Context Navigation

dataFlowSet.c @ 127

Revision 127, 57.9 KB (checked in by andreu, 12 years ago)
Change copyright timestamp - Some correction on WEB Section
Property svn:eol-style set to `native`

Rev	Line
[2]	1	/*
	2	* File: dataFlowSet.c
	3	*
[15]	4	* Authors: ANDREU Francois-Xavier
[2]	5	*
[127]	6	* Copyright (C) 2005 - 2010 GIP RENATER
[2]	7	*/
	8
	9	/ This file is part of renetcol.*
	10	*
	11	* renetcol is free software; you can redistribute it and/or modify
	12	* it under the terms of the GNU General Public License as published by
	13	* the Free Software Foundation; either version 2 of the License, or
	14	* (at your option) any later version.
	15	*
	16	* renetcol is distributed in the hope that it will be useful,
	17	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	18	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	19	* GNU General Public License for more details.
	20	*
	21	* You should have received a copy of the GNU General Public License
	22	* along with renetcol; if not, write to the Free Software
	23	* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
	24	*/
	25
	26	#include "dataFlowSet.h"
	27
	28	/*
[22]	29	* Check Data FlowSet
[2]	30	*
	31	*/
[27]	32	short
	33	checkDataFlowSet(short shift,
[80]	34	struct MyPtrs *myPtrs,
	35	int myQueue,
	36	struct PrefixV4 *V4PTab,
	37	size_t nbPV4,
	38	struct PrefixV4 *V4STab,
	39	size_t nbSV4
	40	)
[2]	41	{
[80]	42	TplFlowSetPtr tmp = NULL;
	43	TplOptionPtr tmpOpt = NULL;
	44	FieldPtr pftmp = NULL;
	45	FieldPtr secondPftmp = NULL;
	46	unsigned short data_length = 0;
	47	unsigned short flow_size = 0;
	48	unsigned short oldOffset = *myPtrs->offsetV9Ptr;
	49	unsigned short secondOffset = 0;
	50	unsigned short secondOldOffset = 0;
	51	int moreIsNecessary = 1;
	52	int field_size = 0;
	53	int cpt = 0;
	54	int secondCpt = 0;
	55	int overflow = 0;
	56	int noEnd = 1;
	57	int i = 0;
	58	int j = 0;
	59	int pos = 0;
	60	unsigned char buffer1;
	61	unsigned char buffer2[2];
	62	unsigned char buffer4[4];
	63	RulesPtr tmpRuleList = myPtrs->rulesListPtr;
	64	RulesPtr tmpRL = myPtrs->rulesListPtr;
	65	msgType myMsg;
	66	char *msgTextIndex;
[57]	67
[80]	68	unsigned short tplMsgType = 11;
	69	struct PrefixV4 prefixKey, res, res2, resSub; /* for bsearch /
[60]	70	#if defined(IPV4AGGIDSNMP)
[80]	71	struct PrefixV4 *res3;
[60]	72	#endif
	73	#ifdef ASACC
[80]	74	struct AS asKey, asres; /* for bsearch /
[60]	75	#endif
[80]	76	struct AggCache agCache;
	77	int bool = 0; / in IPV4 Agg mode enabled, we need to now if it's an IPv4 /
[95]	78	int isIPv6 = 0;
[80]	79	/ flow, we test on the field and then put bool at 1 /
	80	int isMplsFlow = 0;
	81	int paddingCounter = 0;
	82	int crazyCounter = 0;
[111]	83	#ifdef DEBUG
	84	int flowCpt = 0;
	85	#endif
[27]	86
[80]	87	buffer2[1] = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	88	(*myPtrs->offsetV9Ptr)++;
	89	buffer2[0] = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	90	(*myPtrs->offsetV9Ptr)++;
	91	(myPtrs->currentFlowsetIdPtr) = ((unsigned short*)&buffer2);
	92	buffer2[1] = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	93	(*myPtrs->offsetV9Ptr)++;
	94	buffer2[0] = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	95	(*myPtrs->offsetV9Ptr)++;
	96	data_length = ((unsigned* short*)&buffer2);
	97	if (data_length == 0) {
[111]	98	#ifdef DEBUG
	99	fprintf (stderr, " dlg==0 <--\| ");
	100	#endif
	101	/ syslog(LOG_INFO, "data flowset length null; all next informations of this data flowset are not considered! flowset ID: %hu, from router: %lu.%lu.%lu.%lu", /
	102	/ (myPtrs->currentFlowsetIdPtr), /*
	103	/ (myPtrs->pcktPtr->ipH->srcAdd>>24), /
	104	/ (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), /
	105	/ (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), /
	106	/ (myPtrs->pcktPtr->ipH->srcAdd<<24>>24)); /
[80]	107	return (-1);
[30]	108
[80]	109	}
[74]	110
[80]	111	if ( (tmp=existTplId(myPtrs->currentRouterPtr,
	112	myPtrs->currentHeaderV9Ptr->sourceId,
	113	(*myPtrs->currentFlowsetIdPtr)))!=NULL ) {
[113]	114	myPtrs->currentMIB->dataFlowSetNb += 1;
[29]	115	#ifdef DEBUG
[80]	116	fprintf(stderr,
	117	"{d id: %hu, lg %hu",
	118	(*myPtrs->currentFlowsetIdPtr),
	119	data_length);
	120	if ( (*myPtrs->currentFlowsetIdPtr) > TRESHOLD_TEMPLATE_ID ) {
[111]	121	fprintf(stderr,"Bad TID from router: %lu.%lu.%lu.%lu\n",
	122	(*myPtrs->currentFlowsetIdPtr),
	123	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	124	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	125	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	126	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24));
	127	fprintf(stderr," Bytes : \n");
	128	while ( ( myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr) ) > (myPtrs->ptr_buffer+1416) ){
	129	buffer1= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));(*myPtrs->offsetV9Ptr)++;
	130	tmp = ((unsigned* char*)&buffer1);
	131	fprintf (stderr, " %s ", tmp);
	132	}
	133	exit(-1);
[80]	134	return (data_length+shift);
	135	}
[29]	136	#endif
[80]	137	pftmp = tmp->lastField;
	138	for (; pftmp; pftmp = pftmp->prev) {
	139	flow_size += pftmp->fieldLength;
	140	}
	141	if ( data_length%flow_size >= 9 ) {
	142	(*myPtrs->currentFlowsetNumberPtr) = myPtrs->currentHeaderV9Ptr->count;
[111]	143	syslog(LOG_INFO, "data flowset length not match with length from template definition, wrong template definition suspected; all next informations of this data flowset are not considered! sourceID: %lu flowset ID: %hu, from router: %lu.%lu.%lu.%lu",
	144	myPtrs->currentHeaderV9Ptr->sourceId,
[80]	145	(*myPtrs->currentFlowsetIdPtr),
	146	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	147	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	148	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	149	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24));
[111]	150	#ifdef DEBUG
	151	fprintf (stderr, " dlg%flsz >=9 skip data ");
	152	#endif
[80]	153	return (data_length+shift);
	154	}
	155	if ( data_length >= 1452 ) {
	156	syslog(LOG_INFO, "data flowset length too raised; all next informations of this data flowset are not considered! flowset ID: %hu, from router: %lu.%lu.%lu.%lu",
	157	(*myPtrs->currentFlowsetIdPtr),
	158	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	159	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	160	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	161	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24));
[111]	162	#ifdef DEBUG
	163	fprintf (stderr, " dlg >= 1452 skip pckt ");
	164	#endif
[80]	165	return (-1);
	166	}
[59]	167	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	168	agCache.routerAd = myPtrs->pcktPtr->ipH->srcAdd;
[22]	169	#endif
[18]	170
[80]	171	pftmp = tmp->lastField;
	172	secondPftmp = tmp->lastField;
	173	secondOffset = *myPtrs->offsetV9Ptr;
	174	secondOldOffset = secondOffset;
	175	while ( (((*myPtrs->offsetV9Ptr)-48-shift) <= data_length)
	176	&& (overflow!=1) ) {
	177	/*
	178	* progression in a data flow Set
	179	* notes:
	180	* 48= IP header size + NetFlow header size
	181	* shift = shift because we have a template declaration
	182	* inside data templates
	183	*/
	184	cpt++;
	185	j = 0;
	186	pos = (pftmp->fieldType)*MAX_RULES_PER_FIELD+j;
	187	field_size = (int) pftmp->fieldLength;
[76]	188
[80]	189	/ special case: check yes on all flows from one router /
	190	/ (phantom field nb 0) /
	191	/ FIXME : this code is repeated, perhaps past before /
	192	while ( ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j))) != NULL ) {
	193	if ( (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j)))->value->stor.lvalue)
	194	== myPtrs->pcktPtr->ipH->srcAdd )
	195	{
	196	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j)))->check = 1;
	197	}
	198	j++;
	199	}
	200	j = 0;
[76]	201
[80]	202	/*
	203	* Comparaison between the field value and the rules
	204	* ... if one rule exist
	205	* FIXME : warning, if no rules, no accounting ?
