Kernel Extensions and Device Support Programming Concepts

Net Subcommands

ifnet Subcommand

The ifnet subcommand prints interface information.

Syntax

ifnet [slot | symbol | Address]

slot - Specifies the slot number within the ifnet table for which data is to be displayed. This value must be a decimal number.
Address - Specifies the effective address of an ifnet entry to display. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified, information is displayed for each entry in the ifnet table. Data for individual entries can be displayed by specifying either a slot number or the address of the entry.

Example

KDB(0)> ifnet display interface
SLOT  1 ---- IFNET INFO ----(@ 30AFE000)----
    name........ en0      unit........ 00000000 mtu......... 000005DC 
    flags....... 4E080863
        (UP|BROADCAST|NOTRAILERS|RUNNING|SIMPLEX|NOECHO|BPF|GROUP_ROUTING...
...|64BIT|CANTCHANGE|MULTICAST)
    timer....... 00000000 metric...... 00000000 
            address: 9.3.149.88  dist address: 9.3.149.95
            netmask: 0.0.255.255         bk-ptr: 30AFE000
            rtentry: 0   ifa_flags: 1
            ifa_refcnt: 4        ifa_rtrequest: 543F624

    init()...... 00000000 output().... 0184C10C start()..... 00000000 
    done()...... 00000000 ioctl()..... 0184C118 reset()..... 00000000 
    watchdog().. 00000000 ipackets.... 0000082D ierrors..... 00000000 
    opackets.... 000000E9 oerrors..... 00000000 collisions.. 00000000 
    next........ 007434B0 type........ 00000006 addrlen..... 00000006 
    hdrlen...... 0000000E index....... 00000002 
    lastchange.. 3CCDA92F sec 0002BA9E usec 
    ibytes...... 00094203 obytes...... 00013F64 imcasts..... 00000000 
    omcasts..... 00000019 iqdrops..... 00000000 noproto..... 00000000 
    baudrate.... 06400000 arpdrops.... 00000000 ifbufminsize 00000000 
    devno....... 00000000 chan........ 00000000 multiaddrs.. 7012D514 
    tap()....... 00000000 tapctl...... 00000000 arpres().... 0184C124 
    arprev().... 0184C130 arpinput().. 0184C13C ifq_head.... 00000000 
    ifq_tail.... 00000000 ifq_len..... 00000000 ifq_maxlen.. 00000000 
    ifq_drops... 00000000 ifq_slock... 00000000 slock....... 00000000 
    multi_lock.. 00000000 6_multi_lock 00000000 addrlist_lck 00000000 
    gidlist..... 00000000 ip6tomcast() 0184C148 ndp_bcopy(). 0184C154 
    ndp_bcmp().. 0184C160 ndtype...... 02032000 multiaddrs6. 00000000 
SLOT  2 ---- IFNET INFO ----(@ 007434B0)----
    name........ lo0      unit........ 00000000 mtu......... 00004200 
    flags....... 0E08084B
        (UP|BROADCAST|LOOPBACK|RUNNING|SIMPLEX|NOECHO|BPF|GROUP_ROUTING...
...|64BIT|CANTCHANGE|MULTICAST)
    timer....... 00000000 metric...... 00000000 
            address: 127.0.0.1   dist address: 127.255.255.255
            netmask: 0.0.255.0   bk-ptr: 7434B0
            rtentry: 0   ifa_flags: 1
            ifa_refcnt: 3        ifa_rtrequest: 543F624

