--- gvpe/src/util.h	2003/03/01 15:53:03	1.1
+++ gvpe/src/util.h	2003/04/02 05:15:00	1.6
@@ -22,15 +22,9 @@
 #ifndef UTIL_H__
 #define UTIL_H__
 
-#include <sys/socket.h>
-#include <netinet/in.h>
-
-#include <map>
-
+#include "iom.h"
 #include "device.h"
 
-#define SOCKADDR	sockaddr_in	// this is lame, I know
-
 /*
  * check for an existing vped for this net, and write pid to pidfile
  */
@@ -71,96 +65,60 @@
 
 #define mac2id(p) (p[0] & 0x01 ? 0 : (p[4] << 8) | p[5])
 
-// a very simple fifo pkt-queue
-class pkt_queue
-  {
-    tap_packet *queue[QUEUEDEPTH];
-    int i, j;
-
-  public:
-
-    void put (tap_packet *p);
-    tap_packet *get ();
-
-    pkt_queue ();
-    ~pkt_queue ();
-  };
-
-struct sockinfo
-  {
-    u32 host;
-    u16 port;
-
-    void set (const SOCKADDR *sa)
-    {
-      host = sa->sin_addr.s_addr;
-      port = sa->sin_port;
-    }
+struct sliding_window {
+  u32 v[(WINDOWSIZE + 31) / 32];
+  u32 seq;
 
-    sockinfo()
+  void reset (u32 seqno)
     {
-      host = port = 0;
+      memset (v, -1, sizeof v);
+      seq = seqno;
     }
 
-    sockinfo(const SOCKADDR &sa)
+  bool recv_ok (u32 seqno)
     {
-      set (&sa);
+      if (seqno <= seq - WINDOWSIZE)
+        slog (L_ERR, _("received duplicate or outdated packet (received %08lx, expected %08lx)\n"
+                       "possible replay attack, or just massive packet reordering"), seqno, seq + 1);//D
+      else if (seqno > seq + WINDOWSIZE)
+        slog (L_ERR, _("received duplicate or out-of-sync packet (received %08lx, expected %08lx)\n"
+                       "possible replay attack, or just massive packet loss"), seqno, seq + 1);//D
+      else
+        {
+          while (seqno > seq)
+            {
+              seq++;
+
+              u32 s = seq % WINDOWSIZE;
+              u32 *cell = v + (s >> 5);
+              u32 mask = 1 << (s & 31);
+
+              *cell &= ~mask;
+            }
+
+          u32 s = seqno % WINDOWSIZE;
+          u32 *cell = v + (s >> 5);
+          u32 mask = 1 << (s & 31);
+
+          if (*cell & mask)
+            {
+              slog (L_ERR, _("received duplicate packet (received %08lx, expected %08lx)\n"
+                             "possible replay attack, or just packet duplication"), seqno, seq + 1);//D
+              return false;
+            }
+          else
+            {
+              *cell |= mask;
+              return true;
+            }
+        }
     }
+};
 
-    sockinfo(const SOCKADDR *sa)
-    {
-      set (sa);
-    }
-
-    SOCKADDR *sa()
-    {
-      static SOCKADDR sa;
-
-      sa.sin_family = AF_INET;
-      sa.sin_port = port;
-      sa.sin_addr.s_addr = host;
-
-      return &sa;
-    }
-
-    operator const char *();
-  };
-
-inline bool
-operator == (const sockinfo &a, const sockinfo &b)
-{
-  return a.host == b.host && a.port == b.port;
-}
-
-inline bool
-operator < (const sockinfo &a, const sockinfo &b)
-{
-  return a.host < b.host 
-         || (a.host == b.host && a.port < b.port);
-}
-
-// only do action once every x seconds per host.
-// currently this is quite a slow implementation,
-// but suffices for normal operation.
-struct u32_rate_limiter : private map<u32, time_t>
- {
-   int every;
-
-   bool can (u32 host);
-
-   u32_rate_limiter (time_t every = 1)
-   {
-     this->every = every;
-   }
- };
-
-struct net_rate_limiter : u32_rate_limiter
-  {
-    bool can (SOCKADDR *sa) { return u32_rate_limiter::can((u32)sa->sin_addr.s_addr); }
-    bool can (sockinfo &si) { return u32_rate_limiter::can((u32)si.host); }
+typedef callback0<const char *> run_script_cb;
 
-    net_rate_limiter (time_t every) : u32_rate_limiter (every) {}
-  };
+// run a shell script (or actually an external program).
+void run_script (const run_script_cb &cb, bool wait);
 
 #endif