]> git.stg.codes - stg.git/blob - projects/stargazer/traffcounter_impl.cpp
a02e3b6d520f2c0350cbd9eeec2b200a71088896
[stg.git] / projects / stargazer / traffcounter_impl.cpp
1 /*
2  *    This program is free software; you can redistribute it and/or modify
3  *    it under the terms of the GNU General Public License as published by
4  *    the Free Software Foundation; either version 2 of the License, or
5  *    (at your option) any later version.
6  *
7  *    This program is distributed in the hope that it will be useful,
8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
10  *    GNU General Public License for more details.
11  *
12  *    You should have received a copy of the GNU General Public License
13  *    along with this program; if not, write to the Free Software
14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
15  */
16
17 /*
18  *    Date: 27.10.2002
19  */
20
21 /*
22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
23  */
24
25 /*
26  $Revision: 1.58 $
27  $Date: 2010/11/03 11:28:07 $
28  $Author: faust $
29  */
30
31 /* inet_aton */
32 #include <sys/types.h>
33 #include <sys/socket.h>
34 #include <netinet/in.h>
35 #include <arpa/inet.h>
36
37 #include <csignal>
38 #include <cassert>
39 #include <cstdio> // fopen and similar
40 #include <cstdlib> // strtol
41
42 #include "stg/common.h"
43 #include "stg/locker.h"
44 #include "traffcounter_impl.h"
45 #include "stg_timer.h"
46 #include "users_impl.h"
47
48 #define FLUSH_TIME  (10)
49 #define REMOVE_TIME  (31)
50
51 const char protoName[PROTOMAX][8] =
52 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
53
54 enum protoNum
55 {
56 tcp = 0, udp, icmp, tcp_udp, all
57 };
58
59 //-----------------------------------------------------------------------------
60 TRAFFCOUNTER_IMPL::TRAFFCOUNTER_IMPL(USERS_IMPL * u, const std::string & fn)
61     : TRAFFCOUNTER(),
62       rules(),
63       packets(),
64       ip2packets(),
65       dirName(),
66       WriteServLog(GetStgLogger()),
67       rulesFileName(fn),
68       monitorDir(),
69       monitoring(false),
70       users(u),
71       running(false),
72       stopped(true),
73       mutex(),
74       thread(),
75       ipBeforeNotifiers(),
76       ipAfterNotifiers(),
77       addUserNotifier(*this),
78       delUserNotifier(*this)
79 {
80 for (int i = 0; i < DIR_NUM; i++)
81     strprintf(&dirName[i], "DIR%d", i);
82
83 dirName[DIR_NUM] = "NULL";
84
85 users->AddNotifierUserAdd(&addUserNotifier);
86 users->AddNotifierUserDel(&delUserNotifier);
87
88 pthread_mutex_init(&mutex, NULL);
89 }
90 //-----------------------------------------------------------------------------
91 TRAFFCOUNTER_IMPL::~TRAFFCOUNTER_IMPL()
92 {
93 pthread_mutex_destroy(&mutex);
94 }
95 //-----------------------------------------------------------------------------
96 int TRAFFCOUNTER_IMPL::Start()
97 {
98 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
99
100 if (!stopped)
101     return 0;
102
103 if (ReadRules())
104     {
105     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot read rules\n");
106     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
107     return -1;
108     }
109
110 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
111 int h = users->OpenSearch();
112 assert(h && "USERS::OpenSearch is always correct");
113 USER_IMPL * u;
114
115 while (users->SearchNext(h, &u) == 0)
116     {
117     SetUserNotifiers(u);
118     }
119 users->CloseSearch(h);
120
121 running = true;
122 if (pthread_create(&thread, NULL, Run, this))
123     {
124     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot start thread\n");
125     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread.");
126     return -1;
127     }
128 return 0;
129 }
130 //-----------------------------------------------------------------------------
131 int TRAFFCOUNTER_IMPL::Stop()
132 {
133 if (stopped)
134     return 0;
135
136 running = false;
137
138 int h = users->OpenSearch();
139 assert(h && "USERS::OpenSearch is always correct");
140
141 USER_IMPL * u;
142 while (users->SearchNext(h, &u) == 0)
143     {
144     UnSetUserNotifiers(u);
145     }
146 users->CloseSearch(h);
147
148 //5 seconds to thread stops itself
149 struct timespec ts = {0, 200000000};
150 for (int i = 0; i < 25 && !stopped; i++)
151     {
152     nanosleep(&ts, NULL);
153     }
154
155 //after 5 seconds waiting thread still running. now kill it
