projects/stargazer/traffcounter_impl.cpp

   1 /*
   2  *    This program is free software; you can redistribute it and/or modify
   3  *    it under the terms of the GNU General Public License as published by
   4  *    the Free Software Foundation; either version 2 of the License, or
   5  *    (at your option) any later version.
   6  *
   7  *    This program is distributed in the hope that it will be useful,
   8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  *    GNU General Public License for more details.
  11  *
  12  *    You should have received a copy of the GNU General Public License
  13  *    along with this program; if not, write to the Free Software
  14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  15  */
  16
  17 /*
  18  *    Date: 27.10.2002
  19  */
  20
  21 /*
  22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
  23  */
  24
  25 /*
  26  $Revision: 1.58 $
  27  $Date: 2010/11/03 11:28:07 $
  28  $Author: faust $
  29  */
  30
  31 /* inet_aton */
  32 #include <sys/types.h>
  33 #include <sys/socket.h>
  34 #include <netinet/in.h>
  35 #include <arpa/inet.h>
  36
  37 #include <csignal>
  38 #include <cassert>
  39 #include <cstdio> // fopen and similar
  40 #include <cstdlib> // strtol
  41
  42 #include "stg/common.h"
  43 #include "stg/locker.h"
  44 #include "traffcounter_impl.h"
  45 #include "stg_timer.h"
  46 #include "users_impl.h"
  47
  48 #define FLUSH_TIME  (10)
  49 #define REMOVE_TIME  (31)
  50
  51 const char protoName[PROTOMAX][8] =
  52 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
  53
  54 enum protoNum
  55 {
  56 tcp = 0, udp, icmp, tcp_udp, all
  57 };
  58
  59 //-----------------------------------------------------------------------------
  60 TRAFFCOUNTER_IMPL::TRAFFCOUNTER_IMPL(USERS_IMPL * u, const std::string & fn)
  61     : TRAFFCOUNTER(),
  62       WriteServLog(GetStgLogger()),
  63       rulesFileName(fn),
  64       monitoring(false),
  65       users(u),
  66       running(false),
  67       stopped(true),
  68       addUserNotifier(*this),
  69       delUserNotifier(*this)
  70 {
  71 for (int i = 0; i < DIR_NUM; i++)
  72     strprintf(&dirName[i], "DIR%d", i);
  73
  74 dirName[DIR_NUM] = "NULL";
  75
  76 users->AddNotifierUserAdd(&addUserNotifier);
  77 users->AddNotifierUserDel(&delUserNotifier);
  78
  79 pthread_mutex_init(&mutex, NULL);
  80 }
  81 //-----------------------------------------------------------------------------
  82 TRAFFCOUNTER_IMPL::~TRAFFCOUNTER_IMPL()
  83 {
  84 pthread_mutex_destroy(&mutex);
  85 }
  86 //-----------------------------------------------------------------------------
  87 int TRAFFCOUNTER_IMPL::Start()
  88 {
  89 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
  90
  91 if (!stopped)
  92     return 0;
  93
  94 if (ReadRules())
  95     {
  96     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot read rules\n");
  97     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
  98     return -1;
  99     }
 100
 101 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
 102 int h = users->OpenSearch();
 103 assert(h && "USERS::OpenSearch is always correct");
 104 USER_IMPL * u;
 105
 106 while (users->SearchNext(h, &u) == 0)
 107     {
 108     SetUserNotifiers(u);
 109     }
 110 users->CloseSearch(h);
 111
 112 running = true;
 113 if (pthread_create(&thread, NULL, Run, this))
 114     {
 115     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot start thread\n");
 116     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread.");
 117     return -1;
 118     }
 119 return 0;
 120 }
 121 //-----------------------------------------------------------------------------
 122 int TRAFFCOUNTER_IMPL::Stop()
 123 {
 124 if (stopped)
 125     return 0;
 126
 127 running = false;
 128
 129 int h = users->OpenSearch();
 130 assert(h && "USERS::OpenSearch is always correct");
 131
 132 USER_IMPL * u;
 133 while (users->SearchNext(h, &u) == 0)
 134     {
 135     UnSetUserNotifiers(u);
 136     }
 137 users->CloseSearch(h);
 138
 139 //5 seconds to thread stops itself
 140 struct timespec ts = {0, 200000000};
 141 for (int i = 0; i < 25 && !stopped; i++)
 142     {
 143     nanosleep(&ts, NULL);
 144     }
 145
