root/trunk/src/V9Header_mgmt.c @ 127

/*
 * File: V9Header_mgmt.c
 * 
 * Authors: ANDREU Francois-Xavier 
 *
 * Copyright (C) 2005-2010 GIP RENATER 
 */

/*  This file is part of renetcol. 
 *
 *  renetcol is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  renetcol is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with renetcol; if not, write to the Free Software
 *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 */

#include "V9Header_mgmt.h"

/* 
 * get NetFlow Header
 */
short 
getNetFlowHeader(DatagramPtr pcktPtr, unsigned char *buf, 
                 NetFlowV9HeaderPtr v9Ptr, unsigned short *offV9)
{
  int correct;
  unsigned char buffer2[2];
  unsigned char buffer4[4];
  unsigned short offset = 28;
  unsigned short exportVersion;

  *offV9 = 28;
  buffer2[1]= *(buf+offset+0); (*offV9)++;
  buffer2[0]= *(buf+offset+1); (*offV9)++;
  switch (exportVersion= *((unsigned short*)&buffer2)) {
  case 1: /* NETFLOW EXPORT VERSION 1*/
/*     pcktPtr->entete_netflow->version = *((unsigned short*)&buffer2); */
    buffer2[1]= *(buf+offset+2);
    buffer2[0]= *(buf+offset+3);
/*     pcktPtr->netflow_header->nombre_flows = *((unsigned short*)&buffer2); */
    buffer4[3] = *(buf+offset+4)&0xff;
    buffer4[2] = *(buf+offset+5)&0xff;
    buffer4[1] = *(buf+offset+6)&0xff;
    buffer4[0] = *(buf+offset+7)&0xff;
/*     pcktPtr->netflow_header->duree_ms_depuis_boot_routeur = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+8)&0xff;
    buffer4[2] = *(buf+offset+9)&0xff;
    buffer4[1] = *(buf+offset+10)&0xff;
    buffer4[0] = *(buf+offset+11)&0xff;
/*     pcktPtr->netflow_header->duree_s_depuis_UTC1970 = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+12)&0xff;
    buffer4[2] = *(buf+offset+13)&0xff;
    buffer4[1] = *(buf+offset+14)&0xff;
    buffer4[0] = *(buf+offset+15)&0xff;
/*     pcktPtr->netflow_header->complement_ns_depuis_UTC1970 = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+16)&0xff;
    buffer4[2] = *(buf+offset+17)&0xff;
    buffer4[1] = *(buf+offset+18)&0xff;
    buffer4[0] = *(buf+offset+19)&0xff;
/*     pcktPtr->netflow_header->total_flows_sequence = *((unsigned long*)(&buffer4)); */
/*     pcktPtr->netflow_header->type_commutateur_flows =  */
/*       (unsigned short)*(buf+offset+20); */
/*     pcktPtr->netflow_header->numero_slot_commutateur_flows = */
/*       (unsigned short)*(buf+offset+21); */
    buffer2[1] = *(buf+offset+22);
    buffer2[0] = *(buf+offset+23);
/*     pcktPtr->netflow_header->reserve = *((unsigned short*)&buffer2); */
    correct = exportVersion;
    break;
  case 5: /* NETFLOW EXPORT VERSION 5*/
/*     pcktPtr->netflow_header->version = *((unsigned short*)&buffer2); */
    buffer2[1]= *(buf+offset+2);
    buffer2[0]= *(buf+offset+3);
/*     pcktPtr->netflow_header->nombre_flows = *((unsigned short*)&buffer2); */
    buffer4[3] = *(buf+offset+4)&0xff;
    buffer4[2] = *(buf+offset+5)&0xff;
    buffer4[1] = *(buf+offset+6)&0xff;
    buffer4[0] = *(buf+offset+7)&0xff;
/*     pcktPtr->netflow_header->duree_ms_depuis_boot_routeur = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+8)&0xff;
    buffer4[2] = *(buf+offset+9)&0xff;
    buffer4[1] = *(buf+offset+10)&0xff;
    buffer4[0] = *(buf+offset+11)&0xff;
