2005-10-31 05:17:06 +00:00
|
|
|
/* -------------------------------------------------------------------------
|
|
|
|
* libtcp-portmon.h: tcp port monitoring library.
|
|
|
|
*
|
|
|
|
* Copyright (C) 2005 Philip Kovacs kovacsp3@comcast.net
|
|
|
|
*
|
2005-11-09 02:01:10 +00:00
|
|
|
* $Id$
|
|
|
|
*
|
2005-10-31 05:17:06 +00:00
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
|
|
* --------------------------------------------------------------------------- */
|
|
|
|
|
|
|
|
#ifndef LIBTCP_PORTMON_H
|
|
|
|
#define LIBTCP_PORTMON_H
|
|
|
|
|
2006-12-12 23:21:14 +00:00
|
|
|
#include <sys/types.h>
|
2006-03-16 17:57:53 +00:00
|
|
|
#include <sys/socket.h>
|
|
|
|
|
|
|
|
#include <arpa/inet.h>
|
2005-10-31 05:17:06 +00:00
|
|
|
#include <netinet/in.h>
|
|
|
|
#include <netinet/tcp.h>
|
2006-03-16 17:57:53 +00:00
|
|
|
|
|
|
|
#include <math.h>
|
|
|
|
#include <netdb.h>
|
2005-10-31 05:17:06 +00:00
|
|
|
#include <stdlib.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <string.h>
|
2006-03-16 17:57:53 +00:00
|
|
|
|
2006-12-09 05:40:08 +00:00
|
|
|
#include <glib.h>
|
|
|
|
|
|
|
|
#define TCP_CONNECTION_STARTING_AGE 1 /* connection deleted if unseen again after this # of refreshes */
|
|
|
|
#define TCP_CONNECTION_HASH_KEY_SIZE 28
|
|
|
|
#define TCP_PORT_MONITOR_HASH_KEY_SIZE 12
|
2005-10-31 05:17:06 +00:00
|
|
|
|
|
|
|
/* -------------------------------------------------------------------
|
|
|
|
* IMPLEMENTATION INTERFACE
|
|
|
|
*
|
|
|
|
* Implementation-specific interface begins here. Clients should not
|
|
|
|
* manipulate these structures directly, nor call the defined helper
|
|
|
|
* functions. Use the "Client interface" functions defined at bottom.
|
|
|
|
* ------------------------------------------------------------------- */
|
|
|
|
|
|
|
|
/* The inventory of peekable items within the port monitor. */
|
2006-12-09 05:40:08 +00:00
|
|
|
enum tcp_port_monitor_peekables {
|
|
|
|
COUNT=0,
|
|
|
|
REMOTEIP,
|
|
|
|
REMOTEHOST,
|
|
|
|
REMOTEPORT,
|
|
|
|
REMOTESERVICE,
|
|
|
|
LOCALIP,
|
|
|
|
LOCALHOST,
|
|
|
|
LOCALPORT,
|
|
|
|
LOCALSERVICE
|
|
|
|
};
|
2005-10-31 05:17:06 +00:00
|
|
|
|
2005-11-01 00:58:34 +00:00
|
|
|
/* ------------------------------------------------------------------------
|
2005-10-31 05:17:06 +00:00
|
|
|
* A single tcp connection
|
2005-11-01 00:58:34 +00:00
|
|
|
*
|
|
|
|
* The age variable provides the mechanism for removing connections if they
|
|
|
|
* are not seen again in subsequent update cycles.
|
|
|
|
* ------------------------------------------------------------------------ */
|
2005-10-31 05:17:06 +00:00
|
|
|
typedef struct _tcp_connection_t {
|
2006-12-09 05:40:08 +00:00
|
|
|
gchar key[TCP_CONNECTION_HASH_KEY_SIZE]; /* connection's key in monitor hash */
|
2005-10-31 05:17:06 +00:00
|
|
|
in_addr_t local_addr;
|
|
|
|
in_port_t local_port;
|
|
|
|
in_addr_t remote_addr;
|
|
|
|
in_port_t remote_port;
|
|
|
|
int age;
|
|
|
|
} tcp_connection_t;
|
|
|
|
|
2005-11-12 16:37:57 +00:00
|
|
|
/* ----------------------------------
|
|
|
|
* Copy a connection
|
|
|
|
*
|
|
|
|
* Returns 0 on success, -1 otherwise
|
|
|
|
* ----------------------------------*/
|
|
|
|
int copy_tcp_connection(
|
|
|
|
tcp_connection_t * /* p_dest_connection */,
|
2005-12-05 23:50:08 +00:00
|
|
|
const tcp_connection_t * /* p_source_connection */
|
2005-11-12 16:37:57 +00:00
|
|
|
);
|
|
|
|
|
2005-10-31 05:17:06 +00:00
|
|
|
/* ------------------------------------------------------------------------
|
|
|
|
* A tcp connection node/list
|
|
|
|
*
|
|
|
|
* Connections within each monitor are stored in a double-linked list.