 146 //after 5 seconds waiting thread still running. now kill it
 147 if (!stopped)
 148     {
 149     printfd(__FILE__, "kill TRAFFCOUNTER thread.\n");
 150     if (pthread_kill(thread, SIGINT))
 151         {
 152         return -1;
 153         }
 154     printfd(__FILE__, "TRAFFCOUNTER killed\n");
 155     }
 156 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
 157
 158 return 0;
 159 }
 160 //-----------------------------------------------------------------------------
 161 void * TRAFFCOUNTER_IMPL::Run(void * data)
 162 {
 163 TRAFFCOUNTER_IMPL * tc = static_cast<TRAFFCOUNTER_IMPL *>(data);
 164 tc->stopped = false;
 165 int c = 0;
 166
 167 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 168 struct timespec ts = {0, 500000000};
 169 while (tc->running)
 170     {
 171     nanosleep(&ts, 0);
 172     if (!tc->running)
 173         {
 174         tc->FlushAndRemove();
 175         break;
 176         }
 177
 178     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 179         {
 180         std::string monFile(tc->monitorDir + "/traffcounter_r");
 181         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
 182         touchTime = stgTime;
 183         TouchFile(monFile.c_str());
 184         }
 185
 186     if (++c % FLUSH_TIME == 0)
 187         tc->FlushAndRemove();
 188     }
 189
 190 tc->stopped = true;
 191 return NULL;
 192 }
 193 //-----------------------------------------------------------------------------
 194 void TRAFFCOUNTER_IMPL::Process(const RAW_PACKET & rawPacket)
 195 {
 196 if (!running)
 197     return;
 198
 199 static time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 200
 201 if (monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 202     {
 203     static std::string monFile = monitorDir + "/traffcounter_p";
 204     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
 205     touchTime = stgTime;
 206     TouchFile(monFile.c_str());
 207     }
 208
 209 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 210
 211 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
 212 //TODO replace find with lower_bound.
 213
 214 // Searching a new packet in a tree.
 215 pp_iter pi = packets.find(rawPacket);
 216
 217 // Packet found - update length and time
 218 if (pi != packets.end())
 219     {
 220     pi->second.lenU += rawPacket.GetLen();
 221     pi->second.lenD += rawPacket.GetLen();
 222     pi->second.updateTime = stgTime;
 223     /*printfd(__FILE__, "=============================\n");
 224     printfd(__FILE__, "Packet found!\n");
 225     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
 226     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
 227     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
 228     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
 229     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
 230     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
 231     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
 232     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
 233     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
 234     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
 235     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
 236     printfd(__FILE__, "=============================\n");*/
 237     return;
 238     }
 239
 240 PACKET_EXTRA_DATA ed;
 241
 242 // Packet not found - add new packet
 243
 244 ed.updateTime = stgTime;
 245 ed.flushTime = stgTime;
 246
 247 /*
 248  userU is that whose user_ip == packet_ip_src
 249  userD is that whose user_ip == packet_ip_dst
 250  */
 251
 252 uint32_t ipU = rawPacket.GetSrcIP();
 253 uint32_t ipD = rawPacket.GetDstIP();
 254
 255 // Searching users with such IP
 256 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
 257     {
 258     ed.userUPresent = true;
 259     }
 260
 261 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
 262     {
 263     ed.userDPresent = true;
 264     }
 265
 266 if (ed.userUPresent ||
 267     ed.userDPresent)
 268     {
 269     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
 270
 271     ed.lenD = ed.lenU = rawPacket.GetLen();
 272
 273     //TODO use result of lower_bound to inserting new record
 274
 275     // Adding packet to a tree.