    init()...... 00000000 output().... 0019AF58 start()..... 00000000 
    done()...... 00000000 ioctl()..... 0019AF4C reset()..... 00000000 
    watchdog().. 00000000 ipackets.... 0000008D ierrors..... 00000000 
    opackets.... 0000009F oerrors..... 00000000 collisions.. 00000000 
    next........ 00000000 type........ 00000018 addrlen..... 00000000 
    hdrlen...... 00000000 index....... 00000001 
    lastchange.. 3CCDA918 sec 00058673 usec 
    ibytes...... 00002FD2 obytes...... 000031CA imcasts..... 00000000 
    omcasts..... 00000000 iqdrops..... 00000000 noproto..... 00000012 
    baudrate.... 00000000 arpdrops.... 00000000 ifbufminsize 00000000 
    devno....... 00000000 chan........ 00000000 multiaddrs.. 7007A714 
    tap()....... 00000000 tapctl...... 00000000 arpres().... 00000000 
    arprev().... 00000000 arpinput().. 00000000 ifq_head.... 00000000 
    ifq_tail.... 00000000 ifq_len..... 00000000 ifq_maxlen.. 00000032 
    ifq_drops... 00000000 ifq_slock... 00000000 slock....... 00000000 
    multi_lock.. 00000000 6_multi_lock 00000000 addrlist_lck 00000000 
    gidlist..... 00000000 ip6tomcast() 00000000 ndp_bcopy(). 00000000 
    ndp_bcmp().. 00000000 ndtype...... 01000000 multiaddrs6. 7007F400

ndd Subcommand

The ndd subcommand displays the network device driver statistics.

Syntax

ndd [symb/eaddr]

symb - symbol name
eaddr - effective address from where the ndd structure will be read.

Example

   <0> ndd 0x3006f020 
   ---------------------- NDD INFO -----(@0x3006f020)---------- 
    name: ent0   alias: en0      ndd_next:0x307c9020 

    ndd_open():  0x01a96918     ndd_close():0x01a96960  ndd_output():0x01a9696c 
    ndd_ctl():   0x01a96978     ndd_stat(): 0x01a999d4  receive():   0x01a999c8 
    ndd_correlator: 0x3006f000  ndd_refcnt:         1 
    ndd_mtu:            1514    ndd_mintu:          60 
    ndd_addrlen:           6    ndd_hdrlen:         14 
    ndd_physaddr: 0004ac49f6f5  ndd_type:           7 (802.3 Ethernet) 

    ndd_demuxer:    0x01a99aa8  ndd_nsdemux:     0x7005c000 
    ndd_specdemux:  0x70066000  ndd_demuxsource: 0 
    ndd_demux_lock: 0x00000000  ndd_lock:        0x00000000 
    ndd_trace:      0x00000000  ndd_trace_arg:   0x00000000 
    ndd_specstats:  0x3006f380  ndd_speclen:     140 

    ndd_ipackets:      1810994  ndd_opackets:            48786 
    ndd_ierrors:             0  ndd_oerrors:                 0 
    ndd_ibytes:      317413361  ndd_obytes:           19779122 
    ndd_recvintr:      1810133  ndd_xmitintr:                0 
    ndd_ipackets_drop:       0  ndd_nobufs:                  0 
    ndd_xmitque_max:        42  ndd_xmitque_ovf:             0

netm Subcommand

The netm subcommand displays the net_malloc event records that are stored in kernel. It is only available after the net_malloc_police attribute is turned on. The display is started from the latest event. The netm subroutine displays up to 16 stack traces in the net_malloc event.

Syntax

netm [-c display_count]|[-a [addr]]|[-i starting_index]|[-e [outstand_mem]]

-c display_count	Display last display_count number of records of net_malloc events.
-a [addr]	If no addr variable is supplied for the -a flag, the netm subroutine displays all records of the net_malloc events; otherwise, it only displays the net_malloc events associated with the specified address.
-i [starting_index]	Displays the net_malloc events started from the events record index.
-e [outstand_mem]	If the outstand_mem variable is not specified, a list of net_malloc memory addresses that have not been freed are displayed. If the outstand_mem variable is specified, net_malloc events related to the outstanding memory are displayed.

netstat Subcommand

The netstat subcommand symbolically displays the contents of various network-related data structures for active connections. The Interval parameter, specified in seconds, continuously displays information regarding packet traffic on the configured network interfaces. The Interval parameter takes no flags. The System parameter specifies the memory used by the current kernel. Unless you are looking at a dump file, the System parameter should be set to /unix.

Note

The netstat subcommand is available only in the kdb command.

