0.4.0/src/net.c

/*
 *  Copyright (C) 2004-2005  Anders Gavare.  All rights reserved.
 *
 *  Redistribution and use in source and binary forms, with or without
 *  modification, are permitted provided that the following conditions are met:
 *
 *  1. Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 *  2. Redistributions in binary form must reproduce the above copyright  
 *     notice, this list of conditions and the following disclaimer in the 
 *     documentation and/or other materials provided with the distribution.
 *  3. The name of the author may not be used to endorse or promote products
 *     derived from this software without specific prior written permission.
 *
 *  THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 *  ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 *  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 *  ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE   
 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 *  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 *  OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 *  HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 *  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 *  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 *  SUCH DAMAGE.
 *
 *
 *  $Id: net.c,v 1.84 2005/11/25 03:38:00 debug Exp $
 *
 *  Emulated (ethernet / internet) network support.
 *
 *
 *  NOTE:  This is just an ugly hack, and just barely enough to get some
 *         Internet networking up and running for the guest OS.
 *
 *  TODO:
 *      o)  TCP: fin/ack stuff, and connection time-outs and
 *          connection refused (reset on connect?), resend
 *          data to the guest OS if no ack has arrived for
 *          some time (? buffers?)
 *              http://www.tcpipguide.com/free/t_TCPConnectionTermination-2.htm
 *      o)  remove the netbsd-specific options in the tcp header (?)
 *      o)  Outgoing UDP packet fragment support.
 *      o)  IPv6  (outgoing, incoming, and the nameserver/gateway)
 *      o)  Incoming connections
 *
 *  TODO 2: The following comments are old! Fix this.
 *
 *
 *  The emulated NIC has a MAC address of (for example) 10:20:30:00:00:10.
 *  From the emulated environment, the only other machine existing on the
 *  network is a "gateway" or "firewall", which has an address of
 *  60:50:40:30:20:10. This module (net.c) contains the emulation of that
 *  gateway. It works like a NAT firewall, but emulated in userland software.
 *
 *  The gateway uses IPv4 address 10.0.0.254, the guest OS (inside the
 *  emulator) could use any 10.x.x.x address, except 10.0.0.254. A suitable
 *  choice is, for example 10.0.0.1.
 *
 *
 *  NOTE: The 'extra' argument used in many functions in this file is a pointer
 *  to something unique for each controller, so that if multiple controllers
 *  are emulated concurrently, they will not get packets that aren't meant
 *  for some other controller.
 *
 *
 *      |------------------  a network  --------------------------------|
 *              ^               ^                               ^
 *              |               |                               |
 *          a NIC connected    another NIC                the gateway
 *          to the network                                      |
 *                                                              v
 *                                                           outside
 *                                                            world
 *
 *  The gateway isn't connected as a NIC, but is an "implicit" machine on the
 *  network.
 *
 *  (See http://www.sinclair.org.au/keith/networking/vendor.html for a list
 *  of ethernet MAC assignments.)
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <errno.h>
#include <sys/types.h>
#include <sys/time.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
#include <fcntl.h>
#include <signal.h>

#include "machine.h"
#include "misc.h"
#include "net.h"


/*  #define debug fatal  */


#define ADDR_IPV4       1
#define ADDR_IPV6       2
#define ADDR_ETHERNET   3


/*
 *  net_debugaddr():
 *
 *  Print an address using debug().
 */
static void net_debugaddr(void *ipv4_addr, int type)
{
        int i;
        unsigned char *p = ipv4_addr;

        switch (type) {
        case ADDR_IPV4:
                for (i=0; i<4; i++)
                        debug("%s%i", i? "." : "", p[i]);
                break;
        case ADDR_IPV6:
                for (i=0; i<16; i+=2)
                        debug("%s%4x", i? ":" : "", p[i] * 256 + p[i+1]);
                break;
        case ADDR_ETHERNET:
                for (i=0; i<6; i++)
                        debug("%s%02x", i? ":" : "", p[i]);
                break;
        default:
                fatal("( net_debugaddr(): UNIMPLEMTED type %i )\n", type);
        }
}


/*
 *  net_generate_unique_mac():
 *
 *  Generate a "unique" serial number for a machine. The machine's serial
 *  number is combined with the machine's current number of NICs to form a
 *  more-or-less valid MAC address.
 *
 *  The return value (6 bytes) are written to macbuf.
 */
void net_generate_unique_mac(struct machine *machine, unsigned char *macbuf)
{
        int x, y;

        if (macbuf == NULL || machine == NULL) {
                fatal("**\n**  net_generate_unique_mac(): NULL ptr\n**\n");
                return;
        }

        x = machine->serial_nr;
        y = machine->nr_of_nics;

        /*
         *  TODO: What is a good starting value? Something like this?
         *
         *  +-----------+-------------------+-------------+-------------+
         *  |  16 bits  |  16 bits machine  |  12 bits    |  4 bits of  |
         *  |  fixed    |  serial nr        |  NIC nr(*)  |  zeroes     |
         *  +-----------+-------------------+-------------+-------------+
         */
        macbuf[0] = 0x10;
        macbuf[1] = 0x20;
        macbuf[2] = 0x30;
        macbuf[3] = 0;
        macbuf[4] = 0;
        macbuf[5] = machine->serial_nr << 4;

        if (macbuf[0] & 1 || macbuf[5] & 1) {
                fatal("Internal error in net_generate_unique_mac().\n");
                exit(1);
        }

        /*  TODO: Remember the mac addresses somewhere?  */
        machine->nr_of_nics ++;
}


/*
 *  net_ip_checksum():
 *
 *  Fill in an IP header checksum. (This works for ICMP too.)
 *  chksumoffset should be 10 for IP headers, and len = 20.
 *  For ICMP packets, chksumoffset = 2 and len = length of the ICMP packet.
 */
void net_ip_checksum(unsigned char *ip_header, int chksumoffset, int len)
{
        int i;
        uint32_t sum = 0;

        for (i=0; i<len; i+=2)
                if (i != chksumoffset) {
                        uint16_t w = (ip_header[i] << 8) + ip_header[i+1];
                        sum += w;
                        while (sum > 65535) {
                                int to_add = sum >> 16;
                                sum = (sum & 0xffff) + to_add;
                        }
                }

        sum ^= 0xffff;
        ip_header[chksumoffset + 0] = sum >> 8;
        ip_header[chksumoffset + 1] = sum & 0xff;
}


/*
 *  net_ip_tcp_checksum():
 *
 *  Fill in a TCP header checksum. This differs slightly from the IP
 *  checksum. The checksum is calculated on a pseudo header, the actual
 *  TCP header, and the data.  This is what the pseudo header looks like:
 *
 *      uint32_t srcaddr;
 *      uint32_t dstaddr;
 *      uint16_t protocol; (= 6 for tcp)
 *      uint16_t tcp_len;
 *
 *  tcp_len is length of header PLUS data.  The psedo header is created
 *  internally here, and does not need to be supplied by the caller.
 */
static void net_ip_tcp_checksum(unsigned char *tcp_header, int chksumoffset,
        int tcp_len, unsigned char *srcaddr, unsigned char *dstaddr,
        int udpflag)
{
        int i, pad = 0;
        unsigned char pseudoh[12];
        uint32_t sum = 0;

        memcpy(pseudoh + 0, srcaddr, 4);
        memcpy(pseudoh + 4, dstaddr, 4);
        pseudoh[8] = 0x00;
        pseudoh[9] = udpflag? 17 : 6;
        pseudoh[10] = tcp_len >> 8;
        pseudoh[11] = tcp_len & 255;

        for (i=0; i<12; i+=2) {
                uint16_t w = (pseudoh[i] << 8) + pseudoh[i+1];
                sum += w;
                while (sum > 65535) {
                        int to_add = sum >> 16;
                        sum = (sum & 0xffff) + to_add;
                }
        }

        if (tcp_len & 1) {
                tcp_len ++;
                pad = 1;
        }

        for (i=0; i<tcp_len; i+=2)
                if (i != chksumoffset) {
                        uint16_t w;
                        if (!pad || i < tcp_len-2)
                                w = (tcp_header[i] << 8) + tcp_header[i+1];
                        else
                                w = (tcp_header[i] << 8) + 0x00;
                        sum += w;
                        while (sum > 65535) {
                                int to_add = sum >> 16;
                                sum = (sum & 0xffff) + to_add;
                        }
                }

        sum ^= 0xffff;
        tcp_header[chksumoffset + 0] = sum >> 8;
        tcp_header[chksumoffset + 1] = sum & 0xff;
}


/*
 *  net_allocate_packet_link():
 *
 *  This routine allocates an ethernet_packet_link struct, and adds it at
 *  the end of the packet chain.  A data buffer is allocated (and zeroed),
 *  and the data, extra, and len fields of the link are set.
 *
 *  Return value is a pointer to the link on success. It doesn't return on
 *  failure.
 */
static struct ethernet_packet_link *net_allocate_packet_link(
        struct net *net, void *extra, int len)
{
        struct ethernet_packet_link *lp;

        lp = malloc(sizeof(struct ethernet_packet_link));
        if (lp == NULL) {
                fprintf(stderr, "net_allocate_packet_link(): out of memory\n");
                exit(1);
        }

        /*  memset(lp, 0, sizeof(struct ethernet_packet_link));  */

        lp->len = len;
        lp->extra = extra;
        lp->data = malloc(len);
        if (lp->data == NULL) {
                fprintf(stderr, "net_allocate_packet_link(): out of memory\n");
                exit(1);
        }
        lp->next = NULL;

        /*  TODO: maybe this is not necessary:  */
        memset(lp->data, 0, len);

        /*  Add last in the link chain:  */
        lp->prev = net->last_ethernet_packet;
        if (lp->prev != NULL)
                lp->prev->next = lp;
        else
                net->first_ethernet_packet = lp;
        net->last_ethernet_packet = lp;

        return lp;
}


/*
 *  net_ip_icmp():
 *
 *  Handle an ICMP packet.
 *
 *  The IP header (at offset 14) could look something like
 *
 *      ver=45 tos=00 len=0054 id=001a ofs=0000 ttl=ff p=01 sum=a87e
 *      src=0a000005 dst=03050607
 *
 *  and the ICMP specific data (beginning at offset 34):
 *
 *      type=08 code=00 chksum=b8bf
 *      000c0008d5cee94089190c0008090a0b
 *      0c0d0e0f101112131415161718191a1b
 *      1c1d1e1f202122232425262728292a2b
 *      2c2d2e2f3031323334353637
 */
static void net_ip_icmp(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        int type;
        struct ethernet_packet_link *lp;

        type = packet[34];

        switch (type) {
        case 8: /*  ECHO request  */
                debug("[ ICMP echo ]\n");
                lp = net_allocate_packet_link(net, extra, len);

