projects/stargazer/traffcounter_impl.cpp

   1 /*
   2  *    This program is free software; you can redistribute it and/or modify
   3  *    it under the terms of the GNU General Public License as published by
   4  *    the Free Software Foundation; either version 2 of the License, or
   5  *    (at your option) any later version.
   6  *
   7  *    This program is distributed in the hope that it will be useful,
   8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  *    GNU General Public License for more details.
  11  *
  12  *    You should have received a copy of the GNU General Public License
  13  *    along with this program; if not, write to the Free Software
  14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  15  */
  16
  17 /*
  18  *    Date: 27.10.2002
  19  */
  20
  21 /*
  22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
  23  */
  24
  25 /*
  26  $Revision: 1.58 $
  27  $Date: 2010/11/03 11:28:07 $
  28  $Author: faust $
  29  */
  30
  31 /* inet_aton */
  32 #include <sys/types.h>
  33 #include <sys/socket.h>
  34 #include <netinet/in.h>
  35 #include <arpa/inet.h>
  36
  37 #include <csignal>
  38 #include <cassert>
  39 #include <cstdio> // fopen and similar
  40
  41 #include "stg/common.h"
  42 #include "stg/locker.h"
  43 #include "traffcounter_impl.h"
  44 #include "stg_timer.h"
  45
  46 #define FLUSH_TIME  (10)
  47 #define REMOVE_TIME  (31)
  48
  49 const char protoName[PROTOMAX][8] =
  50 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
  51
  52 enum protoNum
  53 {
  54 tcp = 0, udp, icmp, tcp_udp, all
  55 };
  56
  57 //-----------------------------------------------------------------------------
  58 TRAFFCOUNTER_IMPL::TRAFFCOUNTER_IMPL(USERS * u, const TARIFFS *, const std::string & fn)
  59     : WriteServLog(GetStgLogger()),
  60       rulesFileName(fn),
  61       monitoring(false),
  62       users(u),
  63       running(false),
  64       stopped(true),
  65       addUserNotifier(*this),
  66       delUserNotifier(*this)
  67 {
  68 for (int i = 0; i < DIR_NUM; i++)
  69     strprintf(&dirName[i], "DIR%d", i);
  70
  71 dirName[DIR_NUM] = "NULL";
  72
  73 users->AddNotifierUserAdd(&addUserNotifier);
  74 users->AddNotifierUserDel(&delUserNotifier);
  75
  76 pthread_mutex_init(&mutex, NULL);
  77 }
  78 //-----------------------------------------------------------------------------
  79 TRAFFCOUNTER_IMPL::~TRAFFCOUNTER_IMPL()
  80 {
  81 pthread_mutex_destroy(&mutex);
  82 }
  83 //-----------------------------------------------------------------------------
  84 int TRAFFCOUNTER_IMPL::Start()
  85 {
  86 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
  87
  88 if (!stopped)
  89     return 0;
  90
  91 if (ReadRules())
  92     {
  93     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
  94     return -1;
  95     }
  96
  97 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
  98 int h = users->OpenSearch();
  99 USER_PTR u;
 100 if (!h)
 101     {
 102     WriteServLog("TRAFFCOUNTER: Cannot get users.");
 103     return -1;
 104     }
 105
 106 while (users->SearchNext(h, &u) == 0)
 107     {
 108     SetUserNotifiers(u);
 109     }
 110 users->CloseSearch(h);
 111
 112 running = true;
 113 if (pthread_create(&thread, NULL, Run, this))
 114     {
 115     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread!");
 116     return -1;
 117     }
 118 return 0;
 119 }
 120 //-----------------------------------------------------------------------------
 121 int TRAFFCOUNTER_IMPL::Stop()
 122 {
 123 if (stopped)
 124     return 0;
 125
 126 running = false;
 127
 128 int h = users->OpenSearch();
 129 if (!h)
 130     {
 131     WriteServLog("TRAFFCOUNTER: Fatal error: Cannot get users.");
 132     return -1;
 133     }
 134
 135 USER_PTR u;
 136 while (users->SearchNext(h, &u) == 0)
 137     {
 138     UnSetUserNotifiers(u);
 139     }
 140 users->CloseSearch(h);
 141
 142 //5 seconds to thread stops itself
 143 struct timespec ts = {0, 200000000};
 144 for (int i = 0; i < 25 && !stopped; i++)
 145     {
 146     nanosleep(&ts, NULL);
 147     }
 148
 149 //after 5 seconds waiting thread still running. now kill it
 150 if (!stopped)
