diff options
Diffstat (limited to 'framework/src/suricata/src/runmode-erf-file.c')
-rw-r--r-- | framework/src/suricata/src/runmode-erf-file.c | 279 |
1 files changed, 0 insertions, 279 deletions
diff --git a/framework/src/suricata/src/runmode-erf-file.c b/framework/src/suricata/src/runmode-erf-file.c deleted file mode 100644 index 19dbb683..00000000 --- a/framework/src/suricata/src/runmode-erf-file.c +++ /dev/null @@ -1,279 +0,0 @@ -/* Copyright (C) 2007-2010 Open Information Security Foundation - * - * You can copy, redistribute or modify this Program under the terms of - * the GNU General Public License version 2 as published by the Free - * Software Foundation. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * version 2 along with this program; if not, write to the Free Software - * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA - * 02110-1301, USA. - */ - -#include "suricata-common.h" -#include "tm-threads.h" -#include "conf.h" -#include "runmodes.h" -#include "runmode-erf-file.h" -#include "output.h" - -#include "detect-engine.h" - -#include "util-debug.h" -#include "util-time.h" -#include "util-cpu.h" -#include "util-affinity.h" - -#include "util-runmodes.h" - -static const char *default_mode; - -const char *RunModeErfFileGetDefaultMode(void) -{ - return default_mode; -} - -void RunModeErfFileRegister(void) -{ - default_mode = "autofp"; - - RunModeRegisterNewRunMode(RUNMODE_ERF_FILE, "single", - "Single threaded ERF file mode", - RunModeErfFileSingle); - - RunModeRegisterNewRunMode(RUNMODE_ERF_FILE, "autofp", - "Multi threaded ERF file mode. Packets from " - "each flow are assigned to a single detect thread", - RunModeErfFileAutoFp); - - return; -} - -int RunModeErfFileSingle(void) -{ - char *file; - - SCEnter(); - - if (ConfGet("erf-file.file", &file) == 0) { - SCLogError(SC_ERR_RUNMODE, "Failed to get erf-file.file from config."); - exit(EXIT_FAILURE); - } - - RunModeInitialize(); - - TimeModeSetOffline(); - - /* Basically the same setup as PCAP files. */ - - ThreadVars *tv = TmThreadCreatePacketHandler("ErfFile", - "packetpool", "packetpool", - "packetpool", "packetpool", - "pktacqloop"); - if (tv == NULL) { - printf("ERROR: TmThreadsCreate failed\n"); - exit(EXIT_FAILURE); - } - - TmModule *tm_module = TmModuleGetByName("ReceiveErfFile"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName failed for ReceiveErfFile\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, file); - - tm_module = TmModuleGetByName("DecodeErfFile"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName DecodeErfFile failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, NULL); - - tm_module = TmModuleGetByName("StreamTcp"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName StreamTcp failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, NULL); - - if (DetectEngineEnabled()) { - tm_module = TmModuleGetByName("Detect"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName Detect failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, NULL); - } - - SetupOutputs(tv); - - if (TmThreadSpawn(tv) != TM_ECODE_OK) { - printf("ERROR: TmThreadSpawn failed\n"); - exit(EXIT_FAILURE); - } - - SCLogInfo("RunModeErfFileSingle initialised"); - - SCReturnInt(0); -} - -int RunModeErfFileAutoFp(void) -{ - SCEnter(); - char tname[TM_THREAD_NAME_MAX]; - char qname[TM_QUEUE_NAME_MAX]; - uint16_t cpu = 0; - char *queues = NULL; - int thread; - - RunModeInitialize(); - RunmodeSetFlowStreamAsync(); - - char *file = NULL; - if (ConfGet("erf-file.file", &file) == 0) { - SCLogError(SC_ERR_RUNMODE, - "Failed retrieving erf-file.file from config"); - exit(EXIT_FAILURE); - } - - TimeModeSetOffline(); - - /* Available