Opinion for PSARC review:

Please review the following opinion by November 5th, 2007.

  sun
    microsystems              Systems Architecture Committee

_________________________________________________________________

Subject:       Clearview: IP Observability Devices

Submitted by:  Philip Kirk

File:          PSARC/2006/475/opinion.ms

Date:          June 6, 2007

Committee:     Kais Belgaied (opinion written  by  Sebastien
                Roy),  James D Carlson, Bill Sommerfeld, Gary
                Winiger.

Product Approval Committee:

                Solaris PAC
                solaris-pac-opinion at sun.com

1.  Summary

This project provides observability of IP-layer  traffic  by
introducing  a  new  /dev/ipnet directory populated with "IP
Observability Devices".  The /dev/ipnet directory contains a
DLPI style-1 device for each IP interface on the system, and
each device exports enough of  the  DLPI  state  machine  to
allow  traditional network observability tools such as snoop
and wireshark to observe packets flowing over its associated
IP interface.

In addition, some Unix variants  provide  IP-level  loopback
observability  through  a special /dev/lo0 device which pro-
vides observability of all IP loopback packets (packets ori-
ginated  locally  and  destined locally.)  For compatibility
with those other implementations, this project also provides
a /dev/lo0 DLPI device with those semantics.

2.  Decision & Precedence Information

The project is approved as specified in references [1-3].

The project may be delivered in a patch release  of  Solaris
as part of the ON consolidation.

none

3.  Interfaces

PSARC/2006/475               Copyright 2007 Sun Microsystems

                            - 2 -

The project exports the following interfaces.

_________________________________________________________________
|                      Interfaces Exported                      |
|______________________|_________________|______________________|
|Interface             |  Classification |  Comments            |
|______________________|_________________|______________________|
|DL_IOC_IPNET_INFO     |  Committed      |  <inet/ipnet.h>      |
|struct dl_ipnet_info  |  Committed      |  <inet/ipnet.h>      |
|DL_IPNETINFO_VERSION  |  Committed      |  <inet/ipnet.h>      |
|DL_IPNET              |  Committed      |  <sys/dlpi.h>        |
|PRIV_NET_OBSERVABILITY|  Committed      |  <sys/priv_names.h>  |
|/dev/lo0              |  Committed      |  See lo0(7D) in [2]  |
|/dev/ipnet/*          |  Committed      |  See ipnet(7D) in [2]|
|<inet/ipnet.h>        |  Committed      |                      |
|zoneid                |  Committed      |  See snoop(1m) in [2]|
|net_getlifzone()      |  Committed      |  <sys/neti.h>        |
|net_getlif_flags()    |  Committed      |  <sys/neti.h>        |
|NE_SET_ZONE           |  Committed      |  <sys/hook_event.h>  |
|ip_register_cb()      |  Project Private|  <inet/ip.h>         |
|ip_unregister_cb()    |  Project Private|  <inet/ip.h>         |
|______________________|_________________|______________________|

The project imports the following interfaces.

_______________________________________________
|             Interfaces Imported             |
|___________|________________|________________|
|Interface  |  Classification|  Comments      |
|___________|________________|________________|
|netinfo(9F)|  Uncommitted   |  PSARC/2005/334|
|___________|________________|________________|

4.  Opinion

The case was approved with no technical changes required nor
advised.   There  were  spec.  updates  requested during the
review which were subsequently provided by the project team.
The spec. updates made were:

-    Provide a wire-format with proper field  alignment  for
      the ipnet header.

-    Provide details of what changes are needed  in  libpcap
      to   make   3rd   party  tools  work  with  devices  in
      /dev/ipnet.

-    Clarify the handling of multicast and  broadcast  pack-
      ets.

PSARC/2006/475               Copyright 2007 Sun Microsystems

                            - 3 -

-    Clarify the interaction with Trusted Extensions  label-
      ing.

5.  Minority Opinion(s)

None.

6.  Advisory Information

None.

7.  Appendices

7.1.  Appendix A: Technical Changes Required

      None.

7.2.  Appendix B: Technical Changes Advised

      1.   The project team is advised to document new  ipnet
           header format in an IETF informational RFC to ease
           with  implementation  of  3rd  party  tools  which
           interact  and need to interoperate with ipnet dev-
           ices.

7.3.  Appendix C: Reference Material

Unless stated otherwise, path names are relative to the case
directory PSARC/2006/475.

1.   PSARC 20 Questions
      File:  final.materials/20_questions.txt

2.   Architecture Specification
      File:  final.materials/spec.txt

3.   Design Specification
      File:  final.materials/design-document.pdf

PSARC/2006/475               Copyright 2007 Sun Microsystems



Reply via email to