projects/stargazer/traffcounter.cpp

   1 /*
   2  *    This program is free software; you can redistribute it and/or modify
   3  *    it under the terms of the GNU General Public License as published by
   4  *    the Free Software Foundation; either version 2 of the License, or
   5  *    (at your option) any later version.
   6  *
   7  *    This program is distributed in the hope that it will be useful,
   8  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  *    GNU General Public License for more details.
  11  *
  12  *    You should have received a copy of the GNU General Public License
  13  *    along with this program; if not, write to the Free Software
  14  *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  15  */
  16
  17 /*
  18  *    Date: 27.10.2002
  19  */
  20
  21 /*
  22  *    Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
  23  */
  24
  25 /*
  26  $Revision: 1.58 $
  27  $Date: 2010/11/03 11:28:07 $
  28  $Author: faust $
  29  */
  30
  31 #include <csignal>
  32 #include <cassert>
  33
  34 #include "traffcounter.h"
  35 #include "common.h"
  36 #include "stg_locker.h"
  37
  38 #define FLUSH_TIME  (10)
  39 #define REMOVE_TIME  (31)
  40
  41 const char protoName[PROTOMAX][8] =
  42 {"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
  43
  44 enum protoNum
  45     {
  46     tcp = 0, udp, icmp, tcp_udp, all
  47     };
  48
  49 //-----------------------------------------------------------------------------
  50 TRAFFCOUNTER::TRAFFCOUNTER(USERS * u, const TARIFFS *, const string & fn)
  51     : WriteServLog(GetStgLogger()),
  52       rulesFileName(fn),
  53       monitoring(false),
  54       users(u),
  55       running(false),
  56       stopped(true),
  57       addUserNotifier(*this),
  58       delUserNotifier(*this)
  59 {
  60 for (int i = 0; i < DIR_NUM; i++)
  61     strprintf(&dirName[i], "DIR%d", i);
  62
  63 dirName[DIR_NUM] = "NULL";
  64
  65 users->AddNotifierUserAdd(&addUserNotifier);
  66 users->AddNotifierUserDel(&delUserNotifier);
  67
  68 pthread_mutex_init(&mutex, NULL);
  69 }
  70 //-----------------------------------------------------------------------------
  71 TRAFFCOUNTER::~TRAFFCOUNTER()
  72 {
  73 pthread_mutex_destroy(&mutex);
  74 }
  75 //-----------------------------------------------------------------------------
  76 int TRAFFCOUNTER::Start()
  77 {
  78 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
  79
  80 if (!stopped)
  81     return 0;
  82
  83 if (ReadRules())
  84     {
  85     WriteServLog("TRAFFCOUNTER: Cannot read rules.");
  86     return -1;
  87     }
  88
  89 printfd(__FILE__, "TRAFFCOUNTER::Start()\n");
  90 int h = users->OpenSearch();
  91 user_iter u;
  92 if (!h)
  93     {
  94     WriteServLog("TRAFFCOUNTER: Cannot get users.");
  95     return -1;
  96     }
  97
  98 while (users->SearchNext(h, &u) == 0)
  99     {
 100     SetUserNotifiers(u);
 101     }
 102 users->CloseSearch(h);
 103
 104 running = true;
 105 if (pthread_create(&thread, NULL, Run, this))
 106     {
 107     WriteServLog("TRAFFCOUNTER: Error: Cannot start thread!");
 108     return -1;
 109     }
 110 return 0;
 111 }
 112 //-----------------------------------------------------------------------------
 113 int TRAFFCOUNTER::Stop()
 114 {
 115 if (stopped)
 116     return 0;
 117
 118 running = false;
 119
 120 int h = users->OpenSearch();
 121 if (!h)
 122     {
 123     WriteServLog("TRAFFCOUNTER: Fatal error: Cannot get users.");
 124     return -1;
 125     }
 126
 127 user_iter u;
 128 while (users->SearchNext(h, &u) == 0)
 129     {
 130     UnSetUserNotifiers(u);
 131     }
 132 users->CloseSearch(h);
 133
 134 //5 seconds to thread stops itself
 135 for (int i = 0; i < 25 && !stopped; i++)
 136     {
 137     usleep(200000);
 138     }
 139
 140 //after 5 seconds waiting thread still running. now kill it
 141 if (!stopped)
 142     {
 143     printfd(__FILE__, "kill TRAFFCOUNTER thread.\n");
 144     if (pthread_kill(thread, SIGINT))
 145         {
 146         return -1;
