]> git.stg.codes - stg.git/blob - projects/stargazer/traffcounter_impl.cpp
83554e277338aa7c4e0f819881446cbf9cb65b87
[stg.git] / projects / stargazer / traffcounter_impl.cpp
1 /*
2  *    This program is free software; you can redistribute it and/or modify
3  *    it under the terms of the GNU General Public License as published by
4  *    the Free Software Foundation; either version 2 of the License, or
5  *    (at your option) any later version.
6  *
7  *    This program is distributed in the hope that it will be useful,
8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
10  *    GNU General Public License for more details.
11  *
12  *    You should have received a copy of the GNU General Public License
13  *    along with this program; if not, write to the Free Software
14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
15  */
16
17 /*
18  *    Date: 27.10.2002
19  */
20
21 /*
22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
23  */
24
25 /*
26  $Revision: 1.58 $
27  $Date: 2010/11/03 11:28:07 $
28  $Author: faust $
29  */
30
31 /* inet_aton */
32 #include <sys/socket.h>
33 #include <netinet/in.h>
34 #include <arpa/inet.h>
35
36 #include <csignal>
37 #include <cassert>
38 #include <cstdio> // fopen and similar
39
40 #include "traffcounter_impl.h"
41 #include "common.h"
42 #include "stg_locker.h"
43 #include "stg_timer.h"
44
45 #define FLUSH_TIME  (10)
46 #define REMOVE_TIME  (31)
47
48 const char protoName[PROTOMAX][8] =
49 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
50
51 enum protoNum
52 {
53 tcp = 0, udp, icmp, tcp_udp, all
54 };
55
56 //-----------------------------------------------------------------------------
57 TRAFFCOUNTER_IMPL::TRAFFCOUNTER_IMPL(USERS * u, const TARIFFS *, const std::string & fn)
58     : WriteServLog(GetStgLogger()),
59       rulesFileName(fn),
60       monitoring(false),
61       users(u),
62       running(false),
63       stopped(true),
64       addUserNotifier(*this),
65       delUserNotifier(*this)
66 {
67 for (int i = 0; i < DIR_NUM; i++)
68     strprintf(&dirName[i], "DIR%d", i);
69
70 dirName[DIR_NUM] = "NULL";
71
72 users->AddNotifierUserAdd(&addUserNotifier);
73 users->AddNotifierUserDel(&delUserNotifier);
74
75 pthread_mutex_init(&mutex, NULL);
76 }
77 //-----------------------------------------------------------------------------
78 TRAFFCOUNTER_IMPL::~TRAFFCOUNTER_IMPL()
79 {
80 pthread_mutex_destroy(&mutex);
81 }
82 //-----------------------------------------------------------------------------
83 int TRAFFCOUNTER_IMPL::Start()
84 {
85 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
86
87 if (!stopped)
88     return 0;
89
90 if (ReadRules())
91     {
92     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
93     return -1;
94     }
95
96 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
97 int h = users->OpenSearch();
98 USER_PTR u;
99 if (!h)
100     {
101     WriteServLog("TRAFFCOUNTER: Cannot get users.");
102     return -1;
103     }
104
105 while (users->SearchNext(h, &u) == 0)
106     {
107     SetUserNotifiers(u);
108     }
109 users->CloseSearch(h);
110
111 running = true;
112 if (pthread_create(&thread, NULL, Run, this))
113     {
114     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread!");
115     return -1;
116     }
117 return 0;
118 }
119 //-----------------------------------------------------------------------------
120 int TRAFFCOUNTER_IMPL::Stop()
121 {
122 if (stopped)
123     return 0;
124
125 running = false;
126
127 int h = users->OpenSearch();
128 if (!h)
129     {
130     WriteServLog("TRAFFCOUNTER: Fatal error: Cannot get users.");
131     return -1;
132     }
133
134 USER_PTR u;
135 while (users->SearchNext(h, &u) == 0)
136     {
137     UnSetUserNotifiers(u);
138     }
139 users->CloseSearch(h);
140
141 //5 seconds to thread stops itself
142 struct timespec ts = {0, 200000000};
143 for (int i = 0; i < 25 && !stopped; i++)
144     {
145     nanosleep(&ts, NULL);
146     }
147
148 //after 5 seconds waiting thread still running. now kill it
149 if (!stopped)
150     {
151     printfd(__FILE__, "kill TRAFFCOUNTER thread.\n");
152     if (pthread_kill(thread, SIGINT))
153         {
154         return -1;
155         }
156     printfd(__FILE__, "TRAFFCOUNTER killed\n");
157     }
158 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
159
160 return 0;
161 }
162 //-----------------------------------------------------------------------------
163 void * TRAFFCOUNTER_IMPL::Run(void * data)
164 {
165 TRAFFCOUNTER_IMPL * tc = static_cast<TRAFFCOUNTER_IMPL *>(data);
166 tc->stopped = false;
167 int c = 0;
168
169 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
170 struct timespec ts = {0, 500000000};
171 while (tc->running)
172     {
173     nanosleep(&ts, 0);
174     if (!tc->running)
175         {
176         tc->FlushAndRemove();
177         break;
178         }
179
180     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
181         {
182         std::string monFile(tc->monitorDir + "/traffcounter_r");
183         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
184         touchTime = stgTime;
185         TouchFile(monFile.c_str());
186         }
187
188     if (++c % FLUSH_TIME == 0)
189         tc->FlushAndRemove();
190     }
191
192 tc->stopped = true;
193 return NULL;
194 }
195 //-----------------------------------------------------------------------------
196 void TRAFFCOUNTER_IMPL::Process(const RAW_PACKET & rawPacket)
197 {
198 if (!running)
199     return;
200
201 static time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
202
203 if (monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
204     {
205     static std::string monFile = monitorDir + "/traffcounter_p";
206     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
207     touchTime = stgTime;
208     TouchFile(monFile.c_str());
209     }
210
211 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
212
213 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
214 //TODO replace find with lower_bound.
215
216 // Searching a new packet in a tree.
217 pp_iter pi = packets.find(rawPacket);
218
219 // Packet found - update length and time
220 if (pi != packets.end())
221     {
222     pi->second.lenU += rawPacket.GetLen();
223     pi->second.lenD += rawPacket.GetLen();
224     pi->second.updateTime = stgTime;
225     /*printfd(__FILE__, "=============================\n");
226     printfd(__FILE__, "Packet found!\n");
227     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
228     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
229     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
230     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
231     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
232     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
233     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
234     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
235     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
236     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
237     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
238     printfd(__FILE__, "=============================\n");*/
239     return;
240     }
241
242 PACKET_EXTRA_DATA ed;
243
244 // Packet not found - add new packet
245
246 ed.updateTime = stgTime;
247 ed.flushTime = stgTime;
248
249 /*
250  userU is that whose user_ip == packet_ip_src
251  userD is that whose user_ip == packet_ip_dst
252  */
253
254 uint32_t ipU = rawPacket.GetSrcIP();
255 uint32_t ipD = rawPacket.GetDstIP();
256
257 // Searching users with such IP
258 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
259     {
260     ed.userUPresent = true;
261     }
262
263 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
264     {
265     ed.userDPresent = true;
266     }
267
268 if (ed.userUPresent ||
269     ed.userDPresent)
270     {
271     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
272
273     ed.lenD = ed.lenU = rawPacket.GetLen();
274
275     //TODO use result of lower_bound to inserting new record
276
277     // Adding packet to a tree.
278     std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
279     pp_iter newPacket = insertResult.first;
280
281     // Adding packet reference to an IP index.