                /*  Copy the old packet first:  */
                memcpy(lp->data, packet, len);

                /*  Switch to and from ethernet addresses:  */
                memcpy(lp->data + 0, packet + 6, 6);
                memcpy(lp->data + 6, packet + 0, 6);

                /*  Switch to and from IP addresses:  */
                memcpy(lp->data + 26, packet + 30, 4);
                memcpy(lp->data + 30, packet + 26, 4);

                /*  Change from echo REQUEST to echo REPLY:  */
                lp->data[34] = 0x00;

                /*  Decrease the TTL to a low value:  */
                lp->data[22] = 2;

                /*  Recalculate ICMP checksum:  */
                net_ip_checksum(lp->data + 34, 2, len - 34);

                /*  Recalculate IP header checksum:  */
                net_ip_checksum(lp->data + 14, 10, 20);

                break;
        default:
                fatal("[ net: ICMP type %i not yet implemented ]\n", type);
        }
}


/*
 *  tcp_closeconnection():
 *
 *  Helper function which closes down a TCP connection completely.
 */
static void tcp_closeconnection(struct net *net, int con_id)
{
        close(net->tcp_connections[con_id].socket);
        net->tcp_connections[con_id].state = TCP_OUTSIDE_DISCONNECTED;
        net->tcp_connections[con_id].in_use = 0;
        net->tcp_connections[con_id].incoming_buf_len = 0;
}


/*
 *  net_ip_tcp_connectionreply():
 *
 *  When changing from state _TRYINGTOCONNECT to _CONNECTED, then this
 *  function should be called with connecting set to 1.
 *
 *  To send a generic ack reply, set connecting to 0.
 *
 *  To send data (PSH), set data to non-NULL and datalen to the length.
 *
 *  This creates an ethernet packet for the guest OS with an ACK to the
 *  initial SYN packet.
 */
static void net_ip_tcp_connectionreply(struct net *net, void *extra,
        int con_id, int connecting, unsigned char *data, int datalen, int rst)
{
        struct ethernet_packet_link *lp;
        int tcp_length, ip_len, option_len = 20;

        if (connecting)
                net->tcp_connections[con_id].outside_acknr =
                    net->tcp_connections[con_id].inside_seqnr + 1;

        net->tcp_connections[con_id].tcp_id ++;
        tcp_length = 20 + option_len + datalen;
        ip_len = 20 + tcp_length;
        lp = net_allocate_packet_link(net, extra, 14 + ip_len);

        /*  Ethernet header:  */
        memcpy(lp->data + 0, net->tcp_connections[con_id].ethernet_address, 6);
        memcpy(lp->data + 6, net->gateway_ethernet_addr, 6);
        lp->data[12] = 0x08;    /*  IP = 0x0800  */
        lp->data[13] = 0x00;

        /*  IP header:  */
        lp->data[14] = 0x45;    /*  ver  */
        lp->data[15] = 0x10;    /*  tos  */
        lp->data[16] = ip_len >> 8;
        lp->data[17] = ip_len & 0xff;
        lp->data[18] = net->tcp_connections[con_id].tcp_id >> 8;
        lp->data[19] = net->tcp_connections[con_id].tcp_id & 0xff;
        lp->data[20] = 0x40;    /*  don't fragment  */
        lp->data[21] = 0x00;
        lp->data[22] = 0x40;    /*  ttl  */
        lp->data[23] = 6;       /*  p = TCP  */
        memcpy(lp->data + 26, net->tcp_connections[con_id].
            outside_ip_address, 4);
        memcpy(lp->data + 30, net->tcp_connections[con_id].
            inside_ip_address, 4);
        net_ip_checksum(lp->data + 14, 10, 20);

        /*  TCP header and options at offset 34:  */
        lp->data[34] = net->tcp_connections[con_id].outside_tcp_port >> 8;
        lp->data[35] = net->tcp_connections[con_id].outside_tcp_port & 0xff;
        lp->data[36] = net->tcp_connections[con_id].inside_tcp_port >> 8;
        lp->data[37] = net->tcp_connections[con_id].inside_tcp_port & 0xff;
        lp->data[38] = (net->tcp_connections[con_id].
            outside_seqnr >> 24) & 0xff;
        lp->data[39] = (net->tcp_connections[con_id].
            outside_seqnr >> 16) & 0xff;
        lp->data[40] = (net->tcp_connections[con_id].
            outside_seqnr >>  8) & 0xff;
        lp->data[41] = net->tcp_connections[con_id].
            outside_seqnr & 0xff;
        lp->data[42] = (net->tcp_connections[con_id].
            outside_acknr >> 24) & 0xff;
        lp->data[43] = (net->tcp_connections[con_id].
            outside_acknr >> 16) & 0xff;
        lp->data[44] = (net->tcp_connections[con_id].
            outside_acknr >>  8) & 0xff;
        lp->data[45] = net->tcp_connections[con_id].outside_acknr & 0xff;

        /*  Control  */
        lp->data[46] = (option_len + 20) / 4 * 0x10;
        lp->data[47] = 0x10;    /*  ACK  */
        if (connecting)
                lp->data[47] |= 0x02;   /*  SYN  */
        if (net->tcp_connections[con_id].state == TCP_OUTSIDE_CONNECTED)
                lp->data[47] |= 0x08;   /*  PSH  */
        if (rst)
                lp->data[47] |= 0x04;   /*  RST  */
        if (net->tcp_connections[con_id].state >= TCP_OUTSIDE_DISCONNECTED)
                lp->data[47] |= 0x01;   /*  FIN  */

        /*  Window  */
        lp->data[48] = 0x10;
        lp->data[49] = 0x00;

        /*  no urgent ptr  */

        /*  options  */
        /*  TODO:  HAHA, this is ugly  */
        lp->data[54] = 0x02;
        lp->data[55] = 0x04;
        lp->data[56] = 0x05;
        lp->data[57] = 0xb4;
        lp->data[58] = 0x01;
        lp->data[59] = 0x03;
        lp->data[60] = 0x03;
        lp->data[61] = 0x00;
        lp->data[62] = 0x01;
        lp->data[63] = 0x01;
        lp->data[64] = 0x08;
        lp->data[65] = 0x0a;
        lp->data[66] = (net->timestamp >> 24) & 0xff;
        lp->data[67] = (net->timestamp >> 16) & 0xff;
        lp->data[68] = (net->timestamp >> 8) & 0xff;
        lp->data[69] = net->timestamp & 0xff;
        lp->data[70] = (net->tcp_connections[con_id].
            inside_timestamp >> 24) & 0xff;
        lp->data[71] = (net->tcp_connections[con_id].
            inside_timestamp >> 16) & 0xff;
        lp->data[72] = (net->tcp_connections[con_id].
            inside_timestamp >> 8) & 0xff;
        lp->data[73] = net->tcp_connections[con_id].
            inside_timestamp & 0xff;

        /*  data:  */
        if (data != NULL) {
                memcpy(lp->data + 74, data, datalen);
                net->tcp_connections[con_id].outside_seqnr += datalen;
        }

        /*  Checksum:  */
        net_ip_tcp_checksum(lp->data + 34, 16, tcp_length,
            lp->data + 26, lp->data + 30, 0);

#if 0
        {
                int i;
                fatal("[ net_ip_tcp_connectionreply(%i): ", connecting);
                for (i=0; i<ip_len+14; i++)
                        fatal("%02x", lp->data[i]);
                fatal(" ]\n");
        }
#endif

        if (connecting)
                net->tcp_connections[con_id].outside_seqnr ++;
}


/*
 *  net_ip_tcp():
 *
 *  Handle a TCP packet comming from the emulated OS.
 *
 *  The IP header (at offset 14) could look something like
 *
 *      ver=45 tos=00 len=003c id=0006 ofs=0000 ttl=40 p=11 sum=b798
 *      src=0a000001 dst=c1abcdef
 *
 *  TCP header, at offset 34:
 *
 *      srcport=fffe dstport=0015 seqnr=af419a1d acknr=00000000
 *      control=a002 window=4000 checksum=fe58 urgent=0000
 *      and then "options and padding" and then data.
 *      (020405b4010303000101080a0000000000000000)
 *
 *  See the following URLs for good descriptions of TCP:
 *
 *      http://www.networksorcery.com/enp/protocol/tcp.htm
 *      http://www.tcpipguide.com/free/t_TCPIPTransmissionControlProtocolTCP.htm
 */
static void net_ip_tcp(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        int con_id, free_con_id, i, res;
        int srcport, dstport, data_offset, window, checksum, urgptr;
        int syn, ack, psh, rst, urg, fin;
        uint32_t seqnr, acknr;
        struct sockaddr_in remote_ip;
        fd_set rfds;
        struct timeval tv;
        int send_ofs;

#if 0
        fatal("[ net: TCP: ");
        for (i=0; i<26; i++)
                fatal("%02x", packet[i]);
        fatal(" ");
#endif

        srcport = (packet[34] << 8) + packet[35];
        dstport = (packet[36] << 8) + packet[37];

        seqnr   = (packet[38] << 24) + (packet[39] << 16)
                + (packet[40] << 8) + packet[41];
        acknr   = (packet[42] << 24) + (packet[43] << 16)
                + (packet[44] << 8) + packet[45];

#if 0
        fatal("%i.%i.%i.%i:%i -> %i.%i.%i.%i:%i, seqnr=%lli acknr=%lli ",
            packet[26], packet[27], packet[28], packet[29], srcport,
            packet[30], packet[31], packet[32], packet[33], dstport,
            (long long)seqnr, (long long)acknr);
#endif

        data_offset = (packet[46] >> 4) * 4 + 34;
        /*  data_offset is now data offset within packet :-)  */

        urg = packet[47] & 32;
        ack = packet[47] & 16;
        psh = packet[47] &  8;
        rst = packet[47] &  4;
        syn = packet[47] &  2;
        fin = packet[47] &  1;
        window   = (packet[48] << 8) + packet[49];
        checksum = (packet[50] << 8) + packet[51];
        urgptr   = (packet[52] << 8) + packet[53];

