errx(1, ipsec_strerror());
errx(1, "%s", ipsec_strerror());
main(argc, argv)	int argc;	char *argv[];{#if defined(__FreeBSD__) && __FreeBSD__ < 3	extern int optind;	extern char *optarg;#endif	struct itimerval itimer;	struct sockaddr_in6 from;	struct timeval timeout;	struct addrinfo hints;	fd_set fdset;	register int cc, i;	int ch, fromlen, hold, packlen, preload, optval, ret_ga;	u_char *datap, *packet;	char *e, *target, *ifname = NULL;	int ip6optlen = 0;	struct cmsghdr *scmsgp = NULL;	int sockbufsize = 0;	int usepktinfo = 0;	struct in6_pktinfo *pktinfo = NULL;#ifdef USE_RFC2292BIS	struct ip6_rthdr *rthdr = NULL;#endif#ifdef IPSEC_POLICY_IPSEC	char *policy_in = NULL;	char *policy_out = NULL;#endif	/* just to be sure */	memset(&smsghdr, 0, sizeof(&smsghdr));	memset(&smsgiov, 0, sizeof(&smsgiov));	preload = 0;	datap = &outpack[ICMP6ECHOLEN + ICMP6ECHOTMLEN];#ifndef IPSEC	while ((ch = getopt(argc, argv, "a:b:c:dfHh:I:i:l:nNp:qRS:s:vwW")) != -1)#else#ifdef IPSEC_POLICY_IPSEC	while ((ch = getopt(argc, argv, "a:b:c:dfHh:I:i:l:nNp:qRS:s:vwWP:")) != -1)#else	while ((ch = getopt(argc, argv, "a:b:c:dfHh:I:i:l:nNp:qRS:s:vwWAE")) != -1)#endif /*IPSEC_POLICY_IPSEC*/#endif	{		switch(ch) {		 case 'a':		 {			 char *cp;			 options |= F_NODEADDR;			 datalen = 2048; /* XXX: enough? */			 for (cp = optarg; *cp != '\0'; cp++) {				 switch(*cp) {				 case 'a':					 naflags |= NI_NODEADDR_FLAG_ALL;					 break;				 case 'c':				 case 'C':					 naflags |= NI_NODEADDR_FLAG_COMPAT;					 break;				 case 'l':				 case 'L':					 naflags |= NI_NODEADDR_FLAG_LINKLOCAL;					 break;				 case 's':				 case 'S':					 naflags |= NI_NODEADDR_FLAG_SITELOCAL;					 break;				 case 'g':				 case 'G':					 naflags |= NI_NODEADDR_FLAG_GLOBAL;					 break;				 case 'A': /* experimental. not in the spec */					 naflags |= NI_NODEADDR_FLAG_ANYCAST;					 break;				 default:					 usage();					 /*NOTREACHED*/				 }			 }			 break;		 }		 case 'b':#if defined(SO_SNDBUF) && defined(SO_RCVBUF)			sockbufsize = atoi(optarg);#else			err(1,"-b option ignored: SO_SNDBUF/SO_RCVBUF socket options not supported");#endif			break;		case 'c':			npackets = strtol(optarg, &e, 10);			if (npackets <= 0 || *optarg == '\0' || *e != '\0')				errx(1,				    "illegal number of packets -- %s", optarg);			break;		case 'd':			options |= F_SO_DEBUG;			break;		case 'f':			if (getuid()) {				errno = EPERM;				errx(1, "Must be superuser to flood ping");			}			options |= F_FLOOD;			setbuf(stdout, (char *)NULL);			break;		case 'H':			options |= F_HOSTNAME;			break;		case 'h':		/* hoplimit */			hoplimit = strtol(optarg, &e, 10);			if (255 < hoplimit || hoplimit < -1)				errx(1,				    "illegal hoplimit -- %s", optarg);			break;		case 'I':			ifname = optarg;			options |= F_INTERFACE;#ifndef USE_SIN6_SCOPE_ID			usepktinfo++;#endif			break;		case 'i':		/* wait between sending packets */			interval = strtod(optarg, NULL);			if (interval <= 0 || interval >= INT_MAX)				errx(1, "bad timing interval: %s", optarg);			if (interval < 1)				if (getuid())					errx(1, "%s: only root may use interval < 1s", strerror(EPERM));			if (interval < 0.01)				interval = 0.01;			options |= F_INTERVAL;			break;		case 'l':			if (getuid()) {				errno = EPERM;				errx(1, "Must be superuser to preload");			}			preload = strtol(optarg, &e, 10);			if (preload < 0 || *optarg == '\0' || *e != '\0')				