]> git.stg.codes - stg.git/blob - stargazer/traffcounter_impl.cpp
cd3244eb54f0064cb4d7def50e5f57bb61221cbd
[stg.git] / stargazer / traffcounter_impl.cpp
1 /*
2  *    This program is free software; you can redistribute it and/or modify
3  *    it under the terms of the GNU General Public License as published by
4  *    the Free Software Foundation; either version 2 of the License, or
5  *    (at your option) any later version.
6  *
7  *    This program is distributed in the hope that it will be useful,
8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
10  *    GNU General Public License for more details.
11  *
12  *    You should have received a copy of the GNU General Public License
13  *    along with this program; if not, write to the Free Software
14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
15  */
16
17 /*
18  *    Date: 27.10.2002
19  */
20
21 /*
22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
23  */
24
25 /*
26  $Revision: 1.58 $
27  $Date: 2010/11/03 11:28:07 $
28  $Author: faust $
29  */
30
31 /* inet_aton */
32 #include <sys/types.h>
33 #include <sys/socket.h>
34 #include <netinet/in.h>
35 #include <arpa/inet.h>
36
37 #include <csignal>
38 #include <cassert>
39 #include <cstdio> // fopen and similar
40 #include <cstdlib> // strtol
41
42 #include "stg/common.h"
43 #include "stg/locker.h"
44 #include "stg/const.h" // MONITOR_TIME_DELAY_SEC
45 #include "traffcounter_impl.h"
46 #include "stg_timer.h"
47 #include "users_impl.h"
48
49 #define FLUSH_TIME  (10)
50 #define REMOVE_TIME  (31)
51
52 const char protoName[PROTOMAX][8] =
53 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
54
55 enum protoNum
56 {
57 tcp = 0, udp, icmp, tcp_udp, all
58 };
59
60 //-----------------------------------------------------------------------------
61 TRAFFCOUNTER_IMPL::TRAFFCOUNTER_IMPL(USERS_IMPL * u, const std::string & fn)
62     : WriteServLog(GetStgLogger()),
63       rulesFileName(fn),
64       monitoring(false),
65       touchTimeP(stgTime - MONITOR_TIME_DELAY_SEC),
66       users(u),
67       running(false),
68       stopped(true),
69       addUserNotifier(*this),
70       delUserNotifier(*this)
71 {
72 for (int i = 0; i < DIR_NUM; i++)
73     strprintf(&dirName[i], "DIR%d", i);
74
75 dirName[DIR_NUM] = "NULL";
76
77 users->AddNotifierUserAdd(&addUserNotifier);
78 users->AddNotifierUserDel(&delUserNotifier);
79
80 pthread_mutex_init(&mutex, NULL);
81 }
82 //-----------------------------------------------------------------------------
83 TRAFFCOUNTER_IMPL::~TRAFFCOUNTER_IMPL()
84 {
85 pthread_mutex_destroy(&mutex);
86 }
87 //-----------------------------------------------------------------------------
88 int TRAFFCOUNTER_IMPL::Start()
89 {
90 STG_LOCKER lock(&mutex);
91
92 if (!stopped)
93     return 0;
94
95 if (ReadRules())
96     {
97     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot read rules\n");
98     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
99     return -1;
100     }
101
102 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
103 int h = users->OpenSearch();
104 assert(h && "USERS::OpenSearch is always correct");
105 USER_IMPL * u;
106
107 while (users->SearchNext(h, &u) == 0)
108     SetUserNotifiers(u);
109 users->CloseSearch(h);
110
111 running = true;
112 if (pthread_create(&thread, NULL, Run, this))
113     {
114     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Start() - Cannot start thread\n");
115     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread.");
116     return -1;
117     }
118 return 0;
119 }
120 //-----------------------------------------------------------------------------
121 int TRAFFCOUNTER_IMPL::Stop()
122 {
123 if (stopped)
124     return 0;
125
126 running = false;
127
128 int h = users->OpenSearch();
129 assert(h && "USERS::OpenSearch is always correct");
130
131 USER_IMPL * u;
132 while (users->SearchNext(h, &u) == 0)
133     UnSetUserNotifiers(u);
134 users->CloseSearch(h);
135
136 //5 seconds to thread stops itself
137 struct timespec ts = {0, 200000000};
138 for (int i = 0; i < 25 && !stopped; i++)
139     {