 276     std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
 277     pp_iter newPacket = insertResult.first;
 278
 279     // Adding packet reference to an IP index.
 280     ip2packets.insert(std::make_pair(ipU, newPacket));
 281     ip2packets.insert(std::make_pair(ipD, newPacket));
 282     }
 283 }
 284 //-----------------------------------------------------------------------------
 285 void TRAFFCOUNTER_IMPL::FlushAndRemove()
 286 {
 287 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 288
 289 int oldPacketsSize = packets.size();
 290 int oldIp2packetsSize = ip2packets.size();
 291
 292 pp_iter pi;
 293 pi = packets.begin();
 294 std::map<RAW_PACKET, PACKET_EXTRA_DATA> newPackets;
 295 ip2packets.erase(ip2packets.begin(), ip2packets.end());
 296 while (pi != packets.end())
 297     {
 298     //Flushing
 299     if (stgTime - pi->second.flushTime > FLUSH_TIME)
 300         {
 301         if (pi->second.userUPresent)
 302             {
 303             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
 304
 305             // Add stat
 306             if (pi->second.dirU < DIR_NUM)
 307                 {
 308                 #ifdef TRAFF_STAT_WITH_PORTS
 309                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 310                                                 pi->first.GetDstIP(),
 311                                                 pi->first.GetDstPort(),
 312                                                 pi->second.lenU);
 313                 #else
 314                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 315                                                 pi->first.GetDstIP(),
 316                                                 pi->second.lenU);
 317                 #endif
 318                 }
 319
 320             pi->second.lenU = 0;
 321             pi->second.flushTime = stgTime;
 322             }
 323
 324         if (pi->second.userDPresent)
 325             {
 326             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
 327
 328             // Add stat
 329             if (pi->second.dirD < DIR_NUM)
 330                 {
 331                 #ifdef TRAFF_STAT_WITH_PORTS
 332                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 333                                                 pi->first.GetSrcIP(),
 334                                                 pi->first.GetSrcPort(),
 335                                                 pi->second.lenD);
 336                 #else
 337                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 338                                                 pi->first.GetSrcIP(),
 339                                                 pi->second.lenD);
 340                 #endif
 341                 }
 342
 343             pi->second.lenD = 0;
 344             pi->second.flushTime = stgTime;
 345             }
 346         }
 347
 348     if (stgTime - pi->second.updateTime < REMOVE_TIME)
 349         {
 350         std::pair<pp_iter, bool> res = newPackets.insert(*pi);
 351         if (res.second)
 352             {
 353             ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
 354             ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
 355             }
 356         }
 357     ++pi;
 358     }
 359 swap(packets, newPackets);
 360 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
 361         packets.size(),
 362         oldPacketsSize - packets.size(),
 363         ip2packets.size(),
 364         oldIp2packetsSize - ip2packets.size());
 365
 366 }
 367 //-----------------------------------------------------------------------------
 368 void TRAFFCOUNTER_IMPL::AddUser(USER_IMPL * user)
 369 {
 370 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
 371 uint32_t uip = user->GetCurrIP();
 372 std::pair<ip2p_iter, ip2p_iter> pi;
 373
 374 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 375 // Find all packets with IP belongs to this user
 376 pi = ip2packets.equal_range(uip);
 377
 378 while (pi.first != pi.second)
 379     {
 380     if (pi.first->second->first.GetSrcIP() == uip)
 381         {
 382         assert((!pi.first->second->second.userUPresent ||
 383                  pi.first->second->second.userU == user) &&
 384                "U user present but it's not current user");
 385
 386         pi.first->second->second.lenU = 0;
 387         pi.first->second->second.userU = user;
 388         pi.first->second->second.userUPresent = true;
 389         }
 390
 391     if (pi.first->second->first.GetDstIP() == uip)
 392         {
 393         assert((!pi.first->second->second.userDPresent ||
 394                  pi.first->second->second.userD == user) &&
 395                "D user present but it's not current user");
 396
 397         pi.first->second->second.lenD = 0;
 398         pi.first->second->second.userD = user;
 399         pi.first->second->second.userDPresent = true;
 400         }
 401
 402     ++pi.first;
 403     }
 404 }
 405 //-----------------------------------------------------------------------------
 406 void TRAFFCOUNTER_IMPL::DelUser(uint32_t uip)
 407 {
 408 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
 409 std::pair<ip2p_iter, ip2p_iter> pi;
 410
 411 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 412 pi = ip2packets.equal_range(uip);
 413
 414 while (pi.first != pi.second)
 415     {
 416     if (pi.first->second->first.GetSrcIP() == uip)
 417         {
 418         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
 419             {
 420             #ifdef TRAFF_STAT_WITH_PORTS
 421             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 422                                                           pi.first->second->first.GetDstIP(),
 423                                                           pi.first->second->first.GetDstPort(),
 424                                                           pi.first->second->second.lenU);
 425             #else
 426             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 427                                                           pi.first->second->first.GetDstIP(),
 428                                                           pi.first->second->second.lenU);
 429             #endif
 430             }
 431         pi.first->second->second.userUPresent = false;
 432         }
 433
 434     if (pi.first->second->first.GetDstIP() == uip)
 435         {
 436         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
 437             {
 438             #ifdef TRAFF_STAT_WITH_PORTS
 439             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 440                                                           pi.first->second->first.GetSrcIP(),
 441                                                           pi.first->second->first.GetSrcPort(),
 442                                                           pi.first->second->second.lenD);
 443             #else
 444             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 445                                                           pi.first->second->first.GetSrcIP(),
 446                                                           pi.first->second->second.lenD);
 447             #endif
 448             }
 449
 450         pi.first->second->second.userDPresent = false;
 451         }
 452
 453     ++pi.first;
 454     }
 455
 456 ip2packets.erase(pi.first, pi.second);
 457 }
 458 //-----------------------------------------------------------------------------
 459 void TRAFFCOUNTER_IMPL::SetUserNotifiers(USER_IMPL * user)
 460 {
 461 // Adding user. Adding notifiers to user.
 462 TRF_IP_BEFORE ipBNotifier(*this, user);
 463 ipBeforeNotifiers.push_front(ipBNotifier);
 464 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
 465
 466 TRF_IP_AFTER ipANotifier(*this, user);
 467 ipAfterNotifiers.push_front(ipANotifier);
 468 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
 469 }
 470 //-----------------------------------------------------------------------------
 471 void TRAFFCOUNTER_IMPL::UnSetUserNotifiers(USER_IMPL * user)
 472 {
 473 // Removing user. Removing notifiers from user.
 474 std::list<TRF_IP_BEFORE>::iterator bi;
 475 std::list<TRF_IP_AFTER>::iterator ai;
 476
 477 bi = ipBeforeNotifiers.begin();
 478 while (bi != ipBeforeNotifiers.end())
 479     {
 480     if (user->GetLogin() == bi->GetUser()->GetLogin())
 481         {
 482         user->DelCurrIPBeforeNotifier(&(*bi));
 483         ipBeforeNotifiers.erase(bi);
 484         break;
 485         }
 486     ++bi;
 487     }
 488
 489 ai = ipAfterNotifiers.begin();
 490 while (ai != ipAfterNotifiers.end())
 491     {
 492     if (user->GetLogin() == ai->GetUser()->GetLogin())
 493         {
 494         user->DelCurrIPAfterNotifier(&(*ai));
 495         ipAfterNotifiers.erase(ai);
 496         break;
 497         }
 498     ++ai;
 499     }
 500 }
 501 //-----------------------------------------------------------------------------
 502 void TRAFFCOUNTER_IMPL::DeterminateDir(const RAW_PACKET & packet,
 503                                        int * dirU, // Direction for incoming packet
 504                                        int * dirD) const // Direction for outgoing packet
 505 {
 506 bool addrMatchU;
 507 bool portMatchU;
 508 bool addrMatchD;
 509 bool portMatchD;
 510 bool foundU = false; // Was rule for U found ?
 511 bool foundD = false; // Was rule for D found ?
 512 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
 513
 514 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
 515
 516 std::list<RULE>::const_iterator ln;
 517 ln = rules.begin();
 518
 519 while (ln != rules.end())
 520     {
 521     if (!foundU)
 522         {
 523         addrMatchU = false;
 524         portMatchU = false;
 525
 526         switch (ln->proto)
 527             {
 528             case all:
 529                 portMatchU = true;
 530                 break;
 531
 532             case icmp:
 533                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
 534                 break;
 535
 536             case tcp_udp:
 537                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 538                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 539                 break;
 540
 541             case tcp:
 542                 if (packet.GetProto() == TCP_PROTO)
 543                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 544                 break;
 545
 546             case udp:
 547                 if (packet.GetProto() == UDP_PROTO)
 548                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 549                 break;
 550
 551             default:
 552                 printfd(__FILE__, "Error! Incorrect rule!\n");
 553                 break;
 554             }
 555
 556         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
 557
 558         if (!foundU && addrMatchU && portMatchU)
 559             {
 560             foundU = true;
 561             *dirU = ln->dir;
 562             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
 563             //PrintRule(ln->rule);
 564             }
 565
 566         } //if (!foundU)
 567
 568     if (!foundD)
 569         {
 570         addrMatchD = false;
 571         portMatchD = false;
 572
 573         switch (ln->proto)
 574             {
 575             case all:
 576                 portMatchD = true;
 577                 break;
 578
 579             case icmp:
 580                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
 581                 break;
 582
 583             case tcp_udp:
 584                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 585                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 586                 break;
 587
 588             case tcp:
 589                 if (packet.GetProto() == TCP_PROTO)
 590                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 591                 break;
 592
 593             case udp:
 594                 if (packet.GetProto() == UDP_PROTO)
 595                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 596                 break;
 597
 598             default:
 599                 printfd(__FILE__, "Error! Incorrect rule!\n");
 600                 break;
 601             }
 602
 603         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
 604
 605         if (!foundD && addrMatchD && portMatchD)
 606             {
 607             foundD = true;
 608             *dirD = ln->dir;
 609             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
 610             //PrintRule(ln->rule);
 611             }
 612         } //if (!foundD)
 613
 614     ++ln;
 615     }   //while (ln != rules.end())
 616
 617 if (!foundU)
 618     *dirU = DIR_NUM;
 619
 620 if (!foundD)
 621     *dirD = DIR_NUM;
 622
 623 return;
 624 };
 625 //-----------------------------------------------------------------------------
 626 void TRAFFCOUNTER_IMPL::SetRulesFile(const std::string & fn)
 627 {
 628 rulesFileName = fn;
 629 }
 630 //-----------------------------------------------------------------------------
 631 bool TRAFFCOUNTER_IMPL::ReadRules(bool test)
 632 {
 633 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