282     ip2packets.insert(std::make_pair(ipU, newPacket));
283     ip2packets.insert(std::make_pair(ipD, newPacket));
284     }
285 }
286 //-----------------------------------------------------------------------------
287 void TRAFFCOUNTER_IMPL::FlushAndRemove()
288 {
289 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
290
291 int oldPacketsSize = packets.size();
292 int oldIp2packetsSize = ip2packets.size();
293
294 pp_iter pi;
295 pi = packets.begin();
296 std::map<RAW_PACKET, PACKET_EXTRA_DATA> newPackets;
297 ip2packets.erase(ip2packets.begin(), ip2packets.end());
298 while (pi != packets.end())
299     {
300     //Flushing
301     if (stgTime - pi->second.flushTime > FLUSH_TIME)
302         {
303         if (pi->second.userUPresent)
304             {
305             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
306
307             // Add stat
308             if (pi->second.dirU < DIR_NUM)
309                 {
310                 #ifdef TRAFF_STAT_WITH_PORTS
311                 pi->second.userU->AddTraffStatU(pi->second.dirU,
312                                                 pi->first.GetDstIP(),
313                                                 pi->first.GetDstPort(),
314                                                 pi->second.lenU);
315                 #else
316                 pi->second.userU->AddTraffStatU(pi->second.dirU,
317                                                 pi->first.GetDstIP(),
318                                                 pi->second.lenU);
319                 #endif
320                 }
321
322             pi->second.lenU = 0;
323             pi->second.flushTime = stgTime;
324             }
325
326         if (pi->second.userDPresent)
327             {
328             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
329
330             // Add stat
331             if (pi->second.dirD < DIR_NUM)
332                 {
333                 #ifdef TRAFF_STAT_WITH_PORTS
334                 pi->second.userD->AddTraffStatD(pi->second.dirD,
335                                                 pi->first.GetSrcIP(),
336                                                 pi->first.GetSrcPort(),
337                                                 pi->second.lenD);
338                 #else
339                 pi->second.userD->AddTraffStatD(pi->second.dirD,
340                                                 pi->first.GetSrcIP(),
341                                                 pi->second.lenD);
342                 #endif
343                 }
344
345             pi->second.lenD = 0;
346             pi->second.flushTime = stgTime;
347             }
348         }
349
350     /*//Removing
351     if (stgTime - pi->second.updateTime > REMOVE_TIME)
352         {
353         // Remove packet and references from ip2packets index
354         //printfd(__FILE__, "+++ Removing +++\n");
355         pair<ip2p_iter, ip2p_iter> be(
356                 ip2packets.equal_range(pi->first.GetSrcIP()));
357         while (be.first != be.second)
358             {
359             // Have a reference to a packet?
360             if (be.first->second == pi)
361                 {
362                 ip2packets.erase(be.first++);
363                 //printfd(__FILE__, "Remove U from ip2packets %s\n", inet_ntostring(pi->first.GetSrcIP()).c_str());
364                 }
365             else
366                 {
367                 ++be.first;
368                 }
369             }
370
371         //printfd(__FILE__, "-------------------\n");
372         be = ip2packets.equal_range(pi->first.GetDstIP());
373         while (be.first != be.second)
374             {
375             // Have a reference to a packet?
376             if (be.first->second == pi)
377                 {
378                 ip2packets.erase(be.first++);
379                 //printfd(__FILE__, "Remove D from ip2packets %s\n", inet_ntostring(pi->first.GetDstIP()).c_str());
380                 }
381             else
382                 {
383                 ++be.first;
384                 }
385             }
386         //printfd(__FILE__, "Remove packet\n");
387         packets.erase(pi++);
388         }
389     else
390         {
391         ++pi;
392         }*/
393     if (stgTime - pi->second.updateTime < REMOVE_TIME)
394         {
395         std::pair<pp_iter, bool> res = newPackets.insert(*pi);
396         if (res.second)
397             {
398             ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
399             ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
400             }
401         }
402     ++pi;
403     }
404 swap(packets, newPackets);
405 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
406         packets.size(),
407         oldPacketsSize - packets.size(),
408         ip2packets.size(),
409         oldIp2packetsSize - ip2packets.size());
410
411 }
412 //-----------------------------------------------------------------------------
413 void TRAFFCOUNTER_IMPL::AddUser(USER_PTR user)
414 {
415 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
416 uint32_t uip = user->GetCurrIP();
417 std::pair<ip2p_iter, ip2p_iter> pi;
418
419 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
420 // Find all packets with IP belongs to this user
421 pi = ip2packets.equal_range(uip);