	206	*/
	207	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos))) != NULL) {
	208	oldOffset = *myPtrs->offsetV9Ptr;
	209	while (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos))) != NULL){
	210	/*
	211	* while on one cache table line
	212	*/
	213	*myPtrs->offsetV9Ptr = oldOffset;
	214	switch ((int)
	215	(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->operator)){
	216	case 2:
	217	/ operator: "=" /
	218	switch (field_size) {
	219	case 1:
	220	buffer1 = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	221	(*myPtrs->offsetV9Ptr)++;
	222	/ rule check /
	223	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.cvalue
	224	== ((unsigned* char*)&buffer1)) {
	225	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	226	}
	227	/ end rule check /
[59]	228	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	229	if ((pftmp->fieldType==9)\|\|(pftmp->fieldType==29)){
	230	agCache.maskS = ((unsigned* char*)&buffer1);
	231	}
	232	if ((pftmp->fieldType==13)\|\|(pftmp->fieldType==30)){
	233	agCache.maskD = ((unsigned* char*)&buffer1);
	234	}
	235	if (pftmp->fieldType==60){
	236	agCache.ipProt = ((unsigned* char*)&buffer1);
	237	}
	238	if (pftmp->fieldType==4){
	239	agCache.tProt = ((unsigned* char*)&buffer1);
	240	}
	241	if (pftmp->fieldType==61){
	242	agCache.sens = ((unsigned* char*)&buffer1);
	243	}
	244	if (pftmp->fieldType==5){
	245	agCache.dscp = ((unsigned* char*)&buffer1);
	246	}
[22]	247	#endif
[80]	248	break;
	249	case 2:
	250	buffer2[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	251	(*myPtrs->offsetV9Ptr)++;
	252	buffer2[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	253	(*myPtrs->offsetV9Ptr)++;
	254	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue
	255	== ((unsigned* short*)&buffer2))
	256	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
[114]	257	if (pftmp->fieldType==7){
	258	agCache.sPort = ((unsigned* short*)&buffer2);
	259	}
	260	if (pftmp->fieldType==11){
	261	agCache.dPort = ((unsigned* short*)&buffer2);
	262	}
[59]	263	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	264	if (pftmp->fieldType==10){
	265	agCache.inputSnmp = ((unsigned* short*)&buffer2);
	266	}
	267	if (pftmp->fieldType==14){
	268	agCache.outputSnmp = ((unsigned* short*)&buffer2);
	269	}
[22]	270	#endif
[60]	271	#ifdef ASACC
[80]	272	if (pftmp->fieldType==16){
	273	agCache.asS = ((unsigned* short*)&buffer2);
	274	}
	275	if (pftmp->fieldType==17){
	276	agCache.asD = ((unsigned* short*)&buffer2);
	277	}
[60]	278	#endif
[80]	279	break;
	280	case 3:
	281	buffer4[3]= 0;
	282	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	283	(*myPtrs->offsetV9Ptr)++;
	284	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	285	(*myPtrs->offsetV9Ptr)++;
	286	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	287	(*myPtrs->offsetV9Ptr)++;
	288	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue
	289	== ((unsigned* long*)&buffer4))
	290	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	291	/ aggregation /
	292	/ end aggregation /
	293	if (pftmp->fieldType==70){
	294	isMplsFlow = 1;
	295	}
	296	break;
	297	case 4:
	298	buffer4[3]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	299	(*myPtrs->offsetV9Ptr)++;
	300	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	301	(*myPtrs->offsetV9Ptr)++;
	302	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	303	(*myPtrs->offsetV9Ptr)++;
	304	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	305	(*myPtrs->offsetV9Ptr)++;
	306	/ FIXME : here , add a check on the field type /
	307	if ((pftmp->fieldType==8)\|\|(pftmp->fieldType==12)
	308	\|\|(pftmp->fieldType==15)\|\|(pftmp->fieldType==18)){
	309	if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue)
	310	== (((unsigned* long)&buffer4))>>(32-((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->mask)<<(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) )
	311	{
	312	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	313	}
	314	}
	315	if ((pftmp->fieldType==10)\|\|(pftmp->fieldType==14)){
[85]	316	if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue)
	317	== ((unsigned short)((unsigned* long*)&buffer4)))
[80]	318	{
	319	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	320	}
	321	}
[86]	322	if ((pftmp->fieldType==16)\|\|(pftmp->fieldType==17)){
	323	if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue)
	324	== ((unsigned short)((unsigned* long*)&buffer4)))
	325	{
	326	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	327	}
	328	}
[80]	329	if (pftmp->fieldType==1){
	330	agCache.bytes = ((unsigned* long*)&buffer4);
	331	if (
	332	((unsigned long)((((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue) + ( (((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue)*10/100))
	333	>= (((unsigned* long*)&buffer4)))
	334	&&
	335	( (unsigned long)((((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue) - ( (((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue)*10/100))
	336	<= (((unsigned* long*)&buffer4)) )
	337	)
	338	{
	339	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	340	}
	341	}
[59]	342	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[85]	343	if (pftmp->fieldType==10){
	344	agCache.inputSnmp = (unsigned short)((unsigned* long*)&buffer4);
	345	}
	346	if (pftmp->fieldType==14){
	347	agCache.outputSnmp = (unsigned short)((unsigned* long*)&buffer4);
	348	}
[80]	349	if ((pftmp->fieldType==8)){
	350	bool = 1; / very important, test if we have an IPv4 flow for Agg /
	351	agCache.v4AdS = ((unsigned* long*)&buffer4);
	352	}
	353	if ((pftmp->fieldType==12)){
	354	agCache.v4AdD = ((unsigned* long*)&buffer4);
	355	}
	356	if (pftmp->fieldType==1){
	357	agCache.bytes = ((unsigned* long*)&buffer4);
	358	}
	359	if (pftmp->fieldType==2){
	360	agCache.pkts = ((unsigned* long*)&buffer4);
	361	}
[22]	362	#endif
[86]	363	#ifdef ASACC
	364	if (pftmp->fieldType==16){
	365	agCache.asS = (unsigned short)((unsigned* long*)&buffer4);
	366	}
	367	if (pftmp->fieldType==17){
	368	agCache.asD = (unsigned short)((unsigned* long*)&buffer4);
	369	}
	370	#endif
[80]	371	break;
	372	case 16:
[95]	373	if ((pftmp->fieldType==27)\|\|(pftmp->fieldType==28)){
	374	isIPv6 = 1;
	375	for (i=0; i<4; i++) {
	376	buffer4[3]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	377	(*myPtrs->offsetV9Ptr)++;
	378	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	379	(*myPtrs->offsetV9Ptr)++;
	380	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	381	(*myPtrs->offsetV9Ptr)++;
	382	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	383	(*myPtrs->offsetV9Ptr)++;
	384	if (1==moreIsNecessary){
	385	switch(i){
	386	case 0:
	387	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 32){
	388	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	389	==
	390	(((unsigned* long)&buffer4))>>(32-((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->mask)<<(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)
	391	)
	392	{
	393	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	394	moreIsNecessary = 0;
	395	} else {
	396	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
[80]	397	moreIsNecessary = 0;
[95]	398	}
	399	} else {
	400	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	401	==
	402	(((unsigned* long*)&buffer4))
	403	)
	404	{
	405	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1;
	406	} else {
	407	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
	408	moreIsNecessary = 0;
	409	}
[80]	410	}
[95]	411	break;
	412	case 1:
	413	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 64){
	414	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	415	==
	416	(((unsigned* long)&buffer4))>>(64-((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->mask)<<(64-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)