Syntax

netstat [ -n ] [-D] [-c] [-P] [ -m | -s | -ss | -u | -v ] [ { -A -a } | { -r -C -i -I Interface } ]
[ -f AddressFamily ][ -p Protocol] [ -Zc | -Zi | -Zm | -Zs ] [ Interval ] [ System ]

Table 1.
-A	Shows the address of any protocol control blocks associated with the sockets. This flag acts with the default display and is used for debugging purposes.
- a	Shows the state of all sockets. Without this flag, sockets used by server processes are not shown.
- c	Shows the statistics of the Network Buffer Cache.
- C	Shows the routing tables, including the user-configured and current costs of each route.
- D	Shows the number of packets received, transmitted, and dropped in the communications subsystem.
- f AddressFamily	Limits reports of statistics or address control blocks to those items specified by the AddressFamily variable. The following address families are recognized: inet - Indicates the AF_INET address family inet6 - Indicates the AF_INET6 address family ns - Indicates the AF_NS address family unix - Indicates the AF_UNIX address family.
- i	Shows the state of all configured interfaces.
- I Interface	Shows the state of the configured interface specified by the Interface variable.
- m	Shows statistics recorded by the memory management routines.
- n	Shows network addresses as numbers. When the -n flag is not specified, the netstat command interprets addresses where possible and displays them symbolically. This flag can be used with any of the display formats.
- p Protocol	Shows statistics about the value specified for the Protocol variable, which is either a well-known name for a protocol or an alias for it. Protocol names and aliases are listed in the /etc/protocols file. A null response means that there are no numbers to report. The program report of the value specified for the Protocol variable is unknown if there is no statistics routine for it.
- P	Shows the statistics of the Data Link Provider Interface (DLPI).
- r	Shows the routing tables. Shows routing statistics when used with the -s.
- s	Shows statistics for each protocol.
- ss	Displays all the non-zero protocol statistics and provides a concise display.
- u	Displays information about domain sockets.
- v	Shows statistics for CDLI-based communications adapters. This flag causes the netstat command to run the statistics commands for the entstat, tokstat, and fddistat commands. No flags are issued to these device driver commands.
- Zc	Clears network buffer cache statistics.
- Zi	Clears interface statistics.
- Zm	Clears network memory allocator statistics.
- Zs	Clears protocol statistics. To clear statistics for a specific protocol, use -p Protocol. For example, to clear TCP statistics, type the following on the command line: netstat -Zs -p tcp

Example

    <0>netstat -r 

    Route Tree for Protocol Family 2 (Internet): 
    default            advantis.in.ibm.c  UGc    0     0      en0     -   - 
    freezer.austin.i   9.184.199.232      UGHMW  0     1      en0     -   1 
    9.184.192/21       shakti.in.ibm.com  U      20   40546   en0     -   - 
    mqet2.in.ibm.com   9.184.199.12       UGHMW  0     958    en0     -   1 
    127/8              localhost          U      2     249    lo0     -   - 

    Route Tree for Protocol Family 24 (Internet v6): 
    ::1                     ::1           UH     0      0     lo0  16896  -    
    -------------------------------------------------------------------------------

tcb Subcommand

The tcb subcommand prints TCP block information.

Syntax

tcb [slot | symbol | Address]

slot - Specifies the slot number within the tcb table for which data is to be displayed. This value must be a decimal number.
Address - Specifies the effective address of a tcb entry to display. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified, information is displayed for each entry in the tcb table. Data for individual entries can be displayed by specifying either a slot number or the address of the entry.

