1 | |
---|
2 | |
---|
3 | |
---|
4 | |
---|
5 | |
---|
6 | |
---|
7 | |
---|
8 | |
---|
9 | |
---|
10 | |
---|
11 | |
---|
12 | |
---|
13 | |
---|
14 | |
---|
15 | |
---|
16 | |
---|
17 | |
---|
18 | |
---|
19 | |
---|
20 | |
---|
21 | |
---|
22 | |
---|
23 | |
---|
24 | |
---|
25 | |
---|
26 | #include "dataFlowSet.h" |
---|
27 | |
---|
28 | |
---|
29 | |
---|
30 | |
---|
31 | |
---|
32 | short |
---|
33 | checkDataFlowSet(short shift, |
---|
34 | struct MyPtrs *myPtrs, |
---|
35 | int myQueue, |
---|
36 | struct PrefixV4 *V4PTab, |
---|
37 | size_t nbPV4, |
---|
38 | struct PrefixV4 *V4STab, |
---|
39 | size_t nbSV4 |
---|
40 | ) |
---|
41 | { |
---|
42 | TplFlowSetPtr tmp = NULL; |
---|
43 | TplOptionPtr tmpOpt = NULL; |
---|
44 | FieldPtr pftmp = NULL; |
---|
45 | FieldPtr secondPftmp = NULL; |
---|
46 | unsigned short data_length = 0; |
---|
47 | unsigned short flow_size = 0; |
---|
48 | unsigned short oldOffset = *myPtrs->offsetV9Ptr; |
---|
49 | unsigned short secondOffset = 0; |
---|
50 | unsigned short secondOldOffset = 0; |
---|
51 | int moreIsNecessary = 1; |
---|
52 | int field_size = 0; |
---|
53 | int cpt = 0; |
---|
54 | int secondCpt = 0; |
---|
55 | int overflow = 0; |
---|
56 | int noEnd = 1; |
---|
57 | int i = 0; |
---|
58 | int j = 0; |
---|
59 | int pos = 0; |
---|
60 | unsigned char buffer1; |
---|
61 | unsigned char buffer2[2]; |
---|
62 | unsigned char buffer4[4]; |
---|
63 | RulesPtr tmpRuleList = myPtrs->rulesListPtr; |
---|
64 | RulesPtr tmpRL = myPtrs->rulesListPtr; |
---|
65 | msgType myMsg; |
---|
66 | char *msgTextIndex; |
---|
67 | |
---|
68 | unsigned short tplMsgType = 11; |
---|
69 | struct PrefixV4 prefixKey, *res, *res2, *resSub; |
---|
70 | #if defined(IPV4AGGIDSNMP) |
---|
71 | struct PrefixV4 *res3; |
---|
72 | #endif |
---|
73 | #ifdef ASACC |
---|
74 | struct AS asKey, *asres; |
---|
75 | #endif |
---|
76 | struct AggCache agCache; |
---|
77 | int bool = 0; |
---|
78 | |
---|
79 | int isMplsFlow = 0; |
---|
80 | int paddingCounter = 0; |
---|
81 | int crazyCounter = 0; |
---|
82 | |
---|
83 | buffer2[1] = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
84 | (*myPtrs->offsetV9Ptr)++; |
---|
85 | buffer2[0] = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
86 | (*myPtrs->offsetV9Ptr)++; |
---|
87 | (*myPtrs->currentFlowsetIdPtr) = *((unsigned short*)&buffer2); |
---|
88 | buffer2[1] = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
89 | (*myPtrs->offsetV9Ptr)++; |
---|
90 | buffer2[0] = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
91 | (*myPtrs->offsetV9Ptr)++; |
---|
92 | data_length = *((unsigned short*)&buffer2); |
---|
93 | if (data_length == 0) { |
---|
94 | syslog(LOG_INFO, "data flowset length null; all next informations of this data flowset are not considered! flowset ID: %hu, from router: %lu.%lu.%lu.%lu", |
---|
95 | (*myPtrs->currentFlowsetIdPtr), |
---|
96 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
97 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
98 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
99 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24)); |
---|
100 | return (-1); |
---|
101 | |
---|
102 | } |
---|
103 | |
---|
104 | if ( (tmp=existTplId(myPtrs->currentRouterPtr, |
---|
105 | myPtrs->currentHeaderV9Ptr->sourceId, |
---|
106 | (*myPtrs->currentFlowsetIdPtr)))!=NULL ) { |
---|
107 | #ifdef DEBUG |
---|
108 | fprintf(stderr, |
---|
109 | "{d id: %hu, lg %hu", |
---|
110 | (*myPtrs->currentFlowsetIdPtr), |
---|
111 | data_length); |
---|
112 | if ( (*myPtrs->currentFlowsetIdPtr) > TRESHOLD_TEMPLATE_ID ) { |
---|
113 | |
---|
114 | |
---|
115 | |
---|
116 | |
---|
117 | |
---|
118 | |
---|
119 | |
---|
120 | |
---|
121 | |
---|
122 | |
---|
123 | |
---|
124 | |
---|
125 | |
---|
126 | return (data_length+shift); |
---|
127 | } |
---|
128 | #endif |
---|
129 | pftmp = tmp->lastField; |
---|
130 | for (; pftmp; pftmp = pftmp->prev) { |
---|
131 | flow_size += pftmp->fieldLength; |
---|
132 | } |
---|
133 | if ( data_length%flow_size >= 9 ) { |
---|
134 | (*myPtrs->currentFlowsetNumberPtr) = myPtrs->currentHeaderV9Ptr->count; |
---|
135 | syslog(LOG_INFO, "data flowset length not match with length from template definition, wrong template definition suspected; all next informations of this data flowset are not considered! flowset ID: %hu, from router: %lu.%lu.%lu.%lu", |
---|
136 | (*myPtrs->currentFlowsetIdPtr), |
---|
137 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
138 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
139 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
140 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24)); |
---|
141 | return (data_length+shift); |
---|
142 | } |
---|
143 | if ( data_length >= 1452 ) { |
---|
144 | syslog(LOG_INFO, "data flowset length too raised; all next informations of this data flowset are not considered! flowset ID: %hu, from router: %lu.%lu.%lu.%lu", |
---|
145 | (*myPtrs->currentFlowsetIdPtr), |
---|
146 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
147 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
148 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
149 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24)); |
---|
150 | return (-1); |
---|
151 | } |
---|
152 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
153 | agCache.routerAd = myPtrs->pcktPtr->ipH->srcAdd; |
---|
154 | #endif |
---|
155 | |
---|
156 | pftmp = tmp->lastField; |
---|
157 | secondPftmp = tmp->lastField; |
---|
158 | secondOffset = *myPtrs->offsetV9Ptr; |
---|
159 | secondOldOffset = secondOffset; |
---|