 151     {
 152     printfd(__FILE__, "kill TRAFFCOUNTER thread.\n");
 153     if (pthread_kill(thread, SIGINT))
 154         {
 155         return -1;
 156         }
 157     printfd(__FILE__, "TRAFFCOUNTER killed\n");
 158     }
 159 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
 160
 161 return 0;
 162 }
 163 //-----------------------------------------------------------------------------
 164 void * TRAFFCOUNTER_IMPL::Run(void * data)
 165 {
 166 TRAFFCOUNTER_IMPL * tc = static_cast<TRAFFCOUNTER_IMPL *>(data);
 167 tc->stopped = false;
 168 int c = 0;
 169
 170 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 171 struct timespec ts = {0, 500000000};
 172 while (tc->running)
 173     {
 174     nanosleep(&ts, 0);
 175     if (!tc->running)
 176         {
 177         tc->FlushAndRemove();
 178         break;
 179         }
 180
 181     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 182         {
 183         std::string monFile(tc->monitorDir + "/traffcounter_r");
 184         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
 185         touchTime = stgTime;
 186         TouchFile(monFile.c_str());
 187         }
 188
 189     if (++c % FLUSH_TIME == 0)
 190         tc->FlushAndRemove();
 191     }
 192
 193 tc->stopped = true;
 194 return NULL;
 195 }
 196 //-----------------------------------------------------------------------------
 197 void TRAFFCOUNTER_IMPL::Process(const RAW_PACKET & rawPacket)
 198 {
 199 if (!running)
 200     return;
 201
 202 static time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 203
 204 if (monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 205     {
 206     static std::string monFile = monitorDir + "/traffcounter_p";
 207     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
 208     touchTime = stgTime;
 209     TouchFile(monFile.c_str());
 210     }
 211
 212 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 213
 214 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
 215 //TODO replace find with lower_bound.
 216
 217 // Searching a new packet in a tree.
 218 pp_iter pi = packets.find(rawPacket);
 219
 220 // Packet found - update length and time
 221 if (pi != packets.end())
 222     {
 223     pi->second.lenU += rawPacket.GetLen();
 224     pi->second.lenD += rawPacket.GetLen();
 225     pi->second.updateTime = stgTime;
 226     /*printfd(__FILE__, "=============================\n");
 227     printfd(__FILE__, "Packet found!\n");
 228     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
 229     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
 230     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
 231     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
 232     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
 233     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
 234     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
 235     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
 236     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
 237     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
 238     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
 239     printfd(__FILE__, "=============================\n");*/
 240     return;
 241     }
 242
 243 PACKET_EXTRA_DATA ed;
 244
 245 // Packet not found - add new packet
 246
 247 ed.updateTime = stgTime;
 248 ed.flushTime = stgTime;
 249
 250 /*
 251  userU is that whose user_ip == packet_ip_src
 252  userD is that whose user_ip == packet_ip_dst
 253  */
 254
 255 uint32_t ipU = rawPacket.GetSrcIP();
 256 uint32_t ipD = rawPacket.GetDstIP();
 257
 258 // Searching users with such IP
 259 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
 260     {
 261     ed.userUPresent = true;
 262     }
 263
 264 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
 265     {
 266     ed.userDPresent = true;
 267     }
 268
 269 if (ed.userUPresent ||
 270     ed.userDPresent)
 271     {
 272     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
 273
 274     ed.lenD = ed.lenU = rawPacket.GetLen();
 275
 276     //TODO use result of lower_bound to inserting new record
 277
 278     // Adding packet to a tree.
