1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
/* Copyright (C) 2011-2012 Open Information Security Foundation
*
* You can copy, redistribute or modify this Program under the terms of
* the GNU General Public License version 2 as published by the Free
* Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* version 2 along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
* 02110-1301, USA.
*/
/**
* \file
*
* \author Eric Leblond <eric@regit.org>
*
* Util functions for checksum.
*/
#include "suricata-common.h"
#include "util-checksum.h"
int ReCalculateChecksum(Packet *p)
{
if (PKT_IS_IPV4(p)) {
if (PKT_IS_TCP(p)) {
/* TCP */
p->tcph->th_sum = 0;
p->tcph->th_sum = TCPChecksum(p->ip4h->s_ip_addrs,
(uint16_t *)p->tcph, (p->payload_len + TCP_GET_HLEN(p)), 0);
} else if (PKT_IS_UDP(p)) {
p->udph->uh_sum = 0;
p->udph->uh_sum = UDPV4Checksum(p->ip4h->s_ip_addrs,
(uint16_t *)p->udph, (p->payload_len + UDP_HEADER_LEN), 0);
}
/* IPV4 */
p->ip4h->ip_csum = 0;
p->ip4h->ip_csum = IPV4Checksum((uint16_t *)p->ip4h,
IPV4_GET_RAW_HLEN(p->ip4h), 0);
} else if (PKT_IS_IPV6(p)) {
/* just TCP for IPV6 */
if (PKT_IS_TCP(p)) {
p->tcph->th_sum = 0;
p->tcph->th_sum = TCPV6Checksum(p->ip6h->s_ip6_addrs,
(uint16_t *)p->tcph, (p->payload_len + TCP_GET_HLEN(p)), 0);
} else if (PKT_IS_UDP(p)) {
p->udph->uh_sum = 0;
p->udph->uh_sum = UDPV6Checksum(p->ip6h->s_ip6_addrs,
(uint16_t *)p->udph, (p->payload_len + UDP_HEADER_LEN), 0);
}
}
return 0;
}
/**
* \brief Check if the number of invalid checksums indicate checksum
* offloading in place.
*
* \retval 1 yes, offloading in place
* \retval 0 no, no offloading used
*/
int ChecksumAutoModeCheck(uint64_t thread_count,
uint64_t iface_count, uint64_t iface_fail)
{
if (thread_count == CHECKSUM_SAMPLE_COUNT) {
if (iface_fail != 0) {
if ((iface_count / iface_fail) < CHECKSUM_INVALID_RATIO) {
SCLogInfo("More than 1/%dth of packets have an invalid "
"checksum, assuming checksum offloading is used "
"(%"PRIu64"/%"PRIu64")",
CHECKSUM_INVALID_RATIO, iface_fail, iface_count);
return 1;
} else {
SCLogInfo("Less than 1/%dth of packets have an invalid "
"checksum, assuming checksum offloading is NOT used "
"(%"PRIu64"/%"PRIu64")", CHECKSUM_INVALID_RATIO,
iface_fail, iface_count);
}
} else {
SCLogInfo("No packets with invalid checksum, assuming "
"checksum offloading is NOT used");
}
}
return 0;
}
|