160 | while ( (((*myPtrs->offsetV9Ptr)-48-shift) <= data_length) |
---|
161 | && (overflow!=1) ) { |
---|
162 | |
---|
163 | |
---|
164 | |
---|
165 | |
---|
166 | |
---|
167 | |
---|
168 | |
---|
169 | cpt++; |
---|
170 | j = 0; |
---|
171 | pos = (pftmp->fieldType)*MAX_RULES_PER_FIELD+j; |
---|
172 | field_size = (int) pftmp->fieldLength; |
---|
173 | |
---|
174 | |
---|
175 | |
---|
176 | |
---|
177 | while ( ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j))) != NULL ) { |
---|
178 | if ( (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j)))->value->stor.lvalue) |
---|
179 | == myPtrs->pcktPtr->ipH->srcAdd ) |
---|
180 | { |
---|
181 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+j)))->check = 1; |
---|
182 | } |
---|
183 | j++; |
---|
184 | } |
---|
185 | j = 0; |
---|
186 | |
---|
187 | |
---|
188 | |
---|
189 | |
---|
190 | |
---|
191 | |
---|
192 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos))) != NULL) { |
---|
193 | oldOffset = *myPtrs->offsetV9Ptr; |
---|
194 | while (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos))) != NULL){ |
---|
195 | |
---|
196 | |
---|
197 | |
---|
198 | *myPtrs->offsetV9Ptr = oldOffset; |
---|
199 | switch ((int) |
---|
200 | (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->operator)){ |
---|
201 | case 2: |
---|
202 | |
---|
203 | switch (field_size) { |
---|
204 | case 1: |
---|
205 | buffer1 = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
206 | (*myPtrs->offsetV9Ptr)++; |
---|
207 | |
---|
208 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.cvalue |
---|
209 | == *((unsigned char*)&buffer1)) { |
---|
210 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
211 | } |
---|
212 | |
---|
213 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
214 | if ((pftmp->fieldType==9)||(pftmp->fieldType==29)){ |
---|
215 | agCache.maskS = *((unsigned char*)&buffer1); |
---|
216 | } |
---|
217 | if ((pftmp->fieldType==13)||(pftmp->fieldType==30)){ |
---|
218 | agCache.maskD = *((unsigned char*)&buffer1); |
---|
219 | } |
---|
220 | if (pftmp->fieldType==60){ |
---|
221 | agCache.ipProt = *((unsigned char*)&buffer1); |
---|
222 | } |
---|
223 | if (pftmp->fieldType==4){ |
---|
224 | agCache.tProt = *((unsigned char*)&buffer1); |
---|
225 | } |
---|
226 | if (pftmp->fieldType==61){ |
---|
227 | agCache.sens = *((unsigned char*)&buffer1); |
---|
228 | } |
---|
229 | if (pftmp->fieldType==5){ |
---|
230 | agCache.dscp = *((unsigned char*)&buffer1); |
---|
231 | } |
---|
232 | #endif |
---|
233 | break; |
---|
234 | case 2: |
---|
235 | buffer2[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
236 | (*myPtrs->offsetV9Ptr)++; |
---|
237 | buffer2[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
238 | (*myPtrs->offsetV9Ptr)++; |
---|
239 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue |
---|
240 | == *((unsigned short*)&buffer2)) |
---|
241 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
242 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
243 | if (pftmp->fieldType==10){ |
---|
244 | agCache.inputSnmp = *((unsigned short*)&buffer2); |
---|
245 | } |
---|
246 | if (pftmp->fieldType==14){ |
---|
247 | agCache.outputSnmp = *((unsigned short*)&buffer2); |
---|
248 | } |
---|
249 | #endif |
---|
250 | #ifdef ASACC |
---|
251 | if (pftmp->fieldType==16){ |
---|
252 | agCache.asS = *((unsigned short*)&buffer2); |
---|
253 | } |
---|
254 | if (pftmp->fieldType==17){ |
---|
255 | agCache.asD = *((unsigned short*)&buffer2); |
---|
256 | } |
---|
257 | #endif |
---|
258 | break; |
---|
259 | case 3: |
---|
260 | buffer4[3]= 0; |
---|
261 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
262 | (*myPtrs->offsetV9Ptr)++; |
---|
263 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
264 | (*myPtrs->offsetV9Ptr)++; |
---|
265 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
266 | (*myPtrs->offsetV9Ptr)++; |
---|
267 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue |
---|
268 | == *((unsigned long*)&buffer4)) |
---|
269 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
270 | |
---|
271 | |
---|
272 | if (pftmp->fieldType==70){ |
---|
273 | isMplsFlow = 1; |
---|
274 | } |
---|
275 | break; |
---|
276 | case 4: |
---|
277 | buffer4[3]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
278 | (*myPtrs->offsetV9Ptr)++; |
---|
279 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
280 | (*myPtrs->offsetV9Ptr)++; |
---|
281 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
282 | (*myPtrs->offsetV9Ptr)++; |
---|
283 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
284 | (*myPtrs->offsetV9Ptr)++; |
---|
285 | |
---|
286 | if ((pftmp->fieldType==8)||(pftmp->fieldType==12) |
---|
287 | ||(pftmp->fieldType==15)||(pftmp->fieldType==18)){ |
---|
288 | if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue) |
---|
289 | == (*((unsigned long*)&buffer4))>>(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)<<(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) ) |
---|
290 | { |
---|
291 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
292 | } |
---|
293 | } |
---|
294 | if ((pftmp->fieldType==10)||(pftmp->fieldType==14)){ |
---|
295 | if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue) |
---|
296 | == ((unsigned short)*((unsigned long*)&buffer4))) |
---|
297 | { |
---|
298 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
299 | } |
---|
300 | } |
---|
301 | if ((pftmp->fieldType==16)||(pftmp->fieldType==17)){ |
---|
302 | if ((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.svalue) |
---|
303 | == ((unsigned short)*((unsigned long*)&buffer4))) |