 147         }
 148     printfd(__FILE__, "TRAFFCOUNTER killed\n");
 149     }
 150 printfd(__FILE__, "TRAFFCOUNTER::Stop()\n");
 151
 152 return 0;
 153 }
 154 //-----------------------------------------------------------------------------
 155 void * TRAFFCOUNTER::Run(void * data)
 156 {
 157 TRAFFCOUNTER * tc = static_cast<TRAFFCOUNTER *>(data);
 158 tc->stopped = false;
 159 int c = 0;
 160
 161 time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 162
 163 while (tc->running)
 164     {
 165     usleep(500000);
 166     if (!tc->running)
 167         {
 168         tc->FlushAndRemove();
 169         break;
 170         }
 171
 172     if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 173         {
 174         string monFile(tc->monitorDir + "/traffcounter_r");
 175         printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", tc->monitoring, monFile.c_str());
 176         touchTime = stgTime;
 177         TouchFile(monFile.c_str());
 178         }
 179
 180     if (++c % FLUSH_TIME == 0)
 181         tc->FlushAndRemove();
 182     }
 183
 184 tc->stopped = true;
 185 return NULL;
 186 }
 187 //-----------------------------------------------------------------------------
 188 void TRAFFCOUNTER::Process(const RAW_PACKET & rawPacket)
 189 {
 190 if (!running)
 191     return;
 192
 193 static time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
 194
 195 if (monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
 196     {
 197     static string monFile = monitorDir + "/traffcounter_p";
 198     printfd(__FILE__, "Monitor=%d file TRAFFCOUNTER %s\n", monitoring, monFile.c_str());
 199     touchTime = stgTime;
 200     TouchFile(monFile.c_str());
 201     }
 202
 203 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 204
 205 //printfd(__FILE__, "TRAFFCOUNTER::Process()\n");
 206 //TODO replace find with lower_bound.
 207
 208 // Searching a new packet in a tree.
 209 pp_iter pi = packets.find(rawPacket);
 210
 211 // Packet found - update length and time
 212 if (pi != packets.end())
 213     {
 214     pi->second.lenU += rawPacket.GetLen();
 215     pi->second.lenD += rawPacket.GetLen();
 216     pi->second.updateTime = stgTime;
 217     /*printfd(__FILE__, "=============================\n");
 218     printfd(__FILE__, "Packet found!\n");
 219     printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
 220     printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
 221     printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
 222     printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
 223     printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
 224     printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
 225     printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
 226     printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
 227     printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
 228     printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
 229     printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
 230     printfd(__FILE__, "=============================\n");*/
 231     return;
 232     }
 233
 234 PACKET_EXTRA_DATA ed;
 235
 236 // Packet not found - add new packet
 237
 238 ed.updateTime = stgTime;
 239 ed.flushTime = stgTime;
 240
 241 /*
 242  userU is that whose user_ip == packet_ip_src
 243  userD is that whose user_ip == packet_ip_dst
 244  */
 245
 246 uint32_t ipU = rawPacket.GetSrcIP();
 247 uint32_t ipD = rawPacket.GetDstIP();
 248
 249 // Searching users with such IP
 250 if (users->FindByIPIdx(ipU, &ed.userU) == 0)
 251     {
 252     ed.userUPresent = true;
 253     }
 254
 255 if (users->FindByIPIdx(ipD, &ed.userD) == 0)
 256     {
 257     ed.userDPresent = true;
 258     }
 259
 260 if (ed.userUPresent ||
 261     ed.userDPresent)
 262     {
 263     DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
 264
 265     ed.lenD = ed.lenU = rawPacket.GetLen();
 266
 267     //TODO use result of lower_bound to inserting new record
 268
 269     // Adding packet to a tree.