errx(1, "illegal preload value -- %s", optarg);			break;		case 'n':			options |= F_NUMERIC;			break;		case 'N':			options |= F_NIGROUP;			break;		case 'p':		/* fill buffer with user pattern */			options |= F_PINGFILLED;			fill((char *)datap, optarg);				break;		case 'q':			options |= F_QUIET;			break;		case 'R':#ifdef IPV6_REACHCONF			options |= F_REACHCONF;			break;#else			errx(1, "-R is not supported in this configuration");#endif		case 'S':			/* XXX: use getaddrinfo? */			if (inet_pton(AF_INET6, optarg, (void *)&srcaddr) != 1)				errx(1, "invalid IPv6 address: %s", optarg);			options |= F_SRCADDR;			usepktinfo++;			break;		case 's':		/* size of packet to send */			datalen = strtol(optarg, &e, 10);			if (datalen <= 0 || *optarg == '\0' || *e != '\0')				errx(1, "illegal datalen value -- %s", optarg);			if (datalen > MAXDATALEN)				errx(1,				    "datalen value too large, maximum is %d",				    MAXDATALEN);			break;		case 'v':			options |= F_VERBOSE;			break;		case 'w':			options |= F_FQDN;			break;		case 'W':			options |= F_FQDNOLD;			break;#ifdef IPSEC#ifdef IPSEC_POLICY_IPSEC		case 'P':			options |= F_POLICY;			if (!strncmp("in", optarg, 2))				policy_in = strdup(optarg);			else if (!strncmp("out", optarg, 3))				policy_out = strdup(optarg);			else				errx(1, "invalid security policy");			break;#else		case 'A':			options |= F_AUTHHDR;			break;		case 'E':			options |= F_ENCRYPT;			break;#endif /*IPSEC_POLICY_IPSEC*/#endif /*IPSEC*/		default:			usage();			/*NOTREACHED*/		}	}	argc -= optind;	argv += optind;	if (argc < 1) {		usage();		/*NOTREACHED*/	}	if (argc > 1) {#ifdef USE_SIN6_SCOPE_ID		ip6optlen += CMSG_SPACE(inet6_rth_space(IPV6_RTHDR_TYPE_0, argc - 1));#else  /* old advanced API */		ip6optlen += inet6_rthdr_space(IPV6_RTHDR_TYPE_0, argc - 1);#endif	}	if (options & F_NIGROUP) {		target = nigroup(argv[argc - 1]);		if (target == NULL) {			usage();			/*NOTREACHED*/		}	} else		target = argv[argc - 1];	/* getaddrinfo */	bzero(&hints, sizeof(struct addrinfo));	if ((options & F_NUMERIC) != 0)		hints.ai_flags = AI_CANONNAME;	hints.ai_family = AF_INET6;	hints.ai_socktype = SOCK_RAW;	hints.ai_protocol = IPPROTO_ICMPV6;	ret_ga = getaddrinfo(target, NULL, &hints, &res);	if (ret_ga) {		fprintf(stderr, "ping6: %s\n", gai_strerror(ret_ga));		exit(1);	}	if (res->ai_canonname)		hostname = res->ai_canonname;	else		hostname = target;			if (!res->ai_addr)		errx(1, "getaddrinfo failed");	(void)memcpy(&dst, res->ai_addr, res->ai_addrlen);	if (options & F_FLOOD && options & F_INTERVAL)		errx(1, "-f and -i incompatible options");	if (datalen >= sizeof(struct timeval))	/* can we time transfer */		timing = 1;	packlen = datalen + IP6LEN + ICMP6ECHOLEN + EXTRA;	if (!(packet = (u_char *)malloc((u_int)packlen)))		err(1, "Unable to allocate packet");	if (!(options & F_PINGFILLED))		for (i = 8; i < datalen; ++i)			*datap++ = i;	ident = getpid() & 0xFFFF;	if ((s = socket(res->ai_family, res->ai_socktype, res->ai_protocol)) < 0)	  err(1, "socket");	hold = 1;	if (options & F_SO_DEBUG)		(void)setsockopt(s, SOL_SOCKET, SO_DEBUG, (char *)&hold,		    sizeof(hold));	optval = IPV6_DEFHLIM;	if (IN6_IS_ADDR_MULTICAST(&dst.sin6_addr))		if (setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_HOPS,			       &optval, sizeof(optval)) == -1)			err(1, "IPV6_MULTICAST_HOPS");#ifdef IPSEC#ifdef IPSEC_POLICY_IPSEC	if (options & F_POLICY) {		if (setpolicy(s, policy_in) < 0)			errx(1, ipsec_strerror());		if (setpolicy(s, policy_out) < 0)			errx(1, ipsec_strerror());	}#else	if (options & F_AUTHHDR) {		optval = IPSEC_LEVEL_REQUIRE;#ifdef IPV6_AUTH_TRANS_LEVEL		if (setsockopt(s, IPPROTO_IPV6, IPV6_AUTH_TRANS_LEVEL,				&optval, sizeof(optval)) == -1)			err(1, "setsockopt(IPV6_AUTH_TRANS_LEVEL)");#else /* old def */		if (setsockopt(s, IPPROTO_IPV6, IPV6_AUTH_LEVEL,				&optval, sizeof(optval)) == -1)			err(1, "setsockopt(IPV6_AUTH_LEVEL)");#endif	}	if (options & F_ENCRYPT) {		optval = IPSEC_LEVEL_REQUIRE;		if (setsockopt(s, IPPROTO_IPV6, IPV6_ESP_TRANS_LEVEL,				&optval, sizeof(optval)) == -1)			err(1, "setsockopt(IPV6_ESP_TRANS_LEVEL)");	}#endif /*IPSEC_POLICY_IPSEC*/#endif#ifdef ICMP6_FILTER    {	struct icmp6_filter filt;	if (!(options & F_VERBOSE)) {		ICMP6_FILTER_SETBLOCKALL(&filt);		if ((options & F_FQDN) || (options & F_FQDNOLD) ||		    (options & F_NODEADDR))			ICMP6_FILTER_SETPASS(ICMP6_NI_REPLY, &filt);		else			ICMP6_FILTER_SETPASS(ICMP6_ECHO_REPLY, &filt);	} else {		ICMP6_FILTER_SETPASSALL(&filt);	}	if (setsockopt(s, IPPROTO_ICMPV6, ICMP6_FILTER, &filt,			sizeof(filt)) < 0)		err(1, "setsockopt(ICMP6_FILTER)");    }#endif /*ICMP6_FILTER*/	/* let the kerel pass extension headers of incoming packets */	/* TODO: implement parsing routine */	if ((options & F_VERBOSE) != 0) {		int opton = 1;#ifdef IPV6_RECVRTHDR		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVRTHDR, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_RECVRTHDR)");#else  /* old adv. API */		if (setsockopt(s, IPPROTO_IPV6, IPV6_RTHDR, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_RTHDR)");#endif#ifdef IPV6_RECVHOPOPTS		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVHOPOPTS, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_RECVHOPOPTS)");#else  /* old adv. API */		if (setsockopt(s, IPPROTO_IPV6, IPV6_HOPOPTS, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_HOPOPTS)");#endif#ifdef IPV6_RECVDSTOPTS		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVDSTOPTS, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_RECVDSTOPTS)");#else  /* olad adv. API */		if (setsockopt(s, IPPROTO_IPV6, IPV6_DSTOPTS, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_DSTOPTS)");#endif#ifdef IPV6_RECVRTHDRDSTOPTS		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVRTHDRDSTOPTS, &opton,			       sizeof(opton)))			err(1, "setsockopt(IPV6_RECVRTHDRDSTOPTS)");#endif	}/*	optval = 1;	if (IN6_IS_ADDR_MULTICAST(&dst.sin6_addr))		if (setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_LOOP,			       &optval, sizeof(optval)) == -1)			err(1, "IPV6_MULTICAST_LOOP");*/	/* Specify the outgoing interface and/or the source address */	if (usepktinfo)		ip6optlen += CMSG_SPACE(sizeof(struct in6_pktinfo));	if (hoplimit != -1)		ip6optlen += CMSG_SPACE(sizeof(int));#ifdef IPV6_REACHCONF	if (options & F_REACHCONF)		ip6optlen += CMSG_SPACE(0);#endif	/* set IP6 packet options */	if (ip6optlen) {		if ((scmsg = (char *)malloc(ip6optlen)) == 0)			errx(1, "can't allocate enough memory");		smsghdr.msg_control = (caddr_t)scmsg;		smsghdr.msg_controllen = ip6optlen;		scmsgp = (struct cmsghdr *)scmsg;	}	if (usepktinfo) {		pktinfo = (struct in6_pktinfo *)(CMSG_DATA(scmsgp));		memset(pktinfo, 0, sizeof(*pktinfo));		scmsgp->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));		