	417	)
	418	{
	419	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	420	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	421	moreIsNecessary = 0;
	422	} else {
	423	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
[80]	424	moreIsNecessary = 0;
[95]	425	}
	426	} else {
	427	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	428	==
	429	(((unsigned* long*)&buffer4))
	430	)
	431	{
	432	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	433	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	434	} else {
	435	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
	436	moreIsNecessary = 0;
	437	}
[80]	438	}
[95]	439	break;
	440	case 2:
	441	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 96){
	442	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	443	==
	444	(((unsigned* long)&buffer4))>>(96-((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->mask)<<(96-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)
	445	)
	446	{
	447	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	448	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	449	moreIsNecessary = 0;
	450	} else {
	451	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
[80]	452	moreIsNecessary = 0;
[95]	453	}
	454	} else {
	455	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	456	==
	457	(((unsigned* long*)&buffer4))
	458	)
	459	{
	460	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	461	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	462	} else {
	463	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
	464	moreIsNecessary = 0;
	465	}
[80]	466	}
[95]	467	break;
	468	case 3:
	469	if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 128){
	470	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	471	==
	472	(((unsigned* long)&buffer4))>>(128-((RuleDefPtr)((myPtrs->rulesAddressPtr+pos)))->value->mask)<<(128-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)
	473	)
	474	{
	475	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	476	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	477	} else {
	478	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
[80]	479	moreIsNecessary = 0;
[95]	480	}
	481	} else {
	482	if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i])
	483	==
	484	(((unsigned* long*)&buffer4))
	485	)
	486	{
	487	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check =
	488	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1;
	489	} else {
	490	((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0;
	491	moreIsNecessary = 0;
	492	}
[80]	493	}
[95]	494	break;
	495	default:
	496	break;
	497	} / end of switch(i) /
	498	} / end of if moreIsNecessary /
	499	#if defined IPV6AGGIDSNMP
	500	if ((pftmp->fieldType==27)){
	501	agCache.tabAdd6S[i] = ((unsigned* long*)&buffer4);
	502	} else if ((pftmp->fieldType==28)){
	503	agCache.tabAdd6D[i] = ((unsigned* long*)&buffer4);
	504	}
	505	#endif
	506	}
	507	moreIsNecessary = 1;
	508	/ aggregation for IPv6 flows /
	509
	510	/ end aggregation /
	511	} / end of : if ((pftmp->fieldType==27)\|\|(pftmp->fieldType==28)){ /
[80]	512	break;
	513	default:
	514	syslog(LOG_INFO, "Field size not known: %d\n", field_size);
	515	for (i=0; i<field_size; i++){
	516	(*myPtrs->offsetV9Ptr)++;
	517	}
	518	break;
	519	}
	520	break;
	521	default:
	522	syslog(LOG_INFO, "Operator not known: %d\n",
	523	(int)(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->operator));
	524	break;
	525	}
	526	j++;
[94]	527	pos = (pftmp->fieldType)*MAX_RULES_PER_FIELD+j;
[80]	528	} / end while myPtrs->rulesAddressPtr /
	529	} else {
	530	/*
	531	* no rule within this field type, but we must read the value
	532	*/
	533	switch (field_size) {
	534	case 1:
	535	buffer1 = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	536	(*myPtrs->offsetV9Ptr)++;
[59]	537	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	538	if ((pftmp->fieldType==9)\|\|(pftmp->fieldType==29)){
	539	agCache.maskS = ((unsigned* char*)&buffer1);
	540	}
	541	if ((pftmp->fieldType==13)\|\|(pftmp->fieldType==30)){
	542	agCache.maskD = ((unsigned* char*)&buffer1);
	543	}
	544	if (pftmp->fieldType==60){
	545	agCache.ipProt = ((unsigned* char*)&buffer1);
	546	}
	547	if (pftmp->fieldType==4){
	548	agCache.tProt = ((unsigned* char*)&buffer1);
	549	}
	550	if (pftmp->fieldType==61){
	551	agCache.sens = ((unsigned* char*)&buffer1);
	552	}
	553	if (pftmp->fieldType==5){
	554	agCache.dscp = ((unsigned* char*)&buffer1);
	555	}
[22]	556	#endif
[80]	557	break;
	558	case 2:
	559	buffer2[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	560	(*myPtrs->offsetV9Ptr)++;
	561	buffer2[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	562	(*myPtrs->offsetV9Ptr)++;
[114]	563	if (pftmp->fieldType==7){
	564	agCache.sPort = ((unsigned* short*)&buffer2);
	565	}
	566	if (pftmp->fieldType==11){
	567	agCache.dPort = ((unsigned* short*)&buffer2);
	568	}
[59]	569	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	570	if (pftmp->fieldType==10){
	571	agCache.inputSnmp = ((unsigned* short*)&buffer2);
	572	}
	573	if (pftmp->fieldType==14){
	574	agCache.outputSnmp = ((unsigned* short*)&buffer2);
	575	}
[22]	576	#endif
[60]	577	#ifdef ASACC
[80]	578	if (pftmp->fieldType==16){
	579	agCache.asS = ((unsigned* short*)&buffer2);
	580	}
	581	if (pftmp->fieldType==17){
	582	agCache.asD = ((unsigned* short*)&buffer2);
	583	}
[60]	584	#endif
[80]	585	break;
	586	case 3:
	587	buffer4[3]= 0;
	588	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	589	(*myPtrs->offsetV9Ptr)++;
	590	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	591	(*myPtrs->offsetV9Ptr)++;
	592	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	593	(*myPtrs->offsetV9Ptr)++;
	594	/ aggregation /
	595	/ end aggregation /
	596	if (pftmp->fieldType==70){
	597	isMplsFlow = 1;
	598	}
	599	break;
	600	case 4:
	601	buffer4[3]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	602	(*myPtrs->offsetV9Ptr)++;
	603	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	604	(*myPtrs->offsetV9Ptr)++;
	605	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	606	(*myPtrs->offsetV9Ptr)++;
	607	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
	608	(*myPtrs->offsetV9Ptr)++;
[59]	609	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[85]	610	if (pftmp->fieldType==10){
	611	agCache.inputSnmp = (unsigned short)((unsigned* long*)&buffer4);
	612	}
	613	if (pftmp->fieldType==14){
	614	agCache.outputSnmp = (unsigned short)((unsigned* long*)&buffer4);
	615	}
[80]	616	if ((pftmp->fieldType==8)){
	617	bool = 1;
	618	agCache.v4AdS = ((unsigned* long*)&buffer4);
	619	} else if ((pftmp->fieldType==12)){
	620	agCache.v4AdD = ((unsigned* long*)&buffer4);
	621	} else if (pftmp->fieldType==1){
	622	agCache.bytes = ((unsigned* long*)&buffer4);
	623	} else if (pftmp->fieldType==2){
	624	agCache.pkts = ((unsigned* long*)&buffer4);
	625	}
[22]	626	#endif
[86]	627	#ifdef ASACC
	628	if (pftmp->fieldType==16){
	629	agCache.asS = (unsigned short)((unsigned* long*)&buffer4);
	630	}
	631	if (pftmp->fieldType==17){
	632	agCache.asD = (unsigned short)((unsigned* long*)&buffer4);
	633	}
	634	#endif
[80]	635	break;
	636	case 16:
[95]	637	if ((pftmp->fieldType==27)\|\|(pftmp->fieldType==28)){
	638	isIPv6 = 1;
	639	}
[80]	640	for (i=0; i<4; i++) {
[95]	641	buffer4[3]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
[80]	642	(*myPtrs->offsetV9Ptr)++;
[95]	643	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
[80]	644	(*myPtrs->offsetV9Ptr)++;
[95]	645	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
[80]	646	(*myPtrs->offsetV9Ptr)++;
[95]	647	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr));