 279     std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
 280     pp_iter newPacket = insertResult.first;
 281
 282     // Adding packet reference to an IP index.
 283     ip2packets.insert(std::make_pair(ipU, newPacket));
 284     ip2packets.insert(std::make_pair(ipD, newPacket));
 285     }
 286 }
 287 //-----------------------------------------------------------------------------
 288 void TRAFFCOUNTER_IMPL::FlushAndRemove()
 289 {
 290 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 291
 292 int oldPacketsSize = packets.size();
 293 int oldIp2packetsSize = ip2packets.size();
 294
 295 pp_iter pi;
 296 pi = packets.begin();
 297 std::map<RAW_PACKET, PACKET_EXTRA_DATA> newPackets;
 298 ip2packets.erase(ip2packets.begin(), ip2packets.end());
 299 while (pi != packets.end())
 300     {
 301     //Flushing
 302     if (stgTime - pi->second.flushTime > FLUSH_TIME)
 303         {
 304         if (pi->second.userUPresent)
 305             {
 306             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
 307
 308             // Add stat
 309             if (pi->second.dirU < DIR_NUM)
 310                 {
 311                 #ifdef TRAFF_STAT_WITH_PORTS
 312                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 313                                                 pi->first.GetDstIP(),
 314                                                 pi->first.GetDstPort(),
 315                                                 pi->second.lenU);
 316                 #else
 317                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 318                                                 pi->first.GetDstIP(),
 319                                                 pi->second.lenU);
 320                 #endif
 321                 }
 322
 323             pi->second.lenU = 0;
 324             pi->second.flushTime = stgTime;
 325             }
 326
 327         if (pi->second.userDPresent)
 328             {
 329             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
 330
 331             // Add stat
 332             if (pi->second.dirD < DIR_NUM)
 333                 {
 334                 #ifdef TRAFF_STAT_WITH_PORTS
 335                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 336                                                 pi->first.GetSrcIP(),
 337                                                 pi->first.GetSrcPort(),
 338                                                 pi->second.lenD);
 339                 #else
 340                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 341                                                 pi->first.GetSrcIP(),
 342                                                 pi->second.lenD);
 343                 #endif
 344                 }
 345
 346             pi->second.lenD = 0;
 347             pi->second.flushTime = stgTime;
 348             }
 349         }
 350
 351     /*//Removing
 352     if (stgTime - pi->second.updateTime > REMOVE_TIME)
 353         {
 354         // Remove packet and references from ip2packets index
 355         //printfd(__FILE__, "+++ Removing +++\n");
 356         pair<ip2p_iter, ip2p_iter> be(
 357                 ip2packets.equal_range(pi->first.GetSrcIP()));
 358         while (be.first != be.second)
 359             {
 360             // Have a reference to a packet?
 361             if (be.first->second == pi)
 362                 {
 363                 ip2packets.erase(be.first++);
 364                 //printfd(__FILE__, "Remove U from ip2packets %s\n", inet_ntostring(pi->first.GetSrcIP()).c_str());
 365                 }
 366             else
 367                 {
 368                 ++be.first;
 369                 }
 370             }
 371
 372         //printfd(__FILE__, "-------------------\n");
 373         be = ip2packets.equal_range(pi->first.GetDstIP());
 374         while (be.first != be.second)
 375             {
 376             // Have a reference to a packet?
