mirror of
https://github.com/ntop/ntopng.git
synced 2026-05-06 03:45:26 +00:00
174 lines
8.2 KiB
C++
174 lines
8.2 KiB
C++
/*
|
|
*
|
|
* (C) 2013-16 - ntop.org
|
|
*
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software Foundation,
|
|
* Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*
|
|
*/
|
|
|
|
#ifndef _HOST_H_
|
|
#define _HOST_H_
|
|
|
|
#include "ntop_includes.h"
|
|
|
|
class Host : public GenericHost {
|
|
private:
|
|
u_int8_t mac_address[6], antenna_mac_address[6];
|
|
u_int32_t asn;
|
|
char *symbolic_name, *country, *city, *asname, os[16], trafficCategory[12], *topSitesKey;
|
|
bool blacklisted_host, drop_all_host_traffic, dump_host_traffic;
|
|
u_int32_t host_quota_mb;
|
|
u_int16_t num_uses;
|
|
int16_t local_network_id;
|
|
int ingress_shaper_id, egress_shaper_id;
|
|
float latitude, longitude;
|
|
IpAddress *ip;
|
|
Mutex *m;
|
|
time_t nextResolveAttempt;
|
|
#ifdef NTOPNG_PRO
|
|
CountMinSketch *sent_to_sketch, *rcvd_from_sketch;
|
|
#endif
|
|
AlertCounter *syn_flood_attacker_alert, *syn_flood_victim_alert;
|
|
TrafficStats tcp_sent, tcp_rcvd;
|
|
TrafficStats udp_sent, udp_rcvd;
|
|
TrafficStats icmp_sent, icmp_rcvd;
|
|
TrafficStats other_ip_sent, other_ip_rcvd;
|
|
TrafficStats ingress_drops, egress_drops;
|
|
PacketStats sent_stats, recv_stats;
|
|
u_int32_t total_num_flows_as_client, total_num_flows_as_server;
|
|
u_int32_t num_active_flows_as_client, num_active_flows_as_server;
|
|
DnsStats *dns;
|
|
HTTPStats *http;
|
|
bool trigger_host_alerts, good_low_flow_detected;
|
|
u_int32_t max_new_flows_sec_threshold, max_num_syn_sec_threshold, max_num_active_flows;
|
|
NetworkStats *networkStats;
|
|
CategoryStats *categoryStats;
|
|
|
|
#ifdef NTOPNG_PRO
|
|
NDPI_PROTOCOL_BITMASK *l7Policy;
|
|
#endif
|
|
|
|
struct {
|
|
u_int32_t pktRetr, pktOOO, pktLost;
|
|
} tcpPacketStats; /* Sent packets */
|
|
|
|
void initialize(u_int8_t mac[6], u_int16_t _vlan_id, bool init_all);
|
|
void refreshHTTPBL();
|
|
void computeHostSerial();
|
|
|
|
void loadFlowRateAlertPrefs(void);
|
|
void loadSynAlertPrefs(void);
|
|
void loadFlowsAlertPrefs(void);
|
|
|
|
public:
|
|
Host(NetworkInterface *_iface);
|
|
Host(NetworkInterface *_iface, char *ipAddress);
|
|
Host(NetworkInterface *_iface, u_int8_t mac[6], u_int16_t _vlanId);
|
|
Host(NetworkInterface *_iface, u_int8_t mac[6], u_int16_t _vlanId, IpAddress *_ip);
|
|
~Host();
|
|
|
|
void updateLocal();
|
|
void updateStats(struct timeval *tv);
|
|
void incLowGoodputFlows(bool asClient);
|
|
void decLowGoodputFlows(bool asClient);
|
|
void resetPeriodicStats(void);
|
|
inline void incRetransmittedPkts(u_int32_t num) { tcpPacketStats.pktRetr += num; };
|
|
inline void incOOOPkts(u_int32_t num) { tcpPacketStats.pktOOO += num; };
|
|
inline void incLostPkts(u_int32_t num) { tcpPacketStats.pktLost += num; };
|
|
inline int16_t get_local_network_id() { return(local_network_id); };
|
|
inline PacketStats* get_sent_stats() { return(&sent_stats); };
|
|
inline PacketStats* get_recv_stats() { return(&recv_stats); };
|
|
inline HTTPStats* getHTTPStats() { return(http); };
|
|
inline HTTPStats* getHTTP() { return(http); };
|
|
inline void set_ipv4(u_int32_t _ipv4) { ip->set_ipv4(_ipv4); };
|
|
inline void set_ipv6(struct ndpi_in6_addr *_ipv6) { ip->set_ipv6(_ipv6); };
|
|
u_int32_t key();
|
|
char* getJSON();
|
|
inline void setOS(char *_os) { if(os[0] == '\0') snprintf(os, sizeof(os), "%s", _os); }
|
|
inline IpAddress* get_ip() { return(ip); }
|
|
void set_mac(char *m);
|
|
inline bool is_blacklisted() { return(blacklisted_host); }
|
|
inline u_int8_t* get_mac() { return(mac_address); }
|
|
inline u_int8_t* get_antenna_mac() { return(antenna_mac_address); }
|
|
inline char* get_os() { return(os); }
|
|
inline char* get_name() { return(symbolic_name); }
|
|
inline char* get_country() { return(country); }
