vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-20 00:57:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
ntopng/src/IpAddress.cpp
Luca Deri 40689081c7 Implemented periodicity stats
2020-07-17 13:12:53 +02:00

403 lines
11 KiB
C++
Raw Blame History

/*
*
* (C) 2013-20 - ntop.org
*
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software Foundation,
* Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*/
#include "ntop_includes.h"
/* ******************************************* */
IpAddress::IpAddress() {
ip_key = 0;
memset(&addr, 0, sizeof(addr));
compute_key();
}
/* ******************************************* */
IpAddress::IpAddress(const IpAddress& ipa) {
set(&ipa);
memcpy(&addr, &ipa.addr, sizeof(addr));
compute_key();
}
/* ******************************************* */
void IpAddress::set(const char* const sym_addr) {
if(sym_addr == NULL) return;
if(strchr(sym_addr, '.')) {
addr.ipVersion = 4, addr.ipType.ipv4 = inet_addr(sym_addr);
} else {
if(inet_pton(AF_INET6, sym_addr, &addr.ipType.ipv6) <= 0) {
/* We failed */
addr.ipVersion = 4, addr.ipType.ipv4 = 0;
} else {
addr.ipVersion = 6;
}
}
compute_key();
}
/* ******************************************* */
void IpAddress::set(union usa *ip) {
if(ip->sin.sin_family != AF_INET6) {
addr.ipVersion = 4, addr.ipType.ipv4 = ip->sin.sin_addr.s_addr;
} else {
memcpy(&addr.ipType.ipv6, &ip->sin6.sin6_addr, sizeof(struct ndpi_in6_addr));
addr.ipVersion = 6;
}
compute_key();
}
/* ******************************************* */
void IpAddress::reloadBlacklist(ndpi_detection_module_struct* ndpi_struct) {
char ipbuf[64];
char *ip_str = print(ipbuf, sizeof(ipbuf));
ndpi_protocol_category_t category;
if((ndpi_get_custom_category_match(ndpi_struct, ip_str, strlen(ip_str), &category) == 0)
&& category == CUSTOM_CATEGORY_MALWARE)
addr.blacklistedIP = true;
}
/* ******************************************* */
bool IpAddress::isEmpty() const {
if((addr.ipVersion == 0)
|| ((addr.ipVersion == 4) && (addr.ipType.ipv4 == 0))) {
return true;
} else if(addr.ipVersion == 6) {
struct ndpi_in6_addr empty_ipv6;
memset(&empty_ipv6, 0, sizeof(empty_ipv6));
return memcmp((void*)&empty_ipv6, (void*)&addr.ipType.ipv6, sizeof(empty_ipv6)) == 0 ? true : false;
}
return false;
}
/* ******************************************* */
void IpAddress::checkIP() {
u_int32_t a;
int16_t local_network_id;
u_int32_t nmask;
u_int8_t nmask_bits;
addr.privateIP = false; /* Default */
if(addr.ipVersion == 4) {
addr.loopbackIP = addr.ipType.ipv4 == 0x0100007F /* 127.0.0.1 */ ? true : false;
/*
RFC 1918 - Private Address Space
The Internet Assigned Numbers Authority (IANA) has reserved the
following three blocks of the IP address space for private internets:
10.0.0.0 - 10.255.255.255 (10/8 prefix)
172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
192.168.0.0 - 192.168.255.255 (192.168/16 prefix)
*/
a = ntohl(addr.ipType.ipv4);
if(((a & 0xFF000000) == 0x0A000000 /* 10.0.0.0/8 */)
|| ((a & 0xFFF00000) == 0xAC100000 /* 172.16.0.0/12 */)
|| ((a & 0xFFFF0000) == 0xC0A80000 /* 192.168.0.0/16 */)
|| ((a & 0xFF000000) == 0x7F000000 /* 127.0.0.0/8 */)
)
addr.privateIP = true;
if((a & 0xF0000000) == 0xE0000000 /* 224.0.0.0/4 */)
addr.multicastIP = true;
else if((a == 0xFFFFFFFF) || (a == 0))
addr.broadcastIP = true;
else if(ntop->isLocalAddress(AF_INET, &addr.ipType.ipv4, &local_network_id, &nmask_bits)) {
if(nmask_bits > 0 && nmask_bits < 31) { /* /0 no mask, /32 is just an host, /31 is a point-to-point */
nmask = ~((1 << (32 - nmask_bits)) - 1);
if(a == (a | ~nmask) /* e.g., 10.0.0.0/8 -> matches 10.255.255.255.255 */
|| a == (a & nmask) /* e.g., 10.0.0.0/8 -> matches 10.0.0.0 */)
addr.broadcastIP = true;
}
}
} else if (addr.ipVersion == 6) {
addr.loopbackIP = false; /* TODO: compute loopback for IPv6 */
/*
Link-local addresses have the prefix fe80::/10, we mark them as private
*/
if((addr.ipType.ipv6.u6_addr.u6_addr8[0] & 0xFF) == 0xFE
&& (addr.ipType.ipv6.u6_addr.u6_addr8[1] & 0xC0) == 0x80)
addr.privateIP = true;
/*
* https://tools.ietf.org/html/rfc2373#section-2.7
*
* 11111111 at the start of the address identifies the address as being a multicast address.
