#ifndef __TSG_ENTRY_H__ #define __TSG_ENTRY_H__ #include #include #include #include #include #include #include "uthash.h" #include "tsg_rule.h" #include "app_label.h" #include "tsg_label.h" #include "tsg_bridge.h" #include "tsg_variable.h" #include "tsg_statistic.h" #include "tsg_leaky_bucket.h" #include "tsg_protocol_common.h" #include "tsg_send_log_internal.h" #if(__GNUC__ * 100 + __GNUC_MINOR__ * 10 + __GNUC_PATCHLEVEL__ >= 411) #define atomic_inc(x) __sync_add_and_fetch((x),1) #define atomic_dec(x) __sync_sub_and_fetch((x),1) #define atomic_add(x,y) __sync_add_and_fetch((x),(y)) #define atomic_sub(x,y) __sync_sub_and_fetch((x),(y)) typedef int atomic_t; #define ATOMIC_INIT(i) { (i) } #define atomic_read(x) __sync_add_and_fetch((x),0) #define atomic_set(x,y) __sync_lock_test_and_set((x),y) #else #include #endif #ifndef TM_FALSE #define TM_FALSE 0 #endif #ifndef TM_TRUE #define TM_TRUE 1 #endif #ifndef FLAG_FALSE #define FLAG_FALSE 0 #endif #ifndef FLAG_TRUE #define FLAG_TRUE 1 #endif #define APP_SCAN_FLAG_STOP 0 #define APP_SCAN_FLAG_CONTINUE 1 enum TSG_ATTRIBUTE_TYPE { TSG_ATTRIBUTE_TYPE_ESTABLISH_LATECY=0, TSG_ATTRIBUTE_TYPE_PROTOCOL, TSG_ATTRIBUTE_TYPE_JA3_HASH, TSG_ATTRIBUTE_TYPE_MLTS_USER_INFO, TSG_ATTRIBUTE_TYPE_LOCATION, TSG_ATTRIBUTE_TYPE_ASN, TSG_ATTRIBUTE_TYPE_SUBSCRIBER_ID, TSG_ATTRIBUTE_TYPE_HTTP_ACTION_FILESIZE, TSG_ATTRIBUTE_TYPE_CATEGORY_ID, TSG_ATTRIBUTE_TYPE_SESSION_FLAGS, _MAX_TSG_ATTRIBUTE_TYPE }; enum HTTP_RESPONSE_FORMAT { HTTP_RESPONSE_FORMAT_TEMPLATE=0, HTTP_RESPONSE_FORMAT_HTML }; struct l7_protocol { int id; /* first key */ char name[32]; /* second key */ UT_hash_handle hh1; /* handle for first hash table */ UT_hash_handle hh2; /* handle for second hash table */ }; struct fqdn_category { int ref_cnt; unsigned int category_id; }; struct http_response_pages { int profile_id; int content_len; int ref_cnt; enum HTTP_RESPONSE_FORMAT format; char *content; }; struct app_id_dict { int ref_cnt; int app_id; int parent_app_id; int continue_scanning; unsigned short tcp_timeout; unsigned short udp_timeout; int tcp_time_wait; int tcp_half_close; char *risk; char *app_name; char *parent_app_name; char *category; char *subcategroy; char *technology; char *characteristics; struct deny_user_region deny_app_para; }; typedef enum tsg_statis_field_id { STATIS_UNKNOWN=0, STATIS_ENTRANCE_ID=1, STATIS_TOTAL_CON_NUM, STATIS_NEW_CON_NUM, STATIS_ESTABLISHED_CON_NUM, STATIS_CLOSE_CON_NUM, STATIS_TOTAL_IN_BYTES, STATIS_TOTAL_OUT_BYTES, STATIS_TOTAL_IN_PACKETS, STATIS_TOTAL_OUT_PACKETS, STATIS_DEFAULT_CON_NUM, STATIS_DEFAULT_IN_BYTES, STATIS_DEFAULT_OUT_BYTES, STATIS_DEFAULT_IN_PACKETS, STATIS_DEFAULT_OUT_PACKETS, STATIS_ALLOW_CON_NUM, STATIS_ALLOW_IN_BYTES, STATIS_ALLOW_OUT_BYTES, STATIS_ALLOW_IN_PACKETS, STATIS_ALLOW_OUT_PACKETS, STATIS_DENY_CON_NUM, STATIS_DENY_IN_BYTES, STATIS_DENY_OUT_BYTES, STATIS_DENY_IN_PACKETS, STATIS_DENY_OUT_PACKETS, STATIS_MONITOR_CON_NUM, STATIS_MONITOR_IN_BYTES, STATIS_MONITOR_OUT_BYTES, STATIS_MONITOR_IN_PACKETS, STATIS_MONITOR_OUT_PACKETS, STATIS_INTERCEPT_CON_NUM, STATIS_INTERCEPT_IN_BYTES, STATIS_INTERCEPT_OUT_BYTES, STATIS_INTERCEPT_IN_PACKETS, STATIS_INTERCEPT_OUT_PACKETS, STATIS_IPV4_IN_BYTES, STATIS_IPV4_OUT_BYTES, STATIS_IPV4_IN_PACKETS, STATIS_IPV4_OUT_PACKETS, STATIS_IPV6_IN_BYTES, STATIS_IPV6_OUT_BYTES, STATIS_IPV6_IN_PACKETS, STATIS_IPV6_OUT_PACKETS, STATIS_TCP_NEW_CON_NUM, STATIS_TCP_IN_BYTES, STATIS_TCP_OUT_BYTES, STATIS_TCP_IN_PACKETS, STATIS_TCP_OUT_PACKETS, STATIS_UDP_NEW_CON_NUM, STATIS_UDP_IN_BYTES, STATIS_UDP_OUT_BYTES, STATIS_UDP_IN_PACKETS, STATIS_UDP_OUT_PACKETS, STATIS_ALERT_BYTES, STATIS_BLOCK_BYTES, STATIS_PINNING_NUM, STATIS_MAYBE_PINNING_NUM, STATIS_NOT_PINNING_NUM, STATIS_MAX }tsg_statis_field_id_t; enum TRAFFIC_INFO_IDX { TRAFFIC_INFO_ALLOW=0, TRAFFIC_INFO_DENY, TRAFFIC_INFO_MONITOR, TRAFFIC_INFO_INTERCEPT, TRAFFIC_INFO_MAX }; typedef struct tsg_statistic { int cycle; int fs_line_id; int thread_alive; pthread_t stat_thread_id; int fs_field_id[STATIS_MAX]; long long statistic_opt[_OPT_TYPE_MAX]; struct _traffic_info *traffic_info[TSG_ACTION_MAX+1]; struct _traffic_info default_total_info; screen_stat_handle_t fs2_handle; }tsg_statis_para_t; int tsg_statistic_init(const char *conffile, void *logger); void tsg_statistic_destroy(void); int tsg_gtp_signaling_hash_init(const char* conffile, void *logger); long long get_current_time_ms(void); //parent_app_name.app_name int tsg_app_id2name(int app_id, char *app_name, int app_name_len, int