-/*
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
- */
-
-/*
- * Date: 27.10.2002
- */
-
-/*
- * Author : Boris Mikhailenko <stg34@stargazer.dp.ua>
- */
-
-/*
- $Revision: 1.58 $
- $Date: 2010/11/03 11:28:07 $
- $Author: faust $
- */
-
-/* inet_aton */
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-#include <csignal>
-#include <cassert>
-#include <cstdio> // fopen and similar
-#include <cstdlib> // strtol
-
-#include "stg/common.h"
-#include "stg/locker.h"
-#include "stg/const.h" // MONITOR_TIME_DELAY_SEC
-#include "traffcounter_impl.h"
-#include "stg_timer.h"
-#include "users_impl.h"
-
-#define FLUSH_TIME (10)
-#define REMOVE_TIME (31)
-
-using STG::TraffCounterImpl;
-
-const char protoName[PROTOMAX][8] =
-{"TCP", "UDP", "ICMP", "TCP_UDP", "ALL"};
-
-enum protoNum
-{
-tcp = 0, udp, icmp, tcp_udp, all
-};
-
-//-----------------------------------------------------------------------------
-TraffCounterImpl::TraffCounterImpl(UsersImpl * u, const std::string & fn)
- : WriteServLog(Logger::get()),
- rulesFileName(fn),
- monitoring(false),
- touchTimeP(stgTime - MONITOR_TIME_DELAY_SEC),
- users(u),
- running(false),
- stopped(true),
- addUserNotifier(*this),
- delUserNotifier(*this)
-{
-for (int i = 0; i < DIR_NUM; i++)
- strprintf(&dirName[i], "DIR%d", i);
-
-dirName[DIR_NUM] = "NULL";
-
-users->AddNotifierUserAdd(&addUserNotifier);
-users->AddNotifierUserDel(&delUserNotifier);
-
-pthread_mutex_init(&mutex, NULL);
-}
-//-----------------------------------------------------------------------------
-TraffCounterImpl::~TraffCounterImpl()
-{
-pthread_mutex_destroy(&mutex);
-}
-//-----------------------------------------------------------------------------
-int TraffCounterImpl::Start()
-{
-STG_LOCKER lock(&mutex);
-
-if (!stopped)
- return 0;
-
-if (ReadRules())
- {
- printfd(__FILE__, "TraffCounterImpl::Start() - Cannot read rules\n");
- WriteServLog("TraffCounter: Cannot read rules.");
- return -1;
- }
-
-printfd(__FILE__, "TraffCounter::Start()\n");
-int h = users->OpenSearch();
-assert(h && "USERS::OpenSearch is always correct");
-UserImpl * u;
-
-while (users->SearchNext(h, &u) == 0)
- SetUserNotifiers(u);
-users->CloseSearch(h);
-
-running = true;
-if (pthread_create(&thread, NULL, Run, this))
- {
- printfd(__FILE__, "TraffCounterImpl::Start() - Cannot start thread\n");
- WriteServLog("TraffCounter: Error: Cannot start thread.");
- return -1;
- }
-return 0;
-}
-//-----------------------------------------------------------------------------
-int TraffCounterImpl::Stop()
-{
-if (stopped)
- return 0;
-
-running = false;
-
-int h = users->OpenSearch();
-assert(h && "USERS::OpenSearch is always correct");
-
-UserImpl * u;
-while (users->SearchNext(h, &u) == 0)
- UnSetUserNotifiers(u);
-users->CloseSearch(h);
-
-//5 seconds to thread stops itself
-struct timespec ts = {0, 200000000};
-for (int i = 0; i < 25 && !stopped; i++)
- {
- nanosleep(&ts, NULL);
- }
-
-if (!stopped)
- return -1;
-
-printfd(__FILE__, "TraffCounter::Stop()\n");
-
-return 0;
-}
-//-----------------------------------------------------------------------------
-void * TraffCounterImpl::Run(void * data)
-{
-sigset_t signalSet;
-sigfillset(&signalSet);
-pthread_sigmask(SIG_BLOCK, &signalSet, NULL);
-
-TraffCounterImpl * tc = static_cast<TraffCounterImpl *>(data);
-tc->stopped = false;
-int c = 0;
-
-time_t touchTime = stgTime - MONITOR_TIME_DELAY_SEC;
-struct timespec ts = {0, 500000000};
-while (tc->running)
- {
- nanosleep(&ts, 0);
- if (!tc->running)
- {
- tc->FlushAndRemove();
- break;
- }
-
- if (tc->monitoring && (touchTime + MONITOR_TIME_DELAY_SEC <= stgTime))
- {
- std::string monFile(tc->monitorDir + "/traffcounter_r");
- printfd(__FILE__, "Monitor=%d file TraffCounter %s\n", tc->monitoring, monFile.c_str());
- touchTime = stgTime;
- TouchFile(monFile);
- }
-
- if (++c % FLUSH_TIME == 0)
- tc->FlushAndRemove();
- }
-
-tc->stopped = true;
-return NULL;
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::process(const RawPacket & rawPacket)
-{
-if (!running)
- return;
-
-if (monitoring && (touchTimeP + MONITOR_TIME_DELAY_SEC <= stgTime))
- {
- std::string monFile = monitorDir + "/traffcounter_p";
- printfd(__FILE__, "Monitor=%d file TraffCounter %s\n", monitoring, monFile.c_str());
- touchTimeP = stgTime;
- TouchFile(monFile);
- }
-
-STG_LOCKER lock(&mutex);
-
-//printfd(__FILE__, "TraffCounter::Process()\n");
-//TODO replace find with lower_bound.