|
|
inline char* get_city() { return(city); }
|
|
inline char* get_httpbl() { refreshHTTPBL(); return(trafficCategory); }
|
|
inline int get_ingress_shaper_id() { return(ingress_shaper_id); }
|
|
inline int get_egress_shaper_id() { return(egress_shaper_id); }
|
|
inline u_int32_t get_asn() { return(asn); }
|
|
inline bool isPrivateHost() { return((ip && ip->isPrivateAddress()) ? true : false); }
|
|
inline float get_latitude() { return(latitude); }
|
|
inline float get_longitude() { return(longitude); }
|
|
bool isLocalInterfaceAddress();
|
|
char* get_mac(char *buf, u_int buf_len, u_int8_t *mac);
|
|
char* get_name(char *buf, u_int buf_len, bool force_resolution_if_not_found);
|
|
char* get_string_key(char *buf, u_int buf_len);
|
|
void incUses() { num_uses++; }
|
|
void decUses() { num_uses--; }
|
|
bool idle();
|
|
void lua(lua_State* vm, patricia_tree_t * ptree, bool host_details,
|
|
bool verbose, bool returnHost, bool asListElement);
|
|
void resolveHostName();
|
|
void setName(char *name);
|
|
void set_host_label(char *label_name);
|
|
int compare(Host *h);
|
|
inline bool equal(IpAddress *_ip) { return(ip && _ip && ip->equal(_ip)); };
|
|
void incStats(u_int8_t l4_proto, u_int ndpi_proto,
|
|
struct site_categories *category,
|
|
u_int64_t sent_packets, u_int64_t sent_bytes, u_int64_t sent_goodput_bytes,
|
|
u_int64_t rcvd_packets, u_int64_t rcvd_bytes, u_int64_t rcvd_goodput_bytes);
|
|
void incHitter(Host *peer, u_int64_t sent_bytes, u_int64_t rcvd_bytes);
|
|
void updateHostTrafficPolicy(char *key);
|
|
char* serialize();
|
|
bool deserialize(char *json_str, char *key);
|
|
bool addIfMatching(lua_State* vm, patricia_tree_t * ptree, char *key);
|
|
void updateSynFlags(time_t when, u_int8_t flags, Flow *f, bool syn_sent);
|
|
|
|
void incNumFlows(bool as_client);
|
|
void decNumFlows(bool as_client);
|
|
|
|
inline void incIngressDrops(u_int num_bytes) { ingress_drops.incStats(num_bytes); };
|
|
inline void incEgressDrops(u_int num_bytes) { egress_drops.incStats(num_bytes); };
|
|
inline void incNumDNSQueriesSent(u_int16_t query_type) { if(dns) dns->incNumDNSQueriesSent(query_type); };
|
|
inline void incNumDNSQueriesRcvd(u_int16_t query_type) { if(dns) dns->incNumDNSQueriesRcvd(query_type); };
|
|
inline void incNumDNSResponsesSent(u_int32_t ret_code) { if(dns) dns->incNumDNSResponsesSent(ret_code); };
|
|
inline void incNumDNSResponsesRcvd(u_int32_t ret_code) { if(dns) dns->incNumDNSResponsesRcvd(ret_code); };
|
|
inline bool triggerAlerts() { return(trigger_host_alerts); };
|
|
|
|
inline NetworkStats* getNetworkStats(int16_t networkId){ return(iface->getNetworkStats(networkId)); };
|
|
|
|
void readAlertPrefs();
|
|
void updateHTTPHostRequest(char *virtual_host_name, u_int32_t num_req, u_int32_t bytes_sent, u_int32_t bytes_rcvd);
|
|
|
|
bool match(patricia_tree_t *ptree) { return(get_ip() ? get_ip()->match(ptree) : false); };
|
|
void updateHostL7Policy();
|
|
bool doDropProtocol(ndpi_protocol l7_proto);
|
|
inline bool dropAllTraffic() { return(drop_all_host_traffic); };
|
|
inline bool dumpHostTraffic() { return(dump_host_traffic); };
|
|
void setDumpTrafficPolicy(bool new_policy);
|
|
bool isAboveQuota(void);
|
|
void setQuota(u_int32_t new_quota);
|
|
void loadAlertPrefs(void);
|
|
void getPeerBytes(lua_State* vm, u_int32_t peer_key);
|
|
inline void incIngressNetworkStats(int16_t networkId, u_int64_t num_bytes) { if(networkStats) networkStats->incIngress(num_bytes); };
|
|
inline void incEgressNetworkStats(int16_t networkId, u_int64_t num_bytes) { if(networkStats) networkStats->incEgress(num_bytes); };
|
|
inline void incInnerNetworkStats(int16_t networkId, u_int64_t num_bytes) { if(networkStats) networkStats->incInner(num_bytes); };
|
|
void incrVisitedWebSite(char *hostname);
|
|
};
|
|
|
|
#endif /* _HOST_H_ */
|