[80]	648	(*myPtrs->offsetV9Ptr)++;
[95]	649	#if defined IPV6AGGIDSNMP
	650	if ((pftmp->fieldType==27)){
	651	agCache.tabAdd6S[i] = ((unsigned* long*)&buffer4);
	652	} else if ((pftmp->fieldType==28)){
	653	agCache.tabAdd6D[i] = ((unsigned* long*)&buffer4);
	654	}
	655	#endif
[80]	656	}
	657	break;
	658	default:
	659	syslog(LOG_INFO,"UNKNOWN FIELDS LENGTH: %d ", field_size);
	660	for (i=0; i<field_size; i++){
	661	(*myPtrs->offsetV9Ptr)++;
	662	}
	663	}
	664	} / end if one cache table line existence /
	665	if (cpt==tmp->fieldCount) {
	666	/*
	667	* end of one flow (not the flowset)
	668	*/
[113]	669	myPtrs->currentMIB->realFlowNb += 1;
[111]	670	#ifdef DEBUG
	671	flowCpt++;
	672	fprintf(stderr," F%d ", flowCpt);
	673	#endif
[80]	674	/ put aggregation cache information to IPv4 Prefixes table /
	675	/ Aggregation mode must be enable in ./configure options /
	676	/ first we must know if the address belong to our prefix /
	677	/*
	678	* AS ACCOUNTING
	679	*/
[60]	680	#if defined(ASACC) && defined(IPV4AGGIDSNMP)
[80]	681	if ( (bool == 1) && (isMplsFlow == 0) ){
	682	asKey.as = agCache.asS;
	683	asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp);
	684	if (asres != NULL) {
[86]	685	if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) {
	686	#if defined(MULTISAMPLING)
	687	if (myPtrs->currentRouterPtr->sampled != asres->sampling ){
	688	/ OUT ("traffic from the AS") /
	689	asres->bytesNbOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling;
	690	asres->pktsNbOUT += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling;
	691	}else{
	692	asres->bytesNbOUT += agCache.bytes;
	693	asres->pktsNbOUT += agCache.pkts;
	694	(asres->flowNbOUT)++;
	695	}
	696	#else
[80]	697	if (myPtrs->currentRouterPtr->sampled != 0 ){
	698	/ OUT ("traffic from the AS") /
	699	asres->bytesNbOUT += agCache.bytes;
	700	asres->pktsNbOUT += agCache.pkts;
	701	(asres->flowNbOUT)++;
	702	}
	703	if (asres->sampling == 0
	704	&& myPtrs->currentRouterPtr->sampled != 0){
	705	asres->sampling = myPtrs->currentRouterPtr->sampled;
	706	}
[86]	707	#endif
[80]	708	asres = NULL;
	709	asKey.as = agCache.asD;
	710	asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp);
	711	if (asres!=NULL){
[86]	712	#if defined(MULTISAMPLING)
	713	if (myPtrs->currentRouterPtr->sampled != asres->sampling ){
	714	/ IN ("traffic to the AS") /
	715	asres->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling;
	716	asres->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling;
	717	}else{
	718	asres->bytesNbIN += agCache.bytes;
	719	asres->pktsNbIN += agCache.pkts;
	720	(asres->flowNbIN)++;
	721	}
	722	#else
[80]	723	if (myPtrs->currentRouterPtr->sampled != 0 ){
	724	/ IN ("traffic to the AS") /
	725	asres->bytesNbIN += agCache.bytes;
	726	asres->pktsNbIN += agCache.pkts;
	727	(asres->flowNbIN)++;
	728	}
	729	if (asres->sampling == 0
	730	&& myPtrs->currentRouterPtr->sampled != 0){
	731	asres->sampling = myPtrs->currentRouterPtr->sampled;
	732	}
[86]	733	#endif
[80]	734	asres = NULL;
	735	}
	736	}
	737	} else {
	738	asres = NULL;
	739	asKey.as = agCache.asD;
	740	asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp);
	741	if (asres!=NULL){
	742	if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) {
[86]	743	#if defined(MULTISAMPLING)
	744	if (myPtrs->currentRouterPtr->sampled != asres->sampling ){
	745	/ IN ("traffic to the AS") /
	746	asres->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling;
	747	asres->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling;
	748	}else{
	749	asres->bytesNbIN += agCache.bytes;
	750	asres->pktsNbIN += agCache.pkts;
	751	(asres->flowNbIN)++;
	752	}
	753	#else
[80]	754	if (myPtrs->currentRouterPtr->sampled != 0 ){
	755	/ IN ("traffic to the AS") /
	756	asres->bytesNbIN += agCache.bytes;
	757	asres->pktsNbIN += agCache.pkts;
	758	(asres->flowNbIN)++;
	759	}
	760	if (asres->sampling == 0
	761	&& myPtrs->currentRouterPtr->sampled != 0){
	762	asres->sampling = myPtrs->currentRouterPtr->sampled;
	763	}
[86]	764	#endif
[80]	765	}
	766	}
	767	}
	768	}
[60]	769	#endif
[114]	770	if ( (bool == 1) && (isMplsFlow == 0) ){
	771	/ Update the information db (aka RenetcolMIB) /
	772	myPtrs->currentMIB->ipv4Bytes += agCache.bytes;
	773	myPtrs->currentMIB->ipv4Pckts += agCache.pkts;
	774	myPtrs->currentMIB->ipv4Flow += 1;
	775	switch (agCache.tProt){
	776	case 1:
	777	myPtrs->currentMIB->ipv4IcmpFlowNb += 1;
	778	myPtrs->currentMIB->ipv4IcmpBytesNb += agCache.bytes;
	779	myPtrs->currentMIB->ipv4IcmpPktsNb += agCache.pkts;
	780	break;
	781	case 6:
	782	myPtrs->currentMIB->ipv4TCPFlowNb += 1;
	783	myPtrs->currentMIB->ipv4TCPBytesNb += agCache.bytes;
	784	myPtrs->currentMIB->ipv4TCPPktsNb += agCache.pkts;
	785	break;
	786	case 17:
	787	myPtrs->currentMIB->ipv4UDPFlowNb += 1;
	788	myPtrs->currentMIB->ipv4UDPBytesNb += agCache.bytes;
	789	myPtrs->currentMIB->ipv4UDPPktsNb += agCache.pkts;
	790	break;
	791	default:
	792	myPtrs->currentMIB->ipv4OthersFlowNb += 1;
	793	myPtrs->currentMIB->ipv4OthersBytesNb += agCache.bytes;
	794	myPtrs->currentMIB->ipv4OthersPktsNb += agCache.pkts;
	795	break;
	796	}
	797	if (agCache.pkts==1){
	798	myPtrs->currentMIB->ipv4FlowSizePcktsE1 += 1;
	799	} else if (agCache.pkts<10) {
	800	myPtrs->currentMIB->ipv4FlowSizePcktsLT10 += 1;
	801	} else if (agCache.pkts<100) {
	802	myPtrs->currentMIB->ipv4FlowSizePcktsLT100 += 1;
	803	} else if (agCache.pkts<1000) {
	804	myPtrs->currentMIB->ipv4FlowSizePcktsLT1k += 1;
	805	} else if (agCache.pkts<10000) {
	806	myPtrs->currentMIB->ipv4FlowSizePcktsLT10k += 1;
	807	} else if (agCache.pkts>=10000) {
	808	myPtrs->currentMIB->ipv4FlowSizePcktsMT10k += 1;
	809	}
	810	if (agCache.bytes<50){
	811	myPtrs->currentMIB->ipv4FlowSizeBytesLT50 += 1;
	812	} else if (agCache.bytes<100) {
	813	myPtrs->currentMIB->ipv4FlowSizeBytesLT100 += 1;
	814	} else if (agCache.bytes<1000) {
	815	myPtrs->currentMIB->ipv4FlowSizeBytesLT1k += 1;
	816	} else if (agCache.bytes<10000) {
	817	myPtrs->currentMIB->ipv4FlowSizeBytesLT10k += 1;
	818	} else if (agCache.bytes<100000) {
	819	myPtrs->currentMIB->ipv4FlowSizeBytesLT100k += 1;
	820	} else if (agCache.bytes<1000000) {
	821	myPtrs->currentMIB->ipv4FlowSizeBytesLT1M += 1;
	822	} else if (agCache.bytes<10000000) {
	823	myPtrs->currentMIB->ipv4FlowSizeBytesLT10M += 1;
	824	} else if (agCache.bytes<100000000) {
	825	myPtrs->currentMIB->ipv4FlowSizeBytesLT100M += 1;
	826	} else if (agCache.bytes>=100000000) {
	827	myPtrs->currentMIB->ipv4FlowSizeBytesMT100M += 1;
	828	}
	829	switch (agCache.dPort){
	830	case 53:
	831	myPtrs->currentMIB->ipv4DNSFlowNb += 1;
	832	myPtrs->currentMIB->ipv4DNSBytesNb += agCache.bytes;
	833	myPtrs->currentMIB->ipv4DNSPcktsNb += agCache.pkts;
	834	break;
	835	case 80:
	836	myPtrs->currentMIB->ipv4WebFlowNb += 1;
	837	myPtrs->currentMIB->ipv4WebBytesNb += agCache.bytes;
	838	myPtrs->currentMIB->ipv4WebPcktsNb += agCache.pkts;
	839	break;
	840	default:
	841	myPtrs->currentMIB->ipv4OthersApFlowNb += 1;
	842	myPtrs->currentMIB->ipv4OthersApBytesNb += agCache.bytes;
	843	myPtrs->currentMIB->ipv4OthersApPcktsNb += agCache.pkts;
	844	break;
	845	}
	846	/ end of mib update /
	847	}
[80]	848	/*
	849	* PREFIX &/or MATRIX ACCOUNTING
	850	*/
[59]	851	#if defined(IPV4AGGIDR) \|\| defined(IPV4AGGIDSNMP)
[80]	852	if ( (bool == 1) && (isMplsFlow == 0) ){
[122]	853	/ prefixKey.beginning = agCache.v4AdS>>(32-agCache.maskS)<<(32-agCache.maskS); /
	854	prefixKey.beginning = agCache.v4AdS;
[80]	855	res = bsearch(&prefixKey, V4PTab, nbPV4,
	856	sizeof(struct PrefixV4), prefGlobalCmp);
	857	if (res!=NULL){
[84]	858	/ WE HAVE FOUND SOURCE ADDRESS IN OUR LIST /
[80]	859	if (res->hasSubnet == 1) {
	860	resSub = NULL;
