diff options
author | Ashlee Young <ashlee@onosfw.com> | 2015-09-09 22:21:41 -0700 |
---|---|---|
committer | Ashlee Young <ashlee@onosfw.com> | 2015-09-09 22:21:41 -0700 |
commit | 8879b125d26e8db1a5633de5a9c692eb2d1c4f83 (patch) | |
tree | c7259d85a991b83dfa85ab2e339360669fc1f58e /framework/src/suricata/src/defrag-config.c | |
parent | 13d05bc8458758ee39cb829098241e89616717ee (diff) |
suricata checkin based on commit id a4bce14770beee46a537eda3c3f6e8e8565d5d0a
Change-Id: I9a214fa0ee95e58fc640e50bd604dac7f42db48f
Diffstat (limited to 'framework/src/suricata/src/defrag-config.c')
-rw-r--r-- | framework/src/suricata/src/defrag-config.c | 162 |
1 files changed, 162 insertions, 0 deletions
diff --git a/framework/src/suricata/src/defrag-config.c b/framework/src/suricata/src/defrag-config.c new file mode 100644 index 00000000..5bc4be36 --- /dev/null +++ b/framework/src/suricata/src/defrag-config.c @@ -0,0 +1,162 @@ +/* Copyright (C) 2007-2013 Open Information Security Foundation + * + * You can copy, redistribute or modify this Program under the terms of + * the GNU General Public License version 2 as published by the Free + * Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * version 2 along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + */ + +/** + * \file + * + * \author Giuseppe Longo <giuseppelng@gmail.com> + * + */ + +#include "suricata-common.h" +#include "queue.h" +#include "suricata.h" +#include "conf.h" +#include "util-debug.h" +#include "util-misc.h" +#include "defrag-config.h" + +static SCRadixTree *defrag_tree = NULL; + +static int default_timeout = 0; + +static void DefragPolicyFreeUserData(void *data) +{ + if (data != NULL) + SCFree(data); + + return; +} + +static void DefragPolicyAddHostInfo(char *host_ip_range, uint64_t timeout) +{ + uint64_t *user_data = NULL; + + if ( (user_data = SCMalloc(sizeof(uint64_t))) == NULL) { + SCLogError(SC_ERR_FATAL, "Error allocating memory. Exiting"); + exit(EXIT_FAILURE); + } + + *user_data = timeout; + + if (strchr(host_ip_range, ':') != NULL) { + SCLogDebug("adding ipv6 host %s", host_ip_range); + if (SCRadixAddKeyIPV6String(host_ip_range, defrag_tree, (void *)user_data) == NULL) { + SCLogWarning(SC_ERR_INVALID_VALUE, + "failed to add ipv6 host %s", host_ip_range); + } + } else { + SCLogDebug("adding ipv4 host %s", host_ip_range); + if (SCRadixAddKeyIPV4String(host_ip_range, defrag_tree, (void *)user_data) == NULL) { + SCLogWarning(SC_ERR_INVALID_VALUE, + "failed to add ipv4 host %s", host_ip_range); + } + } +} + +static int DefragPolicyGetIPv4HostTimeout(uint8_t *ipv4_addr) +{ + void *user_data = NULL; + (void)SCRadixFindKeyIPV4BestMatch(ipv4_addr, defrag_tree, &user_data); + if (user_data == NULL) + return -1; + + return *((int *)user_data); +} + +static int DefragPolicyGetIPv6HostTimeout(uint8_t *ipv6_addr) +{ + void *user_data = NULL; + (void)SCRadixFindKeyIPV6BestMatch(ipv6_addr, defrag_tree, &user_data); + if (user_data == NULL) + return -1; + + return *((int *)user_data); +} + +int DefragPolicyGetHostTimeout(Packet *p) +{ + int timeout = 0; + + if (PKT_IS_IPV4(p)) + timeout = DefragPolicyGetIPv4HostTimeout((uint8_t *)GET_IPV4_DST_ADDR_PTR(p)); + else if (PKT_IS_IPV6(p)) + timeout = DefragPolicyGetIPv6HostTimeout((uint8_t *)GET_IPV6_DST_ADDR(p)); + + if (timeout <= 0) + timeout = default_timeout; + + return timeout; +} + +static void DefragParseParameters(ConfNode *n) +{ + ConfNode *si; + uint64_t timeout = 0; + + TAILQ_FOREACH(si, &n->head, next) { + if (strcasecmp("timeout", si->name) == 0) { + SCLogDebug("timeout value %s", si->val); + if (ParseSizeStringU64(si->val, &timeout) < 0) { + SCLogError(SC_ERR_SIZE_PARSE, "Error parsing timeout " + "from conf file"); + } + } + if (strcasecmp("address", si->name) == 0) { + ConfNode *pval; + TAILQ_FOREACH(pval, &si->head, next) { + DefragPolicyAddHostInfo(pval->val, timeout); + } + } + } +} + +void DefragSetDefaultTimeout(intmax_t timeout) +{ + default_timeout = timeout; + SCLogDebug("default timeout %d", default_timeout); +} + +void DefragPolicyLoadFromConfig(void) +{ + SCEnter(); + + defrag_tree = SCRadixCreateRadixTree(DefragPolicyFreeUserData, NULL); + if (defrag_tree == NULL) { + SCLogError(SC_ERR_MEM_ALLOC, + "Can't alloc memory for the defrag config tree."); + exit(EXIT_FAILURE); + } + + ConfNode *server_config = ConfGetNode("defrag.host-config"); + if (server_config == NULL) { + SCLogDebug("failed to read host config"); + SCReturn; + } + + SCLogDebug("configuring host config %p", server_config); + ConfNode *sc; + + TAILQ_FOREACH(sc, &server_config->head, next) { + ConfNode *p = NULL; + + TAILQ_FOREACH(p, &sc->head, next) { + SCLogDebug("parsing configuration for %s", p->name); + DefragParseParameters(p); + } + } +} |