event.c

   1 #include <stdint.h>
   2 #include <stdbool.h>
   3 #include <net/if.h>
   4 #include <errno.h>
   5 #include "iw.h"
   6
   7 static int no_seq_check(struct nl_msg *msg, void *arg)
   8 {
   9         return NL_OK;
  10 }
  11
  12 struct ieee80211_beacon_channel {
  13         __u16 center_freq;
  14         bool passive_scan;
  15         bool no_ibss;
  16 };
  17
  18 static int parse_beacon_hint_chan(struct nlattr *tb,
  19                                   struct ieee80211_beacon_channel *chan)
  20 {
  21         struct nlattr *tb_freq[NL80211_FREQUENCY_ATTR_MAX + 1];
  22         static struct nla_policy beacon_freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
  23                 [NL80211_FREQUENCY_ATTR_FREQ] = { .type = NLA_U32 },
  24                 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN] = { .type = NLA_FLAG },
  25                 [NL80211_FREQUENCY_ATTR_NO_IBSS] = { .type = NLA_FLAG },
  26         };
  27
  28         if (nla_parse_nested(tb_freq,
  29                              NL80211_FREQUENCY_ATTR_MAX,
  30                              tb,
  31                              beacon_freq_policy))
  32                 return -EINVAL;
  33
  34         chan->center_freq = nla_get_u32(tb_freq[NL80211_FREQUENCY_ATTR_FREQ]);
  35
  36         if (tb_freq[NL80211_FREQUENCY_ATTR_PASSIVE_SCAN])
  37                 chan->passive_scan = true;
  38         if (tb_freq[NL80211_FREQUENCY_ATTR_NO_IBSS])
  39                 chan->no_ibss = true;
  40
  41         return 0;
  42 }
  43
  44 static void print_frame(struct print_event_args *args, struct nlattr *attr)
  45 {
  46         uint8_t *frame;
  47         size_t len;
  48         int i;
  49         char macbuf[6*3];
  50         uint16_t tmp;
  51
  52         if (!attr)
  53                 printf(" [no frame]");
  54
  55         frame = nla_data(attr);
  56         len = nla_len(attr);
  57
  58         if (len < 26) {
  59                 printf(" [invalid frame: ");
  60                 goto print_frame;
  61         }
  62
  63         mac_addr_n2a(macbuf, frame + 10);
  64         printf(" %s -> ", macbuf);
  65         mac_addr_n2a(macbuf, frame + 4);
  66         printf("%s", macbuf);
  67
  68         switch (frame[0] & 0xfc) {
  69         case 0x10: /* assoc resp */
  70         case 0x30: /* reassoc resp */
  71                 /* status */
  72                 tmp = (frame[27] << 8) + frame[26];
  73                 printf(" status: %d: %s", tmp, get_status_str(tmp));
  74                 break;
  75         case 0x00: /* assoc req */
  76         case 0x20: /* reassoc req */
  77                 break;
  78         case 0xb0: /* auth */
  79                 /* status */
  80                 tmp = (frame[29] << 8) + frame[28];
  81                 printf(" status: %d: %s", tmp, get_status_str(tmp));
  82                 break;
  83                 break;
  84         case 0xa0: /* disassoc */
  85         case 0xc0: /* deauth */
  86                 /* reason */
  87                 tmp = (frame[25] << 8) + frame[24];
  88                 printf(" reason %d: %s", tmp, get_reason_str(tmp));
  89                 break;
  90         }
  91
  92         if (!args->frame)
  93                 return;
  94
  95         printf(" [frame:");
  96
  97  print_frame:
  98         for (i = 0; i < len; i++)
  99                 printf(" %.02x", frame[i]);
 100         printf("]");
 101 }
 102
 103 static void parse_cqm_event(struct nlattr **attrs)
 104 {
 105         static struct nla_policy cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
 106                 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
 107                 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
 108                 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
 109         };
 110         struct nlattr *cqm[NL80211_ATTR_CQM_MAX + 1];
 111         struct nlattr *cqm_attr = attrs[NL80211_ATTR_CQM];
 112
 113         printf("connection quality monitor event: ");
 114
 115         if (!cqm_attr ||
 116             nla_parse_nested(cqm, NL80211_ATTR_CQM_MAX, cqm_attr, cqm_policy)) {
 117                 printf("missing data!\n");
 118                 return;
 119         }
 120
 121         if (cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT]) {
 122                 enum nl80211_cqm_rssi_threshold_event rssi_event;
 123                 rssi_event = nla_get_u32(cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT]);
 124                 if (rssi_event == NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH)
 125                         printf("RSSI went above threshold\n");
 126                 else
 127                         printf("RSSI went below threshold\n");
 128         } else if (cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT] &&
 129                    attrs[NL80211_ATTR_MAC]) {
 130                 uint32_t frames;
 131                 char buf[3*6];
 132
 133                 frames = nla_get_u32(cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT]);
 134                 mac_addr_n2a(buf, nla_data(attrs[NL80211_ATTR_MAC]));
 135                 printf("peer %s didn't ACK %d packets\n", buf, frames);
 136         } else
 137                 printf("unknown event\n");
 138 }
 139
 140 static const char * key_type_str(enum nl80211_key_type key_type)
 141 {
 142         static char buf[30];
 143         switch (key_type) {
 144         case NL80211_KEYTYPE_GROUP:
 145                 return "Group";
 146         case NL80211_KEYTYPE_PAIRWISE:
 147                 return "Pairwise";
 148         case NL80211_KEYTYPE_PEERKEY:
 149                 return "PeerKey";
 150         default:
 151                 snprintf(buf, sizeof(buf), "unknown(%d)", key_type);
 152                 return buf;
 153         }
 154 }
 155
 156 static void parse_mic_failure(struct nlattr **attrs)
 157 {
 158         printf("Michael MIC failure event:");
 159
 160         if (attrs[NL80211_ATTR_MAC]) {
 161                 char addr[3 * ETH_ALEN];
 162                 mac_addr_n2a(addr, nla_data(attrs[NL80211_ATTR_MAC]));
 163                 printf(" source MAC address %s", addr);
 164         }
 165
 166         if (attrs[NL80211_ATTR_KEY_SEQ] &&
 167             nla_len(attrs[NL80211_ATTR_KEY_SEQ]) == 6) {
 168                 unsigned char *seq = nla_data(attrs[NL80211_ATTR_KEY_SEQ]);
 169                 printf(" seq=%02x%02x%02x%02x%02x%02x",
 170                        seq[0], seq[1], seq[2], seq[3], seq[4], seq[5]);
 171         }
 172         if (attrs[NL80211_ATTR_KEY_TYPE]) {
 173                 enum nl80211_key_type key_type =
 174                         nla_get_u32(attrs[NL80211_ATTR_KEY_TYPE]);
 175                 printf(" Key Type %s", key_type_str(key_type));
 176         }
 177
 178         if (attrs[NL80211_ATTR_KEY_IDX]) {
 179                 __u8 key_id = nla_get_u8(attrs[NL80211_ATTR_KEY_IDX]);
 180                 printf(" Key Id %d", key_id);
 181         }
 182
 183         printf("\n");
 184 }
 185
 186 static int print_event(struct nl_msg *msg, void *arg)
 187 {
 188         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
 189         struct nlattr *tb[NL80211_ATTR_MAX + 1], *nst;
 190         struct print_event_args *args = arg;
 191         char ifname[100];
 192         char macbuf[6*3];
 193         __u8 reg_type;
 194         struct ieee80211_beacon_channel chan_before_beacon,  chan_after_beacon;
 195         __u32 wiphy_idx = 0;
 196         int rem_nst;
 197         __u16 status;
 198
 199         if (args->time || args->reltime) {
 200                 unsigned long long usecs, previous;
 201
 202                 previous = 1000000ULL * args->ts.tv_sec + args->ts.tv_usec;
 203                 gettimeofday(&args->ts, NULL);
 204                 usecs = 1000000ULL * args->ts.tv_sec + args->ts.tv_usec;
 205                 if (args->reltime) {
 206                         if (!args->have_ts) {
 207                                 usecs = 0;
 208                                 args->have_ts = true;
 209                         } else
 210                                 usecs -= previous;
 211                 }
 212                 printf("%llu.%06llu: ", usecs/1000000, usecs % 1000000);
 213         }
 214