	861	resSub = bsearch(&prefixKey, V4STab, nbSV4,
	862	sizeof(struct PrefixV4), prefGlobalCmp);
	863	if (resSub != NULL) {
	864	res = resSub;
	865	resSub = NULL;
	866	}
	867	}
[84]	868	#ifdef DEBUG
[85]	869	fprintf(stderr,"S %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu SNMPin(hu) %hu\n",
[84]	870	(agCache.v4AdS>>24),
	871	(agCache.v4AdS<<8>>24),
	872	(agCache.v4AdS<<16>>24),
	873	(agCache.v4AdS<<24>>24),
	874	(agCache.maskS),
	875	(agCache.v4AdD>>24),
	876	(agCache.v4AdD<<8>>24),
	877	(agCache.v4AdD<<16>>24),
	878	(agCache.v4AdD<<24>>24),
	879	(agCache.maskD),
	880	myPtrs->currentRouterPtr->sampled,
[85]	881	res->sampling,
	882	agCache.inputSnmp);
[84]	883	#endif
[59]	884	#if defined(IPV4AGGIDR)
[80]	885	if ( myPtrs->routersID[res->routerNb] == agCache.routerAd ) {
[59]	886	#elif defined(IPV4AGGIDSNMP)
[80]	887	if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) {
[59]	888	#endif
[83]	889	/ OUT ("traffic from the prefix/subnet") /
	890	#if defined(MULTISAMPLING)
	891	if (myPtrs->currentRouterPtr->sampled != res->sampling ){
	892	res->bytesNbOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	893	res->pktsNbOUT += agCache.pkts*myPtrs->currentRouterPtr->sampled/res->sampling;
	894	/ (res->flowNbOUT)++; FIXME : FIND SOMETHING/
[93]	895	if (agCache.dscp>>2 == FIRST_CoS) {
	896	res->firstCoSOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	897	} else if (agCache.dscp>>2 == SECOND_CoS) {
	898	res->secondCoSOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	899	} else if (agCache.dscp>>2 == THIRD_CoS) {
	900	res->thirdCoSOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	901	} else {
	902	res->fourthCoSOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	903	}
[83]	904	}else{
	905	res->bytesNbOUT += agCache.bytes;
	906	res->pktsNbOUT += agCache.pkts;
[93]	907	(res->flowNbOUT)++;
	908	if (agCache.dscp>>2 == FIRST_CoS) {
	909	res->firstCoSOUT += agCache.bytes;
	910	} else if (agCache.dscp>>2 == SECOND_CoS) {
	911	res->secondCoSOUT += agCache.bytes;
	912	} else if (agCache.dscp>>2 == THIRD_CoS) {
	913	res->thirdCoSOUT += agCache.bytes;
	914	} else {
	915	res->fourthCoSOUT += agCache.bytes;
	916	}
[83]	917	}
	918	#else
[80]	919	if (myPtrs->currentRouterPtr->sampled != 0 ){
	920	res->bytesNbOUT += agCache.bytes;
	921	res->pktsNbOUT += agCache.pkts;
	922	(res->flowNbOUT)++;
[93]	923	if (agCache.dscp>>2 == FIRST_CoS) {
	924	res->firstCoSOUT += agCache.bytes;
	925	} else if (agCache.dscp>>2 == SECOND_CoS) {
	926	res->secondCoSOUT += agCache.bytes;
	927	} else if (agCache.dscp>>2 == THIRD_CoS) {
	928	res->thirdCoSOUT += agCache.bytes;
	929	} else {
	930	res->fourthCoSOUT += agCache.bytes;
	931	}
[80]	932	}
	933	if (res->sampling == 0
	934	&& myPtrs->currentRouterPtr->sampled != 0){
	935	res->sampling = myPtrs->currentRouterPtr->sampled;
	936	}
[83]	937	#endif
[60]	938	#if defined(IPV4AGGIDSNMP)
[122]	939	/ prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD);/
	940	prefixKey.beginning = agCache.v4AdD;
[80]	941	res3 = bsearch(&prefixKey, V4PTab, nbPV4,
	942	sizeof(struct PrefixV4), prefGlobalCmp);
	943	if (res3!=NULL){
	944	/ res is supernet or subnet ? /
	945	if (res3->hasSubnet == 1) {
	946	resSub = NULL;
	947	resSub = bsearch(&prefixKey, V4STab, nbSV4,
	948	sizeof(struct PrefixV4), prefGlobalCmp);
	949	if (resSub != NULL) {
	950	res3 = resSub;
	951	resSub = NULL;
	952	}
	953	}
[84]	954	#ifdef DEBUG
[85]	955	fprintf(stderr,"S&D %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu SNMPin %hu\n",
[84]	956	(agCache.v4AdS>>24),
	957	(agCache.v4AdS<<8>>24),
	958	(agCache.v4AdS<<16>>24),
	959	(agCache.v4AdS<<24>>24),
	960	(agCache.maskS),
	961	(agCache.v4AdD>>24),
	962	(agCache.v4AdD<<8>>24),
	963	(agCache.v4AdD<<16>>24),
	964	(agCache.v4AdD<<24>>24),
	965	(agCache.maskD),
	966	myPtrs->currentRouterPtr->sampled,
[85]	967	res3->sampling,
	968	agCache.inputSnmp);
[84]	969	#endif
[83]	970	#if defined(MULTISAMPLING)
	971	if (myPtrs->currentRouterPtr->sampled != res3->sampling ){
	972	res3->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling;
	973	res3->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/res3->sampling;
	974	/ (res3->flowNbIN)++; FIXME : FIND SOMETHING /
[93]	975	if (agCache.dscp>>2 == FIRST_CoS) {
	976	res3->firstCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling;
	977	} else if (agCache.dscp>>2 == SECOND_CoS) {
	978	res3->secondCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling;
	979	} else if (agCache.dscp>>2 == THIRD_CoS) {
	980	res3->thirdCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling;
	981	} else {
	982	res3->fourthCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling;
	983	}
[83]	984	}else{
	985	res3->bytesNbIN += agCache.bytes;
	986	res3->pktsNbIN += agCache.pkts;
	987	(res3->flowNbIN)++;
[93]	988	if (agCache.dscp>>2 == FIRST_CoS) {
	989	res3->firstCoSIN += agCache.bytes;
	990	} else if (agCache.dscp>>2 == SECOND_CoS) {
	991	res3->secondCoSIN += agCache.bytes;
	992	} else if (agCache.dscp>>2 == THIRD_CoS) {
	993	res3->thirdCoSIN += agCache.bytes;
	994	} else {
	995	res3->fourthCoSIN += agCache.bytes;
	996	}
[83]	997	}
	998	#else
[121]	999
[80]	1000	if (myPtrs->currentRouterPtr->sampled != 0 ){
	1001	/ IN ("traffic to the prefix/subnet") /
	1002	res3->bytesNbIN += agCache.bytes;
	1003	res3->pktsNbIN += agCache.pkts;
	1004	(res3->flowNbIN)++;
[93]	1005	if (agCache.dscp>>2 == FIRST_CoS) {
	1006	res3->firstCoSIN += agCache.bytes;
	1007	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1008	res3->secondCoSIN += agCache.bytes;
	1009	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1010	res3->thirdCoSIN += agCache.bytes;
	1011	} else {
	1012	res3->fourthCoSIN += agCache.bytes;
	1013	}
[80]	1014	}
	1015	if (res3->sampling == 0
	1016	&& myPtrs->currentRouterPtr->sampled != 0){
	1017	res3->sampling = myPtrs->currentRouterPtr->sampled;
	1018	}
[83]	1019	#endif
[80]	1020	}
[60]	1021	#endif
[59]	1022	#if defined(MATRIX) && defined(IPV4AGGIDR)
[80]	1023	/ inter-pop matrix Accounting /
[122]	1024	/ prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD);/
	1025	prefixKey.beginning = agCache.v4AdD;
[80]	1026	res2 = bsearch(&prefixKey, V4PTab, nbPV4,
	1027	sizeof(struct PrefixV4), prefGlobalCmp);
[121]	1028	if (res2!=NULL){
	1029	#if defined(MULTISAMPLING)
	1030	if (myPtrs->currentRouterPtr->sampled != res2->sampling ){
	1031	((struct POP *)((myPtrs->matrixPOP)
	1032	+((res->routerNb)*ROUTER_INDEX_MAX)
	1033	+((res2->routerNb))))->pktsNb += agCache.pkts*myPtrs->currentRouterPtr->sampled/res2->sampling;
	1034	((struct POP *)((myPtrs->matrixPOP)
	1035	+((res->routerNb)*ROUTER_INDEX_MAX)
	1036	+((res2->routerNb))))->bytesNb += agCache.bytes*myPtrs->currentRouterPtr->sampled/res2->sampling;
	1037	((struct POP *)((myPtrs->matrixPOP)
	1038	+((res->routerNb)*ROUTER_INDEX_MAX)
	1039	+((res2->routerNb))))->flowNb++;
	1040	} else {
	1041	((struct POP *)((myPtrs->matrixPOP)
	1042	+((res->routerNb)*ROUTER_INDEX_MAX)
	1043	+((res2->routerNb))))->pktsNb += agCache.pkts;
	1044	((struct POP *)((myPtrs->matrixPOP)
	1045	+((res->routerNb)*ROUTER_INDEX_MAX)
	1046	+((res2->routerNb))))->bytesNb += agCache.bytes;
	1047	((struct POP *)((myPtrs->matrixPOP)
	1048	+((res->routerNb)*ROUTER_INDEX_MAX)
	1049	+((res2->routerNb))))->flowNb++;
	1050	}
	1051	#else
[80]	1052	((struct POP *)((myPtrs->matrixPOP)
	1053	+((res->routerNb)*ROUTER_INDEX_MAX)
	1054	+((res2->routerNb))))->pktsNb += agCache.pkts;
	1055	((struct POP *)((myPtrs->matrixPOP)
	1056	+((res->routerNb)*ROUTER_INDEX_MAX)
	1057	+((res2->routerNb))))->bytesNb += agCache.bytes;
	1058	((struct POP *)((myPtrs->matrixPOP)
	1059	+((res->routerNb)*ROUTER_INDEX_MAX)
	1060	+((res2->routerNb))))->flowNb++;
[121]	1061	#endif