---|
304 | { |
---|
305 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
306 | } |
---|
307 | } |
---|
308 | if (pftmp->fieldType==1){ |
---|
309 | agCache.bytes = *((unsigned long*)&buffer4); |
---|
310 | if ( |
---|
311 | ((unsigned long)((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue) + ( (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue)*10/100)) |
---|
312 | >= (*((unsigned long*)&buffer4))) |
---|
313 | && |
---|
314 | ( (unsigned long)((((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue) - ( (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.lvalue)*10/100)) |
---|
315 | <= (*((unsigned long*)&buffer4)) ) |
---|
316 | ) |
---|
317 | { |
---|
318 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
319 | } |
---|
320 | } |
---|
321 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
322 | if (pftmp->fieldType==10){ |
---|
323 | agCache.inputSnmp = (unsigned short)*((unsigned long*)&buffer4); |
---|
324 | } |
---|
325 | if (pftmp->fieldType==14){ |
---|
326 | agCache.outputSnmp = (unsigned short)*((unsigned long*)&buffer4); |
---|
327 | } |
---|
328 | if ((pftmp->fieldType==8)){ |
---|
329 | bool = 1; |
---|
330 | agCache.v4AdS = *((unsigned long*)&buffer4); |
---|
331 | } |
---|
332 | if ((pftmp->fieldType==12)){ |
---|
333 | agCache.v4AdD = *((unsigned long*)&buffer4); |
---|
334 | } |
---|
335 | if (pftmp->fieldType==1){ |
---|
336 | agCache.bytes = *((unsigned long*)&buffer4); |
---|
337 | } |
---|
338 | if (pftmp->fieldType==2){ |
---|
339 | agCache.pkts = *((unsigned long*)&buffer4); |
---|
340 | } |
---|
341 | #endif |
---|
342 | #ifdef ASACC |
---|
343 | if (pftmp->fieldType==16){ |
---|
344 | agCache.asS = (unsigned short)*((unsigned long*)&buffer4); |
---|
345 | } |
---|
346 | if (pftmp->fieldType==17){ |
---|
347 | agCache.asD = (unsigned short)*((unsigned long*)&buffer4); |
---|
348 | } |
---|
349 | #endif |
---|
350 | break; |
---|
351 | case 16: |
---|
352 | for (i=0; i<4; i++) { |
---|
353 | buffer4[3]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
354 | (*myPtrs->offsetV9Ptr)++; |
---|
355 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
356 | (*myPtrs->offsetV9Ptr)++; |
---|
357 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
358 | (*myPtrs->offsetV9Ptr)++; |
---|
359 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
360 | (*myPtrs->offsetV9Ptr)++; |
---|
361 | if (1==moreIsNecessary){ |
---|
362 | switch(i){ |
---|
363 | case 0: |
---|
364 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 32){ |
---|
365 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
366 | == |
---|
367 | (*((unsigned long*)&buffer4))>>(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)<<(32-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) |
---|
368 | ) |
---|
369 | { |
---|
370 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
371 | moreIsNecessary = 0; |
---|
372 | } else { |
---|
373 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
374 | moreIsNecessary = 0; |
---|
375 | } |
---|
376 | } else { |
---|
377 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
378 | == |
---|
379 | (*((unsigned long*)&buffer4)) |
---|
380 | ) |
---|
381 | { |
---|
382 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 1; |
---|
383 | } else { |
---|
384 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
385 | moreIsNecessary = 0; |
---|
386 | } |
---|
387 | } |
---|
388 | break; |
---|
389 | case 1: |
---|
390 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 64){ |
---|
391 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
392 | == |
---|
393 | (*((unsigned long*)&buffer4))>>(64-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)<<(64-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) |
---|
394 | ) |
---|
395 | { |
---|
396 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
397 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
398 | moreIsNecessary = 0; |
---|
399 | } else { |
---|
400 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
401 | moreIsNecessary = 0; |
---|
402 | } |
---|
403 | } else { |
---|
404 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
405 | == |
---|
406 | (*((unsigned long*)&buffer4)) |
---|
407 | ) |
---|
408 | { |
---|
409 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
410 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
411 | } else { |
---|
412 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
413 | moreIsNecessary = 0; |
---|
414 | } |
---|
415 | } |
---|
416 | break; |
---|
417 | case 2: |
---|
418 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 96){ |
---|
419 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
420 | == |
---|
421 | (*((unsigned long*)&buffer4))>>(96-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)<<(96-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) |
---|
422 | ) |
---|
423 | { |
---|
424 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
425 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
426 | moreIsNecessary = 0; |
---|
427 | } else { |
---|
428 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
429 | moreIsNecessary = 0; |
---|
430 | } |
---|
431 | } else { |
---|
432 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
433 | == |
---|
434 | (*((unsigned long*)&buffer4)) |
---|
435 | ) |
---|
436 | { |
---|
437 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
438 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
439 | } else { |
---|
440 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
441 | moreIsNecessary = 0; |
---|
442 | } |
---|
443 | } |
---|
444 | break; |
---|