Example

KDB(0)> tcb display TCP blocks
SLOT  1  TCB --------- INPCB  INFO ----(@0x05F4AB00)----
    next:0x05CD0E80    prev:0x01C033B8    head:0x01C033B8
    ppcb:0x05F9FF00    inp_socket:0x05FA4C00
    lport:       23    laddr:0x96B70114
    fport:     3972    faddr:0x81B7600D
---- SOCKET INFO ----(@05FA4C00)----
    type...... 0001 (STREAM)
    opts...... 010C (REUSEADDR|KEEPALIVE|OOBINLINE)
    linger...... 0000 state...... 0182 (ISCONNECTED|PRIV|NBIO)
    pcb... 05F4AB00 proto... 01C01F80 lock... 05FB1680 head... 00000000
    q0...... 00000000 q...... 00000000 dq...... 00000000 q0len...... 0000
    qlen...... 0000 qlimit...... 0000 dqlen...... 0000 timeo...... 0000
    error...... 0000 special... 0808 pgid... 00000000 oobmark. 00000000
snd:cc...... 00000000 hiwat... 00004000 mbcnt... 00000000 mbmax... 00010000
    lowat... 00001000 mb...... 00000000 sel... 00000000 events...... 0000
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 05FA9D00 wakeone. FFFFFFFF
    timer... 00000000 timeo... 00000000 flags...... 0000  ()
    wakeup.. 00000000 wakearg. 00000000 lock... 05FB1684
rcv:cc...... 00000000 hiwat... 00004000 mbcnt... 00000000 mbmax... 00010000
    lowat... 00000001 mb...... 00000000 sel... 00000000 events...... 0004
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 05FA4900 wakeone. FFFFFFFF
    timer... 00000000 timeo... 00000000 flags...... 0008  (SEL)
    wakeup.. 00000000 wakearg. 00000000 lock... 05FB1688
(0)> more (^C to quit) ? ^C quit
KDB(0)>

udb Subcommand

The udb subcommand prints UDP block information.

Syntax

udb [slot | symbol | Address]

slot - Specifies the slot number within the udb table for which data is to be displayed. This value must be a decimal number.
Address - Specifies the effective address of a udb entry to display. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified, information is displayed for each entry in the udb table. Data for individual entries can be displayed by specifying either a slot number or the address of the entry.

Example

KDB(0)> udb display UDP blocks
SLOT  1  UDB --------- INPCB  INFO ----(@0x05F31300)----
    next:0x05D21A00    prev:0x01C07170    head:0x01C07170
    ppcb:0x00000000    inp_socket:0x05F2D200
    lport:     1595    laddr:0x00000000
    fport:        0    faddr:0x00000000
---- SOCKET INFO ----(@05F2D200)----
    type...... 0002 (DGRAM)
    opts...... 0000 ()
    linger...... 0000 state...... 0080 (PRIV)
    pcb... 05F31300 proto... 01C01F48 lock... 05F2F900 head... 00000000
    q0...... 00000000 q...... 00000000 dq...... 00000000 q0len...... 0000
    qlen...... 0000 qlimit...... 0000 dqlen...... 0000 timeo...... 0000
    error...... 0000 special... 0808 pgid... 00000000 oobmark. 00000000
snd:cc...... 00000000 hiwat... 00010000 mbcnt... 00000000 mbmax... 00020000
    lowat... 00001000 mb...... 00000000 sel... 00000000 events...... 0000
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 00000000 wakeone. FFFFFFFF
    timer... 00000000 timeo... 00000000 flags...... 0000  ()
    wakeup.. 00000000 wakearg. 00000000 lock... 05F2F904
rcv:cc...... 00000000 hiwat... 00010000 mbcnt... 00000000 mbmax... 00020000
    lowat... 00000001 mb...... 00000000 sel... 00000000 events...... 0000
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 05D3DD00 wakeone. FFFFFFFF
    timer... 00000000 timeo... 0000005E flags...... 0000  ()
    wakeup.. 00000000 wakearg. 00000000 lock... 05F2F908
(0)> more (^C to quit) ? ^C quit
KDB(0)>

sock Subcommand

The sock subcommand prints socket information for TCP/UDP blocks.

Syntax

sock [tcp | udp] [symbol | Address]

tcp - Displays socket information for TCP blocks only.
udp - Displays socket information for UDP blocks only.
Address - Specifies the effective address of a socket structure to be displayed. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified socket information is displayed for all TCP and UDP blocks. Output can be limited to either TCP or UDP sockets through the use of the tcp and udp flags. A single socket structure can be displayed by specifying the address of the structure.