	1062	} else {
	1063	/ here we'll make the choice that in multisampling mode,*
[124]	1064	* the virtual POP that represent the reste of world will be
	1065	* recorded in 1:10 packets mode */
[121]	1066	#if defined(MULTISAMPLING)
[80]	1067	(
	1068	((struct POP *)(myPtrs->matrixPOP)
	1069	+((res->routerNb)*ROUTER_INDEX_MAX)
[121]	1070	+((ROUTER_INDEX_MAX-1))))->pktsNb += agCache.pkts*myPtrs->currentRouterPtr->sampled/10;
	1071	(
	1072	((struct POP *)(myPtrs->matrixPOP)
	1073	+((res->routerNb)*ROUTER_INDEX_MAX)
	1074	+((ROUTER_INDEX_MAX-1))))->bytesNb += agCache.bytes*myPtrs->currentRouterPtr->sampled/10;
	1075	(
	1076	((struct POP *)(myPtrs->matrixPOP)
	1077	+((res->routerNb)*ROUTER_INDEX_MAX)
	1078	+((ROUTER_INDEX_MAX-1))))->flowNb++;
	1079	#else
	1080	(
	1081	((struct POP *)(myPtrs->matrixPOP)
	1082	+((res->routerNb)*ROUTER_INDEX_MAX)
[80]	1083	+((ROUTER_INDEX_MAX-1))))->pktsNb += agCache.pkts;
	1084	(
	1085	((struct POP *)(myPtrs->matrixPOP)
	1086	+((res->routerNb)*ROUTER_INDEX_MAX)
	1087	+((ROUTER_INDEX_MAX-1))))->bytesNb += agCache.bytes;
	1088	(
	1089	((struct POP *)(myPtrs->matrixPOP)
	1090	+((res->routerNb)*ROUTER_INDEX_MAX)
[121]	1091	+((ROUTER_INDEX_MAX-1))))->flowNb++;
	1092	#endif
[80]	1093	}
	1094	/ end interpop matrix accounting /
[59]	1095	#endif / matrix /
[80]	1096	} else {
	1097	/ doublon or bad reference in prefix list /
	1098	#if defined(IPV4AGGIDR)
	1099	}
	1100	#elif defined(IPV4AGGIDSNMP)
	1101	}
	1102	#endif
[84]	1103	} else { / SOURCE ADDRESS DOESN'T IN OUR LIST /
[122]	1104	/ prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD); /
	1105	prefixKey.beginning = agCache.v4AdD;
[80]	1106	res = bsearch(&prefixKey, V4PTab, nbPV4,
	1107	sizeof(struct PrefixV4), prefGlobalCmp);
	1108	if (res!=NULL){
[84]	1109	/ DESTINATION ADDRESS IS IN OUR LIST /
[80]	1110	if (res->hasSubnet == 1) {
	1111	resSub = NULL;
	1112	resSub = bsearch(&prefixKey, V4STab, nbSV4,
	1113	sizeof(struct PrefixV4), prefGlobalCmp);
	1114	if (resSub != NULL) {
	1115	res = resSub;
	1116	resSub = NULL;
	1117	}
	1118	}
[84]	1119	#ifdef DEBUG
[85]	1120	fprintf(stderr,"D %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu R@ %lu.%lu.%lu.%lu SNMPin %hu\n",
[84]	1121	(agCache.v4AdS>>24),
	1122	(agCache.v4AdS<<8>>24),
	1123	(agCache.v4AdS<<16>>24),
	1124	(agCache.v4AdS<<24>>24),
	1125	(agCache.maskS),
	1126	(agCache.v4AdD>>24),
	1127	(agCache.v4AdD<<8>>24),
	1128	(agCache.v4AdD<<16>>24),
	1129	(agCache.v4AdD<<24>>24),
	1130	(agCache.maskD),
	1131	myPtrs->currentRouterPtr->sampled,
	1132	res->sampling,
	1133	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	1134	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	1135	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
[85]	1136	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24),
	1137	agCache.inputSnmp);
[84]	1138	#endif
[80]	1139	#if defined(IPV4AGGIDSNMP)
	1140	if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) {
[84]	1141	#if defined(MULTISAMPLING)
	1142	if (myPtrs->currentRouterPtr->sampled != res->sampling ){
	1143	res->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1144	res->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/res->sampling;
[93]	1145	if (agCache.dscp>>2 == FIRST_CoS) {
	1146	res->firstCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1147	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1148	res->secondCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1149	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1150	res->thirdCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1151	} else {
	1152	res->fourthCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1153	}
[84]	1154	}else{
	1155	res->bytesNbIN += agCache.bytes;
	1156	res->pktsNbIN += agCache.pkts;
	1157	(res->flowNbIN)++;
[93]	1158	if (agCache.dscp>>2 == FIRST_CoS) {
	1159	res->firstCoSIN += agCache.bytes;
	1160	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1161	res->secondCoSIN += agCache.bytes;
	1162	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1163	res->thirdCoSIN += agCache.bytes;
	1164	} else {
	1165	res->fourthCoSIN += agCache.bytes;
	1166	}
[84]	1167	}
	1168	#else
[80]	1169	if (myPtrs->currentRouterPtr->sampled != 0 ){
	1170	/ IN ("traffic to the prefix/subnet") /
	1171	res->bytesNbIN += agCache.bytes;
	1172	res->pktsNbIN += agCache.pkts;
	1173	(res->flowNbIN)++;
[93]	1174	if (agCache.dscp>>2 == FIRST_CoS) {
	1175	res->firstCoSIN += agCache.bytes;
	1176	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1177	res->secondCoSIN += agCache.bytes;
	1178	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1179	res->thirdCoSIN += agCache.bytes;
	1180	} else {
	1181	res->fourthCoSIN += agCache.bytes;
	1182	}
[80]	1183	}
[84]	1184	#endif
[80]	1185	}
	1186	#endif
[59]	1187	#if defined(IPV4AGGIDR)
[80]	1188	if ( myPtrs->routersID[res->routerNb] == agCache.routerAd ) {
[121]	1189	#if defined(MULTISAMPLING)
	1190	if (myPtrs->currentRouterPtr->sampled != res->sampling ){
	1191	res->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1192	res->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/res->sampling;
	1193	if (agCache.dscp>>2 == FIRST_CoS) {
	1194	res->firstCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1195	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1196	res->secondCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1197	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1198	res->thirdCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1199	} else {
	1200	res->fourthCoSIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling;
	1201	}
	1202	}else{
	1203	res->bytesNbIN += agCache.bytes;
	1204	res->pktsNbIN += agCache.pkts;
	1205	(res->flowNbIN)++;
	1206	if (agCache.dscp>>2 == FIRST_CoS) {
	1207	res->firstCoSIN += agCache.bytes;
	1208	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1209	res->secondCoSIN += agCache.bytes;
	1210	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1211	res->thirdCoSIN += agCache.bytes;
	1212	} else {
	1213	res->fourthCoSIN += agCache.bytes;
	1214	}
	1215	}
	1216	#else
[80]	1217	if (myPtrs->currentRouterPtr->sampled != 0 ){
	1218	/ IN ("traffic to the prefix") /
	1219	res->bytesNbIN += agCache.bytes;
	1220	res->pktsNbIN += agCache.pkts;
	1221	(res->flowNbIN)++;
[93]	1222	if (agCache.dscp>>2 == FIRST_CoS) {
	1223	res->firstCoSIN += agCache.bytes;
	1224	} else if (agCache.dscp>>2 == SECOND_CoS) {
	1225	res->secondCoSIN += agCache.bytes;
	1226	} else if (agCache.dscp>>2 == THIRD_CoS) {
	1227	res->thirdCoSIN += agCache.bytes;
	1228	} else {
	1229	res->fourthCoSIN += agCache.bytes;
	1230	}
[80]	1231	}
[121]	1232	#endif
[124]	1233	} else {
	1234	#if defined(MULTISAMPLING)
	1235	#if defined(MATRIX)
	1236	(
	1237	((struct POP *)(myPtrs->matrixPOP)
	1238	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1239	+((res->routerNb))))->pktsNb += agCache.pkts*myPtrs->currentRouterPtr->sampled/10;
	1240	(
	1241	((struct POP *)(myPtrs->matrixPOP)
	1242	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1243	+((res->routerNb))))->bytesNb += agCache.bytes*myPtrs->currentRouterPtr->sampled/10;
	1244	(
	1245	((struct POP *)(myPtrs->matrixPOP)
	1246	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1247	+((res->routerNb))))->flowNb++;
	1248	#endif
	1249	#else
	1250	#if defined(MATRIX)
	1251	(
	1252	((struct POP *)(myPtrs->matrixPOP)
	1253	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1254	+((res->routerNb))))->pktsNb += agCache.pkts;
	1255	(
	1256	((struct POP *)(myPtrs->matrixPOP)
	1257	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1258	+((res->routerNb))))->bytesNb += agCache.bytes;
	1259	(
	1260	((struct POP *)(myPtrs->matrixPOP)
	1261	+((ROUTER_INDEX_MAX-1)*ROUTER_INDEX_MAX)