 270     pair<pp_iter, bool> insertResult = packets.insert(pair<RAW_PACKET,
 271                                                       PACKET_EXTRA_DATA>(rawPacket, ed));
 272     pp_iter newPacket = insertResult.first;
 273
 274     // Adding packet reference to an IP index.
 275     ip2packets.insert(pair<uint32_t, pp_iter>(ipU, newPacket));
 276     ip2packets.insert(pair<uint32_t, pp_iter>(ipD, newPacket));
 277     }
 278 }
 279 //-----------------------------------------------------------------------------
 280 void TRAFFCOUNTER::FlushAndRemove()
 281 {
 282 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 283
 284 int oldPacketsSize = packets.size();
 285 int oldIp2packetsSize = ip2packets.size();
 286
 287 pp_iter pi;
 288 pi = packets.begin();
 289 std::map<RAW_PACKET, PACKET_EXTRA_DATA> newPackets;
 290 ip2packets.erase(ip2packets.begin(), ip2packets.end());
 291 while (pi != packets.end())
 292     {
 293     //Flushing
 294     if (stgTime - pi->second.flushTime > FLUSH_TIME)
 295         {
 296         if (pi->second.userUPresent)
 297             {
 298             //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
 299
 300             // Add stat
 301             if (pi->second.dirU < DIR_NUM)
 302                 {
 303                 #ifdef TRAFF_STAT_WITH_PORTS
 304                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 305                                                 pi->first.GetDstIP(),
 306                                                 pi->first.GetDstPort(),
 307                                                 pi->second.lenU);
 308                 #else
 309                 pi->second.userU->AddTraffStatU(pi->second.dirU,
 310                                                 pi->first.GetDstIP(),
 311                                                 pi->second.lenU);
 312                 #endif
 313                 }
 314
 315             pi->second.lenU = 0;
 316             pi->second.flushTime = stgTime;
 317             }
 318
 319         if (pi->second.userDPresent)
 320             {
 321             //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
 322
 323             // Add stat
 324             if (pi->second.dirD < DIR_NUM)
 325                 {
 326                 #ifdef TRAFF_STAT_WITH_PORTS
 327                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 328                                                 pi->first.GetSrcIP(),
 329                                                 pi->first.GetSrcPort(),
 330                                                 pi->second.lenD);
 331                 #else
 332                 pi->second.userD->AddTraffStatD(pi->second.dirD,
 333                                                 pi->first.GetSrcIP(),
 334                                                 pi->second.lenD);
 335                 #endif
 336                 }
 337
 338             pi->second.lenD = 0;
 339             pi->second.flushTime = stgTime;
 340             }
 341         }
 342
 343     /*//Removing
 344     if (stgTime - pi->second.updateTime > REMOVE_TIME)
 345         {
 346         // Remove packet and references from ip2packets index
 347         //printfd(__FILE__, "+++ Removing +++\n");
 348         pair<ip2p_iter, ip2p_iter> be(
 349                 ip2packets.equal_range(pi->first.GetSrcIP()));
 350         while (be.first != be.second)
 351             {
 352             // Have a reference to a packet?
 353             if (be.first->second == pi)
 354                 {
 355                 ip2packets.erase(be.first++);
 356                 //printfd(__FILE__, "Remove U from ip2packets %s\n", inet_ntostring(pi->first.GetSrcIP()).c_str());
 357                 }
 358             else
 359                 {
 360                 ++be.first;
 361                 }
 362             }
 363
 364         //printfd(__FILE__, "-------------------\n");
 365         be = ip2packets.equal_range(pi->first.GetDstIP());
 366         while (be.first != be.second)
 367             {
 368             // Have a reference to a packet?