 377             if (be.first->second == pi)
 378                 {
 379                 ip2packets.erase(be.first++);
 380                 //printfd(__FILE__, "Remove D from ip2packets %s\n", inet_ntostring(pi->first.GetDstIP()).c_str());
 381                 }
 382             else
 383                 {
 384                 ++be.first;
 385                 }
 386             }
 387         //printfd(__FILE__, "Remove packet\n");
 388         packets.erase(pi++);
 389         }
 390     else
 391         {
 392         ++pi;
 393         }*/
 394     if (stgTime - pi->second.updateTime < REMOVE_TIME)
 395         {
 396         std::pair<pp_iter, bool> res = newPackets.insert(*pi);
 397         if (res.second)
 398             {
 399             ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
 400             ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
 401             }
 402         }
 403     ++pi;
 404     }
 405 swap(packets, newPackets);
 406 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
 407         packets.size(),
 408         oldPacketsSize - packets.size(),
 409         ip2packets.size(),
 410         oldIp2packetsSize - ip2packets.size());
 411
 412 }
 413 //-----------------------------------------------------------------------------
 414 void TRAFFCOUNTER_IMPL::AddUser(USER_PTR user)
 415 {
 416 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
 417 uint32_t uip = user->GetCurrIP();
 418 std::pair<ip2p_iter, ip2p_iter> pi;
 419
 420 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 421 // Find all packets with IP belongs to this user
 422 pi = ip2packets.equal_range(uip);
 423
 424 while (pi.first != pi.second)
 425     {
 426     if (pi.first->second->first.GetSrcIP() == uip)
 427         {
 428         assert((!pi.first->second->second.userUPresent ||
 429                  pi.first->second->second.userU == user) &&
 430                "U user present but it's not current user");
 431
 432         pi.first->second->second.lenU = 0;
 433         pi.first->second->second.userU = user;
 434         pi.first->second->second.userUPresent = true;
 435         }
 436
 437     if (pi.first->second->first.GetDstIP() == uip)
 438         {
 439         assert((!pi.first->second->second.userDPresent ||
 440                  pi.first->second->second.userD == user) &&
 441                "D user present but it's not current user");
 442
 443         pi.first->second->second.lenD = 0;
 444         pi.first->second->second.userD = user;
 445         pi.first->second->second.userDPresent = true;
 446         }
 447
 448     ++pi.first;
 449     }
 450 }
 451 //-----------------------------------------------------------------------------
 452 void TRAFFCOUNTER_IMPL::DelUser(uint32_t uip)
 453 {
 454 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
 455 std::pair<ip2p_iter, ip2p_iter> pi;
 456
 457 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 458 pi = ip2packets.equal_range(uip);
 459
 460 while (pi.first != pi.second)
 461     {
 462     if (pi.first->second->first.GetSrcIP() == uip)
 463         {
 464         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
 465             {
 466             #ifdef TRAFF_STAT_WITH_PORTS
 467             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 468                                                           pi.first->second->first.GetDstIP(),
 469                                                           pi.first->second->first.GetDstPort(),
 470                                                           pi.first->second->second.lenU);
 471             #else
 472             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 473                                                           pi.first->second->first.GetDstIP(),
 474                                                           pi.first->second->second.lenU);
 475             #endif
 476             }
 477         pi.first->second->second.userUPresent = false;
 478         }
 479
 480     if (pi.first->second->first.GetDstIP() == uip)
 481         {
 482         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
 483             {
 484             #ifdef TRAFF_STAT_WITH_PORTS
 485             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 486                                                           pi.first->second->first.GetSrcIP(),
 487                                                           pi.first->second->first.GetSrcPort(),
 488                                                           pi.first->second->second.lenD);
 489             #else
 490             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 491                                                           pi.first->second->first.GetSrcIP(),
 492                                                           pi.first->second->second.lenD);
 493             #endif
 494             }
 495
 496         pi.first->second->second.userDPresent = false;
 497         }
 498
 499     ++pi.first;
 500     }
 501
 502 ip2packets.erase(pi.first, pi.second);
 503 }
 504 //-----------------------------------------------------------------------------
 505 void TRAFFCOUNTER_IMPL::SetUserNotifiers(USER_PTR user)
 506 {
 507 // Adding user. Adding notifiers to user.
 508 TRF_IP_BEFORE ipBNotifier(*this, user);
 509 ipBeforeNotifiers.push_front(ipBNotifier);
 510 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
 511
 512 TRF_IP_AFTER ipANotifier(*this, user);
 513 ipAfterNotifiers.push_front(ipANotifier);
 514 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
 515 }
 516 //-----------------------------------------------------------------------------
 517 void TRAFFCOUNTER_IMPL::UnSetUserNotifiers(USER_PTR user)
 518 {
 519 // Removing user. Removing notifiers from user.