	1262	+((res->routerNb))))->flowNb++;
	1263	#endif
	1264	#endif
[80]	1265	}
	1266	if (res->sampling == 0
	1267	&& myPtrs->currentRouterPtr->sampled != 0 ){
	1268	res->sampling = myPtrs->currentRouterPtr->sampled;
	1269	}
[84]	1270	#endif
[80]	1271	} else {
	1272	/ UNKNOW SUBNET CASE /
	1273	/ /
	1274	/ HERE : we are in the cases of the address/mask don't /
	1275	/ belong to a prefix listed in the IPv4 prefix file /
	1276	/ possibilities : /
	1277	/ - prefix not referenced but allowed to be routed /
	1278	/ - prefix not referenced but not allowed to be routed /
	1279	/ - spoofing /
[32]	1280	#ifdef PRINTUNKNOWNSUBNET
[80]	1281	fprintf(stderr, "%lu.%lu.%lu.%lu/%hu -> %lu.%lu.%lu.%lu/%hu (R:%lu.%lu.%lu.%lu) \n",
	1282	(agCache.v4AdS>>24),
	1283	(agCache.v4AdS<<8>>24),
	1284	(agCache.v4AdS<<16>>24),
	1285	(agCache.v4AdS<<24>>24),
	1286	(agCache.maskS),
	1287	(agCache.v4AdD>>24),
	1288	(agCache.v4AdD<<8>>24),
	1289	(agCache.v4AdD<<16>>24),
	1290	(agCache.v4AdD<<24>>24),
	1291	(agCache.maskD),
	1292	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	1293	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	1294	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	1295	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24)
	1296	);
[59]	1297	#endif / PRINTUNKNOWNSUBNET /
[80]	1298	}
	1299	} / end of the Destination prefix is in our list /
	1300	} / end of the prefix is in our list /
	1301	bool = 0;
[95]	1302	#endif / (IPV4AGGIDR) \|\| (IPV4AGGIDSNMP) /
[114]	1303	if ( ( isIPv6 == 1 ) && (isMplsFlow == 0) ){
[95]	1304	#ifdef IPV6LINKAGG
	1305	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1306	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1307	+(agCache.inputSnmp)))->routerIPAddress = myPtrs->currentRouterPtr->IpAddress;
[95]	1308	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1309	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
	1310	+(agCache.outputSnmp)))->routerIPAddress = myPtrs->currentRouterPtr->IpAddress;
	1311	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
	1312	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1313	+(agCache.inputSnmp)))->indexSNMP = agCache.inputSnmp;
	1314	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1315	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1316	+(agCache.outputSnmp)))->indexSNMP = agCache.outputSnmp;
	1317	/ FIXME, error or warning if (indexSNMP != agCache.outputSnmp) /
	1318	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1319	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1320	+(agCache.inputSnmp)))->hasStats = 1;
	1321	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1322	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1323	+(agCache.outputSnmp)))->hasStats = 1;
	1324	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1325	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1326	+(agCache.inputSnmp)))->bytesNbIN += agCache.bytes;
	1327	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1328	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1329	+(agCache.outputSnmp)))->bytesNbOUT += agCache.bytes;
	1330	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1331	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1332	+(agCache.inputSnmp)))->pktsNbIN += agCache.pkts;
	1333	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1334	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1335	+(agCache.outputSnmp)))->pktsNbOUT += agCache.pkts;
	1336	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1337	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1338	+(agCache.inputSnmp)))->flowNbIN++;
	1339	((struct IndexV6 *)((myPtrs->currentV6IndexTab)
[97]	1340	+((myPtrs->currentRouterPtr->ID)*MAX_INDEX_BY_ROUTER)
[96]	1341	+(agCache.outputSnmp)))->flowNbOUT++;
	1342	/ fprintf(stderr,"IPV6LINKAGG;IN;%hu;OUT;%hu;router;%lu;bytes;%lu\n", /
	1343	/ agCache.inputSnmp, /
	1344	/ agCache.outputSnmp, /
	1345	/ myPtrs->currentRouterPtr->IpAddress, /
	1346	/ agCache.bytes /
	1347	/ ); /
[114]	1348	#endif / IPV6LINKAGG /
	1349	/ Update the information db (aka RenetcolMIB) /
	1350	myPtrs->currentMIB->ipv6Bytes += agCache.bytes;
	1351	myPtrs->currentMIB->ipv6Pckts += agCache.pkts;
	1352	myPtrs->currentMIB->ipv6Flow += 1;
	1353	switch (agCache.tProt){
	1354	case 1:
	1355	myPtrs->currentMIB->ipv6IcmpFlowNb += 1;
	1356	myPtrs->currentMIB->ipv6IcmpBytesNb += agCache.bytes;
	1357	myPtrs->currentMIB->ipv6IcmpPktsNb += agCache.pkts;
	1358	break;
	1359	case 6:
	1360	myPtrs->currentMIB->ipv6TCPFlowNb += 1;
	1361	myPtrs->currentMIB->ipv6TCPBytesNb += agCache.bytes;
	1362	myPtrs->currentMIB->ipv6TCPPktsNb += agCache.pkts;
	1363	break;
	1364	case 17:
	1365	myPtrs->currentMIB->ipv6UDPFlowNb += 1;
	1366	myPtrs->currentMIB->ipv6UDPBytesNb += agCache.bytes;
	1367	myPtrs->currentMIB->ipv6UDPPktsNb += agCache.pkts;
	1368	break;
	1369	default:
	1370	myPtrs->currentMIB->ipv6OthersFlowNb += 1;
	1371	myPtrs->currentMIB->ipv6OthersBytesNb += agCache.bytes;
	1372	myPtrs->currentMIB->ipv6OthersPktsNb += agCache.pkts;
	1373	break;
	1374	}
	1375	if (agCache.pkts==1){
	1376	myPtrs->currentMIB->ipv6FlowSizePcktsE1 += 1;
	1377	} else if (agCache.pkts<10) {
	1378	myPtrs->currentMIB->ipv6FlowSizePcktsLT10 += 1;
	1379	} else if (agCache.pkts<100) {
	1380	myPtrs->currentMIB->ipv6FlowSizePcktsLT100 += 1;
	1381	} else if (agCache.pkts<1000) {
	1382	myPtrs->currentMIB->ipv6FlowSizePcktsLT1k += 1;
	1383	} else if (agCache.pkts<10000) {
	1384	myPtrs->currentMIB->ipv6FlowSizePcktsLT10k += 1;
	1385	} else if (agCache.pkts>=10000) {
	1386	myPtrs->currentMIB->ipv6FlowSizePcktsMT10k += 1;
	1387	}
	1388	if (agCache.bytes<50){
	1389	myPtrs->currentMIB->ipv6FlowSizeBytesLT50 += 1;
	1390	} else if (agCache.bytes<100) {
	1391	myPtrs->currentMIB->ipv6FlowSizeBytesLT100 += 1;
	1392	} else if (agCache.bytes<1000) {
	1393	myPtrs->currentMIB->ipv6FlowSizeBytesLT1k += 1;
	1394	} else if (agCache.bytes<10000) {
	1395	myPtrs->currentMIB->ipv6FlowSizeBytesLT10k += 1;
	1396	} else if (agCache.bytes<100000) {
	1397	myPtrs->currentMIB->ipv6FlowSizeBytesLT100k += 1;
	1398	} else if (agCache.bytes<1000000) {
	1399	myPtrs->currentMIB->ipv6FlowSizeBytesLT1M += 1;
	1400	} else if (agCache.bytes<10000000) {
	1401	myPtrs->currentMIB->ipv6FlowSizeBytesLT10M += 1;
	1402	} else if (agCache.bytes<100000000) {
	1403	myPtrs->currentMIB->ipv6FlowSizeBytesLT100M += 1;
	1404	} else if (agCache.bytes>=100000000) {
	1405	myPtrs->currentMIB->ipv6FlowSizeBytesMT100M += 1;
	1406	}
	1407	switch (agCache.dPort){
	1408	case 53:
	1409	myPtrs->currentMIB->ipv6DNSFlowNb += 1;
	1410	myPtrs->currentMIB->ipv6DNSBytesNb += agCache.bytes;
	1411	myPtrs->currentMIB->ipv6DNSPcktsNb += agCache.pkts;
	1412	break;
	1413	case 80:
	1414	myPtrs->currentMIB->ipv6WebFlowNb += 1;
	1415	myPtrs->currentMIB->ipv6WebBytesNb += agCache.bytes;
	1416	myPtrs->currentMIB->ipv6WebPcktsNb += agCache.pkts;
	1417	break;
	1418	default:
	1419	myPtrs->currentMIB->ipv6OthersApFlowNb += 1;
	1420	myPtrs->currentMIB->ipv6OthersApBytesNb += agCache.bytes;
	1421	myPtrs->currentMIB->ipv6OthersApPcktsNb += agCache.pkts;
	1422	break;
	1423	}
	1424	/ end of mib update /
	1425	isIPv6 = 0;
[95]	1426	}
[80]	1427	isMplsFlow = 0;
	1428	/*
	1429	*
	1430	* SOCKET OUTPUT TO A REMOTE CLIENT
	1431	*
	1432	* switch the rules definition (check & fieldToRecord),
	1433	* we send the flow or a part of the flow to a remote host or a file.
	1434	* In a first time (until release 0.0.7, the information was sent via
	1435	* the process renetcolSender with an IPC message queue. But, the perf
	1436	* of IPC Msg was very bad with a default system compilation.
	1437	* So, now, we send information directly from here through sockets.