#if 0
        fatal(urg? "URG " : "");
        fatal(ack? "ACK " : "");
        fatal(psh? "PSH " : "");
        fatal(rst? "RST " : "");
        fatal(syn? "SYN " : "");
        fatal(fin? "FIN " : "");

        fatal("window=0x%04x checksum=0x%04x urgptr=0x%04x ",
            window, checksum, urgptr);

        fatal("options=");
        for (i=34+20; i<data_offset; i++)
                fatal("%02x", packet[i]);

        fatal(" data=");
        for (i=data_offset; i<len; i++)
                fatal("%02x", packet[i]);

        fatal(" ]\n");
#endif

        net_ip_tcp_checksum(packet + 34, 16, len - 34,
                packet + 26, packet + 30, 0);
        if (packet[50] * 256 + packet[51] != checksum) {
                debug("TCP: dropping packet because of checksum mismatch "
                    "(0x%04x != 0x%04x)\n", packet[50] * 256 + packet[51],
                    checksum);

                return;
        }

        /*  Does this packet belong to a current connection?  */
        con_id = free_con_id = -1;
        for (i=0; i<MAX_TCP_CONNECTIONS; i++) {
                if (!net->tcp_connections[i].in_use)
                        free_con_id = i;
                if (net->tcp_connections[i].in_use &&
                    net->tcp_connections[i].inside_tcp_port == srcport &&
                    net->tcp_connections[i].outside_tcp_port == dstport &&
                    memcmp(net->tcp_connections[i].inside_ip_address,
                        packet + 26, 4) == 0 &&
                    memcmp(net->tcp_connections[i].outside_ip_address,
                        packet + 30, 4) == 0) {
                        con_id = i;
                        break;
                }
        }

        /*
         *  Unknown connection, and not SYN? Then drop the packet.
         *  TODO:  Send back RST?
         */
        if (con_id < 0 && !syn) {
                debug("[ net: TCP: dropping packet from unknown connection,"
                    " %i.%i.%i.%i:%i -> %i.%i.%i.%i:%i %s%s%s%s%s]\n",
                    packet[26], packet[27], packet[28], packet[29], srcport,
                    packet[30], packet[31], packet[32], packet[33], dstport,
                    fin? "FIN ": "", syn? "SYN ": "", ack? "ACK ": "",
                    psh? "PSH ": "", rst? "RST ": "");
                return;
        }

        /*  Known connection, and SYN? Then ignore the packet.  */
        if (con_id >= 0 && syn) {
                debug("[ net: TCP: ignoring redundant SYN packet from known"
                    " connection, %i.%i.%i.%i:%i -> %i.%i.%i.%i:%i ]\n",
                    packet[26], packet[27], packet[28], packet[29], srcport,
                    packet[30], packet[31], packet[32], packet[33], dstport);
                return;
        }

        /*
         *  A new outgoing connection?
         */
        if (con_id < 0 && syn) {
                debug("[ net: TCP: new outgoing connection, %i.%i.%i.%i:%i"
                    " -> %i.%i.%i.%i:%i ]\n",
                    packet[26], packet[27], packet[28], packet[29], srcport,
                    packet[30], packet[31], packet[32], packet[33], dstport);

                /*  Find a free connection id to use:  */
                if (free_con_id < 0) {
#if 1
                        /*
                         *  TODO:  Reuse the oldest one currently in use, or
                         *  just drop the new connection attempt? Drop for now.
                         */
                        fatal("[ TOO MANY TCP CONNECTIONS IN USE! "
                            "Increase MAX_TCP_CONNECTIONS! ]\n");
                        return;
#else
                        int i;
                        int64_t oldest = net->
                            tcp_connections[0].last_used_timestamp;
                        free_con_id = 0;

                        fatal("[ NO FREE TCP SLOTS, REUSING OLDEST ONE ]\n");
                        for (i=0; i<MAX_TCP_CONNECTIONS; i++)
                                if (net->tcp_connections[i].
                                    last_used_timestamp < oldest) {
                                        oldest = net->tcp_connections[i].
                                            last_used_timestamp;
                                        free_con_id = i;
                                }
                        tcp_closeconnection(net, free_con_id);
#endif
                }

                con_id = free_con_id;
                memset(&net->tcp_connections[con_id], 0,
                    sizeof(struct tcp_connection));

                memcpy(net->tcp_connections[con_id].ethernet_address,
                    packet + 6, 6);
                memcpy(net->tcp_connections[con_id].inside_ip_address,
                    packet + 26, 4);
                net->tcp_connections[con_id].inside_tcp_port = srcport;
                memcpy(net->tcp_connections[con_id].outside_ip_address,
                    packet + 30, 4);
                net->tcp_connections[con_id].outside_tcp_port = dstport;

                net->tcp_connections[con_id].socket =
                    socket(AF_INET, SOCK_STREAM, 0);
                if (net->tcp_connections[con_id].socket < 0) {
                        fatal("[ net: TCP: socket() returned %i ]\n",
                            net->tcp_connections[con_id].socket);
                        return;
                }

                debug("[ new tcp outgoing socket=%i ]\n",
                    net->tcp_connections[con_id].socket);

                net->tcp_connections[con_id].in_use = 1;

                /*  Set the socket to non-blocking:  */
                res = fcntl(net->tcp_connections[con_id].socket, F_GETFL);
                fcntl(net->tcp_connections[con_id].socket, F_SETFL,
                    res | O_NONBLOCK);

                remote_ip.sin_family = AF_INET;
                memcpy((unsigned char *)&remote_ip.sin_addr,
                    net->tcp_connections[con_id].outside_ip_address, 4);
                remote_ip.sin_port = htons(
                    net->tcp_connections[con_id].outside_tcp_port);

                res = connect(net->tcp_connections[con_id].socket,
                    (struct sockaddr *)&remote_ip, sizeof(remote_ip));

                /*  connect can return -1, and errno = EINPROGRESS
                    as we might not have connected right away.  */

                net->tcp_connections[con_id].state =
                    TCP_OUTSIDE_TRYINGTOCONNECT;

                net->tcp_connections[con_id].outside_acknr = 0;
                net->tcp_connections[con_id].outside_seqnr =
                    ((random() & 0xffff) << 16) + (random() & 0xffff);
        }

        if (rst) {
                debug("[ 'rst': disconnecting TCP connection %i ]\n", con_id);
                net_ip_tcp_connectionreply(net, extra, con_id, 0, NULL, 0, 1);
                tcp_closeconnection(net, con_id);
                return;
        }

        if (ack && net->tcp_connections[con_id].state
            == TCP_OUTSIDE_DISCONNECTED2) {
                debug("[ 'ack': guestOS's final termination of TCP "
                    "connection %i ]\n", con_id);

                /*  Send an RST?  (TODO, this is wrong...)  */
                net_ip_tcp_connectionreply(net, extra, con_id, 0, NULL, 0, 1);

                /*  ... and forget about this connection:  */
                tcp_closeconnection(net, con_id);
                return;
        }

        if (fin && net->tcp_connections[con_id].state
            == TCP_OUTSIDE_DISCONNECTED) {
                debug("[ 'fin': response to outside's disconnection of "
                    "TCP connection %i ]\n", con_id);

                /*  Send an ACK:  */
                net->tcp_connections[con_id].state = TCP_OUTSIDE_CONNECTED;
                net_ip_tcp_connectionreply(net, extra, con_id, 0, NULL, 0, 0);
                net->tcp_connections[con_id].state = TCP_OUTSIDE_DISCONNECTED2;
                return;
        }

        if (fin) {
                debug("[ 'fin': guestOS disconnecting TCP connection %i ]\n",
                    con_id);

                /*  Send ACK:  */
                net_ip_tcp_connectionreply(net, extra, con_id, 0, NULL, 0, 0);
                net->tcp_connections[con_id].state = TCP_OUTSIDE_DISCONNECTED2;

                /*  Return and send FIN:  */
                goto ret;
        }

        if (ack) {
debug("ACK %i bytes, inside_acknr=%u outside_seqnr=%u\n",
 net->tcp_connections[con_id].incoming_buf_len,
 net->tcp_connections[con_id].inside_acknr,
 net->tcp_connections[con_id].outside_seqnr);
                net->tcp_connections[con_id].inside_acknr = acknr;
                if (net->tcp_connections[con_id].inside_acknr ==
                    net->tcp_connections[con_id].outside_seqnr &&
                    net->tcp_connections[con_id].incoming_buf_len != 0) {
debug("  all acked\n");
                        net->tcp_connections[con_id].incoming_buf_len = 0;
                }
        }

        net->tcp_connections[con_id].inside_seqnr = seqnr;

        /*  TODO: This is hardcoded for a specific NetBSD packet:  */
        if (packet[34 + 30] == 0x08 && packet[34 + 31] == 0x0a)
                net->tcp_connections[con_id].inside_timestamp =
                    (packet[34 + 32 + 0] << 24) +
                    (packet[34 + 32 + 1] << 16) +
                    (packet[34 + 32 + 2] <<  8) +
                    (packet[34 + 32 + 3] <<  0);


        net->timestamp ++;
        net->tcp_connections[con_id].last_used_timestamp = net->timestamp;


        if (net->tcp_connections[con_id].state != TCP_OUTSIDE_CONNECTED) {
                debug("[ not connected to outside ]\n");
                return;
        }


        if (data_offset >= len)
                return;


        /*
         *  We are here if this is a known connection, and data is to be
         *  transmitted to the outside world.
         */

        send_ofs = data_offset;
        send_ofs += ((int32_t)net->tcp_connections[con_id].outside_acknr
            - (int32_t)seqnr);
#if 1
        debug("[ %i bytes of tcp data to be sent, beginning at seqnr %u, ",
            len - data_offset, seqnr);
        debug("outside is at acknr %u ==> %i actual bytes to be sent ]\n",
            net->tcp_connections[con_id].outside_acknr, len - send_ofs);
#endif

        /*  Drop outgoing packet if the guest OS' seqnr is not
            the same as we have acked. (We have missed something, perhaps.)  */
        if (seqnr != net->tcp_connections[con_id].outside_acknr) {
                debug("!! outgoing TCP packet dropped (seqnr = %u, "
                    "outside_acknr = %u)\n", seqnr,
                    net->tcp_connections[con_id].outside_acknr);
                goto ret;
        }

        if (len - send_ofs > 0) {
                /*  Is the socket available for output?  */
                FD_ZERO(&rfds);         /*  write  */
                FD_SET(net->tcp_connections[con_id].socket, &rfds);
                tv.tv_sec = tv.tv_usec = 0;
                errno = 0;
                res = select(net->tcp_connections[con_id].socket+1,
                    NULL, &rfds, NULL, &tv);
                if (res < 1) {
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        debug("[ TCP: disconnect on select for writing ]\n");
                        goto ret;
                }

                res = write(net->tcp_connections[con_id].socket,
                    packet + send_ofs, len - send_ofs);

                if (res > 0) {
                        net->tcp_connections[con_id].outside_acknr += res;
                } else if (errno == EAGAIN) {
                        /*  Just ignore this attempt.  */
                        return;
                } else {
                        debug("[ error writing %i bytes to TCP connection %i:"
                            " errno = %i ]\n", len - send_ofs, con_id, errno);
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        debug("[ TCP: disconnect on write() ]\n");
                        goto ret;
                }
        }

ret:
        /*  Send an ACK (or FIN) to the guest OS:  */
        net_ip_tcp_connectionreply(net, extra, con_id, 0, NULL, 0, 0);
}