-
-// Searching a new packet in a tree.
-pp_iter pi = packets.find(rawPacket);
-
-// Packet found - update length and time
-if (pi != packets.end())
- {
- pi->second.lenU += rawPacket.GetLen();
- pi->second.lenD += rawPacket.GetLen();
- pi->second.updateTime = stgTime;
- /*printfd(__FILE__, "=============================\n");
- printfd(__FILE__, "Packet found!\n");
- printfd(__FILE__, "Version=%d\n", rawPacket.GetIPVersion());
- printfd(__FILE__, "HeaderLen=%d\n", rawPacket.GetHeaderLen());
- printfd(__FILE__, "PacketLen=%d\n", rawPacket.GetLen());
- printfd(__FILE__, "SIP=%s\n", inet_ntostring(rawPacket.GetSrcIP()).c_str());
- printfd(__FILE__, "DIP=%s\n", inet_ntostring(rawPacket.GetDstIP()).c_str());
- printfd(__FILE__, "src port=%d\n", rawPacket.GetSrcPort());
- printfd(__FILE__, "pst port=%d\n", rawPacket.GetDstPort());
- printfd(__FILE__, "len=%d\n", rawPacket.GetLen());
- printfd(__FILE__, "proto=%d\n", rawPacket.GetProto());
- printfd(__FILE__, "PacketDirU=%d\n", pi->second.dirU);
- printfd(__FILE__, "PacketDirD=%d\n", pi->second.dirD);
- printfd(__FILE__, "=============================\n");*/
- return;
- }
-
-PacketExtraData ed;
-
-// Packet not found - add new packet
-
-ed.updateTime = stgTime;
-ed.flushTime = stgTime;
-
-/*
- userU is that whose user_ip == packet_ip_src
- userD is that whose user_ip == packet_ip_dst
- */
-
-uint32_t ipU = rawPacket.GetSrcIP();
-uint32_t ipD = rawPacket.GetDstIP();
-
-// Searching users with such IP
-if (users->FindByIPIdx(ipU, &ed.userU) == 0)
- {
- ed.userUPresent = true;
- }
-
-if (users->FindByIPIdx(ipD, &ed.userD) == 0)
- {
- ed.userDPresent = true;
- }
-
-if (ed.userUPresent ||
- ed.userDPresent)
- {
- DeterminateDir(rawPacket, &ed.dirU, &ed.dirD);
-
- ed.lenD = ed.lenU = rawPacket.GetLen();
-
- //TODO use result of lower_bound to inserting new record
-
- // Adding packet to a tree.
- std::pair<pp_iter, bool> insertResult = packets.insert(std::make_pair(rawPacket, ed));
- pp_iter newPacket = insertResult.first;
-
- // Adding packet reference to an IP index.