 520 std::list<TRF_IP_BEFORE>::iterator bi;
 521 std::list<TRF_IP_AFTER>::iterator ai;
 522
 523 bi = ipBeforeNotifiers.begin();
 524 while (bi != ipBeforeNotifiers.end())
 525     {
 526     if (user->GetLogin() == bi->GetUser()->GetLogin())
 527         {
 528         user->DelCurrIPBeforeNotifier(&(*bi));
 529         ipBeforeNotifiers.erase(bi);
 530         break;
 531         }
 532     ++bi;
 533     }
 534
 535 ai = ipAfterNotifiers.begin();
 536 while (ai != ipAfterNotifiers.end())
 537     {
 538     if (user->GetLogin() == ai->GetUser()->GetLogin())
 539         {
 540         user->DelCurrIPAfterNotifier(&(*ai));
 541         ipAfterNotifiers.erase(ai);
 542         break;
 543         }
 544     ++ai;
 545     }
 546 }
 547 //-----------------------------------------------------------------------------
 548 void TRAFFCOUNTER_IMPL::DeterminateDir(const RAW_PACKET & packet,
 549                                        int * dirU, // Direction for incoming packet
 550                                        int * dirD) const // Direction for outgoing packet
 551 {
 552 bool addrMatchU;
 553 bool portMatchU;
 554 bool addrMatchD;
 555 bool portMatchD;
 556 bool foundU = false; // Was rule for U found ?
 557 bool foundD = false; // Was rule for D found ?
 558 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
 559
 560 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
 561
 562 std::list<RULE>::const_iterator ln;
 563 ln = rules.begin();
 564
 565 while (ln != rules.end())
 566     {
 567     if (!foundU)
 568         {
 569         addrMatchU = false;
 570         portMatchU = false;
 571
 572         switch (ln->proto)
 573             {
 574             case all:
 575                 portMatchU = true;
 576                 break;
 577
 578             case icmp:
 579                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
 580                 break;
 581
 582             case tcp_udp:
 583                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 584                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 585                 break;
 586
 587             case tcp:
 588                 if (packet.GetProto() == TCP_PROTO)
 589                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 590                 break;
 591
 592             case udp:
 593                 if (packet.GetProto() == UDP_PROTO)
 594                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 595                 break;
 596
 597             default:
 598                 printfd(__FILE__, "Error! Incorrect rule!\n");
 599                 break;
 600             }
 601
 602         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
 603
 604         if (!foundU && addrMatchU && portMatchU)
 605             {
 606             foundU = true;
 607             *dirU = ln->dir;
 608             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
 609             //PrintRule(ln->rule);
 610             }
 611
 612         } //if (!foundU)
 613
 614     if (!foundD)
 615         {
 616         addrMatchD = false;
 617         portMatchD = false;
 618
 619         switch (ln->proto)
 620             {
 621             case all:
 622                 portMatchD = true;
 623                 break;
 624
 625             case icmp:
 626                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
 627                 break;
 628
 629             case tcp_udp:
 630                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 631                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 632                 break;
 633
 634             case tcp:
 635                 if (packet.GetProto() == TCP_PROTO)
 636                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 637                 break;
 638
 639             case udp:
 640                 if (packet.GetProto() == UDP_PROTO)
 641                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 642                 break;
