opendpi-1.3.0源代码

/* * ipq_main.c * Copyright (C) 2009-2011 by ipoque GmbH * * This file is part of OpenDPI, an open source deep packet inspection * library based on the PACE technology by ipoque GmbH * * OpenDPI is free software: you can redistribute it and/or modify * it under the terms of the GNU Lesser General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * OpenDPI is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with OpenDPI. If not, see <http://www.gnu.org/licenses/>. * */ #include "ipq_main.h" #include "ipq_protocols.h" #include "ipq_utils.h" u32 ipoque_detection_get_sizeof_ipoque_flow_struct(void) { return sizeof(struct ipoque_flow_struct); } u32 ipoque_detection_get_sizeof_ipoque_id_struct(void) { return sizeof(struct ipoque_id_struct); } struct ipoque_detection_module_struct *ipoque_init_detection_module(u32 ticks_per_second, void *(*ipoque_malloc) (unsigned long size), ipoque_debug_function_ptr ipoque_debug_printf) { struct ipoque_detection_module_struct *ipq_str; ipq_str = ipoque_malloc(sizeof(struct ipoque_detection_module_struct)); if (ipq_str == NULL) { ipoque_debug_printf(0, NULL, IPQ_LOG_DEBUG, "ipoque_init_detection_module initial malloc failed\n"); return NULL; } memset(ipq_str, 0, sizeof(struct ipoque_detection_module_struct)); IPOQUE_BITMASK_RESET(ipq_str->detection_bitmask); #ifdef IPOQUE_ENABLE_DEBUG_MESSAGES ipq_str->ipoque_debug_printf = ipoque_debug_printf; ipq_str->user_data = NULL; #endif ipq_str->ticks_per_second = ticks_per_second; ipq_str->tcp_max_retransmission_window_size = IPOQUE_DEFAULT_MAX_TCP_RETRANSMISSION_WINDOW_SIZE; ipq_str->directconnect_connection_ip_tick_timeout = IPOQUE_DIRECTCONNECT_CONNECTION_IP_TICK_TIMEOUT * ticks_per_second; ipq_str->gadugadu_peer_connection_timeout = IPOQUE_GADGADU_PEER_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->edonkey_upper_ports_only = IPOQUE_EDONKEY_UPPER_PORTS_ONLY; ipq_str->ftp_connection_timeout = IPOQUE_FTP_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->pplive_connection_timeout = IPOQUE_PPLIVE_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->rtsp_connection_timeout = IPOQUE_RTSP_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->tvants_connection_timeout = IPOQUE_TVANTS_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->irc_timeout = IPOQUE_IRC_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->gnutella_timeout = IPOQUE_GNUTELLA_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->battlefield_timeout = IPOQUE_BATTLEFIELD_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->thunder_timeout = IPOQUE_THUNDER_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->yahoo_detect_http_connections = IPOQUE_YAHOO_DETECT_HTTP_CONNECTIONS; ipq_str->yahoo_lan_video_timeout = IPOQUE_YAHOO_LAN_VIDEO_TIMEOUT * ticks_per_second; ipq_str->zattoo_connection_timeout = IPOQUE_ZATTOO_CONNECTION_TIMEOUT * ticks_per_second; ipq_str->jabber_stun_timeout = IPOQUE_JABBER_STUN_TIMEOUT * ticks_per_second; ipq_str->jabber_file_transfer_timeout = IPOQUE_JABBER_FT_TIMEOUT * ticks_per_second; ipq_str->soulseek_connection_ip_tick_timeout = IPOQUE_SOULSEEK_CONNECTION_IP_TICK_TIMEOUT * ticks_per_second; ipq_str->manolito_subscriber_timeout = IPOQUE_MANOLITO_SUBSCRIBER_TIMEOUT; return ipq_str; } void ipoque_exit_detection_module(struct ipoque_detection_module_struct *ipoque_struct, void (*ipoque_free) (void *ptr)) { if (ipoque_struct != NULL) { ipoque_free(ipoque_struct); } } void ipoque_set_protocol_detection_bitmask2(struct ipoque_detection_module_struct *ipoque_struct, const IPOQUE_PROTOCOL_BITMASK * dbm) { IPOQUE_PROTOCOL_BITMASK detection_bitmask_local; IPOQUE_PROTOCOL_BITMASK *detection_bitmask = &detection_bitmask_local; u32 a = 0; IPOQUE_BITMASK_SET(detection_bitmask_local, *dbm); IPOQUE_BITMASK_SET(ipoque_struct->detection_bitmask, *dbm); /* set this here to zero to be interrupt safe */ ipoque_struct->callback_buffer_size = 0; #ifdef IPOQUE_PROTOCOL_HTTP #ifdef IPOQUE_PROTOCOL_MPEG if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_MPEG) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_FLASH if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_FLASH) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_QUICKTIME if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_QUICKTIME) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_REALMEDIA if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_REALMEDIA) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_WINDOWSMEDIA if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_WINDOWSMEDIA) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_MMS if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_MMS) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_OFF if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_OFF) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_XBOX if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_XBOX) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_QQ if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_QQ) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_AVI if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_AVI) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_OGG if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_OGG) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_MOVE if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_MOVE) != 0) goto hack_do_http_detection; #endif #ifdef IPOQUE_PROTOCOL_RTSP if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_RTSP) != 0) goto hack_do_http_detection; #endif /* HTTP DETECTION MUST BE BEFORE DDL BUT AFTER ALL OTHER PROTOCOLS WHICH USE HTTP ALSO */ if (IPOQUE_COMPARE_PROTOCOL_TO_BITMASK(*detection_bitmask, IPOQUE_PROTOCOL_HTTP) != 0) { hack_do_http_detection: ipoque_struct->callback_buffer[a].func = ipoque_search_http_tcp; ipoque_struct->callback_buffer[a].ipq_selection_bitmask = IPQ_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD; IPOQUE_SAVE_AS_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_UNKNOWN); IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_HTTP); #ifdef IPOQUE_PROTOCOL_MPEG IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_MPEG); #endif #ifdef IPOQUE_PROTOCOL_FLASH IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_FLASH); #endif #ifdef IPOQUE_PROTOCOL_QUICKTIME IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_QUICKTIME); #endif #ifdef IPOQUE_PROTOCOL_REALMEDIA IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_REALMEDIA); #endif #ifdef IPOQUE_PROTOCOL_WINDOWSMEDIA IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_WINDOWSMEDIA); #endif #ifdef IPOQUE_PROTOCOL_MMS IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_struct->callback_buffer[a].detection_bitmask, IPOQUE_PROTOCOL_MMS); #endif #ifdef IPOQUE_PROTOCOL_OFF IPOQUE_ADD_PROTOCOL_TO_BITMASK(ipoque_