/*
 *  net_ip_udp():
 *
 *  Handle a UDP packet.
 *
 *  (See http://www.networksorcery.com/enp/protocol/udp.htm.)
 *
 *  The IP header (at offset 14) could look something like
 *
 *      ver=45 tos=00 len=003c id=0006 ofs=0000 ttl=40 p=11 sum=b798
 *      src=0a000001 dst=c1abcdef
 *
 *  and the UDP data (beginning at offset 34):
 *
 *      srcport=fffc dstport=0035 length=0028 chksum=76b6
 *      43e20100000100000000000003667470066e6574627364036f726700001c0001
 */
static void net_ip_udp(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        int con_id, free_con_id, i, srcport, dstport, udp_len;
        ssize_t res;
        struct sockaddr_in remote_ip;

        if ((packet[20] & 0x3f) != 0) {
                fatal("[ net_ip_udp(): WARNING! fragmented UDP "
                    "packet, TODO ]\n");
                return;
        }

        srcport = (packet[34] << 8) + packet[35];
        dstport = (packet[36] << 8) + packet[37];
        udp_len = (packet[38] << 8) + packet[39];
        /*  chksum at offset 40 and 41  */

        debug("[ net: UDP: ");
        debug("srcport=%i dstport=%i len=%i ", srcport, dstport, udp_len);
        for (i=42; i<len; i++) {
                if (packet[i] >= ' ' && packet[i] < 127)
                        debug("%c", packet[i]);
                else
                        debug("[%02x]", packet[i]);
        }
        debug(" ]\n");

        /*  Is this "connection" new, or a currently ongoing one?  */
        con_id = free_con_id = -1;
        for (i=0; i<MAX_UDP_CONNECTIONS; i++) {
                if (!net->udp_connections[i].in_use)
                        free_con_id = i;
                if (net->udp_connections[i].in_use &&
                    net->udp_connections[i].inside_udp_port == srcport &&
                    net->udp_connections[i].outside_udp_port == dstport &&
                    memcmp(net->udp_connections[i].inside_ip_address,
                        packet + 26, 4) == 0 &&
                    memcmp(net->udp_connections[i].outside_ip_address,
                        packet + 30, 4) == 0) {
                        con_id = i;
                        break;
                }
        }

        debug("&& UDP connection is ");
        if (con_id >= 0)
                debug("ONGOING");
        else {
                debug("NEW");
                if (free_con_id < 0) {
                        int i;
                        int64_t oldest = net->
                            udp_connections[0].last_used_timestamp;
                        free_con_id = 0;

                        debug(", NO FREE SLOTS, REUSING OLDEST ONE");
                        for (i=0; i<MAX_UDP_CONNECTIONS; i++)
                                if (net->udp_connections[i].
                                    last_used_timestamp < oldest) {
                                        oldest = net->udp_connections[i].
                                            last_used_timestamp;
                                        free_con_id = i;
                                }
                        close(net->udp_connections[free_con_id].socket);
                }
                con_id = free_con_id;
                memset(&net->udp_connections[con_id], 0,
                    sizeof(struct udp_connection));

                memcpy(net->udp_connections[con_id].ethernet_address,
                    packet + 6, 6);
                memcpy(net->udp_connections[con_id].inside_ip_address,
                    packet + 26, 4);
                net->udp_connections[con_id].inside_udp_port = srcport;
                memcpy(net->udp_connections[con_id].outside_ip_address,
                    packet + 30, 4);
                net->udp_connections[con_id].outside_udp_port = dstport;

                net->udp_connections[con_id].socket = socket(AF_INET,
                    SOCK_DGRAM, 0);
                if (net->udp_connections[con_id].socket < 0) {
                        fatal("[ net: UDP: socket() returned %i ]\n",
                            net->udp_connections[con_id].socket);
                        return;
                }

                debug(" {socket=%i}", net->udp_connections[con_id].socket);

                net->udp_connections[con_id].in_use = 1;

                /*  Set the socket to non-blocking:  */
                res = fcntl(net->udp_connections[con_id].socket, F_GETFL);
                fcntl(net->udp_connections[con_id].socket, F_SETFL,
                    res | O_NONBLOCK);
        }

        debug(", connection id %i\n", con_id);

        net->timestamp ++;
        net->udp_connections[con_id].last_used_timestamp = net->timestamp;

        remote_ip.sin_family = AF_INET;
        memcpy((unsigned char *)&remote_ip.sin_addr,
            net->udp_connections[con_id].outside_ip_address, 4);

        /*
         *  Special case for the nameserver:  If a UDP packet is sent to
         *  the gateway, it will be forwarded to the nameserver, if it is
         *  known.
         */
        if (net->nameserver_known &&
            memcmp(net->udp_connections[con_id].outside_ip_address,
            &net->gateway_ipv4_addr[0], 4) == 0) {
                memcpy((unsigned char *)&remote_ip.sin_addr,
                    &net->nameserver_ipv4, 4);
                net->udp_connections[con_id].fake_ns = 1;
        }

        remote_ip.sin_port = htons(
            net->udp_connections[con_id].outside_udp_port);

        res = sendto(net->udp_connections[con_id].socket, packet + 42,
            len - 42, 0, (const struct sockaddr *)&remote_ip,
            sizeof(remote_ip));

        if (res != len-42)
                debug("[ net: UDP: unable to send %i bytes ]\n", len-42);
        else
                debug("[ net: UDP: OK!!! ]\n");
}


/*
 *  net_ip():
 *
 *  Handle an IP packet, coming from the emulated NIC.
 */
static void net_ip(struct net *net, void *extra,
        unsigned char *packet, int len)
{
#if 1
        int i;

        debug("[ net: IP: ");
        debug("ver=%02x ", packet[14]);
        debug("tos=%02x ", packet[15]);
        debug("len=%02x%02x ", packet[16], packet[17]);
        debug("id=%02x%02x ",  packet[18], packet[19]);
        debug("ofs=%02x%02x ", packet[20], packet[21]);
        debug("ttl=%02x ", packet[22]);
        debug("p=%02x ", packet[23]);
        debug("sum=%02x%02x ", packet[24], packet[25]);
        debug("src=%02x%02x%02x%02x ",
            packet[26], packet[27], packet[28], packet[29]);
        debug("dst=%02x%02x%02x%02x ",
            packet[30], packet[31], packet[32], packet[33]);
        for (i=34; i<len; i++)
                debug("%02x", packet[i]);
        debug(" ]\n");
#endif

        /*  Cut off overflowing tail data:  */
        if (len > 14 + packet[16]*256 + packet[17])
                len = 14 + packet[16]*256 + packet[17];

        if (packet[14] == 0x45) {
                /*  IPv4:  */
                switch (packet[23]) {
                case 1: /*  ICMP  */
                        net_ip_icmp(net, extra, packet, len);
                        break;
                case 6: /*  TCP  */
                        net_ip_tcp(net, extra, packet, len);
                        break;
                case 17:/*  UDP  */
                        net_ip_udp(net, extra, packet, len);
                        break;
                default:
                        fatal("[ net: IP: UNIMPLEMENTED protocol %i ]\n",
                            packet[23]);
                }
        } else
                fatal("[ net: IP: UNIMPLEMENTED ip, first byte = 0x%02x ]\n",
                    packet[14]);
}


/*
 *  net_ip_broadcast_dhcp():
 *
 *  Handle an IPv4 DHCP broadcast packet, coming from the emulated NIC.
 *
 *  Read http://www.ietf.org/rfc/rfc2131.txt for details on DHCP.
 *  (And http://users.telenet.be/mydotcom/library/network/dhcp.htm.)
 */
static void net_ip_broadcast_dhcp(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        /*
         *  TODO
         */
#if 0
        struct ethernet_packet_link *lp;
        int i;

        fatal("[ net: IPv4 DHCP: ");
#if 0
        fatal("ver=%02x ", packet[14]);
        fatal("tos=%02x ", packet[15]);
        fatal("len=%02x%02x ", packet[16], packet[17]);
        fatal("id=%02x%02x ",  packet[18], packet[19]);
        fatal("ofs=%02x%02x ", packet[20], packet[21]);
        fatal("ttl=%02x ", packet[22]);
        fatal("p=%02x ", packet[23]);
        fatal("sum=%02x%02x ", packet[24], packet[25]);
#endif
        fatal("src=%02x%02x%02x%02x ",
            packet[26], packet[27], packet[28], packet[29]);
        fatal("dst=%02x%02x%02x%02x ",
            packet[30], packet[31], packet[32], packet[33]);
#if 0
        for (i=34; i<len; i++)
                fatal("%02x", packet[i]);
#endif

        if (len < 34 + 8 + 236) {
                fatal("[ DHCP packet too short? Len=%i ]\n", len);
                return;
        }

        /*
         *  UDP data (at offset 34):
         *
         *  srcport=0044 dstport=0043 length=0134 chksum=a973
         *  data = 01010600d116d276000000000000000000000000000000
         *         0000000000102030405060...0000...638253633501...000
         */

        fatal("op=%02x ", packet[42]);
        fatal("htype=%02x ", packet[43]);
        fatal("hlen=%02x ", packet[44]);
        fatal("hops=%02x ", packet[45]);
        fatal("xid=%02x%02x%02x%02x ", packet[46], packet[47],
            packet[48], packet[49]);
        fatal("secs=%02x%02x ", packet[50], packet[51]);
        fatal("flags=%02x%02x ", packet[52], packet[53]);
        fatal("ciaddr=%02x%02x%02x%02x ", packet[54], packet[55],
            packet[56], packet[57]);
        fatal("yiaddr=%02x%02x%02x%02x ", packet[58], packet[59],
            packet[60], packet[61]);
        fatal("siaddr=%02x%02x%02x%02x ", packet[62], packet[63],
            packet[64], packet[65]);
        fatal("giaddr=%02x%02x%02x%02x ", packet[66], packet[67],
            packet[68], packet[69]);
        fatal("chaddr=");
        for (i=70; i<70+16; i++)
                fatal("%02x", packet[i]);
        /*
   |                          sname   (64)                         |
   |                          file    (128)                        |
         */
        fatal(" ]\n");

        lp = net_allocate_packet_link(net, extra, len);