Example

KDB(0)> sock tcp display TCP sockets
---- TCP ----(inpcb: @0x05F4AB00)----
---- SOCKET INFO ----(@05FA4C00)----
    type...... 0001 (STREAM)
    opts...... 010C (REUSEADDR|KEEPALIVE|OOBINLINE)
    linger...... 0000 state...... 0182 (ISCONNECTED|PRIV|NBIO)
    pcb... 05F4AB00 proto... 01C01F80 lock... 05FB1680 head... 00000000
    q0...... 00000000 q...... 00000000 dq...... 00000000 q0len...... 0000
    qlen...... 0000 qlimit...... 0000 dqlen...... 0000 timeo...... 0000
    error...... 0000 special... 0808 pgid... 00000000 oobmark. 00000000
snd:cc...... 00000002 hiwat... 00004000 mbcnt... 00000100 mbmax... 00010000
    lowat... 00001000 mb...... 05F2D600 sel... 00000000 events...... 0000
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 05F2D600 wakeone. FFFFFFFF
    timer... 00000000 timeo... 00000000 flags...... 0000  ()
    wakeup.. 00000000 wakearg. 00000000 lock... 05FB1684
rcv:cc...... 00000000 hiwat... 00004000 mbcnt... 00000000 mbmax... 00010000
    lowat... 00000001 mb...... 00000000 sel... 00000000 events...... 0005
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 05E1A200 wakeone. FFFFFFFF
    timer... 00000000 timeo... 00000000 flags...... 0008  (SEL)
    wakeup.. 00000000 wakearg. 00000000 lock... 05FB1688
---- TCP ----(inpcb: @0x05CD0E80)----
---- SOCKET INFO ----(@05CABA00)----
    type...... 0001 (STREAM)
(0)> more (^C to quit) ? ^C quit
KDB(0)>

sockinfo Command

The sockinfo command displays socket structure, socket buffer content, the data left in the send/receive buffer, file descriptor, and owner's process status.

Syntax

sockinfo [Address] [TypeOfAddress]

Address - specifies where the data is to be displayed.
TypeOfAddress - Valid address types are socket, inpcb, rawcb, unpcb, and ripcb.

For TCP sockets, inpcb and tcpcb structures are also shown. For UDP sockets, its inpcb structure is displayed. For ROUTING sockets, rawcb structure is shown. For UNIX sockets, its unpcb structure is shown.

Aliases: si

Examples

To see socket related information from a socket address, type:
```
sockinfo 0x70150400 socket
```
You don't need to specify the type of the socket. It can TCP, UDP, RAW, or ROUTING socket.
To see socket related information from an inpcb address, type:
```
sockinfo 0x70150644 inpcb
```
To see socket related information from a rawcb address, type:
```
sockinfo 0x70150644 rawcb
```
To see socket related information from a unpcb address, type:
```
sockinfo 0x7009bd40 unpcb
```
To see socket related information from a ripcb address, type:
```
sockinfo 0x7009bd40 ripcb
```

Sample sockinfo output in CRASH

  ------------------------ TCPCB ----------------------
  seg_next 0x7003aadc  seg_prev 0x7003aadc  t_state 0x01  (LISTEN)
  timers:   TCPT_REXMT:0   TCPT_PERSIST:0   TCPT_KEEP:0   TCPT_2MSL:0
  t_txtshift 0  t_txtcur 12  t_dupacks 0  t_maxseg 512  t_force 0
  flags:0x0000  ()
  t_template 0x00000000  inpcb 0x7003aa44

  snd_wnd:00000  max_sndwnd:00000
  snd_cwnd:1073725440  snd_ssthresh:1073725440
  iss:         0  snd_una:         0  snd_nxt:         0
  last_ack_sent:         0
  snd_up=         0

  rcv_wnd:00000
  rcv_irs:         0  rcv_nxt:         0  rcv_adv:         0
  rcv_up:         0

  snd=wl1=         0  snd_wl2=         0
  t_idle=-30093  t_rtt=00000  t_rtseq=         0  t_srtt=00000  t_rttvar=00024
  t_softerror:00000  t_oobflags=0x00 ()

