ntopng/include/FrequentTrafficItems.h
2017-08-08 12:30:50 +02:00

81 lines
2.3 KiB
C++

/*
*
* (C) 2017 - ntop.org
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software Foundation,
* Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*/
#ifndef _FREQUENT_TRAFFIC_ITEMS_H_
#define _FREQUENT_TRAFFIC_ITEMS_H_
#include "ntop_includes.h"
/* https://resources.sei.cmu.edu/asset_files/Presentation/2010_017_001_49763.pdf */
typedef union {
struct {
u_int16_t pool_id;
u_int16_t proto_id;
} pool_proto;
struct {
u_int8_t mac[6];
u_int16_t proto_id;
} mac_proto;
} FrequentTrafficKey_t;
typedef struct {
FrequentTrafficKey_t key;
u_int32_t value;
UT_hash_handle hh; /* makes this structure hashable */
} FrequentTrafficNode_t;
/*
* NOTE: The assumption to provide concurrent access is that:
* - only one thread, at a given moment, can call the add* / reset functions
* - one or more threads, concurrently, can call the lua* methods (data query)
*/
/* *************************************** */
class FrequentTrafficItems {
private:
u_int32_t max_items, max_items_threshold;
u_int32_t values_sum, last_values_sum;
float last_diff;
FrequentTrafficNode_t *q, *q_committed;
Mutex m;
void cleanup(FrequentTrafficNode_t *root);
void prune();
FrequentTrafficNode_t* addGeneric(FrequentTrafficKey_t *key, size_t keysize, u_int32_t value);
public:
FrequentTrafficItems(u_int32_t _max_items);
~FrequentTrafficItems();
void print();
void testme();
void reset(float tdiff_msec);
void addPoolProtocol(u_int16_t pool_id, u_int16_t proto_id, u_int32_t value);
void luaTopPoolsProtocols(lua_State *vm);
void addMacProtocol(u_int8_t mac[6], u_int16_t proto_id, u_int32_t value);
void luaTopMacsProtocols(lua_State *vm);
};
#endif /* _FREQUENT_TRAFFIC_ITEMS_H_ */