- ip2packets.insert(std::make_pair(ipU, newPacket));
- ip2packets.insert(std::make_pair(ipD, newPacket));
- }
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::FlushAndRemove()
-{
-STG_LOCKER lock(&mutex);
-
-Packets::size_type oldPacketsSize = packets.size();
-Index::size_type oldIp2packetsSize = ip2packets.size();
-
-pp_iter pi;
-pi = packets.begin();
-Packets newPackets;
-ip2packets.erase(ip2packets.begin(), ip2packets.end());
-while (pi != packets.end())
- {
- //Flushing
- if (stgTime - pi->second.flushTime > FLUSH_TIME)
- {
- if (pi->second.userUPresent)
- {
- //printfd(__FILE__, "+++ Flushing U user %s (%s:%d) of length %d\n", pi->second.userU->GetLogin().c_str(), inet_ntostring(pi->first.GetSrcIP()).c_str(), pi->first.GetSrcPort(), pi->second.lenU);
-
- // Add stat
- if (pi->second.dirU < DIR_NUM)
- {
- #ifdef TRAFF_STAT_WITH_PORTS
- pi->second.userU->AddTraffStatU(pi->second.dirU,
- pi->first.GetDstIP(),
- pi->first.GetDstPort(),
- pi->second.lenU);
- #else
- pi->second.userU->AddTraffStatU(pi->second.dirU,
- pi->first.GetDstIP(),
- pi->second.lenU);
- #endif
- }
-
- pi->second.lenU = 0;
- pi->second.flushTime = stgTime;
- }
-
- if (pi->second.userDPresent)
- {
- //printfd(__FILE__, "+++ Flushing D user %s (%s:%d) of length %d\n", pi->second.userD->GetLogin().c_str(), inet_ntostring(pi->first.GetDstIP()).c_str(), pi->first.GetDstPort(), pi->second.lenD);
-
- // Add stat
- if (pi->second.dirD < DIR_NUM)
- {
- #ifdef TRAFF_STAT_WITH_PORTS
- pi->second.userD->AddTraffStatD(pi->second.dirD,
- pi->first.GetSrcIP(),
- pi->first.GetSrcPort(),
- pi->second.lenD);
- #else
- pi->second.userD->AddTraffStatD(pi->second.dirD,
- pi->first.GetSrcIP(),
- pi->second.lenD);
- #endif
- }
-
- pi->second.lenD = 0;
- pi->second.flushTime = stgTime;
- }
- }
-
- if (stgTime - pi->second.updateTime < REMOVE_TIME)
- {
- std::pair<pp_iter, bool> res = newPackets.insert(*pi);
- if (res.second)
- {
- ip2packets.insert(std::make_pair(pi->first.GetSrcIP(), res.first));
- ip2packets.insert(std::make_pair(pi->first.GetDstIP(), res.first));
- }
- }
- ++pi;
- }
-swap(packets, newPackets);
-printfd(__FILE__, "FlushAndRemove() packets: %d(rem %d) ip2packets: %d(rem %d)\n",
- packets.size(),
- oldPacketsSize - packets.size(),
- ip2packets.size(),
- oldIp2packetsSize - ip2packets.size());
-
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::AddUser(UserImpl * user)
-{
-printfd(__FILE__, "AddUser: %s\n", user->GetLogin().c_str());
-uint32_t uip = user->GetCurrIP();
-std::pair<ip2p_iter, ip2p_iter> pi;
-
-STG_LOCKER lock(&mutex);
-// Find all packets with IP belongs to this user
-pi = ip2packets.equal_range(uip);
-
-while (pi.first != pi.second)
- {
- if (pi.first->second->first.GetSrcIP() == uip)
- {
- assert((!pi.first->second->second.userUPresent ||
- pi.first->second->second.userU == user) &&
- "U user present but it's not current user");
-
- pi.first->second->second.lenU = 0;
- pi.first->second->second.userU = user;
- pi.first->second->second.userUPresent = true;
- }
-
- if (pi.first->second->first.GetDstIP() == uip)
- {
- assert((!pi.first->second->second.userDPresent ||
- pi.first->second->second.userD == user) &&