|
|
|
|
* ------------------------------------------------------------------------ */
|
|
|
|
typedef struct _tcp_connection_node_t {
|
|
|
|
tcp_connection_t connection;
|
|
|
|
struct _tcp_connection_node_t * p_prev;
|
|
|
|
struct _tcp_connection_node_t * p_next;
|
|
|
|
} tcp_connection_node_t;
|
|
|
|
|
|
|
|
typedef struct _tcp_connection_list_t {
|
|
|
|
tcp_connection_node_t * p_head;
|
|
|
|
tcp_connection_node_t * p_tail;
|
|
|
|
} tcp_connection_list_t;
|
|
|
|
|
|
|
|
/* --------------
|
|
|
|
* A port monitor
|
|
|
|
* -------------- */
|
|
|
|
typedef struct _tcp_port_monitor_t {
|
2006-12-09 05:40:08 +00:00
|
|
|
gchar key[TCP_PORT_MONITOR_HASH_KEY_SIZE]; /* monitor's key in collection hash */
|
|
|
|
in_port_t port_range_begin; /* start of monitor port range */
|
2005-10-31 05:17:06 +00:00
|
|
|
in_port_t port_range_end; /* begin = end to monitor a single port */
|
|
|
|
tcp_connection_list_t connection_list; /* list of connections for this monitor */
|
2006-12-09 05:40:08 +00:00
|
|
|
GHashTable *hash; /* hash table of pointers into monitor's connection list */
|
2005-10-31 05:17:06 +00:00
|
|
|
tcp_connection_t **p_peek; /* array of connection pointers for O(1) peeking by index */
|
2006-12-09 05:40:08 +00:00
|
|
|
unsigned int max_port_monitor_connections; /* max number of connections */
|
2005-10-31 05:17:06 +00:00
|
|
|
} tcp_port_monitor_t;
|
|
|
|
|
|
|
|
/* ------------------------
|
|
|
|
* A port monitor node/list
|
|
|
|
* ------------------------ */
|
|
|
|
typedef struct _tcp_port_monitor_node_t {
|
|
|
|
tcp_port_monitor_t * p_monitor;
|
|
|
|
struct _tcp_port_monitor_node_t *p_next;
|
|
|
|
} tcp_port_monitor_node_t;
|
|
|
|
|
|
|
|
typedef struct __tcp_port_monitor_list_t {
|
|
|
|
tcp_port_monitor_node_t * p_head;
|
|
|
|
tcp_port_monitor_node_t * p_tail;
|
|
|
|
} tcp_port_monitor_list_t;
|
|
|
|
|
|
|
|
/* ---------------------------------------
|
|
|
|
* A port monitor utility function typedef
|
|
|
|
* ---------------------------------------*/
|
|
|
|
typedef void (*tcp_port_monitor_function_ptr_t)( tcp_port_monitor_t * /* p_monitor */, void * /* p_void */ );
|
|
|
|
|
|
|
|
/* ---------------------------------------------------------------------------
|
|
|
|
* Port monitor utility functions implementing tcp_port_monitor_function_ptr_t
|
|
|
|
* ---------------------------------------------------------------------------*/
|
|
|
|
void destroy_tcp_port_monitor(
|
|
|
|
tcp_port_monitor_t * /* p_monitor */,
|
|
|
|
void * /* p_void (use NULL for this function) */
|
|
|
|
);
|
|
|
|
|
|
|
|
void age_tcp_port_monitor(
|
|
|
|
tcp_port_monitor_t * /* p_monitor */,
|
|
|
|
void * /* p_void (use NULL for this function) */
|
|
|
|
);
|
|
|
|
|
|
|
|
void rebuild_tcp_port_monitor_peek_table(
|
|
|
|
tcp_port_monitor_t * /* p_monitor */,
|
|
|
|
void * /* p_void (use NULL for this function) */
|
|
|
|
);
|
|
|
|
|
|
|
|
void show_connection_to_tcp_port_monitor(
|
|
|
|
tcp_port_monitor_t * /* p_monitor */,
|
|
|
|
void * /* p_connection (client should cast) */
|
|
|
|
);
|
|
|
|
|
|
|
|
/* -----------------------------
|
|
|
|
* A tcp port monitor collection
|
|
|
|
* -----------------------------*/
|
|
|
|
typedef struct _tcp_port_monitor_collection_t {
|
|
|
|
tcp_port_monitor_list_t monitor_list; /* list of monitors for this collection */
|
2006-12-09 05:40:08 +00:00
|
|
|
GHashTable *hash; /* hash table of pointers into collection's monitor list */
|
2005-10-31 05:17:06 +00:00
|
|
|
} tcp_port_monitor_collection_t;
|
|
|
|
|
|
|
|
/* ---------------------------------------------------------------------------------------
|
|
|
|
* Apply a tcp_port_monitor_function_ptr_t function to each port monitor in the collection.