156 if (!stopped)
157     {
158     printfd(__FILE__, "kill TRAFFCOUNTER thread.\n");
159     if (pthread_kill(thread, SIGINT))
160         {
161         return -1;
162         }
163     printfd(__FILE__, "TRAFFCOUNTER killed\n");
164     }
165 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
166
167 return 0;
168 }
169 //-----------------------------------------------------------------------------
170 void * TRAFFCOUNTER_IMPL::Run(void * data)
171 {
172 sigset_t signalSet;
173 sigfillset(&signalSet);
174 pthread_sigmask(SIG_BLOCK, &signalSet, NULL);
175
176 TRAFFCOUNTER_IMPL * tc = static_cast<TRAFFCOUNTER_IMPL *>(data);
177 tc->stopped = false;
178 int c = 0;
179
180 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
181 struct timespec ts = {0, 500000000};
182 while (tc->running)
183     {
184     nanosleep(&ts, 0);
185     if (!tc->running)
186         {
187         tc->FlushAndRemove();
188         break;
189         }
190
191     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
192         {
193         std::string monFile(tc->monitorDir + "/traffcounter_r");
194         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
195         touchTime = stgTime;
196         TouchFile(monFile.c_str());
197         }
198
199     if (++c % FLUSH_TIME == 0)
200         tc->FlushAndRemove();
201     }
202
203 tc->stopped = true;
204 return NULL;
205 }
206 //-----------------------------------------------------------------------------
207 void TRAFFCOUNTER_IMPL::Process(const RAW_PACKET & rawPacket)
208 {
209 if (!running)
210     return;
211
212 static time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
213
214 if (monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
215     {
216     static std::string monFile = monitorDir + "/traffcounter_p";
217     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
218     touchTime = stgTime;
219     TouchFile(monFile.c_str());
220     }
221
222 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
223
224 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
225 //TODO replace find with lower_bound.
226
227 // Searching a new packet in a tree.
228 pp_iter pi = packets.find(rawPacket);
229
230 // Packet found - update length and time
231 if (pi != packets.end())
232     {
233     pi->second.lenU += rawPacket.GetLen();
234     pi->second.lenD += rawPacket.GetLen();
235     pi->second.updateTime = stgTime;
236     /*printfd(__FILE__, "=============================\n");
237     printfd(__FILE__, "Packet found!\n");
238     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
239     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
240     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
241     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
242     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
243     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
244     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
245     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
246     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
247     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
248     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
249     printfd(__FILE__, "=============================\n");*/
250     return;
251     }
252
253 PACKET_EXTRA_DATA ed;
254
255 // Packet not found - add new packet
256
257 ed.updateTime = stgTime;
258 ed.flushTime = stgTime;
259
260 /*
261  userU is that whose user_ip == packet_ip_src
262  userD is that whose user_ip == packet_ip_dst
263  */
264
265 uint32_t ipU = rawPacket.GetSrcIP();
266 uint32_t ipD = rawPacket.GetDstIP();
267
268 // Searching users with such IP
269 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
270     {
271     ed.userUPresent = true;
272     }
273
274 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
275     {
276     ed.userDPresent = true;
277     }
278
279 if (ed.userUPresent ||
280     ed.userDPresent)
281     {
282     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
283
284     ed.lenD = ed.lenU = rawPacket.GetLen();
285
286     //TODO use result of lower_bound to inserting new record
287
288     // Adding packet to a tree.
289     std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
290     pp_iter newPacket = insertResult.first;
291
292     // Adding packet reference to an IP index.
293     ip2packets.insert(std::make_pair(ipU, newPacket));
294     ip2packets.insert(std::make_pair(ipD, newPacket));
295     }
296 }
297 //-----------------------------------------------------------------------------
298 void TRAFFCOUNTER_IMPL::FlushAndRemove()
299 {
300 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
301
302 int oldPacketsSize = packets.size();
303 int oldIp2packetsSize = ip2packets.size();
304
305 pp_iter pi;
306 pi = packets.begin();
307 std::map<RAW_PACKET, PACKET_EXTRA_DATA> newPackets;
308 ip2packets.erase(ip2packets.begin(), ip2packets.end());
309 while (pi != packets.end())
310     {
311     //Flushing
312     if (stgTime - pi->second.flushTime > FLUSH_TIME)
313         {
314         if (pi->second.userUPresent)
315             {
316             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
317
318             // Add stat
319             if (pi->second.dirU < DIR_NUM)
320                 {
321                 #ifdef TRAFF_STAT_WITH_PORTS
322                 pi->second.userU->AddTraffStatU(pi->second.dirU,
323                                                 pi->first.GetDstIP(),
324                                                 pi->first.GetDstPort(),
325                                                 pi->second.lenU);
326                 #else
327                 pi->second.userU->AddTraffStatU(pi->second.dirU,
328                                                 pi->first.GetDstIP(),
329                                                 pi->second.lenU);
330                 #endif
331                 }
332
333             pi->second.lenU = 0;
334             pi->second.flushTime = stgTime;
335             }
336
337         if (pi->second.userDPresent)
338             {
339             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
340
341             // Add stat
342             if (pi->second.dirD < DIR_NUM)
343                 {
344                 #ifdef TRAFF_STAT_WITH_PORTS
345                 pi->second.userD->AddTraffStatD(pi->second.dirD,
346                                                 pi->first.GetSrcIP(),
347                                                 pi->first.GetSrcPort(),
348                                                 pi->second.lenD);
349                 #else
350                 pi->second.userD->AddTraffStatD(pi->second.dirD,
351                                                 pi->first.GetSrcIP(),
352                                                 pi->second.lenD);
353                 #endif
354                 }
355
356             pi->second.lenD = 0;
357             pi->second.flushTime = stgTime;
358             }
359         }
360
361     if (stgTime - pi->second.updateTime < REMOVE_TIME)
362         {
363         std::pair<pp_iter, bool> res = newPackets.insert(*pi);
364         if (res.second)
365             {
366             ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
367             ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
368             }
369         }
370     ++pi;
371     }
372 swap(packets, newPackets);
373 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
374         packets.size(),
375         oldPacketsSize - packets.size(),
376         ip2packets.size(),
377         oldIp2packetsSize - ip2packets.size());
378
379 }
380 //-----------------------------------------------------------------------------
381 void TRAFFCOUNTER_IMPL::AddUser(USER_IMPL * user)
382 {
383 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
384 uint32_t uip = user->GetCurrIP();
385 std::pair<ip2p_iter, ip2p_iter> pi;
386
387 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
388 // Find all packets with IP belongs to this user
389 pi = ip2packets.equal_range(uip);
390
391 while (pi.first != pi.second)
392     {
393     if (pi.first->second->first.GetSrcIP() == uip)
394         {
395         assert((!pi.first->second->second.userUPresent || 
396                  pi.first->second->second.userU == user) &&
397                "U user present but it's not current user");
398
399         pi.first->second->second.lenU = 0;
400         pi.first->second->second.userU = user;
401         pi.first->second->second.userUPresent = true;
402         }
403
404     if (pi.first->second->first.GetDstIP() == uip)
405         {
406         assert((!pi.first->second->second.userDPresent || 
407                  pi.first->second->second.userD == user) &&
408                "D user present but it's not current user");
409
410         pi.first->second->second.lenD = 0;
411         pi.first->second->second.userD = user;
412         pi.first->second->second.userDPresent = true;
413         }
414
415     ++pi.first;
416     }
417 }
418 //-----------------------------------------------------------------------------
419 void TRAFFCOUNTER_IMPL::DelUser(uint32_t uip)
420 {
421 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
422 std::pair<ip2p_iter, ip2p_iter> pi;
423
424 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
425 pi = ip2packets.equal_range(uip);
426
427 while (pi.first != pi.second)
428     {
429     if (pi.first->second->first.GetSrcIP() == uip)
430         {
431         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
432             {
433             #ifdef TRAFF_STAT_WITH_PORTS
434             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
435                                                           pi.first->second->first.GetDstIP(),
436                                                           pi.first->second->first.GetDstPort(),
437                                                           pi.first->second->second.lenU);
438             #else
439             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
440                                                           pi.first->second->first.GetDstIP(),
441                                                           pi.first->second->second.lenU);
442             #endif
443             }
444         pi.first->second->second.userUPresent = false;
445         }
446
447     if (pi.first->second->first.GetDstIP() == uip)
448         {
449         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
450             {
451             #ifdef TRAFF_STAT_WITH_PORTS
452             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
453                                                           pi.first->second->first.GetSrcIP(),
454                                                           pi.first->second->first.GetSrcPort(),
455                                                           pi.first->second->second.lenD);
456             #else
457             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
458                                                           pi.first->second->first.GetSrcIP(),
459                                                           pi.first->second->second.lenD);
460             #endif
461             }
462
463         pi.first->second->second.userDPresent = false;
464         }
465
466     ++pi.first;
467     }
468
469 ip2packets.erase(pi.first, pi.second);
470 }
471 //-----------------------------------------------------------------------------
472 void TRAFFCOUNTER_IMPL::SetUserNotifiers(USER_IMPL * user)
473 {
474 // Adding user. Adding notifiers to user.