 643
 644             default:
 645                 printfd(__FILE__, "Error! Incorrect rule!\n");
 646                 break;
 647             }
 648
 649         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
 650
 651         if (!foundD && addrMatchD && portMatchD)
 652             {
 653             foundD = true;
 654             *dirD = ln->dir;
 655             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
 656             //PrintRule(ln->rule);
 657             }
 658         } //if (!foundD)
 659
 660     ++ln;
 661     }   //while (ln != rules.end())
 662
 663 if (!foundU)
 664     *dirU = DIR_NUM;
 665
 666 if (!foundD)
 667     *dirD = DIR_NUM;
 668
 669 return;
 670 };
 671 //-----------------------------------------------------------------------------
 672 void TRAFFCOUNTER_IMPL::SetRulesFile(const std::string & fn)
 673 {
 674 rulesFileName = fn;
 675 }
 676 //-----------------------------------------------------------------------------
 677 bool TRAFFCOUNTER_IMPL::ReadRules(bool test)
 678 {
 679 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
 680
 681 RULE rul;
 682 FILE * f;
 683 char str[1024];
 684 char tp[100];   // protocol
 685 char ta[100];   // address
 686 char td[100];   // target direction
 687 int r;
 688 int lineNumber = 0;
 689 f = fopen(rulesFileName.c_str(), "rt");
 690
 691 if (!f)
 692     {
 693     WriteServLog("File %s cannot be oppened.", rulesFileName.c_str());
 694     return true;
 695     }
 696
 697 while (fgets(str, 1023, f))
 698     {
 699     lineNumber++;
 700     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
 701         {
 702         continue;
 703         }
 704
 705     r = sscanf(str,"%s %s %s", tp, ta, td);
 706     if (r != 3)
 707         {
 708         WriteServLog("Error in file %s. There must be 3 parameters. Line %d.", rulesFileName.c_str(), lineNumber);
 709         fclose(f);
 710         return true;
 711         }
 712
 713     rul.proto = 0xff;
 714     rul.dir = 0xff;
 715
 716     for (int i = 0; i < PROTOMAX; i++)
 717         {
 718         if (strcasecmp(tp, protoName[i]) == 0)
 719             rul.proto = i;
 720         }
 721
 722     for (int i = 0; i < DIR_NUM + 1; i++)
 723         {
 724         if (td == dirName[i])
 725             rul.dir = i;
 726         }
 727
 728     if (rul.dir == 0xff || rul.proto == 0xff)
 729         {
 730         WriteServLog("Error in file %s. Line %d.",
 731                      rulesFileName.c_str(), lineNumber);
 732         fclose(f);
 733         return true;
 734         }
 735
 736     if (ParseAddress(ta, &rul) != 0)
 737         {
 738         WriteServLog("Error in file %s. Error in adress. Line %d.",
 739                      rulesFileName.c_str(), lineNumber);
 740         fclose(f);
 741         return true;
 742         }
 743     if (!test)
 744         rules.push_back(rul);
 745     //PrintRule(rul);
 746     }
 747
 748 fclose(f);
 749
 750 // Adding lastest rule: ALL 0.0.0.0/0 NULL
 751 rul.dir = DIR_NUM; //NULL
 752 rul.ip = 0;  //0.0.0.0
 753 rul.mask = 0;
 754 rul.port1 = 0;
 755 rul.port2 = 65535;
 756 rul.proto = all;
 757
 758 if (!test)
 759     rules.push_back(rul);
 760
 761 //PrintRule(rul);
 762
 763 return false;
 764 }
 765 //-----------------------------------------------------------------------------
 766 int TRAFFCOUNTER_IMPL::Reload()
 767 {
 768 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 769
 770 if (ReadRules(true))
 771     {
 772     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
 773     return -1;
 774     }
 775
 776 FreeRules();
 777 ReadRules();
 778 WriteServLog("TRAFFCOUNTER: Reload rules successfull.");
 779 return 0;
 780 }
 781 //-----------------------------------------------------------------------------
 782 bool TRAFFCOUNTER_IMPL::ParseAddress(const char * ta, RULE * rule) const
 783 {
 784 char addr[50], mask[20], port1[20], port2[20], ports[40];
 785