|
|
|
|
* ---------------------------------------------------------------------------------------*/
|
|
|
|
void for_each_tcp_port_monitor_in_collection(
|
|
|
|
tcp_port_monitor_collection_t * /* p_collection */,
|
|
|
|
tcp_port_monitor_function_ptr_t /* p_function */,
|
|
|
|
void * /* p_function_args (for user arguments) */
|
|
|
|
);
|
|
|
|
|
|
|
|
/* ----------------------------------------------------------------------
|
|
|
|
* CLIENT INTERFACE
|
|
|
|
*
|
|
|
|
* Clients should call only those functions below this line.
|
|
|
|
* ---------------------------------------------------------------------- */
|
|
|
|
|
2005-11-11 20:46:42 +00:00
|
|
|
/* struct to hold monitor creation arguments */
|
|
|
|
typedef struct _tcp_port_monitor_args_t {
|
2006-12-09 05:40:08 +00:00
|
|
|
int max_port_monitor_connections; /* monitor supports tracking at most this many connections */
|
2005-11-11 20:46:42 +00:00
|
|
|
} tcp_port_monitor_args_t;
|
|
|
|
|
|
|
|
|
2005-10-31 05:17:06 +00:00
|
|
|
/* ----------------------------------
|
|
|
|
* Client operations on port monitors
|
|
|
|
* ---------------------------------- */
|
|
|
|
|
|
|
|
/* Clients should first try to "find_tcp_port_monitor" before creating one
|
|
|
|
so that there are no redundant monitors. */
|
|
|
|
tcp_port_monitor_t * create_tcp_port_monitor(
|
2006-12-09 05:40:08 +00:00
|
|
|
in_port_t /* port_range_begin */,
|
|
|
|
in_port_t /* port_range_end */,
|
|
|
|
tcp_port_monitor_args_t * /* p_creation_args */
|
2005-10-31 05:17:06 +00:00
|
|
|
);
|
|
|
|
|
|
|
|
/* Clients use this function to get connection data from the indicated port monitor.
|
|
|
|
The requested monitor value is copied into a client-supplied char buffer.
|
|
|
|
Returns 0 on success, -1 otherwise. */
|
|
|
|
int peek_tcp_port_monitor(
|
2006-12-09 05:40:08 +00:00
|
|
|
const tcp_port_monitor_t * /* p_monitor */,
|
|
|
|
int /* item, ( item of interest, from tcp_port_monitor_peekables enum ) */,
|
|
|
|
int /* connection_index, ( 0 to number of connections in monitor - 1 )*/,
|
|
|
|
char * /* p_buffer, buffer to receive requested value */,
|
|
|
|
size_t /* buffer_size, size of p_buffer */
|
2005-10-31 05:17:06 +00:00
|
|
|
);
|
|
|
|
|
|
|
|
/* --------------------------------
|
|
|
|
* Client operations on collections
|
|
|
|
* -------------------------------- */
|
|
|
|
|
|
|
|
/* Create a monitor collection. Do this one first. */
|
2006-12-09 05:40:08 +00:00
|
|
|
tcp_port_monitor_collection_t * create_tcp_port_monitor_collection (void);
|
2005-10-31 05:17:06 +00:00
|
|
|
|
|
|
|
/* Destroy the monitor collection (and everything it contains). Do this one last. */
|
|
|
|
void destroy_tcp_port_monitor_collection(
|
|
|
|
tcp_port_monitor_collection_t * /* p_collection */
|
|
|
|
);
|
|
|
|
|
|
|
|
/* Updates the tcp statitics for all monitors within a collection */
|
|
|
|
void update_tcp_port_monitor_collection(
|
|
|
|
tcp_port_monitor_collection_t * /* p_collection */
|
|
|
|
);
|
|
|
|
|
|
|
|
/* After clients create a monitor, use this to add it to the collection.
|
|
|
|
Returns 0 on success, -1 otherwise. */
|
|
|
|
int insert_tcp_port_monitor_into_collection(
|
|
|
|
tcp_port_monitor_collection_t * /* p_collection */,
|
|
|
|
tcp_port_monitor_t * /* p_monitor */
|
|
|
|
);
|
|
|
|
|
|
|
|
/* Clients need a way to find monitors */
|
|
|
|
tcp_port_monitor_t * find_tcp_port_monitor(
|
2005-12-05 23:50:08 +00:00
|
|
|
const tcp_port_monitor_collection_t * /* p_collection */,
|
2005-10-31 05:17:06 +00:00
|
|
|
in_port_t /* port_range_begin */,
|
|
|
|
in_port_t /* port_range_end */
|
|
|
|
);
|
|
|
|
|
|
|
|
#endif
|