140     nanosleep(&ts, NULL);
141     }
142
143 if (!stopped)
144     return -1;
145
146 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
147
148 return 0;
149 }
150 //-----------------------------------------------------------------------------
151 void * TRAFFCOUNTER_IMPL::Run(void * data)
152 {
153 sigset_t signalSet;
154 sigfillset(&signalSet);
155 pthread_sigmask(SIG_BLOCK, &signalSet, NULL);
156
157 TRAFFCOUNTER_IMPL * tc = static_cast<TRAFFCOUNTER_IMPL *>(data);
158 tc->stopped = false;
159 int c = 0;
160
161 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
162 struct timespec ts = {0, 500000000};
163 while (tc->running)
164     {
165     nanosleep(&ts, 0);
166     if (!tc->running)
167         {
168         tc->FlushAndRemove();
169         break;
170         }
171
172     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
173         {
174         std::string monFile(tc->monitorDir + "/traffcounter_r");
175         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
176         touchTime = stgTime;
177         TouchFile(monFile);
178         }
179
180     if (++c % FLUSH_TIME == 0)
181         tc->FlushAndRemove();
182     }
183
184 tc->stopped = true;
185 return NULL;
186 }
187 //-----------------------------------------------------------------------------
188 void TRAFFCOUNTER_IMPL::Process(const RAW_PACKET & rawPacket)
189 {
190 if (!running)
191     return;
192
193 if (monitoring && (touchTimeP + MONITOR_TIME_DELAY_SEC <= stgTime))
194     {
195     std::string monFile = monitorDir + "/traffcounter_p";
196     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
197     touchTimeP = stgTime;
198     TouchFile(monFile);
199     }
200
201 STG_LOCKER lock(&mutex);
202
203 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
204 //TODO replace find with lower_bound.
205
206 // Searching a new packet in a tree.
207 pp_iter pi = packets.find(rawPacket);
208
209 // Packet found - update length and time
210 if (pi != packets.end())
211     {
212     pi->second.lenU += rawPacket.GetLen();
213     pi->second.lenD += rawPacket.GetLen();
214     pi->second.updateTime = stgTime;
215     /*printfd(__FILE__, "=============================\n");
216     printfd(__FILE__, "Packet found!\n");
217     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
218     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
219     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
220     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
221     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
222     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
223     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
224     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
225     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
226     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
227     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
228     printfd(__FILE__, "=============================\n");*/
229     return;
230     }
231
232 PACKET_EXTRA_DATA ed;
233
234 // Packet not found - add new packet
235
236 ed.updateTime = stgTime;
237 ed.flushTime = stgTime;
238
239 /*
240  userU is that whose user_ip == packet_ip_src
241  userD is that whose user_ip == packet_ip_dst
242  */
243
244 uint32_t ipU = rawPacket.GetSrcIP();
245 uint32_t ipD = rawPacket.GetDstIP();
246
247 // Searching users with such IP
248 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
249     {
250     ed.userUPresent = true;
251     }
252
253 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
254     {
255     ed.userDPresent = true;
256     }
257
258 if (ed.userUPresent ||
259     ed.userDPresent)
260     {
261     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
262
263     ed.lenD = ed.lenU = rawPacket.GetLen();
264
265     //TODO use result of lower_bound to inserting new record
266
267     // Adding packet to a tree.
268     std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
269     pp_iter newPacket = insertResult.first;
270
271     // Adding packet reference to an IP index.
272     ip2packets.insert(std::make_pair(ipU, newPacket));
273     ip2packets.insert(std::make_pair(ipD, newPacket));
274     }
275 }
276 //-----------------------------------------------------------------------------
277 void TRAFFCOUNTER_IMPL::FlushAndRemove()
278 {
279 STG_LOCKER lock(&mutex);
280
281 Packets::size_type oldPacketsSize = packets.size();
282 Index::size_type oldIp2packetsSize = ip2packets.size();
283
284 pp_iter pi;
285 pi = packets.begin();
286 Packets newPackets;
287 ip2packets.erase(ip2packets.begin(), ip2packets.end());
288 while (pi != packets.end())
289     {
290     //Flushing
291     if (stgTime - pi->second.flushTime > FLUSH_TIME)
292         {
293         if (pi->second.userUPresent)
294             {
295             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
296
297             // Add stat
298             if (pi->second.dirU < DIR_NUM)
299                 {
300                 #ifdef TRAFF_STAT_WITH_PORTS
301                 pi->second.userU->AddTraffStatU(pi->second.dirU,
302                                                 pi->first.GetDstIP(),
303                                                 pi->first.GetDstPort(),
304                                                 pi->second.lenU);
305                 #else
306                 pi->second.userU->AddTraffStatU(pi->second.dirU,
307                                                 pi->first.GetDstIP(),
308                                                 pi->second.lenU);
309                 #endif
310                 }
311
312             pi->second.lenU = 0;
313             pi->second.flushTime = stgTime;
314             }
315
316         if (pi->second.userDPresent)
317             {
318             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
319
320             // Add stat
321             if (pi->second.dirD < DIR_NUM)
322                 {
323                 #ifdef TRAFF_STAT_WITH_PORTS
324                 pi->second.userD->AddTraffStatD(pi->second.dirD,
325                                                 pi->first.GetSrcIP(),
326                                                 pi->first.GetSrcPort(),
327                                                 pi->second.lenD);
328                 #else
329                 pi->second.userD->AddTraffStatD(pi->second.dirD,
330                                                 pi->first.GetSrcIP(),
331                                                 pi->second.lenD);
332                 #endif
333                 }
334
335             pi->second.lenD = 0;
336             pi->second.flushTime = stgTime;
337             }
338         }
339
340     if (stgTime - pi->second.updateTime < REMOVE_TIME)
341         {
342         std::pair<pp_iter, bool> res = newPackets.insert(*pi);
343         if (res.second)
344             {
345             ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
346             ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
347             }
348         }
349     ++pi;
350     }
351 swap(packets, newPackets);
352 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
353         packets.size(),
354         oldPacketsSize - packets.size(),
355         ip2packets.size(),
356         oldIp2packetsSize - ip2packets.size());
357
358 }
359 //-----------------------------------------------------------------------------
360 void TRAFFCOUNTER_IMPL::AddUser(USER_IMPL * user)
361 {
362 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
363 uint32_t uip = user->GetCurrIP();
364 std::pair<ip2p_iter, ip2p_iter> pi;
365
366 STG_LOCKER lock(&mutex);
367 // Find all packets with IP belongs to this user
368 pi = ip2packets.equal_range(uip);
369
370 while (pi.first != pi.second)
371     {
372     if (pi.first->second->first.GetSrcIP() == uip)
373         {
374         assert((!pi.first->second->second.userUPresent ||
375                  pi.first->second->second.userU == user) &&
376                "U user present but it's not current user");
377
378         pi.first->second->second.lenU = 0;
379         pi.first->second->second.userU = user;
380         pi.first->second->second.userUPresent = true;
381         }
382
383     if (pi.first->second->first.GetDstIP() == uip)
384         {
385         assert((!pi.first->second->second.userDPresent ||
386                  pi.first->second->second.userD == user) &&
387                "D user present but it's not current user");
388
389         pi.first->second->second.lenD = 0;
390         pi.first->second->second.userD = user;
391         pi.first->second->second.userDPresent = true;
392         }
393
394     ++pi.first;
395     }
396 }
397 //-----------------------------------------------------------------------------
398 void TRAFFCOUNTER_IMPL::DelUser(uint32_t uip)
399 {
400 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
401 std::pair<ip2p_iter, ip2p_iter> pi;
402
403 STG_LOCKER lock(&mutex);
404 pi = ip2packets.equal_range(uip);
405
406 while (pi.first != pi.second)
407     {
408     if (pi.first->second->first.GetSrcIP() == uip)
409         {
410         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
411             {
412             #ifdef TRAFF_STAT_WITH_PORTS
413             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
414                                                           pi.first->second->first.GetDstIP(),
415                                                           pi.first->second->first.GetDstPort(),
416                                                           pi.first->second->second.lenU);
417             #else
418             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
419                                                           pi.first->second->first.GetDstIP(),
420                                                           pi.first->second->second.lenU);
421             #endif
422             }
423         pi.first->second->second.userUPresent = false;
424         }
425
426     if (pi.first->second->first.GetDstIP() == uip)
427         {
428         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
429             {
430             #ifdef TRAFF_STAT_WITH_PORTS
431             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
432                                                           pi.first->second->first.GetSrcIP(),
433                                                           pi.first->second->first.GetSrcPort(),
434                                                           pi.first->second->second.lenD);
435             #else
436             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
437                                                           pi.first->second->first.GetSrcIP(),
438                                                           pi.first->second->second.lenD);
439             #endif
440             }
441
442         pi.first->second->second.userDPresent = false;
443         }
444
445     ++pi.first;
446     }
447
448 ip2packets.erase(pi.first, pi.second);
449 }
450 //-----------------------------------------------------------------------------
451 void TRAFFCOUNTER_IMPL::SetUserNotifiers(USER_IMPL * user)
452 {
453 // Adding user. Adding notifiers to user.
454 TRF_IP_BEFORE ipBNotifier(*this, user);
455 ipBeforeNotifiers.push_front(ipBNotifier);
456 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
457
458 TRF_IP_AFTER ipANotifier(*this, user);
459 ipAfterNotifiers.push_front(ipANotifier);
460 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
461 }
462 //-----------------------------------------------------------------------------
463 void TRAFFCOUNTER_IMPL::UnSetUserNotifiers(USER_IMPL * user)
464 {
465 // Removing user. Removing notifiers from user.
466 std::list<TRF_IP_BEFORE>::iterator bi;
467 std::list<TRF_IP_AFTER>::iterator ai;
468
469 bi = ipBeforeNotifiers.begin();
470 while (bi != ipBeforeNotifiers.end())
471     {
472     if (user->GetLogin() == bi->GetUser()->GetLogin())
473         {
474         user->DelCurrIPBeforeNotifier(&(*bi));
475         ipBeforeNotifiers.erase(bi);
476         break;
477         }
478     ++bi;
479     }
480
481 ai = ipAfterNotifiers.begin();
482 while (ai != ipAfterNotifiers.end())
483     {
484     if (user->GetLogin() == ai->GetUser()->GetLogin())
485         {
486         user->DelCurrIPAfterNotifier(&(*ai));
487         ipAfterNotifiers.erase(ai);
488         break;
489         }
490     ++ai;
491     }
492 }
493 //-----------------------------------------------------------------------------
494 void TRAFFCOUNTER_IMPL::DeterminateDir(const RAW_PACKET & packet,
495                                        int * dirU, // Direction for incoming packet
496                                        int * dirD) const // Direction for outgoing packet
497 {
498 bool addrMatchU = false;
499 bool portMatchU = false;
500 bool addrMatchD = false;
501 bool portMatchD = false;
502 bool foundU = false; // Was rule for U found ?
503 bool foundD = false; // Was rule for D found ?
504 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
505
506 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
507
508 std::list<RULE>::const_iterator ln;
509 ln = rules.begin();
510
511 while (ln != rules.end())
512     {
513     if (!foundU)
514         {
515         portMatchU = false;
516
517         switch (ln->proto)
518             {
519             case all:
520                 portMatchU = true;
521                 break;
522
523             case icmp:
524                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
525                 break;
526
527             case tcp_udp:
528                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
529                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
530                 break;
531
532             case tcp:
533                 if (packet.GetProto() == TCP_PROTO)
534                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
535                 break;
536
537             case udp:
538                 if (packet.GetProto() == UDP_PROTO)
539                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
540                 break;
541
542             default:
543                 printfd(__FILE__, "Error! Incorrect rule!\n");
544                 break;
545             }
546
547         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
548
549         if (!foundU && addrMatchU && portMatchU)
550             {
551             foundU = true;
552             *dirU = ln->dir;
553             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
554             }
555
556         } //if (!foundU)
557
558     if (!foundD)
559         {
560         portMatchD = false;
561
562         switch (ln->proto)
563             {
564             case all:
565                 portMatchD = true;
566                 break;
567
568             case icmp:
569                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
570                 break;
571
572             case tcp_udp:
573                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
574                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
575                 break;
576
577             case tcp:
578                 if (packet.GetProto() == TCP_PROTO)
579                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
580                 break;
581
582             case udp:
583                 if (packet.GetProto() == UDP_PROTO)
584                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
585                 break;
586
587             default:
588                 printfd(__FILE__, "Error! Incorrect rule!\n");
589                 break;
590             }
591
592         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
593
594         if (!foundD && addrMatchD && portMatchD)
595             {
596             foundD = true;
597             *dirD = ln->dir;
598             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
599             }
600         } //if (!foundD)
601
602     ++ln;
603     }   //while (ln != rules.end())
604
605 if (!foundU)
606     *dirU = DIR_NUM;
607
608 if (!foundD)
609     *dirD = DIR_NUM;
610 }
611 //-----------------------------------------------------------------------------
612 bool TRAFFCOUNTER_IMPL::ReadRules(bool test)
613 {
614 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
615
616 RULE rul;
617 FILE * f;
618 char str[1024];
619 char tp[100];   // protocol
620 char ta[100];   // address
621 char td[100];   // target direction
622 int r;
623 int lineNumber = 0;
624 f = fopen(rulesFileName.c_str(), "rt");
625
626 if (!f)
627     {
628     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - File '%s' cannot be opened.\n", rulesFileName.c_str());
629     WriteServLog("File '%s' cannot be oppened.", rulesFileName.c_str());
630     return true;
631     }
632
633 while (fgets(str, 1023, f))
634     {
635     lineNumber++;
636     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
637         {
638         continue;
639         }
640
641     r = sscanf(str,"%99s %99s %99s", tp, ta, td);
642     if (r != 3)
643         {
644         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. There must be 3 parameters.\n", rulesFileName.c_str(), lineNumber);
645         WriteServLog("Error in file '%s' at line %d. There must be 3 parameters.", rulesFileName.c_str(), lineNumber);
646         fclose(f);
647         return true;
648         }
649
650     rul.proto = 0xff;
651     rul.dir = 0xff;
652
653     for (uint8_t i = 0; i < PROTOMAX; i++)
654         {
655         if (strcasecmp(tp, protoName[i]) == 0)
656             rul.proto = i;
657         }
658
659     for (uint32_t i = 0; i < DIR_NUM + 1; i++)
660         {
661         if (td == dirName[i])
662             rul.dir = i;
663         }
664
665     if (rul.dir == 0xff || rul.proto == 0xff)
666         {
667         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d.\n", rulesFileName.c_str(), lineNumber);