        /*  Copy the old packet first:  */
        memcpy(lp->data, packet, len);

        /*  We are sending to the client, from the gateway:  */
        memcpy(lp->data + 0, packet + 6, 6);
        memcpy(lp->data + 6, net->gateway_ethernet_addr, 6);

        memcpy(lp->data + 26, &net->gateway_ipv4_addr[0], 4);
        lp->data[30] = 0xff;
        lp->data[31] = 0xff;
        lp->data[32] = 0xff;
        lp->data[33] = 0xff;

        /*  Switch src and dst ports:  */
        memcpy(lp->data + 34, packet + 36, 2);
        memcpy(lp->data + 36, packet + 34, 2);

        /*  Client's (yiaddr) IPv4 address:  */
        lp->data[58] = 10;
        lp->data[59] = 0;
        lp->data[60] = 0;
        lp->data[61] = 1;

        /*  Server's IPv4 address:  (giaddr)  */
        memcpy(lp->data + 66, &net->gateway_ipv4_addr[0], 4);

        /*  This is a Reply:  */
        lp->data[42] = 0x02;

        snprintf(lp->data + 70+16+64, 8, "gxemul");

        /*  Recalculate IP header checksum:  */
        net_ip_checksum(lp->data + 14, 10, 20);

        /*  ... and the UDP checksum:  */
        net_ip_tcp_checksum(lp->data + 34, 6, len - 34 - 8,
            lp->data + 26, lp->data + 30, 1);


/*  Debug dump:  */
packet = lp->data;
        fatal("[ net: IPv4 DHCP REPLY: ");
        for (i=0; i<14; i++)
                fatal("%02x", packet[i]);
        fatal("ver=%02x ", packet[14]);
        fatal("tos=%02x ", packet[15]);
        fatal("len=%02x%02x ", packet[16], packet[17]);
        fatal("id=%02x%02x ",  packet[18], packet[19]);
        fatal("ofs=%02x%02x ", packet[20], packet[21]);
        fatal("ttl=%02x ", packet[22]);
        fatal("p=%02x ", packet[23]);
        fatal("sum=%02x%02x ", packet[24], packet[25]);
        fatal("src=%02x%02x%02x%02x ",
            packet[26], packet[27], packet[28], packet[29]);
        fatal("dst=%02x%02x%02x%02x ",
            packet[30], packet[31], packet[32], packet[33]);
        fatal("op=%02x ", packet[42]);
        fatal("htype=%02x ", packet[43]);
        fatal("hlen=%02x ", packet[44]);
        fatal("hops=%02x ", packet[45]);
        fatal("xid=%02x%02x%02x%02x ", packet[46], packet[47],
            packet[48], packet[49]);
        fatal("secs=%02x%02x ", packet[50], packet[51]);
        fatal("flags=%02x%02x ", packet[52], packet[53]);
        fatal("ciaddr=%02x%02x%02x%02x ", packet[54], packet[55],
            packet[56], packet[57]);
        fatal("yiaddr=%02x%02x%02x%02x ", packet[58], packet[59],
            packet[60], packet[61]);
        fatal("siaddr=%02x%02x%02x%02x ", packet[62], packet[63],
            packet[64], packet[65]);
        fatal("giaddr=%02x%02x%02x%02x ", packet[66], packet[67],
            packet[68], packet[69]);
        fatal("chaddr=");
        for (i=70; i<70+16; i++)
                fatal("%02x", packet[i]);
        fatal(" ]\n");

#endif
}


/*
 *  net_ip_broadcast():
 *
 *  Handle an IP broadcast packet, coming from the emulated NIC.
 *  (This is usually a DHCP request, or similar.)
 */
static void net_ip_broadcast(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        unsigned char *p = (void *) &net->netmask_ipv4;
        uint32_t x, y;
        int i, xl, warning = 0, match = 0;

#if 0
        fatal("[ net: IP BROADCAST: ");
        fatal("ver=%02x ", packet[14]);
        fatal("tos=%02x ", packet[15]);
        fatal("len=%02x%02x ", packet[16], packet[17]);
        fatal("id=%02x%02x ",  packet[18], packet[19]);
        fatal("ofs=%02x%02x ", packet[20], packet[21]);
        fatal("ttl=%02x ", packet[22]);
        fatal("p=%02x ", packet[23]);
        fatal("sum=%02x%02x ", packet[24], packet[25]);
        fatal("src=%02x%02x%02x%02x ",
            packet[26], packet[27], packet[28], packet[29]);
        fatal("dst=%02x%02x%02x%02x ",
            packet[30], packet[31], packet[32], packet[33]);
        for (i=34; i<len; i++)
                fatal("%02x", packet[i]);
        fatal(" ]\n");
#endif

        /*  Check for 10.0.0.255 first, maybe some guest OSes think that
            it's a /24 network, regardless of what it actually is.  */
        y = (packet[30] << 24) + (packet[31] << 16) +
            (packet[32] << 8) + packet[33];

        x = (p[0] << 24) + (p[1] << 16) + (p[2] << 8) + p[3];
        /*  Example: x = 10.0.0.0  */
        x |= 255;

        if (x == y) {
                warning = 1;
                match = 1;
        }

        xl = 32 - net->netmask_ipv4_len;
        x |= (1 << xl) - 1;
        /*  x = 10.255.255.255  */

        if (x == y)
                match = 1;
        if (y == 0xffffffff)
                match = 1;

        if (warning)
                fatal("[ net_ip_broadcast(): warning: broadcast to "
                    "0x%08x, expecting broadcast to 0x%08x or "
                    "0xffffffff ]\n", y, x);

        /*  Cut off overflowing tail data:  */
        if (len > 14 + packet[16]*256 + packet[17])
                len = 14 + packet[16]*256 + packet[17];

        /*  Check for known packets:  */
        if (packet[14] == 0x45 &&                       /*  IPv4  */
            packet[23] == 0x11 &&                       /*  UDP  */
            packet[34] == 0 && packet[35] == 68 &&      /*  DHCP client  */
            packet[36] == 0 && packet[37] == 67) {      /*  DHCP server  */
                net_ip_broadcast_dhcp(net, extra, packet, len);
                return;
        }

        /*  Unknown packet:  */
        fatal("[ net: UNIMPLEMENTED IP BROADCAST: ");
        fatal("ver=%02x ", packet[14]);
        fatal("tos=%02x ", packet[15]);
        fatal("len=%02x%02x ", packet[16], packet[17]);
        fatal("id=%02x%02x ",  packet[18], packet[19]);
        fatal("ofs=%02x%02x ", packet[20], packet[21]);
        fatal("ttl=%02x ", packet[22]);
        fatal("p=%02x ", packet[23]);
        fatal("sum=%02x%02x ", packet[24], packet[25]);
        fatal("src=%02x%02x%02x%02x ",
            packet[26], packet[27], packet[28], packet[29]);
        fatal("dst=%02x%02x%02x%02x ",
            packet[30], packet[31], packet[32], packet[33]);
        for (i=34; i<len; i++)
                fatal("%02x", packet[i]);
        fatal(" ]\n");
}


/*
 *  net_arp():
 *
 *  Handle an ARP (or RARP) packet, coming from the emulated NIC.
 *
 *  An ARP packet might look like this:
 *
 *      ARP header:
 *          ARP hardware addr family:   0001
 *          ARP protocol addr family:   0800
 *          ARP addr lengths:           06 04
 *          ARP request:                0001
 *          ARP from:                   112233445566 01020304
 *          ARP to:                     000000000000 01020301
 *
 *  An ARP request with a 'to' IP value of the gateway should cause an
 *  ARP response packet to be created.
 *
 *  An ARP request with the same from and to IP addresses should be ignored.
 *  (This would be a host testing to see if there is an IP collision.)
 */
static void net_arp(struct net *net, void *extra,
        unsigned char *packet, int len, int reverse)
{
        int q;
        int i;

        /*  TODO: This debug dump assumes ethernet->IPv4 translation:  */
        if (reverse)
                debug("[ net: RARP: ");
        else
                debug("[ net: ARP: ");
        for (i=0; i<2; i++)
                debug("%02x", packet[i]);
        debug(" ");
        for (i=2; i<4; i++)
                debug("%02x", packet[i]);
        debug(" ");
        debug("%02x", packet[4]);
        debug(" ");
        debug("%02x", packet[5]);
        debug(" req=");
        debug("%02x", packet[6]);       /*  Request type  */
        debug("%02x", packet[7]);
        debug(" from=");
        for (i=8; i<18; i++)
                debug("%02x", packet[i]);
        debug(" to=");
        for (i=18; i<28; i++)
                debug("%02x", packet[i]);
        debug(" ]\n");

        if (packet[0] == 0x00 && packet[1] == 0x01 &&
            packet[2] == 0x08 && packet[3] == 0x00 &&
            packet[4] == 0x06 && packet[5] == 0x04) {
                int r = (packet[6] << 8) + packet[7];
                struct ethernet_packet_link *lp;

                switch (r) {
                case 1:         /*  Request  */
                        /*  Only create a reply if this was meant for the
                            gateway:  */
                        if (memcmp(packet+24, net->gateway_ipv4_addr, 4) != 0)
                                break;

                        lp = net_allocate_packet_link(net, extra, 60 + 14);

                        /*  Copy the old packet first:  */
                        memset(lp->data, 0, 60 + 14);
                        memcpy(lp->data + 14, packet, len);

                        /*  Add ethernet ARP header:  */
                        memcpy(lp->data + 0, lp->data + 8 + 14, 6);
                        memcpy(lp->data + 6, net->gateway_ethernet_addr, 6);
                        lp->data[12] = 0x08; lp->data[13] = 0x06;

                        /*  Address of the emulated machine:  */
                        memcpy(lp->data + 18 + 14, lp->data + 8 + 14, 10);

                        /*  Address of the gateway:  */
                        memcpy(lp->data +  8 + 14, net->gateway_ethernet_addr,
                            6);
                        memcpy(lp->data + 14 + 14, net->gateway_ipv4_addr, 4);

                        /*  This is a Reply:  */
                        lp->data[6 + 14] = 0x00; lp->data[7 + 14] = 0x02;

                        break;
                case 3:         /*  Reverse Request  */
                        lp = net_allocate_packet_link(net, extra, 60 + 14);

                        /*  Copy the old packet first:  */
                        memset(lp->data, 0, 60 + 14);
                        memcpy(lp->data + 14, packet, len);