scmsgp->cmsg_level = IPPROTO_IPV6;		scmsgp->cmsg_type = IPV6_PKTINFO;		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);	}	/* set the outgoing interface */	if (ifname) {#ifndef USE_SIN6_SCOPE_ID		/* pktinfo must have already been allocated */		if ((pktinfo->ipi6_ifindex = if_nametoindex(ifname)) == 0)			    errx(1, "%s: invalid interface name", ifname);#else		if ((dst.sin6_scope_id = if_nametoindex(ifname)) == 0)			errx(1, "%s: invalid interface name", ifname);#endif	}	/* set the source address */	if (options & F_SRCADDR)/* pktinfo must be valid */		pktinfo->ipi6_addr = srcaddr;	if (hoplimit != -1) {		scmsgp->cmsg_len = CMSG_LEN(sizeof(int));		scmsgp->cmsg_level = IPPROTO_IPV6;		scmsgp->cmsg_type = IPV6_HOPLIMIT;		*(int *)(CMSG_DATA(scmsgp)) = hoplimit;		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);	}#ifdef IPV6_REACHCONF	if (options & F_REACHCONF) {		scmsgp->cmsg_len = CMSG_LEN(0);		scmsgp->cmsg_level = IPPROTO_IPV6;		scmsgp->cmsg_type = IPV6_REACHCONF;		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);	}#endif	if (argc > 1) {	/* some intermediate addrs are specified */		int hops, error;#ifdef USE_RFC2292BIS		int rthdrlen;#endif#ifdef USE_RFC2292BIS		rthdrlen = inet6_rth_space(IPV6_RTHDR_TYPE_0, argc - 1);		scmsgp->cmsg_len = CMSG_LEN(rthdrlen);		scmsgp->cmsg_level = IPPROTO_IPV6;		scmsgp->cmsg_type = IPV6_RTHDR;		rthdr = (struct ip6_rthdr *)CMSG_DATA(scmsgp);		rthdr = inet6_rth_init((void *)rthdr, rthdrlen,				       IPV6_RTHDR_TYPE_0, argc - 1);		if (rthdr == NULL)			errx(1, "can't initialize rthdr");#else  /* old advanced API */		if ((scmsgp = (struct cmsghdr *)inet6_rthdr_init(scmsgp,								 IPV6_RTHDR_TYPE_0)) == 0)			errx(1, "can't initialize rthdr");#endif /* USE_RFC2292BIS */		for (hops = 0; hops < argc - 1; hops++) {			struct addrinfo *iaip;			if ((error = getaddrinfo(argv[hops], NULL, &hints, &iaip)))				errx(1, gai_strerror(error));			if (SIN6(res->ai_addr)->sin6_family != AF_INET6)				errx(1,				     "bad addr family of an intermediate addr");#ifdef USE_RFC2292BIS			if (inet6_rth_add(rthdr,					  &(SIN6(iaip->ai_addr))->sin6_addr))				errx(1, "can't add an intermediate node");#else  /* old advanced API */			if (inet6_rthdr_add(scmsgp,					    &(SIN6(iaip->ai_addr))->sin6_addr,					    IPV6_RTHDR_LOOSE))				errx(1, "can't add an intermediate node");#endif /* USE_RFC2292BIS */		}#ifndef USE_RFC2292BIS		if (inet6_rthdr_lasthop(scmsgp, IPV6_RTHDR_LOOSE))			errx(1, "can't set the last flag");#endif		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);	}	{		/*		 * source selection		 */		int dummy, len = sizeof(src);				if ((dummy = socket(AF_INET6, SOCK_DGRAM, 0)) < 0)			err(1, "UDP socket");		src.sin6_family = AF_INET6;		src.sin6_addr = dst.sin6_addr;		src.sin6_port = ntohs(DUMMY_PORT);		src.sin6_scope_id = dst.sin6_scope_id;#ifdef USE_SIN6_SCOPE_ID		src.sin6_scope_id = dst.sin6_scope_id;#endif#ifdef USE_RFC2292BIS		if (pktinfo &&		    setsockopt(dummy, IPPROTO_IPV6, IPV6_PKTINFO,			       (void *)pktinfo, sizeof(*pktinfo)))			err(1, "UDP setsockopt(IPV6_PKTINFO)");		if (hoplimit != -1 &&		    setsockopt(dummy, IPPROTO_IPV6, IPV6_HOPLIMIT,			       (void *)&hoplimit, sizeof(hoplimit)))			err(1, "UDP setsockopt(IPV6_HOPLIMIT)");		if (rthdr &&		    setsockopt(dummy, IPPROTO_IPV6, IPV6_RTHDR,			       (void *)rthdr, (rthdr->ip6r_len + 1) << 