#include "Maat_rule.h" #include "Maat_command.h" #include "Maat_rule_internal.h" #include "json2iris.h" #include "config_monitor.h" #include "hiredis.h" #include #include #include #include #include const char* redis_dump_dir="./redis_dump"; void maat_tool_print_usage(void) { printf("maat_redis_tool manipulate rules from redis.\n"); printf("Usage:\n"); printf("\t-h [host], redis IP, 127.0.0.1 as default.\n"); printf("\t-p [port], redis port, 6379 as default.\n"); printf("\t-d [dir], dump rules from redis to [dir], %s as default.\n",redis_dump_dir); printf("example: ./maat_redis_tool -h 127.0.0.1 -p 6379 -d %s\n",redis_dump_dir); return; } static int compare_serial_rule(const void *a, const void *b) { struct serial_rule_t *ra=(struct serial_rule_t *)a; struct serial_rule_t *rb=(struct serial_rule_t *)b; char p_str[256],q_str[256]; snprintf(p_str,sizeof(p_str),"%s.%d",ra->table_name,ra->rule_id); snprintf(q_str,sizeof(q_str),"%s.%d",rb->table_name,rb->rule_id); return strcmp(p_str,q_str); } void read_rule_from_redis(const char*redis_ip, int redis_port, int redis_db,const char* output_path ,void*logger) { struct serial_rule_t* rule_list; int rule_num=0,line_count=0; int i=0,ret=0; int update_type=CM_UPDATE_TYPE_INC; unsigned int version=0; const char* cur_table=NULL; char table_path[256],index_path[256]; FILE *table_fp=NULL, *index_fp=NULL; struct timeval connect_timeout; connect_timeout.tv_sec=0; connect_timeout.tv_usec=100*1000; // 100 ms redisContext * ctx; ctx=redisConnectWithTimeout(redis_ip, redis_port,connect_timeout); if(ctx==NULL) { printf("Unable to connect %s:%d db%d\n",redis_ip,redis_port,redis_db); return; } printf("Reading key list from %s:%d db%d.\n",redis_ip,redis_port,redis_db); rule_num=get_rm_key_list(0, ctx, &rule_list, logger,&version, &update_type); assert(update_type==CM_UPDATE_TYPE_FULL); printf("MAAT Version: %d, key number: %d\n", version, rule_num); printf("Reading value: "); ret=get_maat_redis_value(ctx,rule_list,rule_num,logger,1); if(ret<0) { goto clean_up; } qsort(rule_list,rule_num, sizeof(struct serial_rule_t), compare_serial_rule); if((access(output_path,F_OK)) <0) { if((mkdir(output_path,S_IRWXU | S_IRWXG | S_IROTH | S_IXOTH)) < 0) printf("mkdir %s error\n",output_path); } snprintf(index_path,sizeof(index_path),"%s/full_config_index.%010d",output_path,version); index_fp=fopen(index_path,"w"); if(index_fp==NULL) { printf("Open %s failed.\n",index_path); goto clean_up; } for(i=0;i