- "D user present but it's not current user");
-
- pi.first->second->second.lenD = 0;
- pi.first->second->second.userD = user;
- pi.first->second->second.userDPresent = true;
- }
-
- ++pi.first;
- }
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::DelUser(uint32_t uip)
-{
-printfd(__FILE__, "DelUser: %s \n", inet_ntostring(uip).c_str());
-std::pair<ip2p_iter, ip2p_iter> pi;
-
-STG_LOCKER lock(&mutex);
-pi = ip2packets.equal_range(uip);
-
-while (pi.first != pi.second)
- {
- if (pi.first->second->first.GetSrcIP() == uip)
- {
- if (pi.first->second->second.dirU < DIR_NUM && pi.first->second->second.userUPresent)
- {
- #ifdef TRAFF_STAT_WITH_PORTS
- pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
- pi.first->second->first.GetDstIP(),
- pi.first->second->first.GetDstPort(),
- pi.first->second->second.lenU);
- #else
- pi.first->second->second.userU->AddTraffStatU(pi.first->second->second.dirU,
- pi.first->second->first.GetDstIP(),
- pi.first->second->second.lenU);
- #endif
- }
- pi.first->second->second.userUPresent = false;
- }
-
- if (pi.first->second->first.GetDstIP() == uip)
- {
- if (pi.first->second->second.dirD < DIR_NUM && pi.first->second->second.userDPresent)
- {
- #ifdef TRAFF_STAT_WITH_PORTS
- pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
- pi.first->second->first.GetSrcIP(),
- pi.first->second->first.GetSrcPort(),
- pi.first->second->second.lenD);
- #else
- pi.first->second->second.userD->AddTraffStatD(pi.first->second->second.dirD,
- pi.first->second->first.GetSrcIP(),
- pi.first->second->second.lenD);
- #endif
- }
-
- pi.first->second->second.userDPresent = false;
- }
-
- ++pi.first;
- }
-
-ip2packets.erase(pi.first, pi.second);
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::SetUserNotifiers(UserImpl * user)
-{
-// Adding user. Adding notifiers to user.
-TRF_IP_BEFORE ipBNotifier(*this, user);
-ipBeforeNotifiers.push_front(ipBNotifier);
-user->AddCurrIPBeforeNotifier(&(*ipBeforeNotifiers.begin()));
-
-TRF_IP_AFTER ipANotifier(*this, user);
-ipAfterNotifiers.push_front(ipANotifier);
-user->AddCurrIPAfterNotifier(&(*ipAfterNotifiers.begin()));
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::UnSetUserNotifiers(UserImpl * user)
-{
-// Removing user. Removing notifiers from user.
-std::list<TRF_IP_BEFORE>::iterator bi;
-std::list<TRF_IP_AFTER>::iterator ai;
-
-bi = ipBeforeNotifiers.begin();
-while (bi != ipBeforeNotifiers.end())
- {
- if (user->GetLogin() == bi->GetUser()->GetLogin())
- {
- user->DelCurrIPBeforeNotifier(&(*bi));
- ipBeforeNotifiers.erase(bi);
- break;
- }
- ++bi;
- }
-
-ai = ipAfterNotifiers.begin();
-while (ai != ipAfterNotifiers.end())
- {
- if (user->GetLogin() == ai->GetUser()->GetLogin())
- {
- user->DelCurrIPAfterNotifier(&(*ai));
- ipAfterNotifiers.erase(ai);
- break;
- }
- ++ai;
- }
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::DeterminateDir(const RawPacket & packet,
- int * dirU, // Direction for incoming packet
- int * dirD) const // Direction for outgoing packet
-{
-bool addrMatchU = false;
-bool portMatchU = false;
-bool addrMatchD = false;
-bool portMatchD = false;
-bool foundU = false; // Was rule for U found ?
-bool foundD = false; // Was rule for D found ?