cpus */ - uint16_t ncpus = UtilCpuGetNumProcessorsOnline(); - - /* start with cpu 1 so that if we're creating an odd number of detect - * threads we're not creating the most on CPU0. */ - if (ncpus > 0) - cpu = 1; - - /* always create at least one thread */ - int thread_max = TmThreadGetNbThreads(DETECT_CPU_SET); - if (thread_max == 0) - thread_max = ncpus * threading_detect_ratio; - if (thread_max < 1) - thread_max = 1; - - queues = RunmodeAutoFpCreatePickupQueuesString(thread_max); - if (queues == NULL) { - SCLogError(SC_ERR_RUNMODE, "RunmodeAutoFpCreatePickupQueuesString failed"); - exit(EXIT_FAILURE); - } - - /* create the threads */ - ThreadVars *tv = - TmThreadCreatePacketHandler("ReceiveErfFile", - "packetpool", "packetpool", - queues, "flow", - "pktacqloop"); - SCFree(queues); - - if (tv == NULL) { - printf("ERROR: TmThreadsCreate failed\n"); - exit(EXIT_FAILURE); - } - TmModule *tm_module = TmModuleGetByName("ReceiveErfFile"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName failed for ReceiveErfFile\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, file); - - tm_module = TmModuleGetByName("DecodeErfFile"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName DecodeErfFile failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv, tm_module, NULL); - - if (threading_set_cpu_affinity) { - TmThreadSetCPUAffinity(tv, 0); - if (ncpus > 1) - TmThreadSetThreadPriority(tv, PRIO_MEDIUM); - } - - if (TmThreadSpawn(tv) != TM_ECODE_OK) { - printf("ERROR: TmThreadSpawn failed\n"); - exit(EXIT_FAILURE); - } - - for (thread = 0; thread < thread_max; thread++) { - snprintf(tname, sizeof(tname), "Detect%d", thread+1); - snprintf(qname, sizeof(qname), "pickup%d", thread+1); - - SCLogDebug("tname %s, qname %s", tname, qname); - - char *thread_name = SCStrdup(tname); - if (unlikely(thread_name == NULL)) { - printf("ERROR: Can't allocate thread name\n"); - exit(EXIT_FAILURE); - } - SCLogDebug("Assigning %s affinity to cpu %u", thread_name, cpu); - - ThreadVars *tv_detect_ncpu = - TmThreadCreatePacketHandler(thread_name, - qname, "flow", - "packetpool", "packetpool", - "varslot"); - if (tv_detect_ncpu == NULL) { - printf("ERROR: TmThreadsCreate failed\n"); - exit(EXIT_FAILURE); - } - tm_module = TmModuleGetByName("StreamTcp"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName StreamTcp failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv_detect_ncpu, tm_module, NULL); - - if (DetectEngineEnabled()) { - tm_module = TmModuleGetByName("Detect"); - if (tm_module == NULL) { - printf("ERROR: TmModuleGetByName Detect failed\n"); - exit(EXIT_FAILURE); - } - TmSlotSetFuncAppend(tv_detect_ncpu, tm_module, NULL); - } - - if (threading_set_cpu_affinity) { - TmThreadSetCPUAffinity(tv_detect_ncpu, (int)cpu); - /* If we have more than one core/cpu, the first Detect thread - * (at cpu 0) will have less priority (higher 'nice' value) - * In this case we will set the thread priority to +10 (default is 0) - */ - if (cpu == 0 && ncpus > 1) { - TmThreadSetThreadPriority(tv_detect_ncpu, PRIO_LOW); - } else if (ncpus > 1) { - TmThreadSetThreadPriority(tv_detect_ncpu, PRIO_MEDIUM); - } - } - - char *thread_group_name = SCStrdup("Detect"); - if (unlikely(thread_group_name == NULL)) { - printf("Error allocating memory\n"); - exit(EXIT_FAILURE); - } - tv_detect_ncpu->thread_group_name = thread_group_name; - - /* add outputs as well */ - SetupOutputs(tv_detect_ncpu); - - if (TmThreadSpawn(tv_detect_ncpu) != TM_ECODE_OK) { - printf("ERROR: TmThreadSpawn failed\n"); - exit(EXIT_FAILURE); - } - - if ((cpu + 1) == ncpus) - cpu = 0; - else - cpu++; - } - - SCLogInfo("RunModeErfFileAutoFp initialised"); - - SCReturnInt(0); -} |