114 lines
3.8 KiB
C++
114 lines
3.8 KiB
C++
/*
|
|
Copyright (c) 2013, The Linux Foundation. All rights reserved.
|
|
|
|
Redistribution and use in source and binary forms, with or without
|
|
modification, are permitted provided that the following conditions are
|
|
met:
|
|
* Redistributions of source code must retain the above copyright
|
|
notice, this list of conditions and the following disclaimer.
|
|
* Redistributions in binary form must reproduce the above
|
|
copyright notice, this list of conditions and the following
|
|
disclaimer in the documentation and/or other materials provided
|
|
with the distribution.
|
|
* Neither the name of The Linux Foundation nor the names of its
|
|
contributors may be used to endorse or promote products derived
|
|
from this software without specific prior written permission.
|
|
|
|
THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
|
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
|
BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
|
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
|
OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
|
IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifndef IPACM_CONNTRACK_FILTER_H
|
|
#define IPACM_CONNTRACK_FILTER_H
|
|
|
|
#include <iostream>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <arpa/inet.h>
|
|
#include <netinet/in.h>
|
|
#include <errno.h>
|
|
|
|
#include "IPACM_ConntrackClient.h"
|
|
#include "IPACM_CmdQueue.h"
|
|
#include "IPACM_Conntrack_NATApp.h"
|
|
#include "IPACM_EvtDispatcher.h"
|
|
#include "IPACM_Defs.h"
|
|
|
|
#ifndef IPACM_DEBUG
|
|
#define IPACM_DEBUG
|
|
#endif
|
|
|
|
extern "C"
|
|
{
|
|
#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
|
|
#include <libnetfilter_conntrack/libnetfilter_conntrack_tcp.h>
|
|
#include <sys/inotify.h>
|
|
}
|
|
|
|
using namespace std;
|
|
|
|
#define UDP_TIMEOUT_UPDATE 20
|
|
#define BROADCAST_IPV4_ADDR 0xFFFFFFFF
|
|
|
|
|
|
#define IPACM_DIR_NAME "/proc/sys/net/ipv4/netfilter"
|
|
#define IPACM_TCP_FILE_NAME "ip_conntrack_tcp_timeout_established"
|
|
#define IPACM_UDP_FILE_NAME "ip_conntrack_udp_timeout_stream"
|
|
|
|
#define IPACM_TCP_FULL_FILE_NAME "/proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established"
|
|
#define IPACM_UDP_FULL_FILE_NAME "/proc/sys/net/ipv4/netfilter/ip_conntrack_udp_timeout_stream"
|
|
|
|
#define INOTIFY_EVENT_SIZE (sizeof(struct inotify_event))
|
|
#define INOTIFY_BUF_LEN (INOTIFY_EVENT_SIZE + 2*sizeof(IPACM_TCP_FILE_NAME))
|
|
|
|
class IPACM_ConntrackClient
|
|
{
|
|
|
|
private:
|
|
static IPACM_ConntrackClient *pInstance;
|
|
|
|
struct nfct_handle *tcp_hdl;
|
|
struct nfct_handle *udp_hdl;
|
|
struct nfct_filter *tcp_filter;
|
|
struct nfct_filter *udp_filter;
|
|
|
|
static int IPA_Conntrack_Filters_Ignore_Local_Addrs(struct nfct_filter *filter);
|
|
static int IPA_Conntrack_Filters_Ignore_Bridge_Addrs(struct nfct_filter *filter);
|
|
IPACM_ConntrackClient();
|
|
|
|
public:
|
|
static int IPAConntrackEventCB(enum nf_conntrack_msg_type type,
|
|
struct nf_conntrack *ct,
|
|
void *data);
|
|
|
|
static int IPA_Conntrack_UDP_Filter_Init(void);
|
|
static int IPA_Conntrack_TCP_Filter_Init(void);
|
|
static void* TCPRegisterWithConnTrack(void *);
|
|
static void* UDPRegisterWithConnTrack(void *);
|
|
static void* UDPConnTimeoutUpdate(void *);
|
|
static void* TCPUDP_Timeout_monitor(void *);
|
|
|
|
static void UpdateUDPFilters(void *);
|
|
static void UpdateTCPFilters(void *);
|
|
static void Read_TcpUdp_Timeout(char *in, int len);
|
|
|
|
static IPACM_ConntrackClient* GetInstance();
|
|
|
|
#ifdef IPACM_DEBUG
|
|
static void iptodot(const char *type, uint32_t ipAddr);
|
|
#endif
|
|
|
|
};
|
|
|
|
#endif /* IPACM_CONNTRACK_FILTER_H */
|