-//printfd(__FILE__, "foundU=%d, foundD=%d\n", foundU, foundD);
-
-enum { ICMP_RPOTO = 1, TCP_PROTO = 6, UDP_PROTO = 17 };
-
-std::list<Rule>::const_iterator ln;
-ln = rules.begin();
-
-while (ln != rules.end())
- {
- if (!foundU)
- {
- portMatchU = false;
-
- switch (ln->proto)
- {
- case all:
- portMatchU = true;
- break;
-
- case icmp:
- portMatchU = (packet.GetProto() == ICMP_RPOTO);
- break;
-
- case tcp_udp:
- if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
- portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
- break;
-
- case tcp:
- if (packet.GetProto() == TCP_PROTO)
- portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
- break;
-
- case udp:
- if (packet.GetProto() == UDP_PROTO)
- portMatchU = (packet.GetDstPort() >= ln->port1) && (packet.GetDstPort() <= ln->port2);
- break;
-
- default:
- printfd(__FILE__, "Error! Incorrect rule!\n");
- break;
- }
-
- addrMatchU = (packet.GetDstIP() & ln->mask) == ln->ip;
-
- if (!foundU && addrMatchU && portMatchU)
- {
- foundU = true;
- *dirU = ln->dir;
- //printfd(__FILE__, "Up rule ok! %d\n", ln->dir);
- }
-
- } //if (!foundU)
-
- if (!foundD)
- {
- portMatchD = false;
-
- switch (ln->proto)
- {
- case all:
- portMatchD = true;
- break;
-
- case icmp:
- portMatchD = (packet.GetProto() == ICMP_RPOTO);
- break;
-
- case tcp_udp:
- if (packet.GetProto() == TCP_PROTO || packet.GetProto() == UDP_PROTO)
- portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
- break;
-
- case tcp:
- if (packet.GetProto() == TCP_PROTO)
- portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
- break;
-
- case udp:
- if (packet.GetProto() == UDP_PROTO)
- portMatchD = (packet.GetSrcPort() >= ln->port1) && (packet.GetSrcPort() <= ln->port2);
- break;
-
- default:
- printfd(__FILE__, "Error! Incorrect rule!\n");
- break;
- }
-
- addrMatchD = (packet.GetSrcIP() & ln->mask) == ln->ip;
-
- if (!foundD && addrMatchD && portMatchD)
- {
- foundD = true;
- *dirD = ln->dir;
- //printfd(__FILE__, "Down rule ok! %d\n", ln->dir);
- }
- } //if (!foundD)
-
- ++ln;
- } //while (ln != rules.end())
-
-if (!foundU)
- *dirU = DIR_NUM;
-
-if (!foundD)
- *dirD = DIR_NUM;
-}
-//-----------------------------------------------------------------------------
-bool TraffCounterImpl::ReadRules(bool test)
-{
-//printfd(__FILE__, "TraffCounter::ReadRules()\n");
-
-Rule rul;
-FILE * f;
-char str[1024];
-char tp[100]; // protocol
-char ta[100]; // address
-char td[100]; // target direction
-int r;
-int lineNumber = 0;
-f = fopen(rulesFileName.c_str(), "rt");
-
-if (!f)
- {
- printfd(__FILE__, "TraffCounterImpl::ReadRules() - File '%s' cannot be opened.\n", rulesFileName.c_str());
- WriteServLog("File '%s' cannot be oppened.", rulesFileName.c_str());
- return true;
- }
-
-while (fgets(str, 1023, f))
- {
- lineNumber++;
- if (str[strspn(str," \t")] == '#' || str[strspn(str," \t")] == '\n')
- {
- continue;
- }
-
- r = sscanf(str,"%99s %99s %99s", tp, ta, td);
- if (r != 3)
- {
- printfd(__FILE__, "TraffCounterImpl::ReadRules() - Error in file '%s' at line %d. There must be 3 parameters.\n", rulesFileName.c_str(), lineNumber);
- WriteServLog("Error in file '%s' at line %d. There must be 3 parameters.", rulesFileName.c_str(), lineNumber);
- fclose(f);
- return true;
- }
-
- rul.proto = 0xff;
- rul.dir = 0xff;
-
- for (uint8_t i = 0; i < PROTOMAX; i++)
- {
- if (strcasecmp(tp, protoName[i]) == 0)
- rul.proto = i;
- }
-
- for (uint32_t i = 0; i < DIR_NUM + 1; i++)
- {
- if (td == dirName[i])
- rul.dir = i;
- }
-
- if (rul.dir == 0xff || rul.proto == 0xff)
- {
- printfd(__FILE__, "TraffCounterImpl::ReadRules() - Error in file '%s' at line %d.\n", rulesFileName.c_str(), lineNumber);
- WriteServLog("Error in file %s. Line %d.",
- rulesFileName.c_str(), lineNumber);
- fclose(f);
- return true;
- }
-
- if (ParseAddress(ta, &rul) != 0)
- {