-------------------- INPCB  INFO -------------------
    next:0x7003ae44    prev:0x7003e644    head:0x04de2f80
    ppcb:0x7003aadc  inp_socket:0x7003a800
    ifaddr:0x00000000   rcvif:0x00000000
    inp_tos:    0    inp_ttl:   60     inp_refcnt:    1
    inp_options:0x00000000
    lport:32771   laddr:0x00000000 (NONE)
    fport:    0   faddr:0x00000000 (NONE)

7003a800:      --------------------- SOCKET INFO -------------------
     type:0x0001 (STREAM)  opts:0x0002 (ACCEPTCONN)
     state:0x0080 (PRIV)  linger:0x0000
     pcb:0x7003aa44  proto:0x04de0d08  q0:0x00000000  q0len:0
     q:0x00000000   qlen:0   qlimit:5   head:0x00000000
     timeo:0   error:0   oobmark:0   pgid:0

------------------------- PROC/FD INFO -------------------
fd: 4
SLT ST    PID   PPID   PGRP   UID  EUID  TCNT  NAME
 28 a    1c3a    e4a   1c3a     0     0     1  dpid2  
        FLAGS: swapped_in orphanpgrp execed



----------------- SOCKET SND/RCV BUFFER INFO -------------------
     rcv: cc:0  hiwat:16384  mbcnt:0  mbmax:65536
          lowat:1  mb:0x00000000  events:0x0001
          iodone:0x00000000  ioargs:0x00000000  flags:0x0008 (SEL)
          timeo:0  lastpkt:0x00000000


----------------- SOCKET SND/RCV BUFFER INFO -------------------
     snd: cc:0  hiwat:16384  mbcnt:0  mbmax:65536
          lowat:4096  mb:0x00000000  events:0x0000
          iodone:0x00000000  ioargs:0x00000000  flags:0x0000 ()
          timeo:0  lastpkt:0x00000000

Sample sockinfo output in KDB

(0)> sockinfo 700576dc tcpcb
tcp:0x700576DC   inp:0x70057644   so:0x70057400
---- TCPCB ----(@ 700576DC)----
    seg_next...... 700576DC seg_prev...... 700576DC 
    t_softerror... 00000000 t_state....... 00000001 (LISTEN)
    t_timer....... 00000000 (TCPT_REXMT)
    t_timer....... 00000000 (TCPT_PERSIST)
    t_timer....... 00000000 (TCPT_KEEP)
    t_timer....... 00000000 (TCPT_2MSL)
    t_rxtshift.... 00000000 t_rxtcur...... 0000000C t_dupacks..... 00000000 
    t_maxseg...... 00000200 t_force....... 00000000 
    t_flags....... 00000004 (NODELAY)
    t_oobflags.... 00000000 ()
    t_iobc........ 00000000 t_template.... 70057704 t_inpcb....... 70057644 
    t_timestamp... 5B230E01 snd_una....... 00000000 snd_nxt....... 00000000 
    snd_up........ 00000000 snd_wl1....... 00000000 snd_wl2....... 00000000 
    iss........... 00000000 snd_wnd....... 00000000 rcv_wnd....... 00000000 
    rcv_nxt....... 00000000 rcv_up........ 00000000 irs........... 00000000 
    snd_wnd_scale. 00000000 rcv_wnd_scale. 00000000 req_scale_sent 00000000 
    req_scale_rcvd 00000000 last_ack_sent. 00000000 timestamp_rec. 00000000 
    timestamp_age. 00005CA8 rcv_adv....... 00000000 snd_max....... 00000000 
    snd_cwnd...... 3FFFC000 snd_ssthresh.. 3FFFC000 t_idle........ 00005CA7 
    t_rtt......... 00000000 t_rtseq....... 00000000 t_srtt........ 00000000 
    t_rttvar...... 00000018 t_rttmin...... 00000002 max_rcvd...... 00000000 
    max_sndwnd.... 00000000 t_peermaxseg.. 00000200 