 786 int len = strlen(ta);
 787 char n = 0;
 788 int i, p;
 789 memset(addr, 0, sizeof(addr));
 790 for (i = 0; i < len; i++)
 791     {
 792     if (ta[i] == '/' || ta[i] == ':')
 793         {
 794         addr[i] = 0;
 795         n = ta[i];
 796         break;
 797         }
 798     addr[i] = ta[i];
 799     n = 0;
 800     }
 801 addr[i + 1] = 0;
 802 p = i + 1;
 803
 804 if (n == '/')
 805     {
 806     // mask
 807     for (; i < len; i++)
 808         {
 809         if (ta[i] == ':')
 810             {
 811             mask[i - p] = 0;
 812             n = ':';
 813             break;
 814             }
 815         mask[i - p] = ta[i];
 816         }
 817     mask[i - p] = 0;
 818     }
 819 else
 820     {
 821     strcpy(mask, "32");
 822     }
 823
 824 p = i + 1;
 825 i++;
 826
 827 if (n == ':')
 828     {
 829     // port
 830     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
 831         {
 832         WriteServLog("No ports specified for this protocol.");
 833         return true;
 834         }
 835
 836     for (; i < len; i++)
 837         ports[i - p] = ta[i];
 838
 839     ports[i - p] = 0;
 840     }
 841 else
 842     {
 843     strcpy(ports, "0-65535");
 844     }
 845
 846 char *sss;
 847 char pts[100];
 848 strcpy(pts, ports);
 849
 850 if ((sss = strchr(ports, '-')) != NULL)
 851     {
 852     strncpy(port1, ports, int(sss-ports));
 853     port1[int(sss - ports)] = 0;
 854     strcpy(port2, sss + 1);
 855     }
 856 else
 857     {
 858     strcpy(port1, ports);
 859     strcpy(port2, ports);
 860     }
 861
 862 // Convert strings to mask, ports and IP
 863 int prt1, prt2, msk;
 864 unsigned ip;
 865 char *res;
 866
 867 msk = strtol(mask, &res, 10);
 868 if (*res != 0)
 869     return true;
 870
 871 prt1 = strtol(port1, &res, 10);
 872 if (*res != 0)
 873     return true;
 874
 875 prt2 = strtol(port2, &res, 10);
 876 if (*res != 0)
 877     return true;
 878
 879 int r = inet_aton(addr, (struct in_addr*)&ip);
 880 if (r == 0)
 881     return true;
 882
 883 rule->ip = ip;
 884 rule->mask = CalcMask(msk);
 885 //msk = 1;
 886 //printfd(__FILE__, "msk=%d mask=%08X   mask=%08X\n", msk, rule->mask, (0xFFffFFff << (32 - msk)));
 887
 888 if ((ip & rule->mask) != ip)
 889     {
 890     WriteServLog("Address does'n match mask.");
 891     return true;
 892     }
 893
 894 rule->port1 = prt1;
 895 rule->port2 = prt2;
 896
 897 return false;
 898 }
 899 //-----------------------------------------------------------------------------
 900 uint32_t TRAFFCOUNTER_IMPL::CalcMask(uint32_t msk) const
 901 {
 902 if (msk >= 32) return 0xFFffFFff;
 903 if (msk == 0) return 0;
 904 return htonl(0xFFffFFff << (32 - msk));
 905 }
 906 //---------------------------------------------------------------------------
 907 void TRAFFCOUNTER_IMPL::FreeRules()
 908 {
 909 rules.clear();
 910 }
 911 //-----------------------------------------------------------------------------
 912 void TRAFFCOUNTER_IMPL::PrintRule(RULE rule) const
 913 {
 914 printf("%15s   ", inet_ntostring(rule.ip).c_str());
 915 printf("mask=%08X ", rule.mask);
 916 printf("port1=%5d ", rule.port1);
 917 printf("port2=%5d ", rule.port2);
 918 switch (rule.proto)
 919     {
 920     case 0:
 921         printf("TCP     ");
 922         break;
 923     case 1:
 924         printf("UDP     ");
 925         break;
 926     case 2:
 927         printf("ICMP    ");
 928         break;
 929     case 3:
 930         printf("TCP_UDP ");
 931         break;
 932     case 4:
 933         printf("ALL     ");
 934         break;
 935     }
 936 printf("dir=%d \n", rule.dir);
 937 return;
 938 }
 939 //-----------------------------------------------------------------------------
 940 void TRAFFCOUNTER_IMPL::SetMonitorDir(const std::string & monitorDir)
 941 {
 942 TRAFFCOUNTER_IMPL::monitorDir = monitorDir;
 943 monitoring = (monitorDir != "");
 944 }
 945 //-----------------------------------------------------------------------------