- printfd(__FILE__, "TraffCounterImpl::ReadRules() - Error in file '%s' at line %d. Error in adress.\n", rulesFileName.c_str(), lineNumber);
- WriteServLog("Error in file %s. Error in adress. Line %d.",
- rulesFileName.c_str(), lineNumber);
- fclose(f);
- return true;
- }
- if (!test)
- rules.push_back(rul);
- }
-
-fclose(f);
-
-// Adding lastest rule: ALL 0.0.0.0/0 NULL
-rul.dir = DIR_NUM; //NULL
-rul.ip = 0; //0.0.0.0
-rul.mask = 0;
-rul.port1 = 0;
-rul.port2 = 65535;
-rul.proto = all;
-
-if (!test)
- rules.push_back(rul);
-
-return false;
-}
-//-----------------------------------------------------------------------------
-int TraffCounterImpl::Reload()
-{
-STG_LOCKER lock(&mutex);
-
-if (ReadRules(true))
- {
- printfd(__FILE__, "TraffCounterImpl::Reload() - Failed to reload rules.\n");
- WriteServLog("TraffCounter: Cannot reload rules. Errors found.");
- return -1;
- }
-
-FreeRules();
-ReadRules();
-printfd(__FILE__, "TraffCounterImpl::Reload() - Reloaded rules successfully.\n");
-WriteServLog("TraffCounter: Reloaded rules successfully.");
-return 0;
-}
-//-----------------------------------------------------------------------------
-bool TraffCounterImpl::ParseAddress(const char * ta, Rule * rule) const
-{
-char addr[50], mask[20], port1[20], port2[20], ports[40];
-
-size_t len = strlen(ta);
-char n = 0;
-size_t i, p;
-memset(addr, 0, sizeof(addr));
-for (i = 0; i < len; i++)
- {
- if (ta[i] == '/' || ta[i] == ':')
- {
- addr[i] = 0;
- n = ta[i];
- break;
- }
- addr[i] = ta[i];
- n = 0;
- }
-addr[i + 1] = 0;
-p = i + 1;
-
-if (n == '/')
- {
- // mask
- for (; i < len; i++)
- {
- if (ta[i] == ':')
- {
- mask[i - p] = 0;
- n = ':';
- break;
- }
- mask[i - p] = ta[i];
- }
- mask[i - p] = 0;
- }
-else
- {
- strcpy(mask, "32");
- }
-
-p = i + 1;
-i++;
-
-if (n == ':')
- {
- // port
- if (!(rule->proto == tcp || rule->proto == udp || rule->proto == tcp_udp))
- {
- printfd(__FILE__, "TraffCounterImpl::ParseAddress() - No ports specified for this protocol.\n");
- WriteServLog("No ports specified for this protocol.");
- return true;
- }
-
- for (; i < len; i++)
- ports[i - p] = ta[i];
-
- ports[i - p] = 0;
- }
-else
- {
- strcpy(ports, "0-65535");
- }
-
-char *sss;
-char pts[100];
-strcpy(pts, ports);
-
-if ((sss = strchr(ports, '-')) != NULL)
- {
- strncpy(port1, ports, int(sss-ports));
- port1[int(sss - ports)] = 0;
- strcpy(port2, sss + 1);
- }
-else
- {
- strcpy(port1, ports);
- strcpy(port2, ports);
- }
-
-// Convert strings to mask, ports and IP
-uint16_t prt1, prt2, msk;
-struct in_addr ipaddr;
-char *res;
-
-msk = static_cast<uint16_t>(strtol(mask, &res, 10));
-if (*res != 0)
- return true;
-
-prt1 = static_cast<uint16_t>(strtol(port1, &res, 10));
-if (*res != 0)
- return true;
-
-prt2 = static_cast<uint16_t>(strtol(port2, &res, 10));
-if (*res != 0)
- return true;
-
-int r = inet_aton(addr, &ipaddr);
-if (r == 0)
- return true;
-
-rule->ip = ipaddr.s_addr;
-rule->mask = CalcMask(msk);
-
-if ((ipaddr.s_addr & rule->mask) != ipaddr.s_addr)
- {
- printfd(__FILE__, "TraffCounterImpl::ParseAddress() - Address does'n match mask.\n");
- WriteServLog("Address does'n match mask.");
- return true;
- }
-
-rule->port1 = prt1;
-rule->port2 = prt2;
-
-return false;
-}
-//-----------------------------------------------------------------------------
-uint32_t TraffCounterImpl::CalcMask(uint32_t msk) const
-{
-if (msk >= 32) return 0xFFffFFff;
-if (msk == 0) return 0;
-return htonl(0xFFffFFff << (32 - msk));
-}
-//---------------------------------------------------------------------------
-void TraffCounterImpl::FreeRules()
-{
-rules.clear();
-}
-//-----------------------------------------------------------------------------
-void TraffCounterImpl::SetMonitorDir(const std::string & dir)
-{
-monitorDir = dir;
-monitoring = !monitorDir.empty();
-}
-//-----------------------------------------------------------------------------
git.stg.codes / stg.git / blobdiff