-------- TCB --------- INPCB  INFO ----(@ 70057644)----
    next........ 7003D644 prev........ 04DE0F80 head........ 04DE0F80 
    socket...... 70057400 ppcb........ 700576DC proto....... 00000000 
    route_6... @ 70057688 iflowinfo... 00000000 oflowinfo... 00000000 
    fatype...... 00000000 fport....... 00000000 faddr_6... @ 70057654 
    latype...... 00000001 lport....... 0000C03D laddr_6... @ 7005766C
    ifa......... 00000000 rcvif....... 00000000 
    flags....... 00000400 tos......... 00000000 
    ttl......... 0000003C rcvttl...... 00000000 
    options..... 00000000 refcnt...... 00000001 
    lock........ 00000000 rc_lock..... 00000000 moptions.... 00000000 
    hash.next... 04DFE964 hash.prev... 04DFE964 
    timewait.nxt 00000000 timewait.prv 00000000 

---- SOCKET INFO ----(@ 70057400)----
    type........ 0001 (STREAM)
    opts........ 009E (ACCEPTCONN|REUSEADDR|KEEPALIVE|DONTROUTE|LINGER)
    linger...... 000A state....... 0080 (PRIV)
    pcb..... 70057644 proto... 04DDED08 lock.... 7004BA00 head.... 00000000 
    q0...... 00000000 q....... 00000000 dq...... 00000000 q0len....... 0000 
    qlen........ 0000 qlimit...... 0400 dqlen....... 0000 timeo....... 0000 
    error....... 0000 special..... 0E08 pgid.... 00000000 oobmark. 00000000 
    tpcb.... 00000000 fdev_ch. 00000000 sec_info 00000000 qos..... 00000000 
    gidlist. 00000000 private. 00000000 uid..... 00000000 bufsize. 00000000 
    threadcnt00000000 nextfree 00000000 siguid.. 00000000 sigeuid. 00000000 
    sigpriv. 00000000 
    sndtime. 00000000 sec 00000000 usec 
    rcvtime. 00000000 sec 00000000 usec

snd:cc...... 00000000 hiwat... 00004000 mbcnt... 00000000 mbmax... 00010000 
    lowat... 00001000 mb...... 00000000 sel..... 00000000 events...... 0000 
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 00000000 wakeone. FFFFFFFF 
    timer... 00000000 timeo... 00000000 flags....... 0000 ()
    wakeup.. 00000000 wakearg. 00000000 lock.... 7004BA04 

rcv:cc...... 00000000 hiwat... 00004000 mbcnt... 00000000 mbmax... 00010000 
    lowat... 00000001 mb...... 00000000 sel..... 00000000 events...... 0000 
    iodone.. 00000000 ioargs.. 00000000 lastpkt. 00000000 wakeone. FFFFFFFF 
    timer... 00000000 timeo... 00000000 flags....... 0000 ()
    wakeup.. 00000000 wakearg. 00000000 lock.... 7004BA08 

fd: 3                          
            SLOT NAME     STATE    PID  PPID  PGRP   UID  EUID  ADSPACE CL

proc+004780   44*httpdlit ACTIVE 02C58 00001 02852 000C8 000C8 00001775 00

tcpcb Subcommand

The tcpcb subcommand prints tcpcb information for TCP/UDP blocks.

Syntax

tcpcb [tcp | udp] [symbol | Address]

tcp - Displays tcpcb information for TCP blocks only.
udp - Displays tcpcb information for UDP blocks only.
Address - Specifies the effective address of a tcpcb structure to be displayed. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified tcpcb information is displayed for all TCP and UDP blocks. Output can be limited to either TCP or UDP blocks through the use of the tcp and udp flags. A single tcpcb structure can be displayed by specifying the address of the structure.