	1438	*/
	1439	tmpRuleList = myPtrs->rulesListPtr;
	1440	tmpRL = myPtrs->rulesListPtr;
	1441	while (tmpRuleList){
	1442	RuleDefPtr tmpRuleDefList = tmpRuleList->def;
	1443	unsigned short check = 1;
	1444	int s=0;
	1445	secondOffset = secondOldOffset;
	1446	while (tmpRuleDefList){
	1447	check = check && tmpRuleDefList->check;
	1448	tmpRuleDefList->check = 0;
	1449	tmpRuleDefList = tmpRuleDefList->next;
	1450	}
	1451	if ( (tmpRuleList->def != NULL) && (check == 1)) {
	1452	/ msg building /
	1453	secondPftmp = tmp->lastField;
	1454	msgTextIndex = mempcpy(mempcpy(mempcpy(myMsg.text,
	1455	&tplMsgType,
	1456	sizeof(unsigned short)
	1457	),
	1458	&tmpRuleList->id,
	1459	sizeof(tmpRuleList->id)
	1460	),
	1461	&myPtrs->currentRouterPtr->IpAddress,
	1462	sizeof(unsigned long)
	1463	);
	1464	msgTextIndex = mempcpy(mempcpy(mempcpy(msgTextIndex,
	1465	&tmp->sourceId,
	1466	sizeof(unsigned long)
	1467	),
	1468	&tmp->templateFlowSetId,
	1469	sizeof(tmp->templateFlowSetId)
	1470	),
	1471	myPtrs->ptr_buffer+secondOffset,
	1472	flow_size
	1473	);
	1474	myMsg.type = 1;
	1475
[57]	1476
[80]	1477	/ NEW transfert type /
	1478	for ( ; tmpRL; tmpRL=tmpRL->next){
	1479	if (tmpRL->id == tmpRuleList->id){
	1480	s = sendMessage(tmpRL->host->sockId, myMsg.text, sizeof(myMsg.text),
	1481	tmpRL->host->hostAddressPtr);
	1482	}
	1483	}
	1484	/ FIXME : perhaps check "s" /
	1485	noEnd = 1;
	1486	secondCpt=0;
	1487	} / end if check /
	1488	tmpRuleList = tmpRuleList->next;
	1489	tmpRL = myPtrs->rulesListPtr; / ticket #11 /
	1490	secondPftmp = tmp->lastField;
	1491	} / end while tmpRuleList /
	1492	/*
	1493	* end redirection
	1494	*/
	1495	secondOffset = *myPtrs->offsetV9Ptr;
	1496	secondOldOffset = secondOffset;
	1497	pftmp = tmp->lastField;
	1498	cpt=0;
	1499	(myPtrs->currentFlowsetNumberPtr)++; /* pointer on the flows number /
	1500	if (((*myPtrs->offsetV9Ptr)-48-shift+flow_size) > data_length){
	1501	overflow = 1; / buffer index not correct /
	1502	}
	1503	} else {
	1504	/ not the flow end, progress in field list /
	1505	pftmp = pftmp->prev;
[111]	1506	}
[80]	1507	} / end of the while on one flow record /
[111]	1508
[80]	1509	while ( ((*myPtrs->offsetV9Ptr)-48-shift) < data_length ) {
	1510	(myPtrs->offsetV9Ptr)++; /* if padding /
	1511	paddingCounter++;
[111]	1512	#ifdef DEBUG
[112]	1513	fprintf(stderr,", pC: %d ", paddingCounter);
	1514	#endif
[80]	1515	if ( paddingCounter > 8 ) {
	1516	syslog(LOG_INFO,"padding too high: %d ", paddingCounter);
[112]	1517	#ifdef DEBUG
[111]	1518	fprintf(stderr,", pC: %d <--\| ", paddingCounter);
[112]	1519	#endif
[80]	1520	return (-1);
	1521	}
	1522	}
	1523	while ( (*myPtrs->offsetV9Ptr)-48-shift > data_length ) {
	1524	(myPtrs->offsetV9Ptr)--; /* crazy loop (when bug appears in template def) /
	1525	crazyCounter++;
	1526	}
[30]	1527	#ifdef DEBUG
[80]	1528	if (crazyCounter != 0){ fprintf(stderr," crazyCounter: %d ", crazyCounter); }
[112]	1529	#endif
[80]	1530	if (crazyCounter!=0) { syslog(LOG_INFO,"crazyCounter: %d ", crazyCounter);}
[112]	1531
	1532	#ifdef DEBUG
[111]	1533	fprintf(stderr,"(%hu,%hu)}", data_length, data_length+shift);
[29]	1534	#endif
[80]	1535
	1536	return (data_length+shift);
	1537	/ end new place /
[30]	1538
[80]	1539	} else {
	1540	/*
	1541	*
	1542	*
	1543	* OPTIONAL TEMPLATE
	1544	*
	1545	*
	1546	*/
	1547	if ((tmpOpt=existTplOptId(myPtrs->currentRouterPtr, myPtrs->currentHeaderV9Ptr->sourceId,
	1548	(*myPtrs->currentFlowsetIdPtr)))!=NULL) {
[113]	1549
	1550	myPtrs->currentMIB->optDataFlowSetNb += 1;
[30]	1551	#ifdef DEBUG
[80]	1552	fprintf(stderr,"<d id: %hu, lg %hu", (*myPtrs->currentFlowsetIdPtr), data_length);
[84]	1553	#endif
[80]	1554	for ( i=0; i<(tmpOpt->optionScopeLg/4); i++){
	1555	/ FIXME : today we skip the scope fields, it's bad :( /
	1556	if ((pftmp=tmpOpt->lastField)!=NULL) {
	1557	for (j=0; j<pftmp->fieldLength; j++) {
	1558	(*myPtrs->offsetV9Ptr)++;
	1559	}
	1560	pftmp = pftmp->prev;
	1561	}
	1562	}
	1563	while (pftmp != NULL) {
	1564	if (pftmp->fieldLength==1){
	1565	buffer1 = (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1566	}
	1567	if (pftmp->fieldLength==2){
	1568	buffer2[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1569	buffer2[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1570	}
	1571	if (pftmp->fieldLength==4){
	1572	buffer4[3]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1573	buffer4[2]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1574	buffer4[1]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
	1575	buffer4[0]= (myPtrs->ptr_buffer+(myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++;
[84]	1576	if (pftmp->fieldType==34\|\|pftmp->fieldType==50){
[80]	1577	if ((((unsigned* long*)&buffer4)==1)
	1578	\|\| (((unsigned* long*)&buffer4)==10)
[119]	1579	\|\| (((unsigned* long*)&buffer4)==20)
[80]	1580	\|\| (((unsigned* long*)&buffer4)==100)
	1581	\|\| (((unsigned* long*)&buffer4)==1000)) {
	1582	if (myPtrs->currentRouterPtr->sampled != ((unsigned* long*)&buffer4) ) {
[30]	1583	#ifdef DEBUGAGG
[80]	1584	fprintf(stderr,"\n SV (p) %lu != %lu (r)", ((unsigned* long*)&buffer4),
	1585	myPtrs->currentRouterPtr->sampled);
[84]	1586	#endif
[80]	1587	syslog(LOG_INFO,"Sampling value change for router : %lu.%lu.%lu.%lu, old: %lu, new: %lu",
	1588	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	1589	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	1590	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	1591	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24),
	1592	myPtrs->currentRouterPtr->sampled,
	1593	((unsigned* long*)&buffer4)
	1594	);
	1595	myPtrs->currentRouterPtr->sampled = ((unsigned* long*)&buffer4);
	1596	}
	1597	}else{
	1598	syslog(LOG_INFO,"Sampling value not standard for router : %lu.%lu.%lu.%lu, value : %lu",
	1599	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	1600	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	1601	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	1602	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24),
	1603	((unsigned* long*)&buffer4)
	1604	);
	1605	}
	1606	}
	1607	}
	1608	pftmp = pftmp->prev;
	1609	}
	1610	if ( pftmp == NULL ) {
	1611	while ((*myPtrs->offsetV9Ptr)%4 != 0) {
	1612	(*myPtrs->offsetV9Ptr)++;
[30]	1613	#ifdef DEBUG
[80]	1614	fprintf(stderr," p ");
[30]	1615	#endif
[80]	1616	}
	1617	} else {
	1618	fprintf(stderr,"PB ");
	1619	}
[29]	1620	#ifdef DEBUG
[80]	1621	fprintf(stderr,">");
[29]	1622	#endif
[113]	1623	myPtrs->currentMIB->realFlowNb += 1;
[80]	1624	return (data_length+shift);
	1625	} else {
	1626	/*
[111]	1627	* template unknown, we skip the data
[80]	1628	*/
	1629	(*myPtrs->offsetV9Ptr)+=(data_length-4);
[111]	1630	(*myPtrs->currentFlowsetNumberPtr)+= 1 ;
	1631	/ (myPtrs->currentFlowsetNumberPtr) = myPtrs->currentHeaderV9Ptr->count;/*
[29]	1632	#ifdef DEBUG
[111]	1633	fprintf(stderr, " U, r: %lu.%lu.%lu.%lu, sourceId: %lu, TID: %hu ",
[80]	1634	(myPtrs->pcktPtr->ipH->srcAdd>>24),
	1635	(myPtrs->pcktPtr->ipH->srcAdd<<8>>24),
	1636	(myPtrs->pcktPtr->ipH->srcAdd<<16>>24),
	1637	(myPtrs->pcktPtr->ipH->srcAdd<<24>>24),
	1638	myPtrs->currentHeaderV9Ptr->sourceId,
	1639	(*myPtrs->currentFlowsetIdPtr)
	1640	);
[111]	1641	fprintf(stderr,"(%hu,%hu) ", data_length, data_length+shift);
[29]	1642	#endif
[80]	1643	return (data_length+shift);
	1644	}
	1645	}
	1646	}

Note: See TracBrowser for help on using the browser.

Context Navigation

root/trunk/src/dataFlowSet.c @ 127

Download in other formats: