ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/util.h
(Generate patch)

Comparing gvpe/src/util.h (file contents):
Revision 1.1 by pcg, Sat Mar 1 15:53:03 2003 UTC vs.
Revision 1.10 by pcg, Thu Oct 16 14:12:00 2003 UTC

1/* 1/*
2 util.h -- process management and other utility functions 2 util.h -- process management and other utility functions
3 Copyright (C) 1998-2002 Ivo Timmermans <ivo@o2w.nl> 3 Copyright (C) 1998-2002 Ivo Timmermans <ivo@o2w.nl>
4 2000-2002 Guus Sliepen <guus@sliepen.eu.org> 4 2000-2002 Guus Sliepen <guus@sliepen.eu.org>
5 2003 Marc Lehmannn <pcg@goof.com> 5 2003 Marc Lehmann <pcg@goof.com>
6 6
7 This program is free software; you can redistribute it and/or modify 7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by 8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or 9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version. 10 (at your option) any later version.
20*/ 20*/
21 21
22#ifndef UTIL_H__ 22#ifndef UTIL_H__
23#define UTIL_H__ 23#define UTIL_H__
24 24
25#include <sys/socket.h> 25#include "gettext.h"
26#include <netinet/in.h>
27 26
28#include <map> 27#include "slog.h"
29
30#include "device.h" 28#include "iom.h"
31
32#define SOCKADDR sockaddr_in // this is lame, I know
33 29
34/* 30/*
35 * check for an existing vped for this net, and write pid to pidfile 31 * check for an existing vped for this net, and write pid to pidfile
36 */ 32 */
37extern int write_pidfile (void); 33extern int write_pidfile (void);
54/* 50/*
55 * check wether the given path is an absolute pathname 51 * check wether the given path is an absolute pathname
56 */ 52 */
57#define ABSOLUTE_PATH(c) ((c)[0] == '/') 53#define ABSOLUTE_PATH(c) ((c)[0] == '/')
58 54
59static inline void 55typedef u8 mac[6];
60id2mac (unsigned int id, void *m)
61{
62 mac &p = *(mac *)m;
63 56
64 p[0] = 0xfe; 57extern void id2mac (unsigned int id, void *m);
65 p[1] = 0xfd;
66 p[2] = 0x80;
67 p[3] = 0x00;
68 p[4] = id >> 8;
69 p[5] = id;
70}
71 58
72#define mac2id(p) (p[0] & 0x01 ? 0 : (p[4] << 8) | p[5]) 59#define mac2id(p) ((p)[0] & 0x01 ? 0 : ((p)[4] << 8) | (p)[5])
73 60
74// a very simple fifo pkt-queue 61struct sliding_window {
75class pkt_queue 62 u32 v[(WINDOWSIZE + 31) / 32];
76 { 63 u32 seq;
77 tap_packet *queue[QUEUEDEPTH];
78 int i, j;
79 64
80 public: 65 void reset (u32 seqno)
81
82 void put (tap_packet *p);
83 tap_packet *get ();
84
85 pkt_queue ();
86 ~pkt_queue ();
87 };
88
89struct sockinfo
90 {
91 u32 host;
92 u16 port;
93
94 void set (const SOCKADDR *sa)
95 { 66 {
96 host = sa->sin_addr.s_addr; 67 memset (v, -1, sizeof v);
97 port = sa->sin_port; 68 seq = seqno;
98 } 69 }
99 70
100 sockinfo() 71 bool recv_ok (u32 seqno)
101 { 72 {
102 host = port = 0; 73 if (seqno <= seq - WINDOWSIZE)
74 slog (L_ERR, _("received duplicate or outdated packet (received %08lx, expected %08lx)\n"
75 "possible replay attack, or just massive packet reordering"), seqno, seq + 1);//D
76 else if (seqno > seq + WINDOWSIZE)
77 slog (L_ERR, _("received duplicate or out-of-sync packet (received %08lx, expected %08lx)\n"
78 "possible replay attack, or just massive packet loss"), seqno, seq + 1);//D
79 else
80 {
81 while (seqno > seq)
82 {
83 seq++;
84
85 u32 s = seq % WINDOWSIZE;
86 u32 *cell = v + (s >> 5);
87 u32 mask = 1 << (s & 31);
88
89 *cell &= ~mask;
90 }
91
92 u32 s = seqno % WINDOWSIZE;
93 u32 *cell = v + (s >> 5);
94 u32 mask = 1 << (s & 31);
95
96 if (*cell & mask)
97 {
98 slog (L_ERR, _("received duplicate packet (received %08lx, expected %08lx)\n"
99 "possible replay attack, or just packet duplication"), seqno, seq + 1);//D
100 return false;
101 }
102 else
103 {
104 *cell |= mask;
105 return true;
106 }
107 }
103 } 108 }
109};
104 110
105 sockinfo(const SOCKADDR &sa) 111typedef callback0<const char *> run_script_cb;
106 {
107 set (&sa);
108 }
109 112
110 sockinfo(const SOCKADDR *sa) 113// run a shell script (or actually an external program).
111 { 114void run_script (const run_script_cb &cb, bool wait);
112 set (sa);
113 }
114 115
115 SOCKADDR *sa() 116#if ENABLE_HTTP_PROXY
116 { 117u8 *base64_encode (const u8 *data, unsigned int len);
117 static SOCKADDR sa; 118#endif
118
119 sa.sin_family = AF_INET;
120 sa.sin_port = port;
121 sa.sin_addr.s_addr = host;
122
123 return &sa;
124 }
125
126 operator const char *();
127 };
128
129inline bool
130operator == (const sockinfo &a, const sockinfo &b)
131{
132 return a.host == b.host && a.port == b.port;
133}
134
135inline bool
136operator < (const sockinfo &a, const sockinfo &b)
137{
138 return a.host < b.host
139 || (a.host == b.host && a.port < b.port);
140}
141
142// only do action once every x seconds per host.
143// currently this is quite a slow implementation,
144// but suffices for normal operation.
145struct u32_rate_limiter : private map<u32, time_t>
146 {
147 int every;
148
149 bool can (u32 host);
150
151 u32_rate_limiter (time_t every = 1)
152 {
153 this->every = every;
154 }
155 };
156
157struct net_rate_limiter : u32_rate_limiter
158 {
159 bool can (SOCKADDR *sa) { return u32_rate_limiter::can((u32)sa->sin_addr.s_addr); }
160 bool can (sockinfo &si) { return u32_rate_limiter::can((u32)si.host); }
161
162 net_rate_limiter (time_t every) : u32_rate_limiter (every) {}
163 };
164 119
165#endif 120#endif
166 121

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines