If you like BoxMatrix then please contribute Supportdata, Supportdata2, Firmware and/or Hardware (get in touch).
My metamonk@yahoo.com is not reachable by me since years. Please use hippie2000@webnmail.de instead.

0
U

Property:vpnd (avmcmd)

From BoxMatrix


BoxMatrix >> Shell-Commands >> vpnd (avmcmd) @ BoxMatrix   -   IRC-Chat   -   Translate: de es fr it nl pl
News Selectors Models Accessories Components Environment Config Commands System Webif Software Develop Lexicon Community Project Media

Startup-Scr Hotplug-Scr BusyBox-Cmds Bash-Cmds AVM-Cmds Chipset-Cmds Linux-Cmds Shared-Libs Kernel-Mods Research

Info
  
Name-Collision - multiple objects in this wiki use the name vpnd!
vpnd (avmcmd) VPN daemon.
vpnd (process) VPN daemon.
vpnd (watchdog) VPN daemon.

AVM-Command

Goto:   Endpoints  -  Events  -  Config  -  Source  -  Dependencies   -   Model-Matrix   -   Symbols   -   SMW-Browser

Details

fw 7.29 help:

fritz3:/var/media/ftp $ vpnd -?

usage: vpnd vpnd [options]

options:
  -?                 - print this help
  -f                 - run in foreground. (NOTSET)
  -s                 - stop daemon. (NOTSET)
  -v                 - verbose. (NOTSET)
  -D STRING          - switch debug logs on (all, main, route, ipsec, ike, ipc, conn, vpn, xfrm). (FUNC)

start daemon:   vpnd
stop daemon :   vpnd -s

Endpoints

aicmd endpoint(s) provided by vpnd, with these functions: (fw 7.29)

root@fritz2:/var/mod/root# aicmd vpnd

# provided by vpnd: - fw 7.29+

HELP                                     - show help
SLABDUMP                                 - show slab allocation
SLABSHOW                                 - show slab information
QUIT                                     - disconnect

show connections                         - show connections

vpn enable                               - vpn enable
vpn disable                              - vpn disable
vpn reload                               - vpn reload
vpn wlan                                 - vpn wlan

dsl synced                               - dsl synced
dsl unsetup                              - dsl unsetup

ipsecassoc route_check                   - ipsecassoc route_check
ipsecassoc proxyarp_update               - ipsecassoc proxyarp_update

# provided by vpnd: - fw 7.39+
 
wireguard reload                         - wireguard reload
wireguard device                         - wireguard show device
wireguard extended                       - wireguard show extended
wireguard landevices                     - wireguard show landevices

# provided by libewnwlinux.so: - fw 7.01+

ewnwlinux show csockshell                - show shells running
ewnwlinux show genetlink                 - show gerneric netlink families

# provided by libewnwlinux.so: - fw 7.90+

ewnwlinux netlink show                   - show internal information
ewnwlinux netlink getroute [address]     - get route for inet address
ewnwlinux netlink interfaces             - show interfaces
ewnwlinux netlink routes [ 4 | 6 ]       - show routes

# provided by libavmcsock.so: - fw 7.01+

avmcsock show csock                      - show all csock
avmcsock show dnsconfig                  - show all dns context
avmcsock show timercb                    - show all timer
avmcsock show debughandles               - show all debughandles
avmcsock show cprocess                   - show all processes
avmcsock set debug                       - set debug flags

# provided by libavmcsock.so: - fw 7.29+

avmcsock show cbcontext                  - show all cbdata
avmcsock show daemon                     - show daemon status
avmcsock show cbuf                       - show cbuf status

# provided by libavmcsock.so: - fw 7.39+

avmcsock getsymbol <address>             - get symbol for address
avmcsock show dnsglobal                  - show all dns global values
avmcsock show dnscache                   - show cache
avmcsock show dnsqueries                 - show all pending queries
avmcsock show avmipc [endpoint shmatch]  - show avmipc events and states
avmcsock ctimer show                     - show all timer
avmcsock ctimer overview                 - show ctimer overview
avmcsock iotrace format unctrl|hexdump   - set format for csock iotrace
avmcsock iotrace file                    - enable iotrace to file
avmcsock iotrace enable                  - enable iotrace via debugmsg
avmcsock iotrace disable                 - disable iotrace
avmcsock iotrace match help|<match>      - show allowed matches or set match
avmcsock iotrace reset                   - remove all matches
avmcsock iotrace show                    - show configuration

# provided by libavmcsock.so: - fw 7.90+

avmcsock show signals                    - show signal handler
avmcsock show connector [cache|stats]    - show connector information
avmcsock show clogger                    - show clogger information
avmcsock set clogmod [ <module> [ '.' <submodule ] ... ] [ '=' <level> ]
                                         - set clogmod log level
avmcsock slab check                      - red zone/free check
avmcsock slab reap [heavy]               - call slab_reap/slab_reap_heavy
avmcsock slab dump [long]                - show slab allocation
avmcsock slab show                       - show slab information
avmcsock slab ewma [show|activate|deactivate|reset]
                                         - show average allocates/freed per second
avmcsock avmipc notifier [endpoint shmatch]
                                         - show registered notifier
avmcsock avmipc set [endpoint shmatch]   - show states/events sent
avmcsock avmipc csv [endpoint shmatch]   - show states/events sent and listing as csv

# fw 7.39+:
# provided by libavmpcp.so: - fw 7.29+

libavmpcp show pcpinfo                   - show pcpinfo

Events

Daily updated index of AVM-Events and AVMIPC-Datastore nodes affecting this command. Last update: 2023-12-10 05:13 GMT.
The owners of Event-Sinks and Event-Sources are manual research, which may be incomplete or even wrong.
A * in the Mod column marks info from Supportdata-Probes, which will always stay incomplete.
A ** in the Mod column marks info from Supportdata2 probes, which by their nature will stay way more incomplete.
A - in the Mod column marks manual research, the Firmware then shows where the item occurs, not the Relation.

Relation Typ Object Mod Firmware Info Origin
Netlink family NETLINK_GENERIC 7** 7.39 - 7.51 Generic Netlink (genetlink) family for simplified netlink usage (#16) Linux
Multicast group AVMGGRP_L2TP 7** 7.39 - 7.51 Interface of the L2TP tunneling server l2tpv3d AVM
Multicast group AVMGGRP_NLCTRL_NOTIFY 7** 7.39 - 7.51 Notification about changes in subscribed genetlink groups AVM
Netlink family NETLINK_ROUTE 15** 7.29 - 7.51 Communication channel between routing dæmons and the kernel packet forwarding (#0) Linux
Multicast group RTMGRP_IPV4_IFADD 15** 7.29 - 7.51 IPv4 address change of a Network-Interface Linux
Multicast group RTMGRP_IPV4_ROUTE 15** 7.29 - 7.51 IPv4 Routing Table change Linux
Multicast group RTMGRP_IPV6_IFADDR 15** 7.29 - 7.51 IPv6 address change of a Network-Interface Linux
Multicast group RTMGRP_IPV6_ROUTE 15** 7.29 - 7.51 IPv6 Routing Table change Linux
Multicast group RTMGRP_LINK 15** 7.29 - 7.51 Creation / deletion or up / down change of a Network-Interface. Linux
Multicast group RTMGRP_NOTIFY 15** 7.29 - 7.51 Enable notification about changes in subscribed rtnetlink groups Linux
Multicast group RTMGRP_TC 15** 7.29 - 7.51 Packet Scheduler Traffic Control change Linux
Endpoint sock me_vpnd-pcp-($num).ctl 8* 7.39 - 7.51 avmipc endpoint of libavmpcp.so for vpnd AVM
Listens to avmipc libpcp_dump 8** 7.39 - 7.51 Trigger event to dump PCP context info. AVM
Listens to avmipc libpcp_send_itemstatus 8** 7.39 - 7.51 Trigger event to send all PCP port openings. AVM
Listens to avmipc pcpserver_changed 8** 7.39 - 7.51 Trigger event to inform about PCP server changes. AVM
Endpoint sock me_vpnd.ctl 28* 7.19 - 7.51 avmipc_command endpoint of vpnd AVM
Listens to avmipc aicmd_listener 17** 7.29 - 7.51 Special event covering all aicmd compatible listeners. AVM
Listens to avmipc EVENT_NEIGHETHADDR_EVENT 8** 7.39 - 7.51 TODO AVM
Listens to avmipc EVENT_NEIGHETHADDR_EVENT-($num) 8** 7.39 - 7.51 TODO AVM
Listens to avmipc EVENT_VPNNOTIFY_EVENT_query 8** 7.39 - 7.51 Trigger event to query for VPN state notification. AVM
Listens to avmipc STATE_DHCPRANGESSTATUS_FBSTATE 8** 7.39 - 7.51 State of the DHCP v4 lease ranges in JSON format. AVM
Listens to avmipc STATE_DOMAINNAME_FBSTATE 8** 7.39 - 7.51 State of the device's domain name in JSON format. AVM
Listens to avmipc state_iface_inet 1** 7.39 State of the internet connection in JSON format. AVM
Listens to avmipc STATE_IFACE_INET_FAMILY 8** 7.39 - 7.51 State of the internet connection in JSON format. AVM
Listens to avmipc STATE_MULTIDSTATUS_FBSTATE 8** 7.39 - 7.51 State of multid network specifics for vpnd. AVM
Command cmd vpnd (avmcmd) VPN daemon. AVM
Sends avmipc EVENT_VPNNOTIFY_EVENT - 7.39 - 7.51 Target event to send VPN state information to. AVM
Sends avmipc libpcp_itemstatus - 7.01 - 7.51 Target event to send PCP port openings to. AVM
Sends avmipc NW_IPC_NW_IPC_STATE_WIREGUARD_ADDRS - 7.39 - 7.51 State of the Wireguard IP addresses in JSON format. AVM
29 event relations for this command

Config

Daily updated index of Configuration files accessed by this command. Last update: 2024-04-26 06:35 GMT.
A - in the Mod column marks manual research, the Firmware then shows where the item occurs, not the Relation.

Relation Typ Object Mod Firmware Info Origin
Config from tffs ar7.cfg (tffs) - 4.07 - 7.90 TODO AVM
Config from tffs vpn.cfg (tffs) - 4.07 - 7.90 TODO AVM
2 config relations for this command

Source

The names of source files compiled into an executable often help to understand function blocks (and show gaps in the docs).
fw 7.39 source files:

$ strings /bin/vpnd | grep -e '\.c$' -e '\.cpp$'

ar7/vpnd/vpnd_ipsecassoc.c
ar7/vpnd/vpnd_conninfo.c
ar7/vpnd/vpnd_wireguard.c
ar7/vpnd/vpnd_wireguard_peer.c
ar7/vpnd/vpnd_wireguard_peermeta.c
ar7/vpnd/vpnd_wireguard_allowedip.c
ar7/vpnd/vpnd_wireguard_slave.c
ar7/vpnd/vpnd_wireguard_notify.c
ar7/vpnd/vpnd_wireguard_landevices.c
ar7/vpnd/vpnd_wireguard_endpoint.c

fw 7.29 source files:

$ strings /bin/vpnd | grep -e '\.c$' -e '\.cpp$'

vpnd_ipc.c
vpnd_ipsecassoc.c
vpnd_conninfo.c  

Dependencies

Daily updated index of all dependencies of this command. Last update: 2024-04-26 07:29 GMT.
A * in the Mod column marks info from Supportdata-Probes, which will always stay incomplete.

Relation Typ Object Mod Firmware Info Origin
Started by serv vpnd.service 50 7.39 - 7.90 supervisor service for vpnd. AVM
Runs as proc vpnd (process) 29* 7.19 - 7.90 VPN daemon. AVM
Registers wdog vpnd (watchdog) 29* 7.19 - 7.90 VPN daemon. AVM
Serving port Port-5350-udp 23* 6.51 - 7.61 PCP - Port Control Protocol - client AVM
Serving sock me_vpnd-pcp-($num).ctl 9* 7.39 - 7.90 avmipc endpoint of libavmpcp.so for vpnd AVM
Serving sock me_vpnd.ctl 29* 7.19 - 7.90 avmipc_command endpoint of vpnd AVM
Depends on lib ld.so 15 7.19 - 7.90 Dynamic linker / loader Linux
Depends on lib libar7cfg.so 55 7.19 - 7.90 TFFS-Configuration API to ar7.cfg and many more. AVM
Depends on lib libavmauth.so 55 7.19 - 7.90 Fritzbox authentification helpers AVM
Depends on lib libavmcipher.so 55 7.19 - 7.90 AES / DES / Rijndael encryption / decryption. AVM
Depends on lib libavmcsock.so 55 7.19 - 7.90 Networking, I/O and helper functions AVM
Depends on lib libavmfbconf.so 47 7.39 - 7.80 API to hardcoded fbconf.cfg AVM
Depends on lib libavmfbstate.so 50 7.39 - 7.90 IPC fritzbox state notification AVM
Depends on lib libavmhmac.so 55 7.19 - 7.90 HMAC / SHA / MD5 hashing. AVM
Depends on lib libavmpcp.so 55 7.19 - 7.90 Port Control Protocol (PCP) API library AVM
Depends on lib libavmvpnnotify.so 48 7.39 - 7.90 VPN state notification. AVM
Depends on lib libavmwdt.so 16 7.59 - 7.90 AVM-Watchdogs management API AVM
Depends on lib libboxenv.so 12 7.90 API to the rc.conf enhanced Config-Environment AVM
Depends on lib libboxlib.so 55 7.19 - 7.90 Box status, logging and statistics functions AVM
Depends on lib libc.so 55 7.19 - 7.90 Standard C library Linux
Depends on lib libcore.so 16 7.59 - 7.90 Collects the MAC addresses of the device it's running on AVM
Depends on lib libcrypto.so 50 7.39 - 7.90 OpenSSL general crypto and X.509 library Linux
Depends on lib libdl.so 41 7.19 - 7.90 Dynamic linking library Linux
Depends on lib libdputil.so 55 7.19 - 7.90 DataPipe / packet utilities AVM
Depends on lib libeventlog.so 12 7.90 System Event-Log management API AVM
Depends on lib libewnwjson.so 12 7.90 JSON helper functions AVM
Depends on lib libewnwled.so 55 7.19 - 7.90 LED event helper functions AVM
Depends on lib libewnwlinux.so 55 7.19 - 7.90 Linux networking functions AVM
Depends on lib libewnwnet.so 55 7.19 - 7.90 Internet helper functions AVM
Depends on lib libfbconf.so 16 7.59 - 7.90 API to hardcoded fbconf.cfg AVM
Depends on lib libikeapi.so 55 7.19 - 7.90 avmike client / server communication API AVM
Depends on lib libjuisclient.so 12 7.90 Update-Search - second generation - JUIS AVM
Depends on lib libkvpnd.so 55 7.19 - 7.90 TODO Linux
Depends on lib libled2.so 55 7.19 - 7.90 LED API - second+third generation AVM
Depends on lib liblocalize.so 12 7.90 Charset conversion helper functions AVM
Depends on lib libm.so 7 7.90 C math library Linux
Depends on lib libneighbour.so 13 7.70 - 7.90 Neighbour discovery and notification API AVM
Depends on lib liboauth2.so 12 7.90 OAuth v2.0 authentificator Linux
Depends on lib libpthread.so 41 7.19 - 7.90 POSIX threading library Linux
Depends on lib librt.so 41 7.19 - 7.90 POSIX realtime extensions library Linux
Depends on lib libslab_c++.so 12 7.90 C++ slab allocator AVM
Depends on lib libsvctl.so 55 7.19 - 7.90 supervisor notification library AVM
Depends on lib libtiinterpreter.so 50 7.39 - 7.90 Preprocessor for SSI-Files by TI. AVM
Depends on lib libwdt.so 52 7.19 - 7.80 AVM-Watchdogs management API AVM
Depends on lib libwebkpiclient.so 50 7.39 - 7.90 KPI sensor for system parts which use HTTP / HTTPS AVM
Depends on lib libwebsrv.so 55 7.19 - 7.90 HTTP / HTTPS webserver and tools. AVM
Depends on lib libwireguard.so 48 7.39 - 7.90 TODO Linux
Depends on lib libyajl.so 12 7.90 Event-driven JSON parser Linux
Depends on lib libz.so 55 7.19 - 7.90 Zlib compressor / decompressor Linux
49 dependencies for this command

Model-Matrix

Daily updated index of the presence, path and size of this command for each model. Last update: 2024-04-26 05:10 GMT.
Showing all models using this command. Click any column header (click-wait-click) to sort the list by the respective data.
The (main/scrpn/boot/arm/prx/atom) label in the Model column shows which CPU is meant for models with multiple Linux instances.
Note that this list is merged from Firmware-Probes of all known AVM firmware for a model, including Recovery.exe and Labor-Files.

Model Firmware Path Size
FRITZ!Box 3490 (main) 7.27 - 7.30 /bin 37.3k
FRITZ!Box 4020 7.39 /bin 118k
FRITZ!Box 4040 7.24 - 7.57 /bin 30.0k - 118k
FRITZ!Box 4050 7.57 /bin 106k
FRITZ!Box 4060 7.26 - 7.57 /bin 29.9k - 118k
FRITZ!Box 5490 (main) 7.27 - 7.29 /bin 37.3k
FRITZ!Box 5491 (main) 7.27 - 7.29 /bin 37.3k
FRITZ!Box 5530 Fiber (main) 7.21 - 7.80 /bin 37.2k - 133k
FRITZ!Box 5590 Fiber (arm) 7.27 - 7.90 /bin 33.9k - 138k
FRITZ!Box 5690 Pro (arm) 7.59 - 7.60 /bin 106k
FRITZ!Box 6430 Cable (arm) 7.29 - 7.57 /bin 34.0k - 118k
FRITZ!Box 6430 Cable (atom) 7.29 /bin 34.0k
FRITZ!Box 6490 Cable (arm) 7.19 - 7.57 /bin 30.0k - 118k
FRITZ!Box 6490 Cable (atom) 7.19 - 7.51 /bin 30.0k - 38.0k
FRITZ!Box 6590 Cable (arm) 7.19 - 7.57 /bin 30.0k - 118k
FRITZ!Box 6590 Cable (atom) 7.19 - 7.51 /bin 30.0k - 38.0k
FRITZ!Box 6591 Cable (arm) 7.19 - 7.90 /bin 30.6k - 154k
FRITZ!Box 6591 Cable (atom) 7.19 - 7.90 /bin 30.6k - 154k
FRITZ!Box 6660 Cable (arm) 7.19 - 7.90 /bin 30.6k - 154k
FRITZ!Box 6660 Cable (atom) 7.19 - 7.90 /bin 30.6k - 154k
FRITZ!Box 6670 Cable (arm) 7.57 - 7.62 /bin 118k - 122k
FRITZ!Box 6670 Cable (atom) 7.61 - 7.62 /bin 122k
FRITZ!Box 6690 Cable (arm) 7.28 - 7.90 /bin 34.2k - 154k
FRITZ!Box 6690 Cable (atom) 7.28 - 7.90 /bin 34.2k - 154k
FRITZ!Box 6820 LTE v1 7.19 - 7.51 /bin 37.3k - 133k
FRITZ!Box 6820 LTE v2 7.19 - 7.51 /bin 37.3k - 133k
FRITZ!Box 6820 LTE v3 7.19 - 7.57 /bin 37.3k - 133k
FRITZ!Box 6840 LTE 7.39 /bin 118k
FRITZ!Box 6850 LTE 7.21 - 7.90 /bin 30.0k - 138k
FRITZ!Box 6850 5G 7.24 - 7.90 /bin 30.0k - 138k
FRITZ!Box 6890 LTE 7.21 - 7.51 /bin 41.3k - 133k
FRITZ!Box 6890 LTE v1 7.21 - 7.51 /bin 41.3k - 133k
FRITZ!Box 6890 LTE v2 7.21 - 7.51 /bin 41.3k - 133k
FRITZ!Box 7272 7.39 /bin 118k
FRITZ!Box 7430 7.21 - 7.39 /bin 37.3k - 118k
FRITZ!Box 7490 (main) 7.19 - 7.57 /bin 33.1k - 133k
FRITZ!Box 7510 7.30 - 7.57 /bin 29.9k - 106k
FRITZ!Box 7520 7.21 - 7.51 /bin 30.0k - 118k
FRITZ!Box 7520 v2 (arm) 7.30 - 7.57 /bin 30.0k - 118k
FRITZ!Box 7530 7.19 - 7.56 /bin 30.0k - 118k
FRITZ!Box 7530 AX 7.20 - 7.90 /bin 34.1k - 142k
FRITZ!Box 7560 7.24 - 7.39 /bin 41.3k - 118k
FRITZ!Box 7580 7.21 - 7.30 /bin 41.3k
FRITZ!Box 7583 7.21 - 7.57 /bin 41.3k - 133k
FRITZ!Box 7583 VDSL 7.19 - 7.31 /bin 41.3k
FRITZ!Box 7590 7.19 - 7.90 /bin 33.0k - 178k
FRITZ!Box 7590 AX 7.19 - 7.90 /bin 41.3k - 178k
FRITZ!Box 7690 7.59 /bin 106k
FRITZ!Repeater 600 7.39 /bin 118k
FRITZ!Repeater 1200 7.39 /bin 118k
FRITZ!WLAN Repeater 1750E 7.39 /bin 118k
FRITZ!Repeater 2400 7.39 /bin 118k
FRITZ!Repeater 3000 7.39 /bin 118k
FRITZ!Repeater 3000 AX 7.39 /bin 118k
FRITZ!Powerline 1260E 7.39 /bin 118k
55 models use this command

Symbols

Daily updated index of all symbols of this command. Last update: 2024-04-26 07:29 GMT.

Firmware Symbol
7.19 - 7.90 main
1 symbol for this command

SMW-Browser

Information is currently being retrieved from the backend.