openWrt 数据接收过程分析

最新推荐文章于 2024-08-26 15:26:51 发布

wynter_

最新推荐文章于 2024-08-26 15:26:51 发布

阅读量1.5k

点赞数

分类专栏： openwrt

openwrt 专栏收录该内容

11 篇文章 1 订阅

订阅专栏

OpenWRT数据接收过程这里使用的是ath9k网卡驱动，硬件平台是TP-link TL-WR841N V7.1 路由器

1. ieee80211_tasklet_handler()

Linux内核是通过中断来对接收到的数据进行响应的。当硬件检测到有接收数据的时候，产生一个中断，中断触发下半部的tasklet机制，在802.11协议栈这里会调用ieee80211_tasklet_handler()函数。我们来看一看函数体：（位于OpenWRT内核文件夹子目录/net/mac80211，文件main.c中）

static void ieee80211_tasklet_handler(unsigned long data)  
{  
       struct ieee80211_local *local = (struct ieee80211_local *) data;  
       struct sk_buff *skb;  
       while ((skb = skb_dequeue(&local->skb_queue)) ||  
              (skb = skb_dequeue(&local->skb_queue_unreliable))) {  
              switch (skb->pkt_type) {  
              case IEEE80211_RX_MSG:  
                     /* Clear skb->pkt_type in order to not confuse kernel 
                      * netstack. */  
                     skb->pkt_type = 0;  
                     ieee80211_rx(&local->hw, skb);  
                     break;  
              case IEEE80211_TX_STATUS_MSG:  
                     ...  
              default:  
                     ...  
              }  
       }  
}

2. ieee80211_rx()

系统收到数据时会开辟一个sk_buff缓存空间进行数据的存储，ieee80211_tasklet_handler()触发后对sk_buff中存储的数据帧进行判断，如果是接收来的数据（MPDU），则进入ieee80211_rx()函数：（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）。

void ieee80211_rx(struct ieee80211_hw *hw, struct sk_buff *skb)  
{  
       struct ieee80211_local *local = hw_to_local(hw);  
       struct ieee80211_rate *rate = NULL;  
       struct ieee80211_supported_band *sband;  
       struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);  
       ...  
       __ieee80211_rx_handle_packet(hw, skb);  
       rcu_read_unlock();  
       return;  
 drop:  
       kfree_skb(skb);  
}  
EXPORT_SYMBOL(ieee80211_rx);

3. __ieee80211_rx_handle_packet()

ieee80211_rx()函数再调用__ieee80211_rx_handle_packet()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中），__ieee80211_rx_handle_packet()是接收帧的处理函数，会对帧类型进行判断，如果检测出该帧是beacon帧（或sta主动扫描后从AP端返回的响应帧），则进入ieee80211_scan_rx()函数对帧信息进行扫描，如果是数据帧，则调用ieee80211_prepare_and_rx_handle()对帧进行处理，下面分析接收帧为数据帧的情况。

static void __ieee80211_rx_handle_packet(struct ieee80211_hw *hw, struct sk_buff *skb)  
{  
       struct ieee80211_local *local = hw_to_local(hw);  
       struct ieee80211_sub_if_data *sdata;  
       struct ieee80211_hdr *hdr;  
       __le16 fc;  
       struct ieee80211_rx_data rx;  
       struct ieee80211_sub_if_data *prev;  
       struct sta_info *sta, *tmp, *prev_sta;  
       int err = 0;  
       ...  
       hdr = (struct ieee80211_hdr *)skb->data;  
       ieee80211_parse_qos(&rx);  
       ieee80211_verify_alignment(&rx);  
       if (unlikely(ieee80211_is_probe_resp(hdr->frame_control) ||  
                   ieee80211_is_beacon(hdr->frame_control)))  
       {          
              ieee80211_scan_rx(local, skb);              /*扫描帧信息*/  
              }  
       if (ieee80211_is_data(fc)) {  
              prev_sta = NULL;  
              for_each_sta_info(local, hdr->addr2, sta, tmp) {  
                     if (!prev_sta) {  
                            prev_sta = sta;  
                            continue;  
                     }  
                     rx.sta = prev_sta;  
                     rx.sdata = prev_sta->sdata;  
                     ieee80211_prepare_and_rx_handle(&rx, skb, false);  
                     prev_sta = sta;  
              }  
              ...  
       }  
       ...  
 out:  
       dev_kfree_skb(skb);  
}

4. ieee80211_prepare_and_rx_handle()

调用ieee80211_prepare_and_rx_handle()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）。

/* 
 * This function returns whether or not the SKB 
 * was destined for RX processing or not, which, 
 * if consume is true, is equivalent to whether 
 * or not the skb was consumed. 
 */  
static bool ieee80211_prepare_and_rx_handle(struct ieee80211_rx_data *rx, struct sk_buff *skb, bool consume)  
{  
…  
       ieee80211_invoke_rx_handlers(rx);  
       return true;  
}

5. ieee80211_invoke_rx_handlers()

调用ieee80211_invoke_rx_handlers()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）。

static void ieee80211_invoke_rx_handlers(struct ieee80211_rx_data *rx)  
{  
…  
       ieee80211_rx_reorder_ampdu(rx, &reorder_release);  
       ieee80211_rx_handlers(rx, &reorder_release);  
       return;  
 rxh_next:  
       ieee80211_rx_handlers_result(rx, res);  
…  
}