445 | case 3: |
---|
446 | if (((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask <= 128){ |
---|
447 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
448 | == |
---|
449 | (*((unsigned long*)&buffer4))>>(128-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask)<<(128-((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->mask) |
---|
450 | ) |
---|
451 | { |
---|
452 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
453 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
454 | } else { |
---|
455 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
456 | moreIsNecessary = 0; |
---|
457 | } |
---|
458 | } else { |
---|
459 | if (ntohl(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->value->stor.tabAdd6[i]) |
---|
460 | == |
---|
461 | (*((unsigned long*)&buffer4)) |
---|
462 | ) |
---|
463 | { |
---|
464 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = |
---|
465 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check && 1; |
---|
466 | } else { |
---|
467 | ((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->check = 0; |
---|
468 | moreIsNecessary = 0; |
---|
469 | } |
---|
470 | } |
---|
471 | break; |
---|
472 | default: |
---|
473 | break; |
---|
474 | } |
---|
475 | } |
---|
476 | } |
---|
477 | moreIsNecessary = 1; |
---|
478 | |
---|
479 | |
---|
480 | |
---|
481 | break; |
---|
482 | default: |
---|
483 | syslog(LOG_INFO, "Field size not known: %d\n", field_size); |
---|
484 | for (i=0; i<field_size; i++){ |
---|
485 | (*myPtrs->offsetV9Ptr)++; |
---|
486 | } |
---|
487 | break; |
---|
488 | } |
---|
489 | break; |
---|
490 | default: |
---|
491 | syslog(LOG_INFO, "Operator not known: %d\n", |
---|
492 | (int)(((RuleDefPtr)(*(myPtrs->rulesAddressPtr+pos)))->operator)); |
---|
493 | break; |
---|
494 | } |
---|
495 | j++; |
---|
496 | pos = (pftmp->fieldType)*10+j; |
---|
497 | } |
---|
498 | } else { |
---|
499 | |
---|
500 | |
---|
501 | |
---|
502 | switch (field_size) { |
---|
503 | case 1: |
---|
504 | buffer1 = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
505 | (*myPtrs->offsetV9Ptr)++; |
---|
506 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
507 | if ((pftmp->fieldType==9)||(pftmp->fieldType==29)){ |
---|
508 | agCache.maskS = *((unsigned char*)&buffer1); |
---|
509 | } |
---|
510 | if ((pftmp->fieldType==13)||(pftmp->fieldType==30)){ |
---|
511 | agCache.maskD = *((unsigned char*)&buffer1); |
---|
512 | } |
---|
513 | if (pftmp->fieldType==60){ |
---|
514 | agCache.ipProt = *((unsigned char*)&buffer1); |
---|
515 | } |
---|
516 | if (pftmp->fieldType==4){ |
---|
517 | agCache.tProt = *((unsigned char*)&buffer1); |
---|
518 | } |
---|
519 | if (pftmp->fieldType==61){ |
---|
520 | agCache.sens = *((unsigned char*)&buffer1); |
---|
521 | } |
---|
522 | if (pftmp->fieldType==5){ |
---|
523 | agCache.dscp = *((unsigned char*)&buffer1); |
---|
524 | } |
---|
525 | #endif |
---|
526 | break; |
---|
527 | case 2: |
---|
528 | buffer2[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
529 | (*myPtrs->offsetV9Ptr)++; |
---|
530 | buffer2[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
531 | (*myPtrs->offsetV9Ptr)++; |
---|
532 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
533 | if (pftmp->fieldType==10){ |
---|
534 | agCache.inputSnmp = *((unsigned short*)&buffer2); |
---|
535 | } |
---|
536 | if (pftmp->fieldType==14){ |
---|
537 | agCache.outputSnmp = *((unsigned short*)&buffer2); |
---|
538 | } |
---|
539 | #endif |
---|
540 | #ifdef ASACC |
---|
541 | if (pftmp->fieldType==16){ |
---|
542 | agCache.asS = *((unsigned short*)&buffer2); |
---|
543 | } |
---|
544 | if (pftmp->fieldType==17){ |
---|
545 | agCache.asD = *((unsigned short*)&buffer2); |
---|
546 | } |
---|
547 | #endif |
---|
548 | break; |
---|
549 | case 3: |
---|
550 | buffer4[3]= 0; |
---|
551 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
552 | (*myPtrs->offsetV9Ptr)++; |
---|
553 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
554 | (*myPtrs->offsetV9Ptr)++; |
---|
555 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
556 | (*myPtrs->offsetV9Ptr)++; |
---|
557 | |
---|
558 | |
---|
559 | if (pftmp->fieldType==70){ |
---|
560 | isMplsFlow = 1; |
---|
561 | } |
---|
562 | break; |
---|
563 | case 4: |
---|
564 | buffer4[3]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
565 | (*myPtrs->offsetV9Ptr)++; |
---|
566 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
567 | (*myPtrs->offsetV9Ptr)++; |
---|
568 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
569 | (*myPtrs->offsetV9Ptr)++; |
---|
570 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
571 | (*myPtrs->offsetV9Ptr)++; |
---|
572 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
573 | if (pftmp->fieldType==10){ |
---|
574 | agCache.inputSnmp = (unsigned short)*((unsigned long*)&buffer4); |
---|
575 | } |
---|
576 | if (pftmp->fieldType==14){ |
---|
577 | agCache.outputSnmp = (unsigned short)*((unsigned long*)&buffer4); |
---|
578 | } |
---|
579 | if ((pftmp->fieldType==8)){ |
---|
580 | bool = 1; |
---|
581 | agCache.v4AdS = *((unsigned long*)&buffer4); |
---|
582 | } else if ((pftmp->fieldType==12)){ |
---|
583 | agCache.v4AdD = *((unsigned long*)&buffer4); |
---|
584 | } else if (pftmp->fieldType==1){ |
---|
585 | agCache.bytes = *((unsigned long*)&buffer4); |
---|
586 | } else if (pftmp->fieldType==2){ |
---|
587 | agCache.pkts = *((unsigned long*)&buffer4); |
---|
588 | } |
---|
589 | #endif |
---|
590 | #ifdef ASACC |
---|
591 | if (pftmp->fieldType==16){ |
---|
592 | agCache.asS = (unsigned short)*((unsigned long*)&buffer4); |
---|