475 TRF_IP_BEFORE ipBNotifier(*this, user);
476 ipBeforeNotifiers.push_front(ipBNotifier);
477 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
478
479 TRF_IP_AFTER ipANotifier(*this, user);
480 ipAfterNotifiers.push_front(ipANotifier);
481 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
482 }
483 //-----------------------------------------------------------------------------
484 void TRAFFCOUNTER_IMPL::UnSetUserNotifiers(USER_IMPL * user)
485 {
486 // Removing user. Removing notifiers from user.
487 std::list<TRF_IP_BEFORE>::iterator bi;
488 std::list<TRF_IP_AFTER>::iterator ai;
489
490 bi = ipBeforeNotifiers.begin();
491 while (bi != ipBeforeNotifiers.end())
492     {
493     if (user->GetLogin() == bi->GetUser()->GetLogin())
494         {
495         user->DelCurrIPBeforeNotifier(&(*bi));
496         ipBeforeNotifiers.erase(bi);
497         break;
498         }
499     ++bi;
500     }
501
502 ai = ipAfterNotifiers.begin();
503 while (ai != ipAfterNotifiers.end())
504     {
505     if (user->GetLogin() == ai->GetUser()->GetLogin())
506         {
507         user->DelCurrIPAfterNotifier(&(*ai));
508         ipAfterNotifiers.erase(ai);
509         break;
510         }
511     ++ai;
512     }
513 }
514 //-----------------------------------------------------------------------------
515 void TRAFFCOUNTER_IMPL::DeterminateDir(const RAW_PACKET & packet,
516                                        int * dirU, // Direction for incoming packet
517                                        int * dirD) const // Direction for outgoing packet
518 {
519 bool addrMatchU;
520 bool portMatchU;
521 bool addrMatchD;
522 bool portMatchD;
523 bool foundU = false; // Was rule for U found ?
524 bool foundD = false; // Was rule for D found ?
525 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
526
527 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
528
529 std::list<RULE>::const_iterator ln;
530 ln = rules.begin();
531
532 while (ln != rules.end())
533     {
534     if (!foundU)
535         {
536         addrMatchU = false;
537         portMatchU = false;
538
539         switch (ln->proto)
540             {
541             case all:
542                 portMatchU = true;
543                 break;
544
545             case icmp:
546                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
547                 break;
548
549             case tcp_udp:
550                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
551                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
552                 break;
553
554             case tcp:
555                 if (packet.GetProto() == TCP_PROTO)
556                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
557                 break;
558
559             case udp:
560                 if (packet.GetProto() == UDP_PROTO)
561                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
562                 break;
563
564             default:
565                 printfd(__FILE__, "Error! Incorrect rule!\n");
566                 break;
567             }
568
569         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
570
571         if (!foundU && addrMatchU && portMatchU)
572             {
573             foundU = true;
574             *dirU = ln->dir;
575             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
576             //PrintRule(ln->rule);
577             }
578
579         } //if (!foundU)
580
581     if (!foundD)
582         {
583         addrMatchD = false;
584         portMatchD = false;
585
586         switch (ln->proto)
587             {
588             case all:
589                 portMatchD = true;
590                 break;
591
592             case icmp:
593                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
594                 break;
595
596             case tcp_udp:
597                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
598                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
599                 break;
600
601             case tcp:
602                 if (packet.GetProto() == TCP_PROTO)
603                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
604                 break;
605
606             case udp:
607                 if (packet.GetProto() == UDP_PROTO)