6. ieee80211_rx_handlers()

调用ieee80211_rx_handlers()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）

static void ieee80211_rx_handlers(struct ieee80211_rx_data *rx, struct sk_buff_head *frames)  
{  
       ieee80211_rx_result res = RX_DROP_MONITOR;  
       struct sk_buff *skb;  
#define CALL_RXH(rxh)                     \  
       do {                            \  
              res = rxh(rx);              \  
              if (res != RX_CONTINUE)    \  
                     goto rxh_next;  \  
       } while (0);  
       spin_lock_bh(&rx->local->rx_path_lock);  
       while ((skb = __skb_dequeue(frames))) {  
              /* 
               * all the other fields are valid across frames 
               * that belong to an aMPDU since they are on the 
               * same TID from the same station 
               */  
              rx->skb = skb;  
              CALL_RXH(ieee80211_rx_h_decrypt)  
              CALL_RXH(ieee80211_rx_h_check_more_data)  
              CALL_RXH(ieee80211_rx_h_uapsd_and_pspoll)  
              CALL_RXH(ieee80211_rx_h_sta_process)  
              CALL_RXH(ieee80211_rx_h_defragment)  
              CALL_RXH(ieee80211_rx_h_michael_mic_verify)  
              /* must be after MMIC verify so header is counted in MPDU mic */  
#ifdef CPTCFG_MAC80211_MESH  
              if (ieee80211_vif_is_mesh(&rx->sdata->vif))  
                     CALL_RXH(ieee80211_rx_h_mesh_fwding);  
#endif  
              CALL_RXH(ieee80211_rx_h_amsdu)  
              CALL_RXH(ieee80211_rx_h_data)  
              /* special treatment -- needs the queue */  
              res = ieee80211_rx_h_ctrl(rx, frames);  
              if (res != RX_CONTINUE)  
                     goto rxh_next;  
              CALL_RXH(ieee80211_rx_h_mgmt_check)  
              CALL_RXH(ieee80211_rx_h_action)  
              CALL_RXH(ieee80211_rx_h_userspace_mgmt)  
              CALL_RXH(ieee80211_rx_h_action_return)  
              CALL_RXH(ieee80211_rx_h_mgmt)  
 rxh_next:  
              ieee80211_rx_handlers_result(rx, res);  
#undef CALL_RXH  
       }  
       spin_unlock_bh(&rx->local->rx_path_lock);  
}

7. ieee80211_rx_h_data()

只看是数据帧的情况，会继续调用ieee80211_rx_h_data()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）。

static ieee80211_rx_result debug_noinline ieee80211_rx_h_data(struct ieee80211_rx_data *rx)  
{  
…  
       rx->skb->dev = dev;  
       dev->stats.rx_packets++;  
       dev->stats.rx_bytes += rx->skb->len;  
       if (local->ps_sdata && local->hw.conf.dynamic_ps_timeout > 0 &&  
           !is_multicast_ether_addr(  
                  ((struct ethhdr *)rx->skb->data)->h_dest) &&  
           (!local->scanning &&  
            !test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))) {  
                     mod_timer(&local->dynamic_ps_timer, jiffies +  
                      msecs_to_jiffies(local->hw.conf.dynamic_ps_timeout));  
       }  
       ieee80211_deliver_skb(rx);  
       return RX_QUEUED;  
}

8. ieee80211_deliver_skb()

调用ieee80211_deliver_skb()（位于OpenWRT内核文件夹子目录/net/mac80211，文件rx.c中）。

/* 
 * requires that rx->skb is a frame with ethernet header 
 */  
static void  
ieee80211_deliver_skb(struct ieee80211_rx_data *rx)  
{  
       …  
       skb = rx->skb;  
       …  
       if (skb) {  
              int align __maybe_unused;  
#ifndef CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS  
              /* 
               * 'align' will only take the values 0 or 2 here 
               * since all frames are required to be aligned 
               * to 2-byte boundaries when being passed to 
               * mac80211; the code here works just as well if 
               * that isn't true, but mac80211 assumes it can 
               * access fields as 2-byte aligned (e.g. for 
               * compare_ether_addr) 
               */  
              align = ((unsigned long)(skb->data + sizeof(struct ethhdr))) & 3;  
              if (align) {  
                     if (WARN_ON(skb_headroom(skb) < 3)) {  
                            dev_kfree_skb(skb);  
                            skb = NULL;  
                     } else {  
                            u8 *data = skb->data;  
                            size_t len = skb_headlen(skb);  
                            skb->data -= align;  
                            memmove(skb->data, data, len);  
                            skb_set_tail_pointer(skb, len);  
                     }  
              }  
#endif  
              if (skb) {  
                     /* deliver to local stack */  
                     skb->protocol = eth_type_trans(skb, dev);  
                     memset(skb->cb, 0, sizeof(skb->cb));  
                     netif_receive_skb(skb);  
              }  
       }  
       …  
}

这里最核心的代码就是netif_receive_skb(skb)了，至此，数据已经接收到并发送至内核的网络子系统去处理。netif_receive_skb定义于内核文件夹 linux -3.3.8的子目录/net/core的文件dev.c中。