is_joint_parent); //return 18 or 19: subdivision_addr int tsg_get_location_type(void); void location_free_data(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void ASN_number_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void subscriber_id_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void app_id_dict_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void gtp_c_free_data(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void tunnel_endpoint_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void *argp); void http_response_pages_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void* argp); void dns_profile_records_free(int table_id, MAAT_PLUGIN_EX_DATA* ad, long argl, void *argp); void set_session_attribute_label(const struct streaminfo *a_stream, enum TSG_ATTRIBUTE_TYPE type, void *value, int value_len, int thread_seq); int set_method_to_tcpall(const struct streaminfo *a_stream, enum TSG_METHOD_TYPE method_type, int thread_seq); int set_protocol_to_tcpall(const struct streaminfo *a_stream, tsg_protocol_t protocol, int thread_seq); int set_bucket_to_tcpall(const struct streaminfo *a_stream, struct leaky_bucket *bucket, int thread_seq); int set_after_n_packet_to_tcpall(const struct streaminfo *a_stream, int after_n_packets, int thread_seq); char get_direction_from_tcpall(const struct streaminfo *a_stream); void security_compile_free(int idx, const struct Maat_rule_t* rule, const char* srv_def_large, MAAT_RULE_EX_DATA* ad, long argl, void *argp); struct Maat_rule_t *tsg_policy_decision_criteria(struct streaminfo *a_stream, Maat_rule_t *result, int result_num, int thread_seq); int tsg_scan_addr(Maat_feather_t maat_feather, const struct streaminfo *a_stream, tsg_protocol_t proto, scan_status_t *mid, Maat_rule_t*result, int result_num); int tsg_scan_shared_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, char *domain, Maat_rule_t *result, int result_num, scan_status_t *mid, int table_id, int thread_seq); int tsg_scan_app_properties_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, struct Maat_rule_t *result, int result_num, scan_status_t *mid, char *property, char *district, int thread_seq); int tsg_scan_subscribe_id_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, struct Maat_rule_t *result, int result_num, scan_status_t *mid, struct subscribe_id_info *user_info, int thread_seq); int tsg_get_umts_user_info(const struct streaminfo *a_stream, struct umts_user_info **user_info); struct umts_user_info *tsg_get_umts_user_info_form_redis(unsigned int teid); int tsg_set_policy_result(const struct streaminfo *a_stream, PULL_RESULT_TYPE result_type, struct Maat_rule_t *p_result, tsg_protocol_t proto, int thread_seq); int tsg_scan_gtp_apn_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, struct Maat_rule_t *result, int result_num, scan_status_t *mid, char *apn, int thread_seq); int tsg_scan_gtp_imsi_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, struct Maat_rule_t *result, int result_num, scan_status_t *mid, char *imsi, int thread_seq); int tsg_scan_gtp_phone_number_policy(Maat_feather_t maat_feather, const struct streaminfo *a_stream, struct Maat_rule_t *result, int result_num, scan_status_t *mid, char *phone_number, int thread_seq); int tsg_get_ip_location(const struct streaminfo *a_stream, int table_id, MAAT_PLUGIN_EX_DATA *client_location, MAAT_PLUGIN_EX_DATA *server_location); int tsg_get_ip_asn(const struct streaminfo *a_stream, int table_id, MAAT_PLUGIN_EX_DATA* client_asn, MAAT_PLUGIN_EX_DATA* server_asn); int tsg_get_subscribe_id(const struct streaminfo *a_stream, struct subscribe_id_info **source_subscribe_id, struct subscribe_id_info **dest_subscribe_id); int tsg_send_raw_packet(const struct streaminfo *a_stream, struct mirrored_vlan *vlan, int vlan_num, int thread_seq); int tsg_scan_session_flags(Maat_feather_t maat_feather, const struct streaminfo *a_stream, Maat_rule_t *result, int result_num, scan_status_t *mid, int table_id, unsigned long flag, int thread_seq); int tsg_fetch_hited_security_result(struct Maat_rule_t *hited_result, int hited_result_num, struct Maat_rule_t *security_result, int security_result_num); int tsg_fetch_hited_shaping_result(struct Maat_rule_t *hited_result, int hited_result_num, struct Maat_rule_t *security_result, int security_result_num); int tsg_fetch_hited_s_chaining_result(struct Maat_rule_t *hited_result, int hited_result_num, struct Maat_rule_t *s_chaining_result, int s_chaining_result_num); #endif