593 | } |
---|
594 | if (pftmp->fieldType==17){ |
---|
595 | agCache.asD = (unsigned short)*((unsigned long*)&buffer4); |
---|
596 | } |
---|
597 | #endif |
---|
598 | break; |
---|
599 | case 16: |
---|
600 | for (i=0; i<4; i++) { |
---|
601 | buffer2[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
602 | (*myPtrs->offsetV9Ptr)++; |
---|
603 | buffer2[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
604 | (*myPtrs->offsetV9Ptr)++; |
---|
605 | buffer2[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
606 | (*myPtrs->offsetV9Ptr)++; |
---|
607 | buffer2[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); |
---|
608 | (*myPtrs->offsetV9Ptr)++; |
---|
609 | } |
---|
610 | |
---|
611 | |
---|
612 | break; |
---|
613 | default: |
---|
614 | syslog(LOG_INFO,"UNKNOWN FIELDS LENGTH: %d ", field_size); |
---|
615 | for (i=0; i<field_size; i++){ |
---|
616 | (*myPtrs->offsetV9Ptr)++; |
---|
617 | } |
---|
618 | } |
---|
619 | } |
---|
620 | if (cpt==tmp->fieldCount) { |
---|
621 | |
---|
622 | |
---|
623 | |
---|
624 | |
---|
625 | |
---|
626 | |
---|
627 | |
---|
628 | |
---|
629 | |
---|
630 | |
---|
631 | #if defined(ASACC) && defined(IPV4AGGIDSNMP) |
---|
632 | if ( (bool == 1) && (isMplsFlow == 0) ){ |
---|
633 | asKey.as = agCache.asS; |
---|
634 | asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp); |
---|
635 | if (asres != NULL) { |
---|
636 | if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) { |
---|
637 | #if defined(MULTISAMPLING) |
---|
638 | if (myPtrs->currentRouterPtr->sampled != asres->sampling ){ |
---|
639 | |
---|
640 | asres->bytesNbOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
641 | asres->pktsNbOUT += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
642 | }else{ |
---|
643 | asres->bytesNbOUT += agCache.bytes; |
---|
644 | asres->pktsNbOUT += agCache.pkts; |
---|
645 | (asres->flowNbOUT)++; |
---|
646 | } |
---|
647 | #else |
---|
648 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
649 | |
---|
650 | asres->bytesNbOUT += agCache.bytes; |
---|
651 | asres->pktsNbOUT += agCache.pkts; |
---|
652 | (asres->flowNbOUT)++; |
---|
653 | } |
---|
654 | if (asres->sampling == 0 |
---|
655 | && myPtrs->currentRouterPtr->sampled != 0){ |
---|
656 | asres->sampling = myPtrs->currentRouterPtr->sampled; |
---|
657 | } |
---|
658 | #endif |
---|
659 | asres = NULL; |
---|
660 | asKey.as = agCache.asD; |
---|
661 | asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp); |
---|
662 | if (asres!=NULL){ |
---|
663 | #if defined(MULTISAMPLING) |
---|
664 | if (myPtrs->currentRouterPtr->sampled != asres->sampling ){ |
---|
665 | |
---|
666 | asres->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
667 | asres->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
668 | }else{ |
---|
669 | asres->bytesNbIN += agCache.bytes; |
---|
670 | asres->pktsNbIN += agCache.pkts; |
---|
671 | (asres->flowNbIN)++; |
---|
672 | } |
---|
673 | #else |
---|
674 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
675 | |
---|
676 | asres->bytesNbIN += agCache.bytes; |
---|
677 | asres->pktsNbIN += agCache.pkts; |
---|
678 | (asres->flowNbIN)++; |
---|
679 | } |
---|
680 | if (asres->sampling == 0 |
---|
681 | && myPtrs->currentRouterPtr->sampled != 0){ |
---|
682 | asres->sampling = myPtrs->currentRouterPtr->sampled; |
---|
683 | } |
---|
684 | #endif |
---|
685 | asres = NULL; |
---|
686 | } |
---|
687 | } |
---|
688 | } else { |
---|
689 | asres = NULL; |
---|
690 | asKey.as = agCache.asD; |
---|
691 | asres = bsearch(&asKey, myPtrs->currentASTab, myPtrs->asNb, sizeof(struct AS), asGlobalCmp); |
---|
692 | if (asres!=NULL){ |
---|
693 | if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) { |
---|
694 | #if defined(MULTISAMPLING) |
---|
695 | if (myPtrs->currentRouterPtr->sampled != asres->sampling ){ |
---|
696 | |
---|
697 | asres->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
698 | asres->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/asres->sampling; |
---|
699 | }else{ |
---|
700 | asres->bytesNbIN += agCache.bytes; |
---|
701 | asres->pktsNbIN += agCache.pkts; |
---|
702 | (asres->flowNbIN)++; |
---|
703 | } |
---|
704 | #else |
---|
705 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
706 | |
---|
707 | asres->bytesNbIN += agCache.bytes; |
---|
708 | asres->pktsNbIN += agCache.pkts; |
---|
709 | (asres->flowNbIN)++; |
---|
710 | } |
---|
711 | if (asres->sampling == 0 |
---|
712 | && myPtrs->currentRouterPtr->sampled != 0){ |
---|
713 | asres->sampling = myPtrs->currentRouterPtr->sampled; |
---|
714 | } |
---|
715 | #endif |
---|
716 | } |
---|
717 | } |
---|
718 | } |
---|
719 | } |
---|
720 | #endif |
---|
721 | |
---|
722 | |
---|
723 | |
---|
724 | #if defined(IPV4AGGIDR) || defined(IPV4AGGIDSNMP) |
---|
725 | if ( (bool == 1) && (isMplsFlow == 0) ){ |
---|
726 | prefixKey.beginning = agCache.v4AdS>>(32-agCache.maskS)<<(32-agCache.maskS); |
---|
727 | res = bsearch(&prefixKey, V4PTab, nbPV4, |
---|
728 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
729 | if (res!=NULL){ |
---|
730 | |
---|
731 | if (res->hasSubnet == 1) { |
---|
732 | resSub = NULL; |
---|
733 | resSub = bsearch(&prefixKey, V4STab, nbSV4, |
---|
734 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
735 | if (resSub != NULL) { |
---|
736 | res = resSub; |
---|
737 | resSub = NULL; |
---|
738 | } |
---|
739 | } |
---|
740 | #ifdef DEBUG |
---|
741 | fprintf(stderr,"S %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu SNMPin(hu) %hu\n", |
---|
742 | (agCache.v4AdS>>24), |
---|
743 | (agCache.v4AdS<<8>>24), |
---|
744 | (agCache.v4AdS<<16>>24), |