422
423 while (pi.first != pi.second)
424     {
425     if (pi.first->second->first.GetSrcIP() == uip)
426         {
427         assert((!pi.first->second->second.userUPresent || 
428                  pi.first->second->second.userU == user) &&
429                "U user present but it's not current user");
430
431         pi.first->second->second.lenU = 0;
432         pi.first->second->second.userU = user;
433         pi.first->second->second.userUPresent = true;
434         }
435
436     if (pi.first->second->first.GetDstIP() == uip)
437         {
438         assert((!pi.first->second->second.userDPresent || 
439                  pi.first->second->second.userD == user) &&
440                "D user present but it's not current user");
441
442         pi.first->second->second.lenD = 0;
443         pi.first->second->second.userD = user;
444         pi.first->second->second.userDPresent = true;
445         }
446
447     ++pi.first;
448     }
449 }
450 //-----------------------------------------------------------------------------
451 void TRAFFCOUNTER_IMPL::DelUser(uint32_t uip)
452 {
453 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
454 std::pair<ip2p_iter, ip2p_iter> pi;
455
456 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
457 pi = ip2packets.equal_range(uip);
458
459 while (pi.first != pi.second)
460     {
461     if (pi.first->second->first.GetSrcIP() == uip)
462         {
463         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
464             {
465             #ifdef TRAFF_STAT_WITH_PORTS
466             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
467                                                           pi.first->second->first.GetDstIP(),
468                                                           pi.first->second->first.GetDstPort(),
469                                                           pi.first->second->second.lenU);
470             #else
471             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
472                                                           pi.first->second->first.GetDstIP(),
473                                                           pi.first->second->second.lenU);
474             #endif
475             }
476         pi.first->second->second.userUPresent = false;
477         }
478
479     if (pi.first->second->first.GetDstIP() == uip)
480         {
481         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
482             {
483             #ifdef TRAFF_STAT_WITH_PORTS
484             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
485                                                           pi.first->second->first.GetSrcIP(),
486                                                           pi.first->second->first.GetSrcPort(),
487                                                           pi.first->second->second.lenD);
488             #else
489             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
490                                                           pi.first->second->first.GetSrcIP(),
491                                                           pi.first->second->second.lenD);
492             #endif
493             }
494
495         pi.first->second->second.userDPresent = false;
496         }
497
498     ++pi.first;
499     }
500
501 ip2packets.erase(pi.first, pi.second);
502 }
503 //-----------------------------------------------------------------------------
504 void TRAFFCOUNTER_IMPL::SetUserNotifiers(USER_PTR user)
505 {
506 // Adding user. Adding notifiers to user.
507 TRF_IP_BEFORE ipBNotifier(*this, user);
508 ipBeforeNotifiers.push_front(ipBNotifier);
509 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
510
511 TRF_IP_AFTER ipANotifier(*this, user);
512 ipAfterNotifiers.push_front(ipANotifier);
513 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
514 }
515 //-----------------------------------------------------------------------------
516 void TRAFFCOUNTER_IMPL::UnSetUserNotifiers(USER_PTR user)
517 {
518 // Removing user. Removing notifiers from user.
519 std::list<TRF_IP_BEFORE>::iterator bi;
520 std::list<TRF_IP_AFTER>::iterator ai;
521
522 bi = ipBeforeNotifiers.begin();
523 while (bi != ipBeforeNotifiers.end())
524     {
525     if (user->GetLogin() == bi->GetUser()->GetLogin())
526         {
527         user->DelCurrIPBeforeNotifier(&(*bi));
528         ipBeforeNotifiers.erase(bi);
529         break;
530         }
531     ++bi;
532     }
533
534 ai = ipAfterNotifiers.begin();
535 while (ai != ipAfterNotifiers.end())
536     {
537     if (user->GetLogin() == ai->GetUser()->GetLogin())
538         {
539         user->DelCurrIPAfterNotifier(&(*ai));
540         ipAfterNotifiers.erase(ai);
541         break;
542         }
543     ++ai;
544     }
545 }
546 //-----------------------------------------------------------------------------
547 void TRAFFCOUNTER_IMPL::DeterminateDir(const RAW_PACKET & packet,
548                                        int * dirU, // Direction for incoming packet
549                                        int * dirD) const // Direction for outgoing packet
550 {
551 bool addrMatchU;
552 bool portMatchU;
553 bool addrMatchD;
554 bool portMatchD;
555 bool foundU = false; // Was rule for U found ?
556 bool foundD = false; // Was rule for D found ?
557 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
558
559 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
560
561 std::list<RULE>::const_iterator ln;
562 ln = rules.begin();
563
564 while (ln != rules.end())
565     {
566     if (!foundU)
567         {
568         addrMatchU = false;
569         portMatchU = false;
570
571         switch (ln->proto)
572             {
573             case all:
574                 portMatchU = true;
575                 break;
576
577             case icmp:
578                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
579                 break;
580
581             case tcp_udp:
582                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
583                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
584                 break;
585
586             case tcp:
587                 if (packet.GetProto() == TCP_PROTO)
588                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
589                 break;
590
591             case udp:
592                 if (packet.GetProto() == UDP_PROTO)
593                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
594                 break;
595
596             default:
597                 printfd(__FILE__, "Error! Incorrect rule!\n");
598                 break;
599             }
600
601         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
602
603         if (!foundU && addrMatchU && portMatchU)
604             {
605             foundU = true;
606             *dirU = ln->dir;
607             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
608             //PrintRule(ln->rule);
609             }
610
611         } //if (!foundU)
612
613     if (!foundD)
614         {
615         addrMatchD = false;
616         portMatchD = false;
617
618         switch (ln->proto)
619             {
620             case all:
621                 portMatchD = true;
622                 break;
623
624             case icmp:
625                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
626                 break;
627
628             case tcp_udp:
629                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
630                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
631                 break;
632
633             case tcp:
634                 if (packet.GetProto() == TCP_PROTO)
635                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
636                 break;
637
638             case udp:
639                 if (packet.GetProto() == UDP_PROTO)
640                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
641                 break;
642
643             default:
644                 printfd(__FILE__, "Error! Incorrect rule!\n");
645                 break;
646             }
647
648         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
649
650         if (!foundD && addrMatchD && portMatchD)
651             {
652             foundD = true;
653             *dirD = ln->dir;
654             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
655             //PrintRule(ln->rule);
656             }
657         } //if (!foundD)
658
659     ++ln;
660     }   //while (ln != rules.end())
661
662 if (!foundU)
663     *dirU = DIR_NUM;
664
665 if (!foundD)
666     *dirD = DIR_NUM;
667
668 return;
669 };
670 //-----------------------------------------------------------------------------
671 void TRAFFCOUNTER_IMPL::SetRulesFile(const std::string & fn)
672 {
673 rulesFileName = fn;
674 }
675 //-----------------------------------------------------------------------------
676 bool TRAFFCOUNTER_IMPL::ReadRules(bool test)
677 {
678 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
679
680 RULE rul;
681 FILE * f;
682 char str[1024];
683 char tp[100];   // protocol
684 char ta[100];   // address
685 char td[100];   // target direction
686 int r;
687 int lineNumber = 0;
688 f = fopen(rulesFileName.c_str(), "rt");
689
690 if (!f)
691     {
692     WriteServLog("File %s cannot be oppened.", rulesFileName.c_str());
693     return true;
694     }
695
696 while (fgets(str, 1023, f))
697     {
698     lineNumber++;
699     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
700         {
701         continue;
702         }
703
704     r = sscanf(str,"%s %s %s", tp, ta, td);
705     if (r != 3)
706         {
707         WriteServLog("Error in file %s. There must be 3 parameters. Line %d.", rulesFileName.c_str(), lineNumber);
708         fclose(f);
709         return true;
710         }
711
712     rul.proto = 0xff;
713     rul.dir = 0xff;
714
715     for (int i = 0; i < PROTOMAX; i++)
716         {
717         if (strcasecmp(tp, protoName[i]) == 0)
718             rul.proto = i;
719         }
720
721     for (int i = 0; i < DIR_NUM + 1; i++)
722         {
723         if (td == dirName[i])
724             rul.dir = i;
725         }
726
727     if (rul.dir == 0xff || rul.proto == 0xff)
728         {
729         WriteServLog("Error in file %s. Line %d.",
730                      rulesFileName.c_str(), lineNumber);
731         fclose(f);
732         return true;
733         }
734