 369             if (be.first->second == pi)
 370                 {
 371                 ip2packets.erase(be.first++);
 372                 //printfd(__FILE__, "Remove D from ip2packets %s\n", inet_ntostring(pi->first.GetDstIP()).c_str());
 373                 }
 374             else
 375                 {
 376                 ++be.first;
 377                 }
 378             }
 379         //printfd(__FILE__, "Remove packet\n");
 380         packets.erase(pi++);
 381         }
 382     else
 383         {
 384         ++pi;
 385         }*/
 386     if (stgTime - pi->second.updateTime < REMOVE_TIME)
 387         {
 388         pair<pp_iter, bool> res = newPackets.insert(*pi);
 389         if (res.second)
 390             {
 391             ip2packets.insert(make_pair(pi->first.GetSrcIP(), res.first));
 392             ip2packets.insert(make_pair(pi->first.GetDstIP(), res.first));
 393             }
 394         }
 395     ++pi;
 396     }
 397 swap(packets, newPackets);
 398 printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
 399         packets.size(),
 400         oldPacketsSize - packets.size(),
 401         ip2packets.size(),
 402         oldIp2packetsSize - ip2packets.size());
 403
 404 }
 405 //-----------------------------------------------------------------------------
 406 void TRAFFCOUNTER::AddUser(user_iter user)
 407 {
 408 printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
 409 uint32_t uip = user->GetCurrIP();
 410 pair<ip2p_iter, ip2p_iter> pi;
 411
 412 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 413 // Find all packets with IP belongs to this user
 414 pi = ip2packets.equal_range(uip);
 415
 416 while (pi.first != pi.second)
 417     {
 418     if (pi.first->second->first.GetSrcIP() == uip)
 419         {
 420         assert((!pi.first->second->second.userUPresent ||
 421                  pi.first->second->second.userU == user) &&
 422                "U user present but it's not current user");
 423
 424         pi.first->second->second.lenU = 0;
 425         pi.first->second->second.userU = user;
 426         pi.first->second->second.userUPresent = true;
 427         }
 428
 429     if (pi.first->second->first.GetDstIP() == uip)
 430         {
 431         assert((!pi.first->second->second.userDPresent ||
 432                  pi.first->second->second.userD == user) &&
 433                "D user present but it's not current user");
 434
 435         pi.first->second->second.lenD = 0;
 436         pi.first->second->second.userD = user;
 437         pi.first->second->second.userDPresent = true;
 438         }
 439
 440     ++pi.first;
 441     }
 442 }
 443 //-----------------------------------------------------------------------------
 444 void TRAFFCOUNTER::DelUser(uint32_t uip)
 445 {
 446 printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
 447 pair<ip2p_iter, ip2p_iter> pi;
 448
 449 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 450 pi = ip2packets.equal_range(uip);
 451
 452 while (pi.first != pi.second)
 453     {
 454     if (pi.first->second->first.GetSrcIP() == uip)
 455         {
 456         if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
 457             {
 458             #ifdef TRAFF_STAT_WITH_PORTS
 459             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 460                                                           pi.first->second->first.GetDstIP(),
 461                                                           pi.first->second->first.GetDstPort(),
 462                                                           pi.first->second->second.lenU);
 463             #else
 464             pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
 465                                                           pi.first->second->first.GetDstIP(),
 466                                                           pi.first->second->second.lenU);
 467             #endif
 468             }
 469         pi.first->second->second.userUPresent = false;
 470         }
 471
 472     if (pi.first->second->first.GetDstIP() == uip)
 473         {
 474         if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
 475             {
 476             #ifdef TRAFF_STAT_WITH_PORTS
 477             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 478                                                           pi.first->second->first.GetSrcIP(),
 479                                                           pi.first->second->first.GetSrcPort(),
 480                                                           pi.first->second->second.lenD);
 481             #else
 482             pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
 483                                                           pi.first->second->first.GetSrcIP(),
 484                                                           pi.first->second->second.lenD);
 485             #endif
 486             }
 487
 488         pi.first->second->second.userDPresent = false;
 489         }
 490
 491     ++pi.first;
 492     }
 493
 494 ip2packets.erase(pi.first, pi.second);
 495 }
 496 //-----------------------------------------------------------------------------
 497 void TRAFFCOUNTER::SetUserNotifiers(user_iter user)
 498 {
 499 // Adding user. Adding notifiers to user.
 500 TRF_IP_BEFORE ipBNotifier(*this, user);
 501 ipBeforeNotifiers.push_front(ipBNotifier);
 502 user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
 503
 504 TRF_IP_AFTER ipANotifier(*this, user);
 505 ipAfterNotifiers.push_front(ipANotifier);
 506 user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
 507 }
 508 //-----------------------------------------------------------------------------
 509 void TRAFFCOUNTER::UnSetUserNotifiers(user_iter user)
 510 {
 511 // Removing user. Removing notifiers from user.