---|
745 | (agCache.v4AdS<<24>>24), |
---|
746 | (agCache.maskS), |
---|
747 | (agCache.v4AdD>>24), |
---|
748 | (agCache.v4AdD<<8>>24), |
---|
749 | (agCache.v4AdD<<16>>24), |
---|
750 | (agCache.v4AdD<<24>>24), |
---|
751 | (agCache.maskD), |
---|
752 | myPtrs->currentRouterPtr->sampled, |
---|
753 | res->sampling, |
---|
754 | agCache.inputSnmp); |
---|
755 | #endif |
---|
756 | #if defined(IPV4AGGIDR) |
---|
757 | if ( myPtrs->routersID[res->routerNb] == agCache.routerAd ) { |
---|
758 | #elif defined(IPV4AGGIDSNMP) |
---|
759 | if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) { |
---|
760 | #endif |
---|
761 | |
---|
762 | #if defined(MULTISAMPLING) |
---|
763 | if (myPtrs->currentRouterPtr->sampled != res->sampling ){ |
---|
764 | res->bytesNbOUT += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling; |
---|
765 | res->pktsNbOUT += agCache.pkts*myPtrs->currentRouterPtr->sampled/res->sampling; |
---|
766 | |
---|
767 | }else{ |
---|
768 | res->bytesNbOUT += agCache.bytes; |
---|
769 | res->pktsNbOUT += agCache.pkts; |
---|
770 | (res->flowNbOUT)++; |
---|
771 | } |
---|
772 | #else |
---|
773 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
774 | res->bytesNbOUT += agCache.bytes; |
---|
775 | res->pktsNbOUT += agCache.pkts; |
---|
776 | (res->flowNbOUT)++; |
---|
777 | } |
---|
778 | if (res->sampling == 0 |
---|
779 | && myPtrs->currentRouterPtr->sampled != 0){ |
---|
780 | res->sampling = myPtrs->currentRouterPtr->sampled; |
---|
781 | } |
---|
782 | #endif |
---|
783 | #if defined(IPV4AGGIDSNMP) |
---|
784 | prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD); |
---|
785 | res3 = bsearch(&prefixKey, V4PTab, nbPV4, |
---|
786 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
787 | if (res3!=NULL){ |
---|
788 | |
---|
789 | if (res3->hasSubnet == 1) { |
---|
790 | resSub = NULL; |
---|
791 | resSub = bsearch(&prefixKey, V4STab, nbSV4, |
---|
792 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
793 | if (resSub != NULL) { |
---|
794 | res3 = resSub; |
---|
795 | resSub = NULL; |
---|
796 | } |
---|
797 | } |
---|
798 | #ifdef DEBUG |
---|
799 | fprintf(stderr,"S&D %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu SNMPin %hu\n", |
---|
800 | (agCache.v4AdS>>24), |
---|
801 | (agCache.v4AdS<<8>>24), |
---|
802 | (agCache.v4AdS<<16>>24), |
---|
803 | (agCache.v4AdS<<24>>24), |
---|
804 | (agCache.maskS), |
---|
805 | (agCache.v4AdD>>24), |
---|
806 | (agCache.v4AdD<<8>>24), |
---|
807 | (agCache.v4AdD<<16>>24), |
---|
808 | (agCache.v4AdD<<24>>24), |
---|
809 | (agCache.maskD), |
---|
810 | myPtrs->currentRouterPtr->sampled, |
---|
811 | res3->sampling, |
---|
812 | agCache.inputSnmp); |
---|
813 | #endif |
---|
814 | #if defined(MULTISAMPLING) |
---|
815 | if (myPtrs->currentRouterPtr->sampled != res3->sampling ){ |
---|
816 | res3->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res3->sampling; |
---|
817 | res3->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/res3->sampling; |
---|
818 | |
---|
819 | }else{ |
---|
820 | res3->bytesNbIN += agCache.bytes; |
---|
821 | res3->pktsNbIN += agCache.pkts; |
---|
822 | (res3->flowNbIN)++; |
---|
823 | } |
---|
824 | #else |
---|
825 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
826 | |
---|
827 | res3->bytesNbIN += agCache.bytes; |
---|
828 | res3->pktsNbIN += agCache.pkts; |
---|
829 | (res3->flowNbIN)++; |
---|
830 | } |
---|
831 | if (res3->sampling == 0 |
---|
832 | && myPtrs->currentRouterPtr->sampled != 0){ |
---|
833 | res3->sampling = myPtrs->currentRouterPtr->sampled; |
---|
834 | } |
---|
835 | #endif |
---|
836 | } |
---|
837 | #endif |
---|
838 | #if defined(MATRIX) && defined(IPV4AGGIDR) |
---|
839 | |
---|
840 | prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD); |
---|
841 | res2 = bsearch(&prefixKey, V4PTab, nbPV4, |
---|
842 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
843 | if (res2!=NULL){ |
---|
844 | ((struct POP *)((myPtrs->matrixPOP) |
---|
845 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
846 | +((res2->routerNb))))->pktsNb += agCache.pkts; |
---|
847 | ((struct POP *)((myPtrs->matrixPOP) |
---|
848 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
849 | +((res2->routerNb))))->bytesNb += agCache.bytes; |
---|
850 | ((struct POP *)((myPtrs->matrixPOP) |
---|
851 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
852 | +((res2->routerNb))))->flowNb++; |
---|
853 | } else { |
---|
854 | ( |
---|
855 | ((struct POP *)(myPtrs->matrixPOP) |
---|
856 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
857 | +((ROUTER_INDEX_MAX-1))))->pktsNb += agCache.pkts; |
---|
858 | ( |
---|
859 | ((struct POP *)(myPtrs->matrixPOP) |
---|
860 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
861 | +((ROUTER_INDEX_MAX-1))))->bytesNb += agCache.bytes; |
---|
862 | ( |
---|
863 | ((struct POP *)(myPtrs->matrixPOP) |
---|
864 | +((res->routerNb)*ROUTER_INDEX_MAX) |
---|
865 | +((ROUTER_INDEX_MAX-1))))->flowNb++; |
---|
866 | } |
---|
867 | |
---|
868 | #endif |
---|
869 | } else { |
---|
870 | |
---|
871 | #if defined(IPV4AGGIDR) |
---|
872 | } |
---|
873 | #elif defined(IPV4AGGIDSNMP) |
---|
874 | } |
---|
875 | #endif |
---|
876 | } else { |
---|
877 | prefixKey.beginning = agCache.v4AdD>>(32-agCache.maskD)<<(32-agCache.maskD); |
---|
878 | res = bsearch(&prefixKey, V4PTab, nbPV4, |
---|
879 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
880 | if (res!=NULL){ |
---|
881 | |
---|
882 | if (res->hasSubnet == 1) { |
---|
883 | resSub = NULL; |
---|
884 | resSub = bsearch(&prefixKey, V4STab, nbSV4, |
---|
885 | sizeof(struct PrefixV4), prefGlobalCmp); |