 634
 635 RULE rul;
 636 FILE * f;
 637 char str[1024];
 638 char tp[100];   // protocol
 639 char ta[100];   // address
 640 char td[100];   // target direction
 641 int r;
 642 int lineNumber = 0;
 643 f = fopen(rulesFileName.c_str(), "rt");
 644
 645 if (!f)
 646     {
 647     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - File '%s' cannot be opened.\n", rulesFileName.c_str());
 648     WriteServLog("File '%s' cannot be oppened.", rulesFileName.c_str());
 649     return true;
 650     }
 651
 652 while (fgets(str, 1023, f))
 653     {
 654     lineNumber++;
 655     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
 656         {
 657         continue;
 658         }
 659
 660     r = sscanf(str,"%s %s %s", tp, ta, td);
 661     if (r != 3)
 662         {
 663         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. There must be 3 parameters.\n", rulesFileName.c_str(), lineNumber);
 664         WriteServLog("Error in file '%s' at line %d. There must be 3 parameters.", rulesFileName.c_str(), lineNumber);
 665         fclose(f);
 666         return true;
 667         }
 668
 669     rul.proto = 0xff;
 670     rul.dir = 0xff;
 671
 672     for (int i = 0; i < PROTOMAX; i++)
 673         {
 674         if (strcasecmp(tp, protoName[i]) == 0)
 675             rul.proto = i;
 676         }
 677
 678     for (int i = 0; i < DIR_NUM + 1; i++)
 679         {
 680         if (td == dirName[i])
 681             rul.dir = i;
 682         }
 683
 684     if (rul.dir == 0xff || rul.proto == 0xff)
 685         {
 686         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d.\n", rulesFileName.c_str(), lineNumber);
 687         WriteServLog("Error in file %s. Line %d.",
 688                      rulesFileName.c_str(), lineNumber);
 689         fclose(f);
 690         return true;
 691         }
 692
 693     if (ParseAddress(ta, &rul) != 0)
 694         {
 695         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. Error in adress.\n", rulesFileName.c_str(), lineNumber);
 696         WriteServLog("Error in file %s. Error in adress. Line %d.",
 697                      rulesFileName.c_str(), lineNumber);
 698         fclose(f);
 699         return true;
 700         }
 701     if (!test)
 702         rules.push_back(rul);
 703     //PrintRule(rul);
 704     }
 705
 706 fclose(f);
 707
 708 // Adding lastest rule: ALL 0.0.0.0/0 NULL
 709 rul.dir = DIR_NUM; //NULL
 710 rul.ip = 0;  //0.0.0.0
 711 rul.mask = 0;
 712 rul.port1 = 0;
 713 rul.port2 = 65535;
 714 rul.proto = all;
 715
 716 if (!test)
 717     rules.push_back(rul);
 718
 719 //PrintRule(rul);
 720
 721 return false;
 722 }
 723 //-----------------------------------------------------------------------------
 724 int TRAFFCOUNTER_IMPL::Reload()
 725 {
 726 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 727
 728 if (ReadRules(true))
 729     {
 730     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() - Failed to reload rules.\n");
 731     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
 732     return -1;
 733     }
 734
 735 FreeRules();
 736 ReadRules();
 737 printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() -  Reload rules successfull.\n");
 738 WriteServLog("TRAFFCOUNTER: Reload rules successfull.");
 739 return 0;
 740 }
 741 //-----------------------------------------------------------------------------
 742 bool TRAFFCOUNTER_IMPL::ParseAddress(const char * ta, RULE * rule) const
 743 {
 744 char addr[50], mask[20], port1[20], port2[20], ports[40];
 745
 746 int len = strlen(ta);
 747 char n = 0;
 748 int i, p;
 749 memset(addr, 0, sizeof(addr));
 750 for (i = 0; i < len; i++)
 751     {
 752     if (ta[i] == '/' || ta[i] == ':')
 753         {
 754         addr[i] = 0;
 755         n = ta[i];
 756         break;
 757         }
 758     addr[i] = ta[i];
 759     n = 0;
