aboutsummaryrefslogtreecommitdiffstats
path: root/framework/src/suricata/src/util-mpm-ac.h
diff options
context:
space:
mode:
authorAshlee Young <ashlee@onosfw.com>2015-09-09 22:21:41 -0700
committerAshlee Young <ashlee@onosfw.com>2015-09-09 22:21:41 -0700
commit8879b125d26e8db1a5633de5a9c692eb2d1c4f83 (patch)
treec7259d85a991b83dfa85ab2e339360669fc1f58e /framework/src/suricata/src/util-mpm-ac.h
parent13d05bc8458758ee39cb829098241e89616717ee (diff)
suricata checkin based on commit id a4bce14770beee46a537eda3c3f6e8e8565d5d0a
Change-Id: I9a214fa0ee95e58fc640e50bd604dac7f42db48f
Diffstat (limited to 'framework/src/suricata/src/util-mpm-ac.h')
-rw-r--r--framework/src/suricata/src/util-mpm-ac.h221
1 files changed, 221 insertions, 0 deletions
diff --git a/framework/src/suricata/src/util-mpm-ac.h b/framework/src/suricata/src/util-mpm-ac.h
new file mode 100644
index 00000000..a837f5f0
--- /dev/null
+++ b/framework/src/suricata/src/util-mpm-ac.h
@@ -0,0 +1,221 @@
+/* Copyright (C) 2007-2014 Open Information Security Foundation
+ *
+ * You can copy, redistribute or modify this Program under the terms of
+ * the GNU General Public License version 2 as published by the Free
+ * Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * version 2 along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ */
+
+/**
+ * \file
+ *
+ * \author Anoop Saldanha <anoopsaldanha@gmail.com>
+ *
+ */
+
+#ifndef __UTIL_MPM_AC__H__
+#define __UTIL_MPM_AC__H__
+
+#define SC_AC_STATE_TYPE_U16 uint16_t
+#define SC_AC_STATE_TYPE_U32 uint32_t
+
+#ifdef __SC_CUDA_SUPPORT__
+#include "suricata-common.h"
+#include "util-cuda.h"
+#include "util-cuda-vars.h"
+#include "decode.h"
+#include "util-cuda-buffer.h"
+#include "util-mpm.h"
+#include "flow.h"
+#endif /* __SC_CUDA_SUPPORT__ */
+
+typedef struct SCACPattern_ {
+ /* length of the pattern */
+ uint16_t len;
+ /* flags decribing the pattern */
+ uint8_t flags;
+ /* holds the original pattern that was added */
+ uint8_t *original_pat;
+ /* case sensitive */
+ uint8_t *cs;
+ /* case INsensitive */
+ uint8_t *ci;
+ /* pattern id */
+ uint32_t id;
+
+ /* sid(s) for this pattern */
+ uint32_t sids_size;
+ SigIntId *sids;
+
+ struct SCACPattern_ *next;
+} SCACPattern;
+
+typedef struct SCACPatternList_ {
+ uint8_t *cs;
+ uint16_t patlen;
+
+ /* sid(s) for this pattern */
+ uint32_t sids_size;
+ SigIntId *sids;
+} SCACPatternList;
+
+typedef struct SCACOutputTable_ {
+ /* list of pattern sids */
+ uint32_t *pids;
+ /* no of entries we have in pids */
+ uint32_t no_of_entries;
+} SCACOutputTable;
+
+typedef struct SCACCtx_ {
+ /* hash used during ctx initialization */
+ SCACPattern **init_hash;
+
+ /* pattern arrays. We need this only during the goto table creation phase */
+ SCACPattern **parray;
+
+ /* no of states used by ac */
+ uint32_t state_count;
+ /* the all important memory hungry state_table */
+ SC_AC_STATE_TYPE_U16 (*state_table_u16)[256];
+ /* the all important memory hungry state_table */
+ SC_AC_STATE_TYPE_U32 (*state_table_u32)[256];
+
+ /* goto_table, failure table and output table. Needed to create state_table.