 512 list<TRF_IP_BEFORE>::iterator bi;
 513 list<TRF_IP_AFTER>::iterator ai;
 514
 515 bi = ipBeforeNotifiers.begin();
 516 while (bi != ipBeforeNotifiers.end())
 517     {
 518     if (user->GetLogin() == bi->GetUser()->GetLogin())
 519         {
 520         user->DelCurrIPBeforeNotifier(&(*bi));
 521         ipBeforeNotifiers.erase(bi);
 522         break;
 523         }
 524     ++bi;
 525     }
 526
 527 ai = ipAfterNotifiers.begin();
 528 while (ai != ipAfterNotifiers.end())
 529     {
 530     if (user->GetLogin() == ai->GetUser()->GetLogin())
 531         {
 532         user->DelCurrIPAfterNotifier(&(*ai));
 533         ipAfterNotifiers.erase(ai);
 534         break;
 535         }
 536     ++ai;
 537     }
 538 }
 539 //-----------------------------------------------------------------------------
 540 void TRAFFCOUNTER::DeterminateDir(const RAW_PACKET & packet,
 541                                  int * dirU, // Direction for incoming packet
 542                                  int * dirD) const // Direction for outgoing packet
 543 {
 544 bool addrMatchU;
 545 bool portMatchU;
 546 bool addrMatchD;
 547 bool portMatchD;
 548 bool foundU = false; // Was rule for U found ?
 549 bool foundD = false; // Was rule for D found ?
 550 //printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
 551
 552 enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
 553
 554 list<RULE>::const_iterator ln;
 555 ln = rules.begin();
 556
 557 while (ln != rules.end())
 558     {
 559     if (!foundU)
 560         {
 561         addrMatchU = false;
 562         portMatchU = false;
 563
 564         switch (ln->proto)
 565             {
 566             case all:
 567                 portMatchU = true;
 568                 break;
 569
 570             case icmp:
 571                 portMatchU = (packet.GetProto() == ICMP_RPOTO);
 572                 break;
 573
 574             case tcp_udp:
 575                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 576                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 577                 break;
 578
 579             case tcp:
 580                 if (packet.GetProto() == TCP_PROTO)
 581                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 582                 break;
 583
 584             case udp:
 585                 if (packet.GetProto() == UDP_PROTO)
 586                     portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
 587                 break;
 588
 589             default:
 590                 printfd(__FILE__, "Error! Incorrect rule!\n");
 591                 break;
 592             }
 593
 594         addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
 595
 596         if (!foundU && addrMatchU && portMatchU)
 597             {
 598             foundU = true;
 599             *dirU = ln->dir;
 600             //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
 601             //PrintRule(ln->rule);
 602             }
 603
 604         } //if (!foundU)
 605
 606     if (!foundD)
 607         {
 608         addrMatchD = false;
 609         portMatchD = false;
 610
 611         switch (ln->proto)
 612             {
 613             case all:
 614                 portMatchD = true;
 615                 break;
 616
 617             case icmp:
 618                 portMatchD = (packet.GetProto() == ICMP_RPOTO);
 619                 break;
 620
 621             case tcp_udp:
 622                 if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
 623                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 624                 break;
 625
 626             case tcp:
 627                 if (packet.GetProto() == TCP_PROTO)
 628                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 629                 break;
 630
 631             case udp:
 632                 if (packet.GetProto() == UDP_PROTO)
