintf(stderr, "traceroute6: malloc failed\n");		exit(1);	}	rcvmhdr.msg_control = (caddr_t) rcvcmsgbuf;	rcvmhdr.msg_controllen = rcvcmsglen;	if (options & SO_DEBUG)		(void) setsockopt(rcvsock, SOL_SOCKET, SO_DEBUG,				  (char *)&on, sizeof(on));	if (options & SO_DONTROUTE)		(void) setsockopt(rcvsock, SOL_SOCKET, SO_DONTROUTE,				  (char *)&on, sizeof(on));#ifdef IPSEC#ifdef IPSEC_POLICY_IPSEC	/*	 * do not raise error even if setsockopt fails, kernel may have ipsec	 * turned off.	 */	if (setpolicy(rcvsock, "in bypass") < 0)		errx(1, ipsec_strerror());	if (setpolicy(rcvsock, "out bypass") < 0)		errx(1, ipsec_strerror());#else    {	int level = IPSEC_LEVEL_NONE;	(void)setsockopt(rcvsock, IPPROTO_IPV6, IPV6_ESP_TRANS_LEVEL, &level,		sizeof(level));	(void)setsockopt(rcvsock, IPPROTO_IPV6, IPV6_ESP_NETWORK_LEVEL, &level,		sizeof(level));#ifdef IP_AUTH_TRANS_LEVEL	(void)setsockopt(rcvsock, IPPROTO_IPV6, IPV6_AUTH_TRANS_LEVEL, &level,		sizeof(level));#else	(void)setsockopt(rcvsock, IPPROTO_IPV6, IPV6_AUTH_LEVEL, &level,		sizeof(level));#endif#ifdef IP_AUTH_NETWORK_LEVEL	(void)setsockopt(rcvsock, IPPROTO_IPV6, IPV6_AUTH_NETWORK_LEVEL, &level,		sizeof(level));#endif    }#endif /*IPSEC_POLICY_IPSEC*/#endif /*IPSEC*/	/*	 * Send UDP	 */	if ((sndsock = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) {		perror("socket(SOCK_DGRAM)");		exit(5);	}#ifdef SO_SNDBUF	if (setsockopt(sndsock, SOL_SOCKET, SO_SNDBUF, (char *)&datalen,		       sizeof(datalen)) < 0) {		perror("setsockopt(SO_SNDBUF)");		exit(6);	}#endif /* SO_SNDBUF */	if (options & SO_DEBUG)		(void) setsockopt(sndsock, SOL_SOCKET, SO_DEBUG,				  (char *)&on, sizeof(on));	if (options & SO_DONTROUTE)		(void) setsockopt(sndsock, SOL_SOCKET, SO_DONTROUTE,				  (char *)&on, sizeof(on));#ifdef USE_RFC2292BIS	if (rth) {/* XXX: there is no library to finalize the header... */		rth->ip6r_len = rth->ip6r_segleft * 2;		if (setsockopt(sndsock, IPPROTO_IPV6, IPV6_RTHDR,			       (void *)rth, (rth->ip6r_len + 1) << 3)) {			Fprintf(stderr, "setsockopt(IPV6_RTHDR): %s\n",				strerror(errno));			exit(1);		}	}#else  /* old advanced API */	if (cmsg != NULL) {		inet6_rthdr_lasthop(cmsg, IPV6_RTHDR_LOOSE);		if (setsockopt(sndsock, IPPROTO_IPV6, IPV6_PKTOPTIONS,			       rtbuf, cmsg->cmsg_len) < 0) {			Fprintf(stderr, "setsockopt(IPV6_PKTOPTIONS): %s\n",				strerror(errno));			exit(1);		}	}#endif /* USE_RFC2292BIS */#ifdef IPSEC#ifdef IPSEC_POLICY_IPSEC	/*	 * do not raise error even if setsockopt fails, kernel may have ipsec	 * turned off.	 */	if (setpolicy(sndsock, "in bypass") < 0)		errx(1, ipsec_strerror());	if (setpolicy(sndsock, "out bypass") < 0)		errx(1, ipsec_strerror());#else    {	int level = IPSEC_LEVEL_BYPASS;	(void)setsockopt(sndsock, IPPROTO_IPV6, IPV6_ESP_TRANS_LEVEL, &level,		sizeof(level));	(void)setsockopt(sndsock, IPPROTO_IPV6, IPV6_ESP_NETWORK_LEVEL, &level,		sizeof(level));#ifdef IP_AUTH_TRANS_LEVEL	(void)setsockopt(sndsock, IPPROTO_IPV6, IPV6_AUTH_TRANS_LEVEL, &level,		sizeof(level));#else	(void)setsockopt(sndsock, IPPROTO_IPV6, IPV6_AUTH_LEVEL, &level,		sizeof(level));#endif#ifdef IP_AUTH_NETWORK_LEVEL	(void)setsockopt(sndsock, IPPROTO_IPV6, IPV6_AUTH_NETWORK_LEVEL, &level,		sizeof(level));#endif    }#endif /*IPSEC_POLICY_IPSEC*/#endif /*IPSEC*/	/*	 * Source selection	 */	bzero(&Src, sizeof(Src));	if (source) {		struct addrinfo hints, *res;		int error;		memset(&hints, 0, sizeof(hints));		hints.ai_family = AF_INET6;		