+ * Will be freed, once we have created the state_table */
+ int32_t (*goto_table)[256];
+ int32_t *failure_table;
+ SCACOutputTable *output_table;
+ SCACPatternList *pid_pat_list;
+
+ /* the size of each state */
+ uint16_t single_state_size;
+ uint16_t max_pat_id;
+
+ uint32_t allocated_state_count;
+
+#ifdef __SC_CUDA_SUPPORT__
+ CUdeviceptr state_table_u16_cuda;
+ CUdeviceptr state_table_u32_cuda;
+#endif /* __SC_CUDA_SUPPORT__ */
+} SCACCtx;
+
+typedef struct SCACThreadCtx_ {
+ /* the total calls we make to the search function */
+ uint32_t total_calls;
+ /* the total patterns that we ended up matching against */
+ uint64_t total_matches;
+} SCACThreadCtx;
+
+void MpmACRegister(void);
+
+
+#ifdef __SC_CUDA_SUPPORT__
+
+#define MPM_AC_CUDA_MODULE_NAME "ac_cuda"
+#define MPM_AC_CUDA_MODULE_CUDA_BUFFER_NAME "ac_cuda_cb"
+
+static inline void CudaBufferPacket(CudaThreadVars *ctv, Packet *p)
+{
+ if (p->cuda_pkt_vars.cuda_mpm_enabled) {
+ while (!p->cuda_pkt_vars.cuda_done) {
+ SCMutexLock(&p->cuda_pkt_vars.cuda_mutex);
+ if (p->cuda_pkt_vars.cuda_done) {
+ SCMutexUnlock(&p->cuda_pkt_vars.cuda_mutex);
+ break;
+ } else {
+ SCCondWait(&p->cuda_pkt_vars.cuda_cond, &p->cuda_pkt_vars.cuda_mutex);
+ SCMutexUnlock(&p->cuda_pkt_vars.cuda_mutex);
+ }
+ }
+ }
+ p->cuda_pkt_vars.cuda_done = 0;
+
+ if (p->payload_len == 0 ||
+ (p->flags & (PKT_NOPAYLOAD_INSPECTION & PKT_NOPACKET_INSPECTION)) ||
+ (p->flags & PKT_ALLOC) ||
+ (ctv->data_buffer_size_min_limit != 0 && p->payload_len < ctv->data_buffer_size_min_limit) ||
+ (p->payload_len > ctv->data_buffer_size_max_limit && ctv->data_buffer_size_max_limit != 0) ) {
+ p->cuda_pkt_vars.cuda_mpm_enabled = 0;
+ return;
+ }
+
+ MpmCtx *mpm_ctx = NULL;
+ if (p->proto == IPPROTO_TCP) {
+ if (p->flowflags & FLOW_PKT_TOSERVER)
+ mpm_ctx = ctv->mpm_proto_tcp_ctx_ts;
+ else
+ mpm_ctx = ctv->mpm_proto_tcp_ctx_tc;
+ } else if (p->proto == IPPROTO_UDP) {
+ if (p->flowflags & FLOW_PKT_TOSERVER)
+ mpm_ctx = ctv->mpm_proto_udp_ctx_ts;
+ else
+ mpm_ctx = ctv->mpm_proto_udp_ctx_tc;
+ } else {
+ mpm_ctx = ctv->mpm_proto_other_ctx;
+ }
+ if (mpm_ctx == NULL || mpm_ctx->pattern_cnt == 0) {
+ p->cuda_pkt_vars.cuda_mpm_enabled = 0;
+ return;
+ }
+
+#if __WORDSIZE==64
+ CudaBufferSlice *slice = CudaBufferGetSlice(ctv->cuda_ac_cb,
+ p->payload_len + sizeof(uint64_t) + sizeof(CUdeviceptr),
+ (void *)p);
+ if (slice == NULL) {
+ SCLogError(SC_ERR_FATAL, "Error retrieving slice. Please report "
+ "this to dev.");
+ p->cuda_pkt_vars.cuda_mpm_enabled = 0;
+ return;
+ }
+ *((uint64_t *)(slice->buffer + slice->start_offset)) = p->payload_len;
+ *((CUdeviceptr *)(slice->buffer + slice->start_offset + sizeof(uint64_t))) = ((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda;
+ memcpy(slice->buffer + slice->start_offset + sizeof(uint64_t) + sizeof(CUdeviceptr), p->payload, p->payload_len);
+#else
+ CudaBufferSlice *slice = CudaBufferGetSlice(ctv->cuda_ac_cb,
+ p->payload_len + sizeof(uint32_t) + sizeof(CUdeviceptr),
+ (void *)p);
+ if (slice == NULL) {
+ SCLogError(SC_ERR_FATAL, "Error retrieving slice. Please report "
+ "this to dev.");
+ p->cuda_pkt_vars.cuda_mpm_enabled = 0;
+ return;
+ }
+ *((uint32_t *)(slice->buffer + slice->start_offset)) = p->payload_len;
+ *((CUdeviceptr *)(slice->buffer + slice->start_offset + sizeof(uint32_t))) = ((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda;
+ memcpy(slice->buffer + slice->start_offset + sizeof(uint32_t) + sizeof(CUdeviceptr), p->payload, p->payload_len);
+#endif
+ p->cuda_pkt_vars.cuda_mpm_enabled = 1;
+ SC_ATOMIC_SET(slice->done, 1);
+
+ SCLogDebug("cuda ac buffering packet %p, payload_len - %"PRIu16" and deviceptr - %"PRIu64"\n",
+ p, p->payload_len, (unsigned long)((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda);
+
+ return;
+}
+
+void MpmACCudaRegister(void);
+void SCACConstructBoth16and32StateTables(void);
+int MpmCudaBufferSetup(void);
+int MpmCudaBufferDeSetup(void);
+void SCACCudaStartDispatcher(void);
+void SCACCudaKillDispatcher(void);
+uint32_t SCACCudaPacketResultsProcessing(Packet *p, MpmCtx *mpm_ctx,
+ PatternMatcherQueue *pmq);
+void DetermineCudaStateTableSize(DetectEngineCtx *de_ctx);
+
+void CudaReleasePacket(Packet *p);
+
+#endif /* __SC_CUDA_SUPPORT__ */
+
+
+#endif /* __UTIL_MPM_AC__H__ */