735     if (ParseAddress(ta, &rul) != 0)
736         {
737         WriteServLog("Error in file %s. Error in adress. Line %d.",
738                      rulesFileName.c_str(), lineNumber);
739         fclose(f);
740         return true;
741         }
742     if (!test)
743         rules.push_back(rul);
744     //PrintRule(rul);
745     }
746
747 fclose(f);
748
749 // Adding lastest rule: ALL 0.0.0.0/0 NULL
750 rul.dir = DIR_NUM; //NULL
751 rul.ip = 0;  //0.0.0.0
752 rul.mask = 0;
753 rul.port1 = 0;
754 rul.port2 = 65535;
755 rul.proto = all;
756
757 if (!test)
758     rules.push_back(rul);
759
760 //PrintRule(rul);
761
762 return false;
763 }
764 //-----------------------------------------------------------------------------
765 int TRAFFCOUNTER_IMPL::Reload()
766 {
767 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
768
769 if (ReadRules(true))
770     {
771     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
772     return -1;
773     }
774
775 FreeRules();
776 ReadRules();
777 WriteServLog("TRAFFCOUNTER: Reload rules successfull.");
778 return 0;
779 }
780 //-----------------------------------------------------------------------------
781 bool TRAFFCOUNTER_IMPL::ParseAddress(const char * ta, RULE * rule) const
782 {
783 char addr[50], mask[20], port1[20], port2[20], ports[40];
784
785 int len = strlen(ta);
786 char n = 0;
787 int i, p;
788 memset(addr, 0, sizeof(addr));
789 for (i = 0; i < len; i++)
790     {
791     if (ta[i] == '/' || ta[i] == ':')
792         {
793         addr[i] = 0;
794         n = ta[i];
795         break;
796         }
797     addr[i] = ta[i];
798     n = 0;
799     }
800 addr[i + 1] = 0;
801 p = i + 1;
802
803 if (n == '/')
804     {
805     // mask
806     for (; i < len; i++)
807         {
808         if (ta[i] == ':')
809             {
810             mask[i - p] = 0;
811             n = ':';
812             break;
813             }
814         mask[i - p] = ta[i];
815         }
816     mask[i - p] = 0;
817     }
818 else
819     {
820     strcpy(mask, "32");
821     }
822
823 p = i + 1;
824 i++;
825
826 if (n == ':')
827     {
828     // port
829     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
830         {
831         WriteServLog("No ports specified for this protocol.");
832         return true;
833         }
834
835     for (; i < len; i++)
836         ports[i - p] = ta[i];
837
838     ports[i - p] = 0;
839     }
840 else
841     {
842     strcpy(ports, "0-65535");
843     }
844
845 char *sss;
846 char pts[100];
847 strcpy(pts, ports);
848
849 if ((sss = strchr(ports, '-')) != NULL)
850     {
851     strncpy(port1, ports, int(sss-ports));
852     port1[int(sss - ports)] = 0;
853     strcpy(port2, sss + 1);
854     }
855 else
856     {
857     strcpy(port1, ports);
858     strcpy(port2, ports);
859     }
860
861 // Convert strings to mask, ports and IP
862 int prt1, prt2, msk;
863 unsigned ip;
864 char *res;
865
866 msk = strtol(mask, &res, 10);
867 if (*res != 0)
868     return true;
869
870 prt1 = strtol(port1, &res, 10);
871 if (*res != 0)
872     return true;
873
874 prt2 = strtol(port2, &res, 10);
875 if (*res != 0)
876     return true;
877
878 int r = inet_aton(addr, (struct in_addr*)&ip);
879 if (r == 0)
880     return true;
881
882 rule->ip = ip;
883 rule->mask = CalcMask(msk);
884 //msk = 1;
885 //printfd(__FILE__, "msk=%d mask=%08X   mask=%08X\n", msk, rule->mask, (0xFFffFFff << (32 - msk)));
886
887 if ((ip & rule->mask) != ip)
888     {
889     WriteServLog("Address does'n match mask.");
890     return true;
891     }
892
893 rule->port1 = prt1;
894 rule->port2 = prt2;
895
896 return false;
897 }
898 //-----------------------------------------------------------------------------
899 uint32_t TRAFFCOUNTER_IMPL::CalcMask(uint32_t msk) const
900 {
901 if (msk >= 32) return 0xFFffFFff;
902 if (msk == 0) return 0;
903 return htonl(0xFFffFFff << (32 - msk));
904 }
905 //---------------------------------------------------------------------------
906 void TRAFFCOUNTER_IMPL::FreeRules()
907 {
908 rules.clear();
909 }
910 //-----------------------------------------------------------------------------
911 void TRAFFCOUNTER_IMPL::PrintRule(RULE rule) const
912 {
913 printf("%15s   ", inet_ntostring(rule.ip).c_str());
914 printf("mask=%08X ", rule.mask);
915 printf("port1=%5d ", rule.port1);
916 printf("port2=%5d ", rule.port2);
917 switch (rule.proto)
918     {
919     case 0:
920         printf("TCP     ");
921         break;
922     case 1:
923         printf("UDP     ");
924         break;
925     case 2:
926         printf("ICMP    ");
927         break;
928     case 3:
929         printf("TCP_UDP ");
930         break;
931     case 4:
932         printf("ALL     ");
933         break;
934     }
935 printf("dir=%d \n", rule.dir);
936 return;
937 }
938 //-----------------------------------------------------------------------------
939 void TRAFFCOUNTER_IMPL::SetMonitorDir(const std::string & monitorDir)
940 {
941 TRAFFCOUNTER_IMPL::monitorDir = monitorDir;
942 monitoring = (monitorDir != "");
943 }
944 //-----------------------------------------------------------------------------