Example

   KDB(0)> tcpcb display TCB control blocks
   ---- TCP ----(inpcb: @0x05B17F80)----
   ---- TCPCB ----(@0x05B26C00)----
     seg_next 0x05B26C00  seg_prev 0x05B26C00  t_state 0x04  (ESTABLISHED)
     timers:   TCPT_REXMT:3   TCPT_PERSIST:0   TCPT_KEEP:14400   TCPT_2MSL:0
     t_txtshift 0  t_txtcur 3  t_dupacks 0  t_maxseg 1460  t_force 0
     flags:0x0000  ()
     t_template 0x00000000  inpcb        0x00000000
     snd_cwnd:  0x00009448  snd_ssthresh:0x3FFFC000
     snd_una:   0x1EADFCA0  snd_nxt:     0x1EADFCA2  snd_up: 0x1EADFCA0
     snd=wl1:   0xE3BDEEAF  snd_wl2:     0x1EADFCA0  iss:    0x1EAD8401
     snd_wnd:   16060       rcv_wnd:     16060
     t_idle:    0x00000000  t_rtt:       0x00000001 t_rtseq: 0x1EADFCA0
     t_srtt:    0x00000007  t_rttvar:    0x00000003
     max_sndwnd:16060       t_iobc:0x00  t_oobflags:0x00 ()
   ---- TCP ----(inpcb: @0x05B2D000)----
   ---- TCPCB ----(@0x05B28300)----
     seg_next 0x05B28300  seg_prev 0x05B28300  t_state 0x04  (ESTABLISHED)
     timers:   TCPT_REXMT:0   TCPT_PERSIST:0   TCPT_KEEP:4719   TCPT_2MSL:0
     t_txtshift 0  t_txtcur 3  t_dupacks 0  t_maxseg 1460  t_force 0
     flags:0x0000  ()
     t_template 0x00000000  inpcb        0x00000000
     snd_cwnd:  0x0000111C  snd_ssthresh:0x3FFFC000
   (0)> more (^C to quit) ?^C quit 
   KDB(0)>

mbuf Subcommand

The mbuf subcommand prints mbuf information for TCP/UDP blocks.

Syntax

mbuf [tcp | udp] [symbol | Address]

tcp - Displays mbuf information for TCP blocks only.
udp - Displays mbuf information for UDP blocks only.
-a - Follows the packet chain.
-n - Follows the mbuf chain within a packet.
Address - Specifies the effective address of a mbuf structure to be displayed. Symbols, hexadecimal values, or hexadecimal expressions can be used in specification of the address.

If no argument is specified mbuf information is displayed for all TCP and UDP blocks. Output can be limited to either TCP or UDP blocks through the use of the tcp and udp flags. A single mbuf structure can be displayed by specifying the address of the structure. The packet chain and mbuf chains within packets can be displayed via the -a and -n options. These options are only available when an mbuf address is specified as an argument.

Example

KDB(0)> mbuf display message buffers
---- TCP ----(inpcb: @0x05F4AB00)----
---- SND ----(sock: @0x05FA4C00)----
m............... 05E2E900 m_next......... 00000000 m_nextpkt...... 00000000
m_len......... 00000004 m_data......... 05E2E91C m_type... 0001 DATA
m_flags......... 0002 (M_PKTHDR)
m_pkthdr.len... 00000004 m_pkthdr.rcvif.. 00000000
----------------------------------------------------
05E2E91C: 7566 0D0A                                    uf..
---- TCP ----(inpcb: @0x05CD0E80)----
---- TCP ----(inpcb: @0x05CA6B80)----
---- TCP ----(inpcb: @0x05EB0A00)----
---- TCP ----(inpcb: @0x05D21E00)----
---- TCP ----(inpcb: @0x05CA6880)----
---- TCP ----(inpcb: @0x05DB1F00)----
---- TCP ----(inpcb: @0x05DB1F80)----
---- TCP ----(inpcb: @0x05DB1C80)----
---- TCP ----(inpcb: @0x05DB1D00)----
---- TCP ----(inpcb: @0x05DB1D80)----
---- TCP ----(inpcb: @0x05DB1E00)----
---- TCP ----(inpcb: @0x05F31580)----
---- TCP ----(inpcb: @0x05F31900)----
---- TCP ----(inpcb: @0x05F31980)----
(0)> more (^C to quit) ? ^C quit 
KDB(0)>