 760     }
 761 addr[i + 1] = 0;
 762 p = i + 1;
 763
 764 if (n == '/')
 765     {
 766     // mask
 767     for (; i < len; i++)
 768         {
 769         if (ta[i] == ':')
 770             {
 771             mask[i - p] = 0;
 772             n = ':';
 773             break;
 774             }
 775         mask[i - p] = ta[i];
 776         }
 777     mask[i - p] = 0;
 778     }
 779 else
 780     {
 781     strcpy(mask, "32");
 782     }
 783
 784 p = i + 1;
 785 i++;
 786
 787 if (n == ':')
 788     {
 789     // port
 790     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
 791         {
 792         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - No ports specified for this protocol.\n");
 793         WriteServLog("No ports specified for this protocol.");
 794         return true;
 795         }
 796
 797     for (; i < len; i++)
 798         ports[i - p] = ta[i];
 799
 800     ports[i - p] = 0;
 801     }
 802 else
 803     {
 804     strcpy(ports, "0-65535");
 805     }
 806
 807 char *sss;
 808 char pts[100];
 809 strcpy(pts, ports);
 810
 811 if ((sss = strchr(ports, '-')) != NULL)
 812     {
 813     strncpy(port1, ports, int(sss-ports));
 814     port1[int(sss - ports)] = 0;
 815     strcpy(port2, sss + 1);
 816     }
 817 else
 818     {
 819     strcpy(port1, ports);
 820     strcpy(port2, ports);
 821     }
 822
 823 // Convert strings to mask, ports and IP
 824 int prt1, prt2, msk;
 825 unsigned ip;
 826 char *res;
 827
 828 msk = strtol(mask, &res, 10);
 829 if (*res != 0)
 830     return true;
 831
 832 prt1 = strtol(port1, &res, 10);
 833 if (*res != 0)
 834     return true;
 835
 836 prt2 = strtol(port2, &res, 10);
 837 if (*res != 0)
 838     return true;
 839
 840 int r = inet_aton(addr, (struct in_addr*)&ip);
 841 if (r == 0)
 842     return true;
 843
 844 rule->ip = ip;
 845 rule->mask = CalcMask(msk);
 846 //msk = 1;
 847 //printfd(__FILE__, "msk=%d mask=%08X   mask=%08X\n", msk, rule->mask, (0xFFffFFff << (32 - msk)));
 848
 849 if ((ip & rule->mask) != ip)
 850     {
 851     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - Address does'n match mask.\n");
 852     WriteServLog("Address does'n match mask.");
 853     return true;
 854     }
 855
 856 rule->port1 = prt1;
 857 rule->port2 = prt2;
 858
 859 return false;
 860 }
 861 //-----------------------------------------------------------------------------
 862 uint32_t TRAFFCOUNTER_IMPL::CalcMask(uint32_t msk) const
 863 {
 864 if (msk >= 32) return 0xFFffFFff;
 865 if (msk == 0) return 0;
 866 return htonl(0xFFffFFff << (32 - msk));
 867 }
 868 //---------------------------------------------------------------------------
 869 void TRAFFCOUNTER_IMPL::FreeRules()
 870 {
 871 rules.clear();
 872 }
 873 //-----------------------------------------------------------------------------
 874 void TRAFFCOUNTER_IMPL::PrintRule(RULE rule) const
 875 {
 876 printf("%15s   ", inet_ntostring(rule.ip).c_str());
 877 printf("mask=%08X ", rule.mask);
 878 printf("port1=%5d ", rule.port1);
 879 printf("port2=%5d ", rule.port2);
 880 switch (rule.proto)
 881     {
 882     case 0:
 883         printf("TCP     ");
 884         break;
 885     case 1:
 886         printf("UDP     ");
 887         break;
 888     case 2:
 889         printf("ICMP    ");
 890         break;
 891     case 3:
 892         printf("TCP_UDP ");
 893         break;
 894     case 4:
 895         printf("ALL     ");
 896         break;
 897     }
 898 printf("dir=%d \n", rule.dir);
 899 return;
 900 }
 901 //-----------------------------------------------------------------------------
 902 void TRAFFCOUNTER_IMPL::SetMonitorDir(const std::string & monitorDir)
 903 {
 904 TRAFFCOUNTER_IMPL::monitorDir = monitorDir;
 905 monitoring = (monitorDir != "");
 906 }
 907 //-----------------------------------------------------------------------------