[ViewVC] Diff of: cvs/gvpe/src/util.h

Comparing gvpe/src/util.h (file contents):
Revision 1.1 by pcg, Sat Mar 1 15:53:03 2003 UTC vs.
Revision 1.3 by pcg, Fri Mar 21 23:17:01 2003 UTC

 #include <sys/socket.h>
 #include <netinet/in.h>
 #include <map>
+#include "iom.h"
 #include "device.h"
 #define SOCKADDR	sockaddr_in	// this is lame, I know
 /*
   p[4] = id >> 8;
   p[5] = id;
 }
 #define mac2id(p) (p[0] & 0x01 ? 0 : (p[4] << 8) | p[5])
-// a very simple fifo pkt-queue
-class pkt_queue
-  {
-    tap_packet *queue[QUEUEDEPTH];
-    int i, j;
-  public:
-    void put (tap_packet *p);
-    tap_packet *get ();
-    pkt_queue ();
-    ~pkt_queue ();
-  };
 struct sockinfo
   {
     u32 host;
     u16 port;
 {
   return a.host < b.host
          || (a.host == b.host && a.port < b.port);
 }
-// only do action once every x seconds per host.
+struct sliding_window {
-// currently this is quite a slow implementation,
+  u32 v[(WINDOWSIZE + 31) / 32];
-// but suffices for normal operation.
+  u32 seq;
-struct u32_rate_limiter : private map<u32, time_t>
- {
-   int every;
-   bool can (u32 host);
+  void reset (u32 seqno)
+    {
+      memset (v, -1, sizeof v);
+      seq = seqno;
+    }
-   u32_rate_limiter (time_t every = 1)
+  bool recv_ok (u32 seqno)
-   {
+    {
-     this->every = every;
+      if (seqno <= seq - WINDOWSIZE)
-   }
+        slog (L_ERR, _("received duplicate or outdated packet (received %08lx, expected %08lx)\n"
- };
+                       "possible replay attack, or just massive packet reordering"), seqno, seq + 1);//D
+      else if (seqno > seq + WINDOWSIZE)
+        slog (L_ERR, _("received duplicate or out-of-sync packet (received %08lx, expected %08lx)\n"
+                       "possible replay attack, or just massive packet loss"), seqno, seq + 1);//D
+      else
+        {
+          while (seqno > seq)
+            {
+              seq++;
-struct net_rate_limiter : u32_rate_limiter
+              u32 s = seq % WINDOWSIZE;
-  {
+              u32 *cell = v + (s >> 5);
-    bool can (SOCKADDR *sa) { return u32_rate_limiter::can((u32)sa->sin_addr.s_addr); }
+              u32 mask = 1 << (s & 31);
-    bool can (sockinfo &si) { return u32_rate_limiter::can((u32)si.host); }
-    net_rate_limiter (time_t every) : u32_rate_limiter (every) {}
+              *cell &= ~mask;
-  };
+            }
+          u32 s = seqno % WINDOWSIZE;
+          u32 *cell = v + (s >> 5);
+          u32 mask = 1 << (s & 31);
+          //printf ("received seqno %08lx, seq %08lx, mask %08lx is %08lx\n", seqno, seq, mask, ismask);
+          if (*cell & mask)
+            {
+              slog (L_ERR, _("received duplicate packet (received %08lx, expected %08lx)\n"
+                             "possible replay attack, or just packet duplication"), seqno, seq + 1);//D
+              return false;
+            }
+          else
+            {
+              *cell |= mask;
+              return true;
+            }
+        }
+    }
+};
 #endif

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/util.h (file contents): Revision 1.1 by pcg, Sat Mar 1 15:53:03 2003 UTC vs. Revision 1.3 by pcg, Fri Mar 21 23:17:01 2003 UTC

Diff Legend

Comparing gvpe/src/util.h (file contents):
Revision 1.1 by pcg, Sat Mar 1 15:53:03 2003 UTC vs.
Revision 1.3 by pcg, Fri Mar 21 23:17:01 2003 UTC