                        /*  Add ethernet RARP header:  */
                        memcpy(lp->data + 0, packet + 8, 6);
                        memcpy(lp->data + 6, net->gateway_ethernet_addr, 6);
                        lp->data[12] = 0x80; lp->data[13] = 0x35;

                        /*  This is a RARP reply:  */
                        lp->data[6 + 14] = 0x00; lp->data[7 + 14] = 0x04;

                        /*  Address of the gateway:  */
                        memcpy(lp->data +  8 + 14, net->gateway_ethernet_addr,
                            6);
                        memcpy(lp->data + 14 + 14, net->gateway_ipv4_addr, 4);

                        /*  MAC address of emulated machine:  */
                        memcpy(lp->data + 18 + 14, packet + 8, 6);

                        /*
                         *  IP address of the emulated machine:  Automagically
                         *  generated from the MAC address. :-)
                         *
                         *  packet+8 points to the client's mac address,
                         *  for example 10:20:30:00:00:z0, where z is 0..15.
                         *  10:20:30:00:00:10 results in 10.0.0.1.
                         */
                        /*  q = (packet[8 + 3]) >> 4;  */
                        /*  q = q*15 + ((packet[8 + 4]) >> 4);  */
                        q = (packet[8 + 5]) >> 4;
                        lp->data[24 + 14] = 10;
                        lp->data[25 + 14] =  0;
                        lp->data[26 + 14] =  0;
                        lp->data[27 + 14] =  q;
                        break;
                case 2:         /*  Reply  */
                case 4:         /*  Reverse Reply  */
                default:
                        fatal("[ net: ARP: UNIMPLEMENTED request type "
                            "0x%04x ]\n", r);
                }
        } else {
                fatal("[ net: ARP: UNIMPLEMENTED arp packet type: ");
                for (i=0; i<len; i++)
                        fatal("%02x", packet[i]);
                fatal(" ]\n");
        }
}


/*
 *  net_ethernet_rx_avail():
 *
 *  Return 1 if there is a packet available for this 'extra' pointer, otherwise
 *  return 0.
 *
 *  Appart from actually checking for incoming packets from the outside world,
 *  this function basically works like net_ethernet_rx() but it only receives
 *  a return value telling us whether there is a packet or not, we don't
 *  actually get the packet.
 */
int net_ethernet_rx_avail(struct net *net, void *extra)
{
        int received_packets_this_tick = 0;
        int max_packets_this_tick = 200;
        int con_id;

        if (net == NULL)
                return 0;

        /*
         *  If the network is distributed across multiple emulator processes,
         *  then receive incoming packets from those processes.
         */
        if (net->local_port != 0) {
                struct sockaddr_in si;
                socklen_t si_len = sizeof(si);
                int res, i;
                unsigned char buf[60000];

                if ((res = recvfrom(net->local_port_socket, buf, sizeof(buf), 0,
                    (struct sockaddr *)&si, &si_len)) != -1) {
                        /*  fatal("DISTRIBUTED packet, %i bytes from %s:%d\n",
                            res, inet_ntoa(si.sin_addr), ntohs(si.sin_port)); */
                        for (i=0; i<net->n_nics; i++) {
                                struct ethernet_packet_link *lp;
                                lp = net_allocate_packet_link(net,
                                    net->nic_extra[i], res);
                                memcpy(lp->data, buf, res);
                        }
                }
        }

        /*
         *  UDP:
         */
        for (con_id=0; con_id<MAX_UDP_CONNECTIONS; con_id++) {
                ssize_t res;
                unsigned char buf[66000];
                unsigned char udp_data[66008];
                struct sockaddr_in from;
                socklen_t from_len = sizeof(from);
                int ip_len, udp_len;
                struct ethernet_packet_link *lp;
                int max_per_packet;
                int bytes_converted = 0;
                int this_packets_data_length;
                int fragment_ofs = 0;

                if (received_packets_this_tick > max_packets_this_tick)
                        break;

                if (!net->udp_connections[con_id].in_use)
                        continue;

                if (net->udp_connections[con_id].socket < 0) {
                        fatal("INTERNAL ERROR in net.c, udp socket < 0 "
                            "but in use?\n");
                        continue;
                }

                res = recvfrom(net->udp_connections[con_id].socket, buf,
                    sizeof(buf), 0, (struct sockaddr *)&from, &from_len);

                /*  No more incoming UDP on this connection?  */
                if (res < 0)
                        continue;

                net->timestamp ++;
                net->udp_connections[con_id].last_used_timestamp =
                    net->timestamp;

                net->udp_connections[con_id].udp_id ++;

                /*
                 *  Special case for the nameserver:  If a UDP packet is
                 *  received from the nameserver (if the nameserver's IP is
                 *  known), fake it so that it comes from the gateway instead.
                 */
                if (net->udp_connections[con_id].fake_ns)
                        memcpy(((unsigned char *)(&from))+4,
                            &net->gateway_ipv4_addr[0], 4);

                /*
                 *  We now have a UDP packet of size 'res' which we need
                 *  turn into one or more ethernet packets for the emulated
                 *  operating system.  Ethernet packets are at most 1518
                 *  bytes long. With some margin, that means we can have
                 *  about 1500 bytes per packet.
                 *
                 *      Ethernet = 14 bytes
                 *      IP = 20 bytes
                 *      (UDP = 8 bytes + data)
                 *
                 *  So data can be at most max_per_packet - 34. For UDP
                 *  fragments, each multiple should (?) be a multiple of
                 *  8 bytes, except the last which doesn't have any such
                 *  restriction.
                 */
                max_per_packet = 1500;

                /*  UDP:  */
                udp_len = res + 8;
                /*  from[2..3] = outside_udp_port  */
                udp_data[0] = ((unsigned char *)&from)[2];
                udp_data[1] = ((unsigned char *)&from)[3];
                udp_data[2] = (net->udp_connections[con_id].
                    inside_udp_port >> 8) & 0xff;
                udp_data[3] = net->udp_connections[con_id].
                    inside_udp_port & 0xff;
                udp_data[4] = udp_len >> 8;
                udp_data[5] = udp_len & 0xff;
                udp_data[6] = 0;
                udp_data[7] = 0;
                memcpy(udp_data + 8, buf, res);
                /*
                 *  TODO:  UDP checksum, if necessary. At least NetBSD
                 *  and OpenBSD accept UDP packets with 0x0000 in the
                 *  checksum field anyway.
                 */

                while (bytes_converted < udp_len) {
                        this_packets_data_length = udp_len - bytes_converted;

                        /*  Do we need to fragment?  */
                        if (this_packets_data_length > max_per_packet-34) {
                                this_packets_data_length =
                                    max_per_packet - 34;
                                while (this_packets_data_length & 7)
                                        this_packets_data_length --;
                        }

                        ip_len = 20 + this_packets_data_length;

                        lp = net_allocate_packet_link(net, extra,
                            14 + 20 + this_packets_data_length);

                        /*  Ethernet header:  */
                        memcpy(lp->data + 0, net->udp_connections[con_id].
                            ethernet_address, 6);
                        memcpy(lp->data + 6, net->gateway_ethernet_addr, 6);
                        lp->data[12] = 0x08;    /*  IP = 0x0800  */
                        lp->data[13] = 0x00;

                        /*  IP header:  */
                        lp->data[14] = 0x45;    /*  ver  */
                        lp->data[15] = 0x00;    /*  tos  */
                        lp->data[16] = ip_len >> 8;
                        lp->data[17] = ip_len & 0xff;
                        lp->data[18] = net->udp_connections[con_id].udp_id >> 8;
                        lp->data[19] = net->udp_connections[con_id].udp_id
                            & 0xff;
                        lp->data[20] = (fragment_ofs >> 8);
                        if (bytes_converted + this_packets_data_length
                            < udp_len)
                                lp->data[20] |= 0x20;   /*  More fragments  */
                        lp->data[21] = fragment_ofs & 0xff;
                        lp->data[22] = 0x40;    /*  ttl  */
                        lp->data[23] = 17;      /*  p = UDP  */
                        lp->data[26] = ((unsigned char *)&from)[4];
                        lp->data[27] = ((unsigned char *)&from)[5];
                        lp->data[28] = ((unsigned char *)&from)[6];
                        lp->data[29] = ((unsigned char *)&from)[7];
                        memcpy(lp->data + 30, net->udp_connections[con_id].
                            inside_ip_address, 4);
                        net_ip_checksum(lp->data + 14, 10, 20);

                        memcpy(lp->data+34, udp_data + bytes_converted,
                            this_packets_data_length);

                        bytes_converted += this_packets_data_length;
                        fragment_ofs = bytes_converted / 8;

                        received_packets_this_tick ++;
                }

                /*  This makes sure we check this connection AGAIN
                    for more incoming UDP packets, before moving to the
                    next connection:  */
                con_id --;
        }

        /*
         *  TCP:
         */
        for (con_id=0; con_id<MAX_TCP_CONNECTIONS; con_id++) {
                unsigned char buf[66000];
                ssize_t res, res2;
                fd_set rfds;
                struct timeval tv;

                if (received_packets_this_tick > max_packets_this_tick)
                        break;

                if (!net->tcp_connections[con_id].in_use)
                        continue;

                if (net->tcp_connections[con_id].socket < 0) {
                        fatal("INTERNAL ERROR in net.c, tcp socket < 0"
                            " but in use?\n");
                        continue;
                }

                if (net->tcp_connections[con_id].incoming_buf == NULL) {
                        net->tcp_connections[con_id].incoming_buf =
                            malloc(TCP_INCOMING_BUF_LEN);
                        if (net->tcp_connections[con_id].incoming_buf == NULL) {
                                printf("out of memory allocating "
                                    "incoming_buf for con_id %i\n", con_id);
                                exit(1);
                        }
                }

                if (net->tcp_connections[con_id].state >=
                    TCP_OUTSIDE_DISCONNECTED)
                        continue;

                /*  Is the socket available for output?  */
                FD_ZERO(&rfds);         /*  write  */
                FD_SET(net->tcp_connections[con_id].socket, &rfds);
                tv.tv_sec = tv.tv_usec = 0;
                errno = 0;
                res = select(net->tcp_connections[con_id].socket+1,
                    NULL, &rfds, NULL, &tv);

                if (errno == ECONNREFUSED) {
                        fatal("[ ECONNREFUSED: TODO ]\n");
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        fatal("CHANGING TO TCP_OUTSIDE_DISCONNECTED "
                            "(refused connection)\n");
                        continue;
                }

                if (errno == ETIMEDOUT) {
                        fatal("[ ETIMEDOUT: TODO ]\n");
                        /*  TODO  */
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        fatal("CHANGING TO TCP_OUTSIDE_DISCONNECTED "
                            "(timeout)\n");
                        continue;
                }

                if (net->tcp_connections[con_id].state ==
                    TCP_OUTSIDE_TRYINGTOCONNECT && res > 0) {
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_CONNECTED;
                        debug("CHANGING TO TCP_OUTSIDE_CONNECTED\n");
                        net_ip_tcp_connectionreply(net, extra, con_id, 1,
                            NULL, 0, 0);
                }

                if (net->tcp_connections[con_id].state ==
                    TCP_OUTSIDE_CONNECTED && res < 1) {
                        continue;
                }

                /*
                 *  Does this connection have unacknowledged data?  Then, if
                 *  enough number of rounds have passed, try to resend it using
                 *  the old value of seqnr.
                 */
                if (net->tcp_connections[con_id].incoming_buf_len != 0) {
                        net->tcp_connections[con_id].incoming_buf_rounds ++;
                        if (net->tcp_connections[con_id].incoming_buf_rounds >
                            10000) {
                                debug("  at seqnr %u but backing back to %u,"
                                    " resending %i bytes\n",
                                    net->tcp_connections[con_id].outside_seqnr,
                                    net->tcp_connections[con_id].
                                    incoming_buf_seqnr,
                                    net->tcp_connections[con_id].
                                    incoming_buf_len);

                                net->tcp_connections[con_id].
                                    incoming_buf_rounds = 0;
                                net->tcp_connections[con_id].outside_seqnr =
                                    net->tcp_connections[con_id].
                                    incoming_buf_seqnr;

                                net_ip_tcp_connectionreply(net, extra, con_id,
                                    0, net->tcp_connections[con_id].
                                    incoming_buf,
                                    net->tcp_connections[con_id].
                                    incoming_buf_len, 0);
                        }
                        continue;
                }

                /*  Don't receive unless the guest OS is ready!  */
                if (((int32_t)net->tcp_connections[con_id].outside_seqnr -
                    (int32_t)net->tcp_connections[con_id].inside_acknr) > 0) {
/*                      fatal("YOYO 1! outside_seqnr - inside_acknr = %i\n",
                            net->tcp_connections[con_id].outside_seqnr -
                            net->tcp_connections[con_id].inside_acknr);  */
                        continue;
                }

                /*  Is there incoming data available on the socket?  */
                FD_ZERO(&rfds);         /*  read  */
                FD_SET(net->tcp_connections[con_id].socket, &rfds);
                tv.tv_sec = tv.tv_usec = 0;
                res2 = select(net->tcp_connections[con_id].socket+1, &rfds,
                    NULL, NULL, &tv);

                /*  No more incoming TCP data on this connection?  */
                if (res2 < 1)
                        continue;

                res = read(net->tcp_connections[con_id].socket, buf, 1400);
                if (res > 0) {
                        /*  debug("\n -{- %lli -}-\n", (long long)res);  */
                        net->tcp_connections[con_id].incoming_buf_len = res;
                        net->tcp_connections[con_id].incoming_buf_rounds = 0;
                        net->tcp_connections[con_id].incoming_buf_seqnr = 
                            net->tcp_connections[con_id].outside_seqnr;
                        debug("  putting %i bytes (seqnr %u) in the incoming "
                            "buf\n", res, net->tcp_connections[con_id].
                            incoming_buf_seqnr);
                        memcpy(net->tcp_connections[con_id].incoming_buf,
                            buf, res);

                        net_ip_tcp_connectionreply(net, extra, con_id, 0,
                            buf, res, 0);
                } else if (res == 0) {
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        debug("CHANGING TO TCP_OUTSIDE_DISCONNECTED, read"
                            " res=0\n");
                        net_ip_tcp_connectionreply(net, extra, con_id, 0,
                            NULL, 0, 0);
                } else {
                        net->tcp_connections[con_id].state =
                            TCP_OUTSIDE_DISCONNECTED;
                        fatal("CHANGING TO TCP_OUTSIDE_DISCONNECTED, "
                            "read res<=0, errno = %i\n", errno);
                        net_ip_tcp_connectionreply(net, extra, con_id, 0,
                            NULL, 0, 0);
                }

                net->timestamp ++;
                net->tcp_connections[con_id].last_used_timestamp =
                    net->timestamp;
        }

        return net_ethernet_rx(net, extra, NULL, NULL);
}


/*
 *  net_ethernet_rx():
 *
 *  Receive an ethernet packet. (This means handing over an already prepared
 *  packet from this module (net.c) to a specific ethernet controller device.)
 *
 *  Return value is 1 if there was a packet available. *packetp and *lenp
 *  will be set to the packet's data pointer and length, respectively, and
 *  the packet will be removed from the linked list). If there was no packet
 *  available, 0 is returned.
 *
 *  If packetp is NULL, then the search is aborted as soon as a packet with
 *  the correct 'extra' field is found, and a 1 is returned, but as packetp
 *  is NULL we can't return the actual packet. (This is the internal form
 *  if net_ethernet_rx_avail().)
 */
int net_ethernet_rx(struct net *net, void *extra,
        unsigned char **packetp, int *lenp)
{
        struct ethernet_packet_link *lp, *prev;

        if (net == NULL)
                return 0;

        /*  Find the first packet which has the right 'extra' field.  */

        lp = net->first_ethernet_packet;
        prev = NULL;
        while (lp != NULL) {
                if (lp->extra == extra) {
                        /*  We found a packet for this controller!  */
                        if (packetp == NULL || lenp == NULL)
                                return 1;

                        /*  Let's return it:  */
                        (*packetp) = lp->data;
                        (*lenp) = lp->len;

                        /*  Remove this link from the linked list:  */
                        if (prev == NULL)
                                net->first_ethernet_packet = lp->next;
                        else
                                prev->next = lp->next;

                        if (lp->next == NULL)
                                net->last_ethernet_packet = prev;
                        else
                                lp->next->prev = prev;

                        free(lp);

                        /*  ... and return successfully:  */
                        return 1;
                }

                prev = lp;
                lp = lp->next;
        }

        /*  No packet found. :-(  */
        return 0;
}


/*
 *  send_udp():
 *
 *  Send a simple UDP packet to some other (real) host. Used for distributed
 *  network simulations.
 */
void send_udp(struct in_addr *addrp, int portnr, unsigned char *packet,
        size_t len)
{
        int s;
        struct sockaddr_in si;

        s = socket(AF_INET, SOCK_DGRAM, 0);
        if (s < 0) {
                perror("send_udp(): socket");
                return;
        }

        /*  fatal("send_udp(): sending to port %i\n", portnr);  */

        si.sin_family = AF_INET;
        si.sin_addr = *addrp;
        si.sin_port = htons(portnr);

        if (sendto(s, packet, len, 0, (struct sockaddr *)&si,
            sizeof(si)) != len) {
                perror("send_udp(): sendto");
        }

        close(s);
}


/*
 *  net_ethernet_tx():
 *
 *  Transmit an ethernet packet, as seen from the emulated ethernet controller.
 *  If the packet can be handled here, it will not necessarily be transmitted
 *  to the outside world.
 */
void net_ethernet_tx(struct net *net, void *extra,
        unsigned char *packet, int len)
{
        int i, n;

        if (net == NULL)
                return;

        /*  Drop too small packets:  */
        if (len < 20)
                return;

        /*
         *  Copy this packet to all other NICs on this network:
         */
        if (extra != NULL && net->n_nics > 0) {
                for (i=0; i<net->n_nics; i++)
                        if (extra != net->nic_extra[i]) {
                                struct ethernet_packet_link *lp;
                                lp = net_allocate_packet_link(net,
                                    net->nic_extra[i], len);

                                /*  Copy the entire packet:  */
                                memcpy(lp->data, packet, len);
                        }
        }

        /*
         *  If this network is distributed across multiple emulator processes,
         *  then transmit the packet to those other processes.
         */
        if (net->remote_nets != NULL) {
                struct remote_net *rnp = net->remote_nets;
                while (rnp != NULL) {
                        send_udp(&rnp->ipv4_addr, rnp->portnr, packet, len);
                        rnp = rnp->next;
                }
        }

        /*  Drop packets that are not destined for the gateway:  */
        if (memcmp(packet, net->gateway_ethernet_addr, 6) != 0
            && packet[0] != 0xff && packet[0] != 0x00)
                return;

        /*
         *  The code below simulates the behaviour of a "NAT"-style
         *  gateway.
         */
#if 0
        fatal("[ net: ethernet: ");
        for (i=0; i<6; i++)     fatal("%02x", packet[i]); fatal(" ");
        for (i=6; i<12; i++)    fatal("%02x", packet[i]); fatal(" ");
        for (i=12; i<14; i++)   fatal("%02x", packet[i]); fatal(" ");
        for (i=14; i<len; i++)  fatal("%02x", packet[i]); fatal(" ]\n");
#endif

        /*  Sprite:  */
        if (packet[12] == 0x05 && packet[13] == 0x00) {
                /*  TODO.  */
                fatal("[ net: TX: UNIMPLEMENTED Sprite packet ]\n");
                return;
        }

        /*  IP:  */
        if (packet[12] == 0x08 && packet[13] == 0x00) {
                /*  Routed via the gateway?  */
                if (memcmp(packet+0, net->gateway_ethernet_addr, 6) == 0) {
                        net_ip(net, extra, packet, len);
                        return;
                }

                /*  Broadcast? (DHCP does this.)  */
                n = 0;
                for (i=0; i<6; i++)
                        if (packet[i] == 0xff)
                                n++;
                if (n == 6) {
                        net_ip_broadcast(net, extra, packet, len);
                        return;
                }

                if (net->n_nics < 2) {
                        fatal("[ net: TX: IP packet not for gateway, "
                            "and not broadcast: ");
                        for (i=0; i<14; i++)
                                fatal("%02x", packet[i]);
                        fatal(" ]\n");
                }
                return;
        }

        /*  ARP:  */
        if (packet[12] == 0x08 && packet[13] == 0x06) {
                if (len != 42 && len != 60)
                        fatal("[ net_ethernet_tx: WARNING! unusual "
                            "ARP len (%i) ]\n", len);
                net_arp(net, extra, packet + 14, len - 14, 0);
                return;
        }

        /*  RARP:  */
        if (packet[12] == 0x80 && packet[13] == 0x35) {
                net_arp(net, extra, packet + 14, len - 14, 1);
                return;
        }

        /*  IPv6:  */
        if (packet[12] == 0x86 && packet[13] == 0xdd) {
                /*  TODO.  */
                fatal("[ net: TX: UNIMPLEMENTED IPv6 packet ]\n");
                return;
        }

        fatal("[ net: TX: UNIMPLEMENTED ethernet packet type 0x%02x%02x! ]\n",
            packet[12], packet[13]);
}


/*
 *  parse_resolvconf():
 *
 *  This function parses "/etc/resolv.conf" to figure out the nameserver
 *  and domain used by the host.
 */
static void parse_resolvconf(struct net *net)
{
        FILE *f;
        char buf[8000];
        size_t len;
        int res;
        unsigned int i, start;

        /*
         *  This is a very ugly hack, which tries to figure out which
         *  nameserver the host uses by looking for the string 'nameserver'
         *  in /etc/resolv.conf.
         *
         *  This can later on be used for DHCP autoconfiguration.  (TODO)
         *
         *  TODO: This is hardcoded to use /etc/resolv.conf. Not all
         *        operating systems use that filename.
         *
         *  TODO: This is hardcoded for AF_INET (that is, IPv4).
         *
         *  TODO: This assumes that the first nameserver listed is the
         *        one to use.
         */
        f = fopen("/etc/resolv.conf", "r");
        if (f == NULL)
                return;

        /*  TODO: get rid of the hardcoded values  */
        memset(buf, 0, sizeof(buf));
        len = fread(buf, 1, sizeof(buf) - 100, f);
        fclose(f);
        buf[sizeof(buf) - 1] = '\0';

        for (i=0; i<len; i++)
                if (strncmp(buf+i, "nameserver", 10) == 0) {
                        char *p;

                        /*
                         *  "nameserver" (1 or more whitespace)
                         *  "x.y.z.w" (non-digit)
                         */

                        /*  debug("found nameserver at offset %i\n", i);  */
                        i += 10;
                        while (i<len && (buf[i]==' ' || buf[i]=='\t'))
                                i++;
                        if (i >= len)
                                break;
                        start = i;

                        p = buf+start;
                        while ((*p >= '0' && *p <= '9') || *p == '.')
                                p++;
                        *p = '\0';

#ifdef HAVE_INET_PTON
                        res = inet_pton(AF_INET, buf + start,
                            &net->nameserver_ipv4);
#else
                        res = inet_aton(buf + start, &net->nameserver_ipv4);
#endif
                        if (res < 1)
                                break;

                        net->nameserver_known = 1;
                        break;
                }

        for (i=0; i<len; i++)
                if (strncmp(buf+i, "domain", 6) == 0) {
                        /*  "domain" (1 or more whitespace) domain_name  */
                        i += 6;
                        while (i<len && (buf[i]==' ' || buf[i]=='\t'))
                                i++;
                        if (i >= len)
                                break;

                        start = i;
                        while (i<len && buf[i]!='\n' && buf[i]!='\r')
                                i++;
                        if (i < len)
                                buf[i] = '\0';
                        /*  fatal("DOMAIN='%s'\n", buf + start);  */
                        net->domain_name = strdup(buf + start);
                        break;
                }
}


/*
 *  net_add_nic():
 *
 *  Add a NIC to a network. (All NICs on a network will see each other's
 *  packets.)
 */
void net_add_nic(struct net *net, void *extra, unsigned char *macaddr)
{
        if (net == NULL)
                return;

        if (extra == NULL) {
                fprintf(stderr, "net_add_nic(): extra = NULL\n");
                exit(1);
        }

        net->n_nics ++;
        net->nic_extra = realloc(net->nic_extra, sizeof(void *)
            * net->n_nics);
        if (net->nic_extra == NULL) {
                fprintf(stderr, "net_add_nic(): out of memory\n");
                exit(1);
        }

        net->nic_extra[net->n_nics - 1] = extra;
}


/*
 *  net_gateway_init():
 *
 *  This function creates a "gateway" machine (for example at IPv4 address
 *  10.0.0.254, if the net is 10.0.0.0/8), which acts as a gateway/router/
 *  nameserver etc.
 */
static void net_gateway_init(struct net *net)
{
        unsigned char *p = (void *) &net->netmask_ipv4;
        uint32_t x;
        int xl;

        x = (p[0] << 24) + (p[1] << 16) + (p[2] << 8) + p[3];
        xl = 32 - net->netmask_ipv4_len;
        if (xl > 8)
                xl = 8;
        x |= ((1 << xl) - 1) & ~1;

        net->gateway_ipv4_addr[0] = x >> 24;
        net->gateway_ipv4_addr[1] = x >> 16;
        net->gateway_ipv4_addr[2] = x >> 8;
        net->gateway_ipv4_addr[3] = x;

        net->gateway_ethernet_addr[0] = 0x60;
        net->gateway_ethernet_addr[1] = 0x50;
        net->gateway_ethernet_addr[2] = 0x40;
        net->gateway_ethernet_addr[3] = 0x30;
        net->gateway_ethernet_addr[4] = 0x20;
        net->gateway_ethernet_addr[5] = 0x10;
}


/*
 *  net_dumpinfo():
 *
 *  Called from the debugger's "machine" command, to print some info about
 *  a network.
 */
void net_dumpinfo(struct net *net)
{
        int iadd = 4;
        struct remote_net *rnp;

        debug("net: simulating ");

        net_debugaddr(&net->netmask_ipv4, ADDR_IPV4);
        debug("/%i", net->netmask_ipv4_len);

        debug(" (max outgoing: TCP=%i, UDP=%i)\n",
            MAX_TCP_CONNECTIONS, MAX_UDP_CONNECTIONS);

        debug_indentation(iadd);

        debug("simulated gateway: ");
        net_debugaddr(&net->gateway_ipv4_addr, ADDR_IPV4);
        debug(" (");
        net_debugaddr(&net->gateway_ethernet_addr, ADDR_ETHERNET);
        debug(")\n");

        debug_indentation(iadd);
        if (!net->nameserver_known) {
                debug("(could not determine nameserver)");
        } else {
                debug("using nameserver ");
                net_debugaddr(&net->nameserver_ipv4, ADDR_IPV4);
        }
        if (net->domain_name != NULL && net->domain_name[0])
                debug(", domain \"%s\"", net->domain_name);
        debug("\n");
        debug_indentation(-iadd);

        rnp = net->remote_nets;
        if (net->local_port != 0)
                debug("distributed network: local port = %i\n",
                    net->local_port);
        debug_indentation(iadd);
        while (rnp != NULL) {
                debug("remote \"%s\": ", rnp->name);
                net_debugaddr(&rnp->ipv4_addr, ADDR_IPV4);
                debug(" port %i\n", rnp->portnr);
                rnp = rnp->next;
        }
        debug_indentation(-iadd);

        debug_indentation(-iadd);
}


/*
 *  net_init():
 *
 *  This function creates a network, and returns a pointer to it.
 *  ipv4addr should be something like "10.0.0.0", netipv4len = 8.
 *  If n_remote is more than zero, remote should be a pointer to an array
 *  of strings of the following format: "host:portnr".
 *
 *  On failure, exit() is called.
 */
struct net *net_init(struct emul *emul, int init_flags,
        char *ipv4addr, int netipv4len, char **remote, int n_remote,
        int local_port)
{
        struct net *net;
        int res;

        net = malloc(sizeof(struct net));
        if (net == NULL) {
                fprintf(stderr, "net_init(): out of memory\n");
                exit(1);
        }

        memset(net, 0, sizeof(struct net));

        /*  Set the back pointer:  */
        net->emul = emul;

        /*  Sane defaults:  */
        net->timestamp = 0;
        net->first_ethernet_packet = net->last_ethernet_packet = NULL;

#ifdef HAVE_INET_PTON
        res = inet_pton(AF_INET, ipv4addr, &net->netmask_ipv4);
#else
        res = inet_aton(ipv4addr, &net->netmask_ipv4);
#endif
        if (res < 1) {
                fprintf(stderr, "net_init(): could not parse IPv4 address"
                    " '%s'\n", ipv4addr);
                exit(1);
        }

        if (netipv4len < 1 || netipv4len > 30) {
                fprintf(stderr, "net_init(): extremely weird ipv4 "
                    "network length (%i)\n", netipv4len);
                exit(1);
        }
        net->netmask_ipv4_len = netipv4len;

        net->nameserver_known = 0;
        net->domain_name = "";
        parse_resolvconf(net);

        /*  Distributed network? Then add remote hosts:  */
        if (local_port != 0) {
                struct sockaddr_in si_self;

                net->local_port = local_port;
                net->local_port_socket = socket(AF_INET, SOCK_DGRAM, 0);
                if (net->local_port_socket < 0) {
                        perror("socket");
                        exit(1);
                }

                memset((char *)&si_self, sizeof(si_self), 0);
                si_self.sin_family = AF_INET;
                si_self.sin_port = htons(local_port);
                si_self.sin_addr.s_addr = htonl(INADDR_ANY);
                if (bind(net->local_port_socket, (struct sockaddr *)&si_self,
                    sizeof(si_self)) < 0) {
                        perror("bind");
                        exit(1);
                }

                /*  Set the socket to non-blocking:  */
                res = fcntl(net->local_port_socket, F_GETFL);
                fcntl(net->local_port_socket, F_SETFL, res | O_NONBLOCK);
        }
        if (n_remote != 0) {
                struct remote_net *rnp;
                while ((n_remote--) != 0) {
                        struct hostent *hp;

                        /*  debug("adding '%s'\n", remote[n_remote]);  */
                        rnp = malloc(sizeof(struct remote_net));
                        memset(rnp, 0, sizeof(struct remote_net));

                        rnp->next = net->remote_nets;
                        net->remote_nets = rnp;

                        rnp->name = strdup(remote[n_remote]);
                        if (strchr(rnp->name, ':') != NULL)
                                strchr(rnp->name, ':')[0] = '\0';

                        hp = gethostbyname(rnp->name);
                        if (hp == NULL) {
                                fprintf(stderr, "could not resolve '%s'\n",
                                    rnp->name);
                                exit(1);
                        }
                        memcpy(&rnp->ipv4_addr, hp->h_addr, hp->h_length);
                        free(rnp->name);

                        /*  And again:  */
                        rnp->name = strdup(remote[n_remote]);
                        if (strchr(rnp->name, ':') == NULL) {
                                fprintf(stderr, "Remote network '%s' is not "
                                    "'host:portnr'?\n", rnp->name);
                                exit(1);
                        }
                        rnp->portnr = atoi(strchr(rnp->name, ':') + 1);
                }
        }

        if (init_flags & NET_INIT_FLAG_GATEWAY)
                net_gateway_init(net);

        net_dumpinfo(net);

        /*  This is neccessary when using the real network:  */
        signal(SIGPIPE, SIG_IGN);

        return net;
}