 215         nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
 216                   genlmsg_attrlen(gnlh, 0), NULL);
 217
 218         if (tb[NL80211_ATTR_IFINDEX] && tb[NL80211_ATTR_WIPHY]) {
 219                 if_indextoname(nla_get_u32(tb[NL80211_ATTR_IFINDEX]), ifname);
 220                 printf("%s (phy #%d): ", ifname, nla_get_u32(tb[NL80211_ATTR_WIPHY]));
 221         } else if (tb[NL80211_ATTR_IFINDEX]) {
 222                 if_indextoname(nla_get_u32(tb[NL80211_ATTR_IFINDEX]), ifname);
 223                 printf("%s: ", ifname);
 224         } else if (tb[NL80211_ATTR_WIPHY]) {
 225                 printf("phy #%d: ", nla_get_u32(tb[NL80211_ATTR_WIPHY]));
 226         }
 227
 228         switch (gnlh->cmd) {
 229         case NL80211_CMD_NEW_WIPHY:
 230                 printf("renamed to %s\n", nla_get_string(tb[NL80211_ATTR_WIPHY_NAME]));
 231                 break;
 232         case NL80211_CMD_TRIGGER_SCAN:
 233                 printf("scan started\n");
 234                 break;
 235         case NL80211_CMD_NEW_SCAN_RESULTS:
 236                 printf("scan finished:");
 237         case NL80211_CMD_SCAN_ABORTED:
 238                 if (gnlh->cmd == NL80211_CMD_SCAN_ABORTED)
 239                         printf("scan aborted:");
 240                 if (tb[NL80211_ATTR_SCAN_FREQUENCIES]) {
 241                         nla_for_each_nested(nst, tb[NL80211_ATTR_SCAN_FREQUENCIES], rem_nst)
 242                                 printf(" %d", nla_get_u32(nst));
 243                         printf(",");
 244                 }
 245                 if (tb[NL80211_ATTR_SCAN_SSIDS]) {
 246                         nla_for_each_nested(nst, tb[NL80211_ATTR_SCAN_SSIDS], rem_nst) {
 247                                 printf(" \"");
 248                                 print_ssid_escaped(nla_len(nst), nla_data(nst));
 249                                 printf("\"");
 250                         }
 251                 }
 252                 printf("\n");
 253                 break;
 254         case NL80211_CMD_REG_CHANGE:
 255                 printf("regulatory domain change: ");
 256
 257                 reg_type = nla_get_u8(tb[NL80211_ATTR_REG_TYPE]);
 258
 259                 switch (reg_type) {
 260                 case NL80211_REGDOM_TYPE_COUNTRY:
 261                         printf("set to %s by %s request",
 262                                nla_get_string(tb[NL80211_ATTR_REG_ALPHA2]),
 263                                reg_initiator_to_string(nla_get_u8(tb[NL80211_ATTR_REG_INITIATOR])));
 264                         if (tb[NL80211_ATTR_WIPHY])
 265                                 printf(" on phy%d", nla_get_u32(tb[NL80211_ATTR_WIPHY]));
 266                         break;
 267                 case NL80211_REGDOM_TYPE_WORLD:
 268                         printf("set to world roaming by %s request",
 269                                reg_initiator_to_string(nla_get_u8(tb[NL80211_ATTR_REG_INITIATOR])));
 270                         break;
 271                 case NL80211_REGDOM_TYPE_CUSTOM_WORLD:
 272                         printf("custom world roaming rules in place on phy%d by %s request",
 273                                nla_get_u32(tb[NL80211_ATTR_WIPHY]),
 274                                reg_initiator_to_string(nla_get_u32(tb[NL80211_ATTR_REG_INITIATOR])));
 275                         break;
 276                 case NL80211_REGDOM_TYPE_INTERSECTION:
 277                         printf("intersection used due to a request made by %s",
 278                                reg_initiator_to_string(nla_get_u32(tb[NL80211_ATTR_REG_INITIATOR])));
 279                         if (tb[NL80211_ATTR_WIPHY])
 280                                 printf(" on phy%d", nla_get_u32(tb[NL80211_ATTR_WIPHY]));
 281                         break;
 282                 default:
 283                         printf("unknown source (upgrade this utility)");
 284                         break;
 285                 }
 286
 287                 printf("\n");
 288                 break;
 289         case NL80211_CMD_REG_BEACON_HINT:
 290
 291                 wiphy_idx = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
 292
 293                 memset(&chan_before_beacon, 0, sizeof(chan_before_beacon));
 294                 memset(&chan_after_beacon, 0, sizeof(chan_after_beacon));
 295
 296                 if (parse_beacon_hint_chan(tb[NL80211_ATTR_FREQ_BEFORE],
 297                                            &chan_before_beacon))
 298                         break;
 299                 if (parse_beacon_hint_chan(tb[NL80211_ATTR_FREQ_AFTER],
 300                                            &chan_after_beacon))
 301                         break;
 302
 303                 if (chan_before_beacon.center_freq != chan_after_beacon.center_freq)
 304                         break;
 305
 306                 /* A beacon hint is sent _only_ if something _did_ change */
 307                 printf("beacon hint:\n");
 308
 309                 printf("phy%d %d MHz [%d]:\n",
 310                        wiphy_idx,
 311                        chan_before_beacon.center_freq,
 312                        ieee80211_frequency_to_channel(chan_before_beacon.center_freq));
 313
 314                 if (chan_before_beacon.passive_scan && !chan_after_beacon.passive_scan)
 315                         printf("\to active scanning enabled\n");
 316                 if (chan_before_beacon.no_ibss && !chan_after_beacon.no_ibss)
 317                         printf("\to beaconing enabled\n");
 318
 319                 break;
 320         case NL80211_CMD_NEW_STATION:
 321                 mac_addr_n2a(macbuf, nla_data(tb[NL80211_ATTR_MAC]));
 322                 printf("new station %s\n", macbuf);
 323                 break;
 324         case NL80211_CMD_DEL_STATION:
 325                 mac_addr_n2a(macbuf, nla_data(tb[NL80211_ATTR_MAC]));
 326                 printf("del station %s\n", macbuf);
 327                 break;
 328         case NL80211_CMD_JOIN_IBSS:
 329                 mac_addr_n2a(macbuf, nla_data(tb[NL80211_ATTR_MAC]));
 330                 printf("IBSS %s joined\n", macbuf);
 331                 break;
 332         case NL80211_CMD_AUTHENTICATE:
 333                 printf("auth");
 334                 if (tb[NL80211_ATTR_FRAME])
 335                         print_frame(args, tb[NL80211_ATTR_FRAME]);
 336                 else if (tb[NL80211_ATTR_TIMED_OUT])
 337                         printf(": timed out");
 338                 else
 339                         printf(": unknown event");
 340                 printf("\n");
 341                 break;
 342         case NL80211_CMD_ASSOCIATE:
 343                 printf("assoc");
 344                 if (tb[NL80211_ATTR_FRAME])
 345                         print_frame(args, tb[NL80211_ATTR_FRAME]);
 346                 else if (tb[NL80211_ATTR_TIMED_OUT])
 347                         printf(": timed out");
 348                 else
 349                         printf(": unknown event");
 350                 printf("\n");
 351                 break;
 352         case NL80211_CMD_DEAUTHENTICATE:
 353                 printf("deauth");
 354                 print_frame(args, tb[NL80211_ATTR_FRAME]);
 355                 printf("\n");
 356                 break;
 357         case NL80211_CMD_DISASSOCIATE:
 358                 printf("disassoc");
 359                 print_frame(args, tb[NL80211_ATTR_FRAME]);
 360                 printf("\n");
 361                 break;
 362         case NL80211_CMD_UNPROT_DEAUTHENTICATE:
 363                 printf("unprotected deauth");
 364                 print_frame(args, tb[NL80211_ATTR_FRAME]);
 365                 printf("\n");
 366                 break;
 367         case NL80211_CMD_UNPROT_DISASSOCIATE:
 368                 printf("unprotected disassoc");
 369                 print_frame(args, tb[NL80211_ATTR_FRAME]);
 370                 printf("\n");
 371                 break;
 372         case NL80211_CMD_CONNECT:
 373                 status = 0;
 374                 if (!tb[NL80211_ATTR_STATUS_CODE])
 375                         printf("unknown connect status");
 376                 else if (nla_get_u16(tb[NL80211_ATTR_STATUS_CODE]) == 0)
 377                         printf("connected");
 378                 else {
 379                         status = nla_get_u16(tb[NL80211_ATTR_STATUS_CODE]);
 380                         printf("failed to connect");
 381                 }
 382                 if (tb[NL80211_ATTR_MAC]) {
 383                         mac_addr_n2a(macbuf, nla_data(tb[NL80211_ATTR_MAC]));
 384                         printf(" to %s", macbuf);
 385                 }
 386                 if (status)
 387                         printf(", status: %d: %s", status, get_status_str(status));
 388                 printf("\n");
 389                 break;
 390         case NL80211_CMD_ROAM:
 391                 printf("roamed");
 392                 if (tb[NL80211_ATTR_MAC]) {
 393                         mac_addr_n2a(macbuf, nla_data(tb[NL80211_ATTR_MAC]));
 394                         printf(" to %s", macbuf);
 395                 }
 396                 printf("\n");
 397                 break;
 398         case NL80211_CMD_DISCONNECT:
 399                 printf("disconnected");
 400                 if (tb[NL80211_ATTR_DISCONNECTED_BY_AP])
 401                         printf(" (by AP)");
 402                 else
 403                         printf(" (local request)");
 404                 if (tb[NL80211_ATTR_REASON_CODE])
 405                         printf(" reason: %d: %s", nla_get_u16(tb[NL80211_ATTR_REASON_CODE]),
 406                                 get_reason_str(nla_get_u16(tb[NL80211_ATTR_REASON_CODE])));
 407                 printf("\n");
 408                 break;
 409         case NL80211_CMD_REMAIN_ON_CHANNEL:
 410                 printf("remain on freq %d (%dms, cookie %llx)\n",
 411                         nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]),
 412                         nla_get_u32(tb[NL80211_ATTR_DURATION]),
 413                         (unsigned long long)nla_get_u64(tb[NL80211_ATTR_COOKIE]));
 414                 break;
 415         case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL:
 416                 printf("done with remain on freq %d (cookie %llx)\n",
 417                         nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]),
 418                         (unsigned long long)nla_get_u64(tb[NL80211_ATTR_COOKIE]));
 419                 break;
 420         case NL80211_CMD_NOTIFY_CQM:
 421                 parse_cqm_event(tb);
 422                 break;
 423         case NL80211_CMD_MICHAEL_MIC_FAILURE:
 424                 parse_mic_failure(tb);
 425                 break;
 426         case NL80211_CMD_FRAME_TX_STATUS:
 427                 printf("mgmt TX status (cookie %llx): %s\n",
 428                         (unsigned long long)nla_get_u64(tb[NL80211_ATTR_COOKIE]),
 429                         tb[NL80211_ATTR_ACK] ? "acked" : "no ack");
 430                 break;
 431         case NL80211_ATTR_PMKSA_CANDIDATE:
 432                 printf("PMKSA candidate found\n");
 433                 break;
 434         default:
 435                 printf("unknown event %d\n", gnlh->cmd);
 436                 break;
 437         }
 438
 439         fflush(stdout);
 440         return NL_SKIP;
 441 }
 442
 443 struct wait_event {
 444         int n_cmds;
 445         const __u32 *cmds;
 446         __u32 cmd;
 447         struct print_event_args *pargs;
 448 };
 449
 450 static int wait_event(struct nl_msg *msg, void *arg)
 451 {
 452         struct wait_event *wait = arg;
 453         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
 454         int i;
 455
 456         for (i = 0; i < wait->n_cmds; i++) {
 457                 if (gnlh->cmd == wait->cmds[i]) {
 458                         wait->cmd = gnlh->cmd;
 459                         if (wait->pargs)
 460                                 print_event(msg, wait->pargs);
 461                 }
 462         }
 463
 464         return NL_SKIP;
 465 }
 466
 467 int __prepare_listen_events(struct nl80211_state *state)
 468 {
 469         int mcid, ret;
 470
 471         /* Configuration multicast group */
 472         mcid = nl_get_multicast_id(state->nl_sock, "nl80211", "config");
 473         if (mcid < 0)
 474                 return mcid;
 475
 476         ret = nl_socket_add_membership(state->nl_sock, mcid);
 477         if (ret)
 478                 return ret;
 479
 480         /* Scan multicast group */
 481         mcid = nl_get_multicast_id(state->nl_sock, "nl80211", "scan");
 482         if (mcid >= 0) {
 483                 ret = nl_socket_add_membership(state->nl_sock, mcid);
 484                 if (ret)
 485                         return ret;
 486         }
 487
 488         /* Regulatory multicast group */
 489         mcid = nl_get_multicast_id(state->nl_sock, "nl80211", "regulatory");
 490         if (mcid >= 0) {
 491                 ret = nl_socket_add_membership(state->nl_sock, mcid);
 492                 if (ret)
 493                         return ret;
 494         }
 495
 496         /* MLME multicast group */
 497         mcid = nl_get_multicast_id(state->nl_sock, "nl80211", "mlme");
 498         if (mcid >= 0) {
 499                 ret = nl_socket_add_membership(state->nl_sock, mcid);
 500                 if (ret)
 501                         return ret;
 502         }
 503
 504         return 0;
 505 }
 506
 507 __u32 __do_listen_events(struct nl80211_state *state,
 508                          const int n_waits, const __u32 *waits,
 509                          struct print_event_args *args)
 510 {
 511         struct nl_cb *cb = nl_cb_alloc(iw_debug ? NL_CB_DEBUG : NL_CB_DEFAULT);
 512         struct wait_event wait_ev;
 513
 514         if (!cb) {
 515                 fprintf(stderr, "failed to allocate netlink callbacks\n");
 516                 return -ENOMEM;
 517         }
 518
 519         /* no sequence checking for multicast messages */
 520         nl_cb_set(cb, NL_CB_SEQ_CHECK, NL_CB_CUSTOM, no_seq_check, NULL);
 521
 522         if (n_waits && waits) {
 523                 wait_ev.cmds = waits;
 524                 wait_ev.n_cmds = n_waits;
 525                 wait_ev.pargs = args;
 526                 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, wait_event, &wait_ev);
 527         } else
 528                 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, print_event, args);
 529
 530         wait_ev.cmd = 0;
 531
 532         while (!wait_ev.cmd)
 533                 nl_recvmsgs(state->nl_sock, cb);
 534
 535         nl_cb_put(cb);
 536
 537         return wait_ev.cmd;
 538 }
 539
 540 __u32 listen_events(struct nl80211_state *state,
 541                     const int n_waits, const __u32 *waits)
 542 {
 543         int ret;
 544
 545         ret = __prepare_listen_events(state);
 546         if (ret)
 547                 return ret;
 548
 549         return __do_listen_events(state, n_waits, waits, NULL);
 550 }
 551
 552 static int print_events(struct nl80211_state *state,
 553                         struct nl_cb *cb,
 554                         struct nl_msg *msg,
 555                         int argc, char **argv,
 556                         enum id_input id)
 557 {
 558         struct print_event_args args;
 559         int ret;
 560
 561         memset(&args, 0, sizeof(args));
 562
 563         argc--;
 564         argv++;
 565
 566         while (argc > 0) {
 567                 if (strcmp(argv[0], "-f") == 0)
 568                         args.frame = true;
 569                 else if (strcmp(argv[0], "-t") == 0)
 570                         args.time = true;
 571                 else if (strcmp(argv[0], "-r") == 0)
 572                         args.reltime = true;
 573                 else
 574                         return 1;
 575                 argc--;
 576                 argv++;
 577         }
 578
 579         if (args.time && args.reltime)
 580                 return 1;
 581
 582         if (argc)
 583                 return 1;
 584
 585         ret = __prepare_listen_events(state);
 586         if (ret)
 587                 return ret;
 588
 589         return __do_listen_events(state, 0, NULL, &args);
 590 }
 591 TOPLEVEL(event, "[-t] [-r] [-f]", 0, 0, CIB_NONE, print_events,
 592         "Monitor events from the kernel.\n"
 593         "-t - print timestamp\n"
 594         "-r - print relative timstamp\n"
 595         "-f - print full frame for auth/assoc etc.");