/*     pcktPtr->netflow_header->duree_s_depuis_UTC1970 = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+12)&0xff;
    buffer4[2] = *(buf+offset+13)&0xff;
    buffer4[1] = *(buf+offset+14)&0xff;
    buffer4[0] = *(buf+offset+15)&0xff;
/*     pcktPtr->netflow_header->complement_ns_depuis_UTC1970 = *((unsigned long*)(&buffer4)); */
    buffer4[3] = *(buf+offset+16)&0xff;
    buffer4[2] = *(buf+offset+17)&0xff;
    buffer4[1] = *(buf+offset+18)&0xff;
    buffer4[0] = *(buf+offset+19)&0xff;
/*     pcktPtr->netflow_header->total_flows_sequence = *((unsigned long*)(&buffer4)); */
/*     pcktPtr->netflow_header->type_commutateur_flows =  */
/*       (unsigned short)*(buf+offset+20); */
/*     pcktPtr->netflow_header->numero_slot_commutateur_flows = */
/*       (unsigned short)*(buf+offset+21); */
    buffer2[1] = *(buf+offset+22);
    buffer2[0] = *(buf+offset+23);
/*     pcktPtr->netflow_header->reserve = *((unsigned short*)&buffer2); */
    correct = exportVersion;
    break;
  case 9: /* NETFLOW EXPORT VERSION 9*/
    v9Ptr->version = exportVersion;
    buffer2[1]= *(buf+(*offV9)); (*offV9)++;
    buffer2[0]= *(buf+(*offV9)); (*offV9)++;
    v9Ptr->count = *((unsigned short*)&buffer2);
    buffer4[3] = *(buf+(*offV9)); (*offV9)++;
    buffer4[2] = *(buf+(*offV9)); (*offV9)++;
    buffer4[1] = *(buf+(*offV9)); (*offV9)++;
    buffer4[0] = *(buf+(*offV9)); (*offV9)++;
    v9Ptr->system_uptime = *((unsigned long*)(&buffer4));
    buffer4[3] = *(buf+(*offV9)); (*offV9)++;
    buffer4[2] = *(buf+(*offV9)); (*offV9)++; 
    buffer4[1] = *(buf+(*offV9)); (*offV9)++;
    buffer4[0] = *(buf+(*offV9)); (*offV9)++;
    v9Ptr->unix_seconds = *((unsigned long*)(&buffer4));
    buffer4[3] = *(buf+(*offV9)); (*offV9)++;
    buffer4[2] = *(buf+(*offV9)); (*offV9)++;
    buffer4[1] = *(buf+(*offV9)); (*offV9)++;
    buffer4[0] = *(buf+(*offV9)); (*offV9)++;
    v9Ptr->package_sequence = *((unsigned long*)(&buffer4));
    buffer4[3] = *(buf+(*offV9)); (*offV9)++;
    buffer4[2] = *(buf+(*offV9)); (*offV9)++;
    buffer4[1] = *(buf+(*offV9)); (*offV9)++;
    buffer4[0] = *(buf+(*offV9)); (*offV9)++;
    v9Ptr->sourceId = *((unsigned long*)(&buffer4));
    correct = exportVersion;
    break;
  default:
    correct = 0;
  }
  return(correct);
}


/*
 * Few check on NetFlow Header
 */
short 
checkNetFlowHeader(DatagramPtr pcktPtr)
{
/*   if ((pcktPtr->netflow_header->version != 5) */
/*       && (pcktPtr->netflow_header->version != 1)) */
/*     { */
/*       syslog(LOG_INFO,"Wrong netflow export version %u", */
/*            pcktPtr->netflow_header->version); */
/*       return(1); */
/*     } */
/*   if ((pcktPtr->netflow_header->nombre_flows <1) */
/*       || (pcktPtr->netflow_header->nombre_flows > 30)) */
/*     { */
/*       return(1); */
/*     } */
/*   if (pcktPtr->ipH->length != 20+8+24+(pcktPtr->netflow_header->nombre_flows*48)) */
/*     { */
/*       syslog(LOG_INFO,"IP length (%u), UDP length (%u) and netflow length (%u) differents", */
/*           pcktPtr->ipH->length,pcktPtr.entete_udp.longueur, */
/*           (pcktPtr->netflow_header->nombre_flows*48)); */
/*       return(1); */
/*     } */
  return(0);
}

/*
 * checkHeaderV9
 */
short 
checkHeaderV9()
{
  return(0);
}