668         WriteServLog("Error in file %s. Line %d.",
669                      rulesFileName.c_str(), lineNumber);
670         fclose(f);
671         return true;
672         }
673
674     if (ParseAddress(ta, &rul) != 0)
675         {
676         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ReadRules() - Error in file '%s' at line %d. Error in adress.\n", rulesFileName.c_str(), lineNumber);
677         WriteServLog("Error in file %s. Error in adress. Line %d.",
678                      rulesFileName.c_str(), lineNumber);
679         fclose(f);
680         return true;
681         }
682     if (!test)
683         rules.push_back(rul);
684     }
685
686 fclose(f);
687
688 // Adding lastest rule: ALL 0.0.0.0/0 NULL
689 rul.dir = DIR_NUM; //NULL
690 rul.ip = 0;  //0.0.0.0
691 rul.mask = 0;
692 rul.port1 = 0;
693 rul.port2 = 65535;
694 rul.proto = all;
695
696 if (!test)
697     rules.push_back(rul);
698
699 return false;
700 }
701 //-----------------------------------------------------------------------------
702 int TRAFFCOUNTER_IMPL::Reload()
703 {
704 STG_LOCKER lock(&mutex);
705
706 if (ReadRules(true))
707     {
708     printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() - Failed to reload rules.\n");
709     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
710     return -1;
711     }
712
713 FreeRules();
714 ReadRules();
715 printfd(__FILE__, "TRAFFCOUNTER_IMPL::Reload() -  Reloaded rules successfully.\n");
716 WriteServLog("TRAFFCOUNTER: Reloaded rules successfully.");
717 return 0;
718 }
719 //-----------------------------------------------------------------------------
720 bool TRAFFCOUNTER_IMPL::ParseAddress(const char * ta, RULE * rule) const
721 {
722 char addr[50], mask[20], port1[20], port2[20], ports[40];
723
724 size_t len = strlen(ta);
725 char n = 0;
726 size_t i, p;
727 memset(addr, 0, sizeof(addr));
728 for (i = 0; i < len; i++)
729     {
730     if (ta[i] == '/' || ta[i] == ':')
731         {
732         addr[i] = 0;
733         n = ta[i];
734         break;
735         }
736     addr[i] = ta[i];
737     n = 0;
738     }
739 addr[i + 1] = 0;
740 p = i + 1;
741
742 if (n == '/')
743     {
744     // mask
745     for (; i < len; i++)
746         {
747         if (ta[i] == ':')
748             {
749             mask[i - p] = 0;
750             n = ':';
751             break;
752             }
753         mask[i - p] = ta[i];
754         }
755     mask[i - p] = 0;
756     }
757 else
758     {
759     strcpy(mask, "32");
760     }
761
762 p = i + 1;
763 i++;
764
765 if (n == ':')
766     {
767     // port
768     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
769         {
770         printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - No ports specified for this protocol.\n");
771         WriteServLog("No ports specified for this protocol.");
772         return true;
773         }
774
775     for (; i < len; i++)
776         ports[i - p] = ta[i];
777
778     ports[i - p] = 0;
779     }
780 else
781     {
782     strcpy(ports, "0-65535");
783     }
784
785 char *sss;
786 char pts[100];
787 strcpy(pts, ports);
788
789 if ((sss = strchr(ports, '-')) != NULL)
790     {
791     strncpy(port1, ports, int(sss-ports));
792     port1[int(sss - ports)] = 0;
793     strcpy(port2, sss + 1);
794     }
795 else
796     {
797     strcpy(port1, ports);
798     strcpy(port2, ports);
799     }
800
801 // Convert strings to mask, ports and IP
802 uint16_t prt1, prt2, msk;
803 struct in_addr ipaddr;
804 char *res;
805
806 msk = static_cast<uint16_t>(strtol(mask, &res, 10));
807 if (*res != 0)
808     return true;
809
810 prt1 = static_cast<uint16_t>(strtol(port1, &res, 10));
811 if (*res != 0)
812     return true;
813
814 prt2 = static_cast<uint16_t>(strtol(port2, &res, 10));
815 if (*res != 0)
816     return true;
817
818 int r = inet_aton(addr, &ipaddr);
819 if (r == 0)
820     return true;
821
822 rule->ip = ipaddr.s_addr;
823 rule->mask = CalcMask(msk);
824
825 if ((ipaddr.s_addr & rule->mask) != ipaddr.s_addr)
826     {
827     printfd(__FILE__, "TRAFFCOUNTER_IMPL::ParseAddress() - Address does'n match mask.\n");
828     WriteServLog("Address does'n match mask.");
829     return true;
830     }
831
832 rule->port1 = prt1;
833 rule->port2 = prt2;
834
835 return false;
836 }
837 //-----------------------------------------------------------------------------
838 uint32_t TRAFFCOUNTER_IMPL::CalcMask(uint32_t msk) const
839 {
840 if (msk >= 32) return 0xFFffFFff;
841 if (msk == 0) return 0;
842 return htonl(0xFFffFFff << (32 - msk));
843 }
844 //---------------------------------------------------------------------------
845 void TRAFFCOUNTER_IMPL::FreeRules()
846 {
847 rules.clear();
848 }
849 //-----------------------------------------------------------------------------
850 void TRAFFCOUNTER_IMPL::SetMonitorDir(const std::string & dir)
851 {
852 monitorDir = dir;
853 monitoring = !monitorDir.empty();
854 }
855 //-----------------------------------------------------------------------------