---|
886 | if (resSub != NULL) { |
---|
887 | res = resSub; |
---|
888 | resSub = NULL; |
---|
889 | } |
---|
890 | } |
---|
891 | #ifdef DEBUG |
---|
892 | fprintf(stderr,"D %lu.%lu.%lu.%lu/%hu %lu.%lu.%lu.%lu/%hu Rs %lu Ps %lu R@ %lu.%lu.%lu.%lu SNMPin %hu\n", |
---|
893 | (agCache.v4AdS>>24), |
---|
894 | (agCache.v4AdS<<8>>24), |
---|
895 | (agCache.v4AdS<<16>>24), |
---|
896 | (agCache.v4AdS<<24>>24), |
---|
897 | (agCache.maskS), |
---|
898 | (agCache.v4AdD>>24), |
---|
899 | (agCache.v4AdD<<8>>24), |
---|
900 | (agCache.v4AdD<<16>>24), |
---|
901 | (agCache.v4AdD<<24>>24), |
---|
902 | (agCache.maskD), |
---|
903 | myPtrs->currentRouterPtr->sampled, |
---|
904 | res->sampling, |
---|
905 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
906 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
907 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
908 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24), |
---|
909 | agCache.inputSnmp); |
---|
910 | #endif |
---|
911 | #if defined(IPV4AGGIDSNMP) |
---|
912 | if ( myPtrs->currentRouterPtr->snmpIndexList[agCache.inputSnmp] == 1 ) { |
---|
913 | #if defined(MULTISAMPLING) |
---|
914 | if (myPtrs->currentRouterPtr->sampled != res->sampling ){ |
---|
915 | res->bytesNbIN += agCache.bytes*myPtrs->currentRouterPtr->sampled/res->sampling; |
---|
916 | res->pktsNbIN += agCache.pkts*myPtrs->currentRouterPtr->sampled/res->sampling; |
---|
917 | }else{ |
---|
918 | res->bytesNbIN += agCache.bytes; |
---|
919 | res->pktsNbIN += agCache.pkts; |
---|
920 | (res->flowNbIN)++; |
---|
921 | } |
---|
922 | #else |
---|
923 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
924 | |
---|
925 | res->bytesNbIN += agCache.bytes; |
---|
926 | res->pktsNbIN += agCache.pkts; |
---|
927 | (res->flowNbIN)++; |
---|
928 | } |
---|
929 | #endif |
---|
930 | } |
---|
931 | #endif |
---|
932 | #if defined(IPV4AGGIDR) |
---|
933 | if ( myPtrs->routersID[res->routerNb] == agCache.routerAd ) { |
---|
934 | if (myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
935 | |
---|
936 | res->bytesNbIN += agCache.bytes; |
---|
937 | res->pktsNbIN += agCache.pkts; |
---|
938 | (res->flowNbIN)++; |
---|
939 | } |
---|
940 | } |
---|
941 | if (res->sampling == 0 |
---|
942 | && myPtrs->currentRouterPtr->sampled != 0 ){ |
---|
943 | res->sampling = myPtrs->currentRouterPtr->sampled; |
---|
944 | } |
---|
945 | #endif |
---|
946 | } else { |
---|
947 | |
---|
948 | |
---|
949 | |
---|
950 | |
---|
951 | |
---|
952 | |
---|
953 | |
---|
954 | |
---|
955 | #ifdef PRINTUNKNOWNSUBNET |
---|
956 | fprintf(stderr, "%lu.%lu.%lu.%lu/%hu -> %lu.%lu.%lu.%lu/%hu (R:%lu.%lu.%lu.%lu) \n", |
---|
957 | (agCache.v4AdS>>24), |
---|
958 | (agCache.v4AdS<<8>>24), |
---|
959 | (agCache.v4AdS<<16>>24), |
---|
960 | (agCache.v4AdS<<24>>24), |
---|
961 | (agCache.maskS), |
---|
962 | (agCache.v4AdD>>24), |
---|
963 | (agCache.v4AdD<<8>>24), |
---|
964 | (agCache.v4AdD<<16>>24), |
---|
965 | (agCache.v4AdD<<24>>24), |
---|
966 | (agCache.maskD), |
---|
967 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
968 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
969 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
970 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24) |
---|
971 | ); |
---|
972 | #endif |
---|
973 | } |
---|
974 | } |
---|
975 | } |
---|
976 | bool = 0; |
---|
977 | isMplsFlow = 0; |
---|
978 | #endif |
---|
979 | |
---|
980 | |
---|
981 | |
---|
982 | |
---|
983 | |
---|
984 | |
---|
985 | |
---|
986 | |
---|
987 | |
---|
988 | |
---|
989 | |
---|
990 | tmpRuleList = myPtrs->rulesListPtr; |
---|
991 | tmpRL = myPtrs->rulesListPtr; |
---|
992 | while (tmpRuleList){ |
---|
993 | RuleDefPtr tmpRuleDefList = tmpRuleList->def; |
---|
994 | unsigned short check = 1; |
---|
995 | int s=0; |
---|
996 | secondOffset = secondOldOffset; |
---|
997 | while (tmpRuleDefList){ |
---|
998 | check = check && tmpRuleDefList->check; |
---|
999 | tmpRuleDefList->check = 0; |
---|
1000 | tmpRuleDefList = tmpRuleDefList->next; |
---|
1001 | } |
---|
1002 | if ( (tmpRuleList->def != NULL) && (check == 1)) { |
---|
1003 | |
---|
1004 | secondPftmp = tmp->lastField; |
---|
1005 | msgTextIndex = mempcpy(mempcpy(mempcpy(myMsg.text, |
---|
1006 | &tplMsgType, |
---|
1007 | sizeof(unsigned short) |
---|
1008 | ), |
---|
1009 | &tmpRuleList->id, |
---|
1010 | sizeof(tmpRuleList->id) |
---|
1011 | ), |
---|
1012 | &myPtrs->currentRouterPtr->IpAddress, |
---|
1013 | sizeof(unsigned long) |
---|
1014 | ); |
---|
1015 | msgTextIndex = mempcpy(mempcpy(mempcpy(msgTextIndex, |
---|
1016 | &tmp->sourceId, |
---|
1017 | sizeof(unsigned long) |
---|
1018 | ), |
---|
1019 | &tmp->templateFlowSetId, |
---|
1020 | sizeof(tmp->templateFlowSetId) |
---|
1021 | ), |
---|
1022 | myPtrs->ptr_buffer+secondOffset, |
---|
1023 | flow_size |
---|
1024 | ); |
---|
1025 | myMsg.type = 1; |
---|
1026 | |
---|
1027 | |
---|
1028 | |
---|
1029 | for ( ; tmpRL; tmpRL=tmpRL->next){ |
---|
1030 | if (tmpRL->id == tmpRuleList->id){ |
---|
1031 | s = sendMessage(tmpRL->host->sockId, myMsg.text, sizeof(myMsg.text), |
---|
1032 | tmpRL->host->hostAddressPtr); |
---|
1033 | } |
---|
1034 | } |
---|
1035 | |
---|
1036 | noEnd = 1; |
---|
1037 | secondCpt=0; |
---|
1038 | } |
---|
1039 | tmpRuleList = tmpRuleList->next; |
---|
1040 | tmpRL = myPtrs->rulesListPtr; |
---|
1041 | secondPftmp = tmp->lastField; |
---|
1042 | } |
---|
1043 | |
---|
1044 | |
---|
1045 | |
---|
1046 | secondOffset = *myPtrs->offsetV9Ptr; |
---|
1047 | secondOldOffset = secondOffset; |
---|
1048 | pftmp = tmp->lastField; |
