June 2006 - Darwin-kernel - lists.apple.com

Re: Socket Filter NKE for both TCP and UDP
by Brian Bergstrand 21 Jun '06

21 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Jun 21, 2006, at 4:31 PM, Russell Seehafer (RIT Student) wrote: AF_INET, SOCK_STREAM, IPPROTO_TCP AF_INET, SOCK_DGRAM, IPPROTO_UDP AF_INET, SOCK_RAW, IPPROTO_ICMP AF_INET, SOCK_RAW, IPPROTO_RAW HTH. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEmc8tedHYW7bHtqIRAq0XAKD+5aU+vAP0J4tr7NupkkC/iA+eRQCfdWOU EkFz3v8MevQ0Hpe0DVFDgxA= =nayW -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I was wondering if there is a way to register a socket filter nke (such as the tcplognke sample) so that it is attached to both TCP and UDP sockets. Are there special values to specify for the domain, type, and protocol of the sflt_register function? Or, could it be possible to call sflt_register twice - once for udp and datagram sockets and once for stream and tcp sockets - from within the nke's start function? Any input would be greatly appreciated. You have to call register once for each protocol you want to filter. e.g., If you want IPv6 too, you'll have to register each protocol again for the AF_INET6 family. It'd be so much easier if you could just register once for all AF_INET, and once more for all AF_INET6, but that's not possible. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Socket Filter NKE for both TCP and UDP
by Peter Lovell 21 Jun '06

21 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Jun 21, 2006, at 5:31 PM, Russell Seehafer (RIT Student) wrote: Thanks, Russ Hi Russ, Regards.....Peter _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I was wondering if there is a way to register a socket filter nke (such as the tcplognke sample) so that it is attached to both TCP and UDP sockets. Are there special values to specify for the domain, type, and protocol of the sflt_register function? Or, could it be possible to call sflt_register twice - once for udp and datagram sockets and once for stream and tcp sockets - from within the nke's start function? Any input would be greatly appreciated. you can do this without a lot of pain. Be sure you have a pointer struct and a separate signature for each, though. So it's one kext with a bunch of entry points, two structs and two signatures. You do call sflt_register twice within the start. In my usage, I also have separate signatures so that I can register for (and differentiate between) IPv4 and IPv6 calls, so I actually have <four>. This email sent to site_archiver(a)lists.apple.com

1 0

Socket Filter NKE for both TCP and UDP
by Russell Seehafer (RIT Student) 21 Jun '06

21 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcaVeghq2xTziFEcSq6ywjvZ4XU8ww== Thread-topic: Socket Filter NKE for both TCP and UDP _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Is there any dummy provider
by Quinn 21 Jun '06

21 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Mouse click interrupt
by aaa aaaa 21 Jun '06

21 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Is there any dummy provider
by Quinn 20 Jun '06

20 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com <http://developer.apple.com/documentation/DeviceDrivers/Conceptual/WritingDe…> <http://developer.apple.com/documentation/Darwin/Conceptual/KEXTConcept/KEXT…> You can see an example of this in the IOKitWithLibrary sample. <http://developer.apple.com/samplecode/IOKitWithLibrary/index.html> IMPORTANT If you use this technique, make sure that you set the "IOMatchCategory" property to something unique (like the bundle identifier of your driver). If two KEXTs use the same non-unique identifier, the second one won't load. S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 3:31 -0700 19/6/06, Pavan Chebbi wrote: Is there a class that I can use as provider when I am writing a virtual driver ? A virtual driver should match using IOResources. Check out the documentation for this on the developer web site. The "IOProviderClass" property of the KEXT is set to "IOResources" and the "IOResourceMatch" property to "IOKit". This email sent to site_archiver(a)lists.apple.com

1 0

Re: hardware/ software problem on boot
by Tony OCallaghan 20 Jun '06

20 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=ddpGUar3QkLlfsfxLvDFxDLspDplHxCUnoLWsrU1T63EnVuvsaL1sy0Cv6fn95rRsxe0wKMF9oFJLe6XQMlPZzoJOv8mXrX4hEd2qfAHiF6ouQxYfMCbvNHogi5RE/jzETOcH2SwmpH0RiouVupn/GvUxha5kzKPzlSOJqeAII0= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: hardware/ software problem on boot
by Jonas Maebe 20 Jun '06

20 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 20 jun 2006, at 14:45, Tony OCallaghan wrote: You have to hold down option to get that dialog, not cmd. Probably triggered by the option key you were holding down. You can try to reset the pmu: http://docs.info.apple.com/article.html?artnum=14449 Jonas _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… nvram autoboot?="false" in the terminal, this causes the machine to go into the open firmware, however at the start it still requires me to hold down the cmd + option + f + o. Upon further investigation I found that just holding the cmd key will boot the machine (it doesn't however give me the choice of operating systems to boot like it should). I tried resetting the pram by using the command cmd + option + p + r, however this did not work properly, I did however get the reset the pram while in the open firmware prompt. This obviously did not fix the problem. Then i tried to reset the nvram by using the command cmd + option + n + v at startup, I've never before heard of the the combination cmd + option + n + v. The way to reset most of the nvram is by holding cmd + option + p + r until the machine has rebooted itself three times (as opposed to only once). which actually brought me to the dialogue you would expect when you hold down the cmd button only i.e. it brought me to the dialogue where you can select which operating system you want to boot. I reset the nvram when I was in the open firmware prompt which had no effect. It cannot be a problem with the keyboard input boot driver since when i'm in open firmware it recognises all the buttons on the kayboard correctly. Does anyone have an clue what is going on. It doesn't seem to be a problem with the firmware. This email sent to site_archiver(a)lists.apple.com

1 0

hardware/ software problem on boot
by Tony OCallaghan 20 Jun '06

20 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=HDOpwcPs6ZH/Kq6PR2ErvAj8OHYVlr+7HJ2Rvln9NTQ5ORDY6P4v3UDYFexhSwM1F46/2UnBmcgQbknzEu/ZQyGd76b9ww78fMaI6egusTv2noehvMTbmtG4b30GxwbgXIldgHX3vkg6FomOdgZqPVfjmqXvNaZsxAtL0vpu+tw= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: may b a minor error
by Andrew Gallatin 19 Jun '06

19 Jun '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Michael Smith writes: > > On Jun 16, 2006, at 12:54 PM, Andrew Gallatin wrote: > > > I'm talking about a scheme where, when the module is loaded, its code > > is re-written by the "kernel linker" (or kextload, or whatever does > > the > > relocation when loading a kext) and re-writes KPI functions to do > > direct structure access. This re-writing code is kernel dependent > > and could be supplied, for example, via the commpage. This would > > be similar to what Digital UNIX did when they patched out SMP locks > > at runtime on UP systems. > > That's a really innovative scheme... you could have little patch areas > that you rewrote all the KPI functions into - and in fact you could > optimise > it by copying directly from the KPI function implementation in the > kernel. > > That way, drivers wouldn't have to leave their object modules, they > could just jump into their own private copies of the functions they > would otherwise have called... > > Brilliant. > > = Mike > > (Yes, I am well aware of the point you're trying to make. In a few > cases > it might actually be useful, but vtable-style indirection isn't the > big evil here...) Just in case others aren't aware, I'm proposing optimizing away function calls which are, in most cases, a simple pointer deref or assignment, not copying the functions elsewhere. So what is the big evil then? Drew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0