diff options
Diffstat (limited to 'src/defrag-config.c')
-rw-r--r-- | src/defrag-config.c | 168 |
1 files changed, 168 insertions, 0 deletions
diff --git a/src/defrag-config.c b/src/defrag-config.c new file mode 100644 index 0000000..7e2ae0c --- /dev/null +++ b/src/defrag-config.c @@ -0,0 +1,168 @@ +/* Copyright (C) 2007-2013 Open Information Security Foundation + * + * You can copy, redistribute or modify this Program under the terms of + * the GNU General Public License version 2 as published by the Free + * Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * version 2 along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + */ + +/** + * \file + * + * \author Giuseppe Longo <giuseppelng@gmail.com> + * + */ + +#include "suricata-common.h" +#include "defrag-config.h" +#include "util-misc.h" +#include "util-radix-tree.h" + +static SCRadixTree *defrag_tree = NULL; + +static int default_timeout = 0; + +static void DefragPolicyFreeUserData(void *data) +{ + if (data != NULL) + SCFree(data); + + return; +} + +static void DefragPolicyAddHostInfo(char *host_ip_range, uint64_t timeout) +{ + uint64_t *user_data = NULL; + + if ( (user_data = SCMalloc(sizeof(uint64_t))) == NULL) { + FatalError("Error allocating memory. Exiting"); + } + + *user_data = timeout; + + if (strchr(host_ip_range, ':') != NULL) { + SCLogDebug("adding ipv6 host %s", host_ip_range); + if (!SCRadixAddKeyIPV6String(host_ip_range, defrag_tree, (void *)user_data)) { + SCFree(user_data); + if (sc_errno != SC_EEXIST) { + SCLogWarning("failed to add ipv6 host %s", host_ip_range); + } + } + } else { + SCLogDebug("adding ipv4 host %s", host_ip_range); + if (!SCRadixAddKeyIPV4String(host_ip_range, defrag_tree, (void *)user_data)) { + SCFree(user_data); + if (sc_errno != SC_EEXIST) { + SCLogWarning("failed to add ipv4 host %s", host_ip_range); + } + } + } +} + +static int DefragPolicyGetIPv4HostTimeout(uint8_t *ipv4_addr) +{ + void *user_data = NULL; + (void)SCRadixFindKeyIPV4BestMatch(ipv4_addr, defrag_tree, &user_data); + if (user_data == NULL) + return -1; + + return *((int *)user_data); +} + +static int DefragPolicyGetIPv6HostTimeout(uint8_t *ipv6_addr) +{ + void *user_data = NULL; + (void)SCRadixFindKeyIPV6BestMatch(ipv6_addr, defrag_tree, &user_data); + if (user_data == NULL) + return -1; + + return *((int *)user_data); +} + +int DefragPolicyGetHostTimeout(Packet *p) +{ + int timeout = 0; + + if (PKT_IS_IPV4(p)) + timeout = DefragPolicyGetIPv4HostTimeout((uint8_t *)GET_IPV4_DST_ADDR_PTR(p)); + else if (PKT_IS_IPV6(p)) + timeout = DefragPolicyGetIPv6HostTimeout((uint8_t *)GET_IPV6_DST_ADDR(p)); + + if (timeout <= 0) + timeout = default_timeout; + + return timeout; +} + +static void DefragParseParameters(ConfNode *n) +{ + ConfNode *si; + uint64_t timeout = 0; + + TAILQ_FOREACH(si, &n->head, next) { + if (strcasecmp("timeout", si->name) == 0) { + SCLogDebug("timeout value %s", si->val); + if (ParseSizeStringU64(si->val, &timeout) < 0) { + SCLogError("Error parsing timeout " + "from conf file"); + } + } + if (strcasecmp("address", si->name) == 0) { + ConfNode *pval; + TAILQ_FOREACH(pval, &si->head, next) { + DefragPolicyAddHostInfo(pval->val, timeout); + } + } + } +} + +void DefragSetDefaultTimeout(intmax_t timeout) +{ + default_timeout = timeout; + SCLogDebug("default timeout %d", default_timeout); +} + +void DefragPolicyLoadFromConfig(void) +{ + SCEnter(); + + defrag_tree = SCRadixCreateRadixTree(DefragPolicyFreeUserData, NULL); + if (defrag_tree == NULL) { + FatalError("Can't alloc memory for the defrag config tree."); + } + + ConfNode *server_config = ConfGetNode("defrag.host-config"); + if (server_config == NULL) { + SCLogDebug("failed to read host config"); + SCReturn; + } + + SCLogDebug("configuring host config %p", server_config); + ConfNode *sc; + + TAILQ_FOREACH(sc, &server_config->head, next) { + ConfNode *p = NULL; + + TAILQ_FOREACH(p, &sc->head, next) { + SCLogDebug("parsing configuration for %s", p->name); + DefragParseParameters(p); + } + } +} + +void DefragTreeDestroy(void) +{ + if (defrag_tree != NULL) { + SCRadixReleaseRadixTree(defrag_tree); + } + defrag_tree = NULL; +} |