 633                     portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
 634                 break;
 635
 636             default:
 637                 printfd(__FILE__, "Error! Incorrect rule!\n");
 638                 break;
 639             }
 640
 641         addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
 642
 643         if (!foundD && addrMatchD && portMatchD)
 644             {
 645             foundD = true;
 646             *dirD = ln->dir;
 647             //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
 648             //PrintRule(ln->rule);
 649             }
 650         } //if (!foundD)
 651
 652     ++ln;
 653     }   //while (ln != rules.end())
 654
 655 if (!foundU)
 656     *dirU = DIR_NUM;
 657
 658 if (!foundD)
 659     *dirD = DIR_NUM;
 660
 661 return;
 662 };
 663 //-----------------------------------------------------------------------------
 664 void TRAFFCOUNTER::SetRulesFile(const string & fn)
 665 {
 666 rulesFileName = fn;
 667 }
 668 //-----------------------------------------------------------------------------
 669 bool TRAFFCOUNTER::ReadRules(bool test)
 670 {
 671 //printfd(__FILE__, "TRAFFCOUNTER::ReadRules()\n");
 672
 673 RULE rul;
 674 FILE * f;
 675 char str[1024];
 676 char tp[100];   // protocol
 677 char ta[100];   // address
 678 char td[100];   // target direction
 679 int r;
 680 int lineNumber = 0;
 681 f = fopen(rulesFileName.c_str(), "rt");
 682
 683 if (!f)
 684     {
 685     WriteServLog("File %s cannot be oppened.", rulesFileName.c_str());
 686     return true;
 687     }
 688
 689 while (fgets(str, 1023, f))
 690     {
 691     lineNumber++;
 692     if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
 693         {
 694         continue;
 695         }
 696
 697     r = sscanf(str,"%s %s %s", tp, ta, td);
 698     if (r != 3)
 699         {
 700         WriteServLog("Error in file %s. There must be 3 parameters. Line %d.", rulesFileName.c_str(), lineNumber);
 701         return true;
 702         }
 703
 704     rul.proto = 0xff;
 705     rul.dir = 0xff;
 706
 707     for (int i = 0; i < PROTOMAX; i++)
 708         {
 709         if (strcasecmp(tp, protoName[i]) == 0)
 710             rul.proto = i;
 711         }
 712
 713     for (int i = 0; i < DIR_NUM + 1; i++)
 714         {
 715         if (td == dirName[i])
 716             rul.dir = i;
 717         }
 718
 719     if (rul.dir == 0xff || rul.proto == 0xff)
 720         {
 721         WriteServLog("Error in file %s. Line %d.",
 722                      rulesFileName.c_str(), lineNumber);
 723         return true;
 724         }
 725
 726     if (ParseAddress(ta, &rul) != 0)
 727         {
 728         WriteServLog("Error in file %s. Error in adress. Line %d.",
 729                      rulesFileName.c_str(), lineNumber);
 730         return true;
 731         }
 732     if (!test)
 733         rules.push_back(rul);
 734     //PrintRule(rul);
 735     }
 736
 737 fclose(f);
 738
 739 // Adding lastest rule: ALL 0.0.0.0/0 NULL
 740 rul.dir = DIR_NUM; //NULL
 741 rul.ip = 0;  //0.0.0.0
 742 rul.mask = 0;
 743 rul.port1 = 0;
 744 rul.port2 = 65535;
 745 rul.proto = all;
 746
 747 if (!test)
 748     rules.push_back(rul);
 749
 750 //PrintRule(rul);
 751
 752 return false;
 753 }
 754 //-----------------------------------------------------------------------------
 755 int TRAFFCOUNTER::Reload()
 756 {
 757 STG_LOCKER lock(&mutex, __FILE__, __LINE__);
 758
 759 if (ReadRules(true))
 760     {
 761     WriteServLog("TRAFFCOUNTER: Cannot reload rules. Errors found.");
 762     return -1;
 763     }
 764
 765 FreeRules();
 766 ReadRules();
 767 WriteServLog("TRAFFCOUNTER: Reload rules successfull.");
 768 return 0;
 769 }
 770 //-----------------------------------------------------------------------------
 771 bool TRAFFCOUNTER::ParseAddress(const char * ta, RULE * rule) const
 772 {
 773 char addr[50], mask[20], port1[20], port2[20], ports[40];
 774
 775 int len = strlen(ta);