3))			err(1, "UDP setsockopt(IPV6_RTHDR)");#else  /* old advanced API */		if (smsghdr.msg_control &&		    setsockopt(dummy, IPPROTO_IPV6, IPV6_PKTOPTIONS,			       (void *)smsghdr.msg_control,			       smsghdr.msg_controllen)) {			err(1, "UDP setsockopt(IPV6_PKTOPTIONS)");		}#endif						if (connect(dummy, (struct sockaddr *)&src, len) < 0)			err(1, "UDP connect");			if (getsockname(dummy, (struct sockaddr *)&src, &len) < 0)			err(1, "getsockname");		close(dummy);	}#if defined(SO_SNDBUF) && defined(SO_RCVBUF)	if (sockbufsize) {		if (datalen > sockbufsize)			warnx("you need -b to increase socket buffer size");		if (setsockopt(s, SOL_SOCKET, SO_SNDBUF, &sockbufsize,			       sizeof(sockbufsize)) < 0)			err(1, "setsockopt(SO_SNDBUF)");		if (setsockopt(s, SOL_SOCKET, SO_RCVBUF, &sockbufsize,			       sizeof(sockbufsize)) < 0)			err(1, "setsockopt(SO_RCVBUF)");	}	else {		if (datalen > 8 * 1024)	/*XXX*/			warnx("you need -b to increase socket buffer size");		/*		 * When pinging the broadcast address, you can get a lot of		 * answers. Doing something so evil is useful if you are trying		 * to stress the ethernet, or just want to fill the arp cache		 * to get some stuff for /etc/ethers.		 */		hold = 48 * 1024;		setsockopt(s, SOL_SOCKET, SO_RCVBUF, (char *)&hold, sizeof(hold));	}#endif	optval = 1;#ifndef USE_SIN6_SCOPE_ID#ifdef IPV6_RECVPKTINFO	if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVPKTINFO, &optval,		       sizeof(optval)) < 0)		warn("setsockopt(IPV6_RECVPKTINFO)"); /* XXX err? */#else  /* old adv. API */	if (setsockopt(s, IPPROTO_IPV6, IPV6_PKTINFO, &optval,		       sizeof(optval)) < 0)		warn("setsockopt(IPV6_PKTINFO)"); /* XXX err? */#endif#endif /* USE_SIN6_SCOPE_ID */#ifdef IPV6_RECVHOPLIMIT	if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &optval,		       sizeof(optval)) < 0)		warn("setsockopt(IPV6_RECVHOPLIMIT)"); /* XXX err? */#else  /* old adv. API */	if (setsockopt(s, IPPROTO_IPV6, IPV6_HOPLIMIT, &optval,		       sizeof(optval)) < 0)		warn("setsockopt(IPV6_HOPLIMIT)"); /* XXX err? */#endif	printf("PING6(%d=40+8+%d bytes) ", datalen + 48, datalen);	printf("%s --> ", pr_addr(&src));	printf("%s\n", pr_addr(&dst));	while (preload--)		/* Fire off them quickies. */		pinger();	(void)signal(SIGINT, onint);	(void)signal(SIGINFO, oninfo);	if ((options & F_FLOOD) == 0) {		(void)signal(SIGALRM, onalrm);		itimer.it_interval.tv_sec = interval;		itimer.it_interval.tv_usec = 0;		itimer.it_value.tv_sec = 0;		itimer.it_value.tv_usec = 1;		(void)setitimer(ITIMER_REAL, &itimer, NULL);	}	FD_ZERO(&fdset);	timeout.tv_sec = 0;	timeout.tv_usec = 10000;	for (;;) {		struct msghdr m;		struct cmsghdr *cm;		u_char buf[1024];		struct iovec iov[2];		if (options & F_FLOOD) {			pinger();			FD_SET(s, &fdset);			if (select(s + 1, &fdset, NULL, NULL, &timeout) < 1)				continue;		}		fromlen = sizeof(from);		m.msg_name = (caddr_t)&from;		m.msg_namelen = sizeof(from);		memset(&iov, 0, sizeof(iov));		iov[0].iov_base = (caddr_t)packet;		iov[0].iov_len = packlen;		m.msg_iov = iov;		m.msg_iovlen = 1;		cm = (struct cmsghdr *)buf;		m.msg_control = (caddr_t)buf;		m.msg_controllen = sizeof(buf);		if ((cc = recvmsg(s, &m, 0)) < 0) {			if (errno == EINTR)				continue;			warn("recvfrom");			continue;		}		pr_pack(packet, cc, &m);		if (npackets && nreceived >= npackets)			break;	}	summary();	exit(nreceived == 0);}