hints.ai_socktype = SOCK_DGRAM;	/*dummy*/		hints.ai_flags = AI_NUMERICHOST;		error = getaddrinfo(source, "0", &hints, &res);		if (error) {			Printf("traceroute6: %s: %s\n", source,			    gai_strerror(error));			exit(1);		}		if (res->ai_addrlen > sizeof(Src)) {			Printf("traceroute6: %s: %s\n", source,			    gai_strerror(error));			exit(1);		}		memcpy(&Src, res->ai_addr, res->ai_addrlen);		freeaddrinfo(res);	} else {		struct sockaddr_in6 Nxt;		int dummy, len;		Nxt = Dst;		Nxt.sin6_port = htons(DUMMY_PORT);		if (cmsg != NULL)			bcopy(inet6_rthdr_getaddr(cmsg, 1), &Nxt.sin6_addr,			      sizeof(Nxt.sin6_addr));		if ((dummy = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) {			perror("socket");			exit(1);		}		if (connect(dummy, (struct sockaddr *)&Nxt, Nxt.sin6_len) < 0) {			perror("connect");			exit(1);		}		len = sizeof(Src);		if (getsockname(dummy, (struct sockaddr *)&Src, &len) < 0) {			perror("getsockname");			exit(1);		}		if (getnameinfo((struct sockaddr *)&Src, Src.sin6_len,				src0, sizeof(src0), NULL, 0,				NI_NUMERICHOST | niflag)) {			Fprintf(stderr, "getnameinfo failed for source\n");			exit(1);		}		source = src0;		close(dummy);	}#if 1	ident = (getpid() & 0xffff) | 0x8000;#else	ident = 0;	/*let the kernel pick one*/#endif	Src.sin6_port = htons(ident);	if (bind(sndsock, (struct sockaddr *)&Src, Src.sin6_len) < 0) {		perror("bind");		exit(1);	}	if (ident == 0) {		int len;		len = sizeof(Src);		if (getsockname(sndsock, (struct sockaddr *)&Src, &i) < 0) {			perror("getsockname");			exit(1);		}		ident = ntohs(Src.sin6_port);	}	/*	 * Message to users	 */	if (getnameinfo((struct sockaddr *)&Dst, Dst.sin6_len, hbuf,			sizeof(hbuf), NULL, 0, NI_NUMERICHOST | niflag))		strcpy(hbuf, "(invalid)");	Fprintf(stderr, "traceroute6");	Fprintf(stderr, " to %s (%s)", hostname, hbuf);	if (source)		Fprintf(stderr, " from %s", source);	Fprintf(stderr,		", %d hops max, %d byte packets\n",		max_hops, datalen);	(void) fflush(stderr);	if (first_hop > 1)		Printf("Skipping %d intermediate hops\n", first_hop - 1);	/*	 * Main loop	 */	for (hops = first_hop; hops <= max_hops; ++hops) {		struct in6_addr lastaddr;		int got_there = 0;		int unreachable = 0;		Printf("%2d ", hops);		bzero(&lastaddr, sizeof(lastaddr));		for (probe = 0; probe < nprobes; ++probe) {			int cc;			struct timeval t1, t2;			struct timezone tz;			(void) gettimeofday(&t1, &tz);			send_probe(++seq, hops);			while ((cc = wait_for_reply(rcvsock, &rcvmhdr))) {				(void) gettimeofday(&t2, &tz);				if ((i = packet_ok(&rcvmhdr, cc, seq))) {					if (! IN6_ARE_ADDR_EQUAL(&Rcv.sin6_addr,							    &lastaddr)) {						print(&rcvmhdr, cc);						lastaddr = Rcv.sin6_addr;					}					Printf("  %g ms", deltaT(&t1, &t2));					switch(i - 1) {					case ICMP6_DST_UNREACH_NOROUTE:						++unreachable;						Printf(" !N");						break;					case ICMP6_DST_UNREACH_ADMIN:						++unreachable;						Printf(" !P");						break;					case ICMP6_DST_UNREACH_NOTNEIGHBOR:						++unreachable;						Printf(" !S");						break;					case ICMP6_DST_UNREACH_ADDR:						++unreachable;						Printf(" !A");						break;					case ICMP6_DST_UNREACH_NOPORT:						if (rcvhlim >= 0 &&						    rcvhlim <= 1)							Printf(" !");						++got_there;						break;					}					break;				}			}			if (cc == 0)				Printf(" *");			(void) fflush(stdout);		}		putchar('\n');		if (got_there ||		    (unreachable > 0 && unreachable >= ((nprobes + 1) / 2))) {			exit(0);		}	}	exit(0);}