---|
1049 | cpt=0; |
---|
1050 | (*myPtrs->currentFlowsetNumberPtr)++; |
---|
1051 | if (((*myPtrs->offsetV9Ptr)-48-shift+flow_size) > data_length){ |
---|
1052 | overflow = 1; |
---|
1053 | } |
---|
1054 | } else { |
---|
1055 | |
---|
1056 | pftmp = pftmp->prev; |
---|
1057 | } |
---|
1058 | } |
---|
1059 | |
---|
1060 | while ( ((*myPtrs->offsetV9Ptr)-48-shift) < data_length ) { |
---|
1061 | (*myPtrs->offsetV9Ptr)++; |
---|
1062 | paddingCounter++; |
---|
1063 | if ( paddingCounter > 8 ) { |
---|
1064 | #ifdef DEBUG |
---|
1065 | fprintf(stderr," padding too high: %d ", paddingCounter); |
---|
1066 | #endif |
---|
1067 | syslog(LOG_INFO,"padding too high: %d ", paddingCounter); |
---|
1068 | return (-1); |
---|
1069 | } |
---|
1070 | } |
---|
1071 | while ( (*myPtrs->offsetV9Ptr)-48-shift > data_length ) { |
---|
1072 | (*myPtrs->offsetV9Ptr)--; |
---|
1073 | crazyCounter++; |
---|
1074 | } |
---|
1075 | #ifdef DEBUG |
---|
1076 | if (crazyCounter != 0){ fprintf(stderr," crazyCounter: %d ", crazyCounter); } |
---|
1077 | #endif |
---|
1078 | if (crazyCounter!=0) { syslog(LOG_INFO,"crazyCounter: %d ", crazyCounter);} |
---|
1079 | |
---|
1080 | #ifdef DEBUG |
---|
1081 | fprintf(stderr,"}"); |
---|
1082 | #endif |
---|
1083 | |
---|
1084 | return (data_length+shift); |
---|
1085 | |
---|
1086 | |
---|
1087 | } else { |
---|
1088 | |
---|
1089 | |
---|
1090 | |
---|
1091 | |
---|
1092 | |
---|
1093 | |
---|
1094 | |
---|
1095 | if ((tmpOpt=existTplOptId(myPtrs->currentRouterPtr, myPtrs->currentHeaderV9Ptr->sourceId, |
---|
1096 | (*myPtrs->currentFlowsetIdPtr)))!=NULL) { |
---|
1097 | #ifdef DEBUG |
---|
1098 | fprintf(stderr,"<d id: %hu, lg %hu", (*myPtrs->currentFlowsetIdPtr), data_length); |
---|
1099 | #endif |
---|
1100 | for ( i=0; i<(tmpOpt->optionScopeLg/4); i++){ |
---|
1101 | |
---|
1102 | if ((pftmp=tmpOpt->lastField)!=NULL) { |
---|
1103 | for (j=0; j<pftmp->fieldLength; j++) { |
---|
1104 | (*myPtrs->offsetV9Ptr)++; |
---|
1105 | } |
---|
1106 | pftmp = pftmp->prev; |
---|
1107 | } |
---|
1108 | } |
---|
1109 | while (pftmp != NULL) { |
---|
1110 | if (pftmp->fieldLength==1){ |
---|
1111 | buffer1 = *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1112 | } |
---|
1113 | if (pftmp->fieldLength==2){ |
---|
1114 | buffer2[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1115 | buffer2[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1116 | } |
---|
1117 | if (pftmp->fieldLength==4){ |
---|
1118 | buffer4[3]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1119 | buffer4[2]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1120 | buffer4[1]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1121 | buffer4[0]= *(myPtrs->ptr_buffer+(*myPtrs->offsetV9Ptr)); (*myPtrs->offsetV9Ptr)++; |
---|
1122 | if (pftmp->fieldType==34||pftmp->fieldType==50){ |
---|
1123 | if ((*((unsigned long*)&buffer4)==1) |
---|
1124 | || (*((unsigned long*)&buffer4)==10) |
---|
1125 | || (*((unsigned long*)&buffer4)==100) |
---|
1126 | || (*((unsigned long*)&buffer4)==1000)) { |
---|
1127 | if (myPtrs->currentRouterPtr->sampled != *((unsigned long*)&buffer4) ) { |
---|
1128 | #ifdef DEBUGAGG |
---|
1129 | fprintf(stderr,"\n SV (p) %lu != %lu (r)", *((unsigned long*)&buffer4), |
---|
1130 | myPtrs->currentRouterPtr->sampled); |
---|
1131 | #endif |
---|
1132 | syslog(LOG_INFO,"Sampling value change for router : %lu.%lu.%lu.%lu, old: %lu, new: %lu", |
---|
1133 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
1134 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
1135 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
1136 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24), |
---|
1137 | myPtrs->currentRouterPtr->sampled, |
---|
1138 | *((unsigned long*)&buffer4) |
---|
1139 | ); |
---|
1140 | myPtrs->currentRouterPtr->sampled = *((unsigned long*)&buffer4); |
---|
1141 | } |
---|
1142 | }else{ |
---|
1143 | syslog(LOG_INFO,"Sampling value not standard for router : %lu.%lu.%lu.%lu, value : %lu", |
---|
1144 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
1145 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
1146 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
1147 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24), |
---|
1148 | *((unsigned long*)&buffer4) |
---|
1149 | ); |
---|
1150 | } |
---|
1151 | } |
---|
1152 | } |
---|
1153 | pftmp = pftmp->prev; |
---|
1154 | } |
---|
1155 | if ( pftmp == NULL ) { |
---|
1156 | while ((*myPtrs->offsetV9Ptr)%4 != 0) { |
---|
1157 | (*myPtrs->offsetV9Ptr)++; |
---|
1158 | #ifdef DEBUG |
---|
1159 | fprintf(stderr," p "); |
---|
1160 | #endif |
---|
1161 | } |
---|
1162 | } else { |
---|
1163 | fprintf(stderr,"PB "); |
---|
1164 | } |
---|
1165 | #ifdef DEBUG |
---|
1166 | fprintf(stderr,">"); |
---|
1167 | #endif |
---|
1168 | return (data_length+shift); |
---|
1169 | } else { |
---|
1170 | |
---|
1171 | |
---|
1172 | |
---|
1173 | (*myPtrs->offsetV9Ptr)+=(data_length-4); |
---|
1174 | (*myPtrs->currentFlowsetNumberPtr) = myPtrs->currentHeaderV9Ptr->count; |
---|
1175 | #ifdef DEBUG |
---|
1176 | fprintf(stderr, " U, r: %lu.%lu.%lu.%lu, sourceId: %lu, TID: %hu", |
---|
1177 | (myPtrs->pcktPtr->ipH->srcAdd>>24), |
---|
1178 | (myPtrs->pcktPtr->ipH->srcAdd<<8>>24), |
---|
1179 | (myPtrs->pcktPtr->ipH->srcAdd<<16>>24), |
---|
1180 | (myPtrs->pcktPtr->ipH->srcAdd<<24>>24), |
---|
1181 | myPtrs->currentHeaderV9Ptr->sourceId, |
---|
1182 | (*myPtrs->currentFlowsetIdPtr) |
---|
1183 | ); |
---|
1184 | #endif |
---|
1185 | return (data_length+shift); |
---|
1186 | } |
---|
1187 | } |
---|
1188 | } |
---|