608                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
609                 break;
610
611             default:
612                 printfd(__FILE__, "Error! Incorrect rule!\n");
613                 break;
614             }
615
616         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
617
618         if (!foundD && addrMatchD && portMatchD)
619             {
620             foundD = true;
621             *dirD = ln->dir;
622             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
623             //PrintRule(ln->rule);
624             }
625         } //if (!foundD)
626
627     ++ln;
628     }   //while (ln != rules.end())
629
630 if (!foundU)
631     *dirU = DIR_NUM;
632
633 if (!foundD)
634     *dirD = DIR_NUM;
635
636 return;
637 };
638 //-----------------------------------------------------------------------------
639 void TRAFFCOUNTER_IMPL::SetRulesFile(const std::string & fn)
640 {
641 rulesFileName = fn;
642 }
643 //-----------------------------------------------------------------------------
644 bool TRAFFCOUNTER_IMPL::ReadRules(bool test)
645 {
646 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
647
648 RULE rul;
649 FILE * f;
650 char str[1024];
651 char tp[100];   // protocol
652 char ta[100];   // address
653 char td[100];   // target direction
654 int r;
655 int lineNumber = 0;
656 f = fopen(rulesFileName.c_str(), "rt");
657
658 if (!f)
659     {
660     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - File '%s' cannot be opened.\n", rulesFileName.c_str());
661     WriteServLog("File '%s' cannot be oppened.", rulesFileName.c_str());
662     return true;
663     }
664
665 while (fgets(str, 1023, f))
666     {
667     lineNumber++;
668     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
669         {
670         continue;
671         }
672
673     r = sscanf(str,"%s %s %s", tp, ta, td);
674     if (r != 3)
675         {
676         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. There must be 3 parameters.\n", rulesFileName.c_str(), lineNumber);
677         WriteServLog("Error in file '%s' at line %d. There must be 3 parameters.", rulesFileName.c_str(), lineNumber);
678         fclose(f);
679         return true;
680         }
681
682     rul.proto = 0xff;
683     rul.dir = 0xff;
684
685     for (int i = 0; i < PROTOMAX; i++)
686         {
687         if (strcasecmp(tp, protoName[i]) == 0)
688             rul.proto = i;
689         }
690
691     for (int i = 0; i < DIR_NUM + 1; i++)
692         {
693         if (td == dirName[i])
694             rul.dir = i;
695         }
696
697     if (rul.dir == 0xff || rul.proto == 0xff)
698         {
699         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d.\n", rulesFileName.c_str(), lineNumber);
700         WriteServLog("Error in file %s. Line %d.",
701                      rulesFileName.c_str(), lineNumber);
702         fclose(f);
703         return true;
704         }
705
706     if (ParseAddress(ta, &rul) != 0)
707         {
708         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. Error in adress.\n", rulesFileName.c_str(), lineNumber);
709         WriteServLog("Error in file %s. Error in adress. Line %d.",
710                      rulesFileName.c_str(), lineNumber);
711         fclose(f);
712         return true;
713         }
714     if (!test)
715         rules.push_back(rul);
716     //PrintRule(rul);
717     }
718
719 fclose(f);
720
721 // Adding lastest rule: ALL 0.0.0.0/0 NULL
722 rul.dir = DIR_NUM; //NULL
723 rul.ip = 0;  //0.0.0.0
724 rul.mask = 0;
725 rul.port1 = 0;
726 rul.port2 = 65535;
727 rul.proto = all;
728
729 if (!test)
730     rules.push_back(rul);
731
732 //PrintRule(rul);
733
734 return false;
735 }
736 //-----------------------------------------------------------------------------
737 int TRAFFCOUNTER_IMPL::Reload()
738 {
739 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
740
741 if (ReadRules(true))
742     {
743     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() - Failed to reload rules.\n");
744     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
745     return -1;
746     }
747
748 FreeRules();
749 ReadRules();
750 printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() -  Reload rules successfull.\n");
751 WriteServLog("TRAFFCOUNTER: Reload rules successfull.");
752 return 0;
753 }
754 //-----------------------------------------------------------------------------
755 bool TRAFFCOUNTER_IMPL::ParseAddress(const char * ta, RULE * rule) const
756 {
757 char addr[50], mask[20], port1[20], port2[20], ports[40];
758
759 int len = strlen(ta);
760 char n = 0;
761 int i, p;
762 memset(addr, 0, sizeof(addr));
763 for (i = 0; i < len; i++)
764     {
765     if (ta[i] == '/' || ta[i] == ':')
766         {
767         addr[i] = 0;
768         n = ta[i];
769         break;
770         }
771     addr[i] = ta[i];
772     n = 0;
773     }
774 addr[i + 1] = 0;
775 p = i + 1;
776
777 if (n == '/')
778     {
779     // mask
780     for (; i < len; i++)
781         {
782         if (ta[i] == ':')
783             {
784             mask[i - p] = 0;
785             n = ':';
786             break;
787             }
788         mask[i - p] = ta[i];
789         }
790     mask[i - p] = 0;
791     }
792 else
793     {
794     strcpy(mask, "32");
795     }
796
797 p = i + 1;
798 i++;
799
800 if (n == ':')
801     {
802     // port
803     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
804         {
805         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - No ports specified for this protocol.\n");
806         WriteServLog("No ports specified for this protocol.");
807         return true;
808         }
809
810     for (; i < len; i++)
811         ports[i - p] = ta[i];
812
813     ports[i - p] = 0;
814     }
815 else
816     {
817     strcpy(ports, "0-65535");
818     }
819
820 char *sss;
821 char pts[100];
822 strcpy(pts, ports);
823
824 if ((sss = strchr(ports, '-')) != NULL)
825     {
826     strncpy(port1, ports, int(sss-ports));
827     port1[int(sss - ports)] = 0;
828     strcpy(port2, sss + 1);
829     }
830 else
831     {
832     strcpy(port1, ports);
833     strcpy(port2, ports);
834     }
835
836 // Convert strings to mask, ports and IP
837 int prt1, prt2, msk;
838 unsigned ip;
839 char *res;
840
841 msk = strtol(mask, &res, 10);
842 if (*res != 0)
843     return true;
844
845 prt1 = strtol(port1, &res, 10);
846 if (*res != 0)
847     return true;
848
849 prt2 = strtol(port2, &res, 10);
850 if (*res != 0)
851     return true;
852
853 int r = inet_aton(addr, (struct in_addr*)&ip);
854 if (r == 0)
855     return true;
856
857 rule->ip = ip;
858 rule->mask = CalcMask(msk);
859 //msk = 1;
860 //printfd(__FILE__, "msk=%d mask=%08X   mask=%08X\n", msk, rule->mask, (0xFFffFFff << (32 - msk)));
861
862 if ((ip & rule->mask) != ip)
863     {
864     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - Address does'n match mask.\n");
865     WriteServLog("Address does'n match mask.");
866     return true;
867     }
868
869 rule->port1 = prt1;
870 rule->port2 = prt2;
871
872 return false;
873 }
874 //-----------------------------------------------------------------------------
875 uint32_t TRAFFCOUNTER_IMPL::CalcMask(uint32_t msk) const
876 {
877 if (msk >= 32) return 0xFFffFFff;
878 if (msk == 0) return 0;
879 return htonl(0xFFffFFff << (32 - msk));
880 }
881 //---------------------------------------------------------------------------
882 void TRAFFCOUNTER_IMPL::FreeRules()
883 {
884 rules.clear();
885 }
886 //-----------------------------------------------------------------------------
887 void TRAFFCOUNTER_IMPL::PrintRule(RULE rule) const
888 {
889 printf("%15s   ", inet_ntostring(rule.ip).c_str());
890 printf("mask=%08X ", rule.mask);
891 printf("port1=%5d ", rule.port1);
892 printf("port2=%5d ", rule.port2);
893 switch (rule.proto)
894     {
895     case 0:
896         printf("TCP     ");
897         break;
898     case 1:
899         printf("UDP     ");
900         break;
901     case 2:
902         printf("ICMP    ");
903         break;
904     case 3:
905         printf("TCP_UDP ");
906         break;
907     case 4:
908         printf("ALL     ");
909         break;
910     }
911 printf("dir=%d \n", rule.dir);
912 return;
913 }
914 //-----------------------------------------------------------------------------
915 void TRAFFCOUNTER_IMPL::SetMonitorDir(const std::string & monitorDir)
916 {
917 TRAFFCOUNTER_IMPL::monitorDir = monitorDir;
918 monitoring = (monitorDir != "");
919 }
920 //-----------------------------------------------------------------------------