 776 char n = 0;
 777 int i, p;
 778 memset(addr, 0, sizeof(addr));
 779 for (i = 0; i < len; i++)
 780     {
 781     if (ta[i] == '/' || ta[i] == ':')
 782         {
 783         addr[i] = 0;
 784         n = ta[i];
 785         break;
 786         }
 787     addr[i] = ta[i];
 788     n = 0;
 789     }
 790 addr[i + 1] = 0;
 791 p = i + 1;
 792
 793 if (n == '/')
 794     {
 795     // mask
 796     for (; i < len; i++)
 797         {
 798         if (ta[i] == ':')
 799             {
 800             mask[i - p] = 0;
 801             n = ':';
 802             break;
 803             }
 804         mask[i - p] = ta[i];
 805         }
 806     mask[i - p] = 0;
 807     }
 808 else
 809     {
 810     strcpy(mask, "32");
 811     }
 812
 813 p = i + 1;
 814 i++;
 815
 816 if (n == ':')
 817     {
 818     // port
 819     if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
 820         {
 821         WriteServLog("No ports specified for this protocol.");
 822         return true;
 823         }
 824
 825     for (; i < len; i++)
 826         ports[i - p] = ta[i];
 827
 828     ports[i - p] = 0;
 829     }
 830 else
 831     {
 832     strcpy(ports, "0-65535");
 833     }
 834
 835 char *sss;
 836 char pts[100];
 837 strcpy(pts, ports);
 838
 839 if ((sss = strchr(ports, '-')) != NULL)
 840     {
 841     strncpy(port1, ports, int(sss-ports));
 842     port1[int(sss - ports)] = 0;
 843     strcpy(port2, sss + 1);
 844     }
 845 else
 846     {
 847     strcpy(port1, ports);
 848     strcpy(port2, ports);
 849     }
 850
 851 // Convert strings to mask, ports and IP
 852 int prt1, prt2, msk;
 853 unsigned ip;
 854 char *res;
 855
 856 msk = strtol(mask, &res, 10);
 857 if (*res != 0)
 858     return true;
 859
 860 prt1 = strtol(port1, &res, 10);
 861 if (*res != 0)
 862     return true;
 863
 864 prt2 = strtol(port2, &res, 10);
 865 if (*res != 0)
 866     return true;
 867
 868 int r = inet_aton(addr, (struct in_addr*)&ip);
 869 if (r == 0)
 870     return true;
 871
 872 rule->ip = ip;
 873 rule->mask = CalcMask(msk);
 874 //msk = 1;
 875 //printfd(__FILE__, "msk=%d mask=%08X   mask=%08X\n", msk, rule->mask, (0xFFffFFff << (32 - msk)));
 876
 877 if ((ip & rule->mask) != ip)
 878     {
 879     WriteServLog("Address does'n match mask.");
 880     return true;
 881     }
 882
 883 rule->port1 = prt1;
 884 rule->port2 = prt2;
 885
 886 return false;
 887 }
 888 //-----------------------------------------------------------------------------
 889 uint32_t TRAFFCOUNTER::CalcMask(uint32_t msk) const
 890 {
 891 if (msk >= 32) return 0xFFffFFff;
 892 if (msk == 0) return 0;
 893 return htonl(0xFFffFFff << (32 - msk));
 894 }
 895 //---------------------------------------------------------------------------
 896 void TRAFFCOUNTER::FreeRules()
 897 {
 898 rules.clear();
 899 }
 900 //-----------------------------------------------------------------------------
 901 void TRAFFCOUNTER::PrintRule(RULE rule) const
 902 {
 903 printf("%15s   ", inet_ntostring(rule.ip).c_str());
 904 printf("mask=%08X ", rule.mask);
 905 printf("port1=%5d ", rule.port1);
 906 printf("port2=%5d ", rule.port2);
 907 switch (rule.proto)
 908     {
 909     case 0:
 910         printf("TCP     ");
 911         break;
 912     case 1:
 913         printf("UDP     ");
 914         break;
 915     case 2:
 916         printf("ICMP    ");
 917         break;
 918     case 3:
 919         printf("TCP_UDP ");
 920         break;
 921     case 4:
 922         printf("ALL     ");
 923         break;
 924     }
 925 printf("dir=%d \n", rule.dir);
 926 return;
 927 }
 928 //-----------------------------------------------------------------------------
 929 void TRAFFCOUNTER::SetMonitorDir(const string & monitorDir)
 930 {
 931 TRAFFCOUNTER::monitorDir = monitorDir;
 932 monitoring = (monitorDir != "");
 933 }
 934 //-----------------------------------------------------------------------------