*/
if(addr.ipType.ipv6.u6_addr.u6_addr8[0] == 0xFF)
addr.multicastIP = true;
}
}
/* ******************************************* */
int IpAddress::compare(const IpAddress * const ip) const {
if(ip == NULL) return(-1);
if(addr.ipVersion < ip->addr.ipVersion) return(-1); else if(addr.ipVersion > ip->addr.ipVersion) return(1);
if(addr.ipVersion == 4) {
#if 0
u_int32_t a = ntohl(ip->addr.ipType.ipv4);
u_int32_t b = ntohl(addr.ipType.ipv4);
if(a < b) return(1); else if(b < a) return(-1); else return(0);
#else
return(memcmp(&addr.ipType.ipv4, &ip->addr.ipType.ipv4, sizeof(u_int32_t)));
#endif
} else
return(memcmp(&addr.ipType.ipv6, &ip->addr.ipType.ipv6, sizeof(struct ndpi_in6_addr)));
}
/* ******************************************* */
bool IpAddress::isLocalInterfaceAddress() {
bool systemHost;
if(addr.ipVersion == 4) {
ip_key = ntohl(addr.ipType.ipv4);
systemHost = ntop->isLocalInterfaceAddress(AF_INET, &addr.ipType.ipv4);
} else if(addr.ipVersion == 6) {
u_int32_t key = 0;
for(u_int32_t i=0; i<4; i++)
key += addr.ipType.ipv6.u6_addr.u6_addr32[i];
ip_key = key;
systemHost = ntop->isLocalInterfaceAddress(AF_INET6, &addr.ipType.ipv6);
} else
systemHost = false;
return(systemHost);
}
/* ******************************************* */
void IpAddress::compute_key() {
checkIP();
if(addr.ipVersion == 4) {
ip_key = ntohl(addr.ipType.ipv4);
} else if(addr.ipVersion == 6) {
ip_key = 0;
for(u_int32_t i=0; i<4; i++)
ip_key += addr.ipType.ipv6.u6_addr.u6_addr32[i];
}
}
/* ******************************************* */
char* IpAddress::print(char *str, u_int str_len, u_int8_t bitmask) const {
str[0] = '\0';
return(intoa(str, str_len, bitmask));
}
/* ******************************************* */
char* IpAddress::printMask(char *str, u_int str_len, bool isLocalIP) {
if(Utils::maskHost(isLocalIP)) {
snprintf(str, str_len, (addr.ipVersion == 4) ? "0.0.0.0" : "::");
return(str);
} else
return(intoa(str, str_len, 0xFF /* bitmask */));
}
/* ******************************************* */
bool IpAddress::isLocalHost(int16_t *network_id) const {
if(addr.ipVersion == 4) {
u_int32_t v = /* htonl */(addr.ipType.ipv4);
return(ntop->isLocalAddress(AF_INET, (void*)&v, network_id));
} else {
return(ntop->isLocalAddress(AF_INET6, (void*)&addr.ipType.ipv6, network_id));
}
}
/* ******************************************* */
void* IpAddress::findAddress(AddressTree *ptree) {
if(ptree == NULL)
return(NULL);
else {
void *ret;
if(addr.ipVersion == 4)
ret = Utils::ptree_match(ptree->getTree(true), AF_INET, &addr.ipType.ipv4, 32);
else
ret = Utils::ptree_match(ptree->getTree(false), AF_INET6, (void*)&addr.ipType.ipv6, 128);
return(ret);
}
}
/* ******************************************* */
bool IpAddress::get_sockaddr(struct sockaddr ** const sa, ssize_t * const sa_len) const {
if(!sa || !sa_len)
return false;
if(addr.ipVersion == 4) {
struct sockaddr_in *in4 = (struct sockaddr_in*)calloc(1, sizeof(struct sockaddr_in));
if(in4) {
in4->sin_family = AF_INET, in4->sin_addr.s_addr = addr.ipType.ipv4,
*sa_len = sizeof(struct sockaddr_in), *sa = (struct sockaddr*)in4;
return true;
}
} else if(addr.ipVersion == 6) {
struct sockaddr_in6 *in6 = (struct sockaddr_in6*)calloc(1, sizeof(struct sockaddr_in6));
if(in6) {
in6->sin6_family = AF_INET6, memcpy((void*)&in6->sin6_addr, (void*)&addr.ipType.ipv6, sizeof(addr.ipType.ipv6)),
*sa_len = sizeof(struct sockaddr_in6), *sa = (struct sockaddr*)in6;
return true;
}
}
return false;
}
/* ******************************************* */
char* IpAddress::serialize() {
json_object *my_object = getJSONObject();
char *rsp = strdup(json_object_to_json_string(my_object));
/* Free memory */
json_object_put(my_object);
return(rsp);
}
/* ******************************************* */
json_object* IpAddress::getJSONObject() {
json_object *my_object;
char buf[64];
my_object = json_object_new_object();
json_object_object_add(my_object, "ipVersion", json_object_new_int(addr.ipVersion));
json_object_object_add(my_object, "ip", json_object_new_string(print(buf, sizeof(buf))));
return(my_object);
}
/* ******************************************* */
/**
* @brief Check if the host matches the specified host tree.
* @param ptree The hosts allowed to be accessed.
* @return true if the host matches the tree, false otherwise.
*/
bool IpAddress::match(const AddressTree * const tree) const {
if(tree == NULL)
return(true);
else {
const patricia_tree_t *ptree = tree->getTree((addr.ipVersion == 4) ? true : false);
patricia_node_t *node;
if(ptree == NULL) return(true);
if(addr.ipVersion == 4)
node = Utils::ptree_match(ptree, AF_INET, (void*)&addr.ipType.ipv4, 32);
else
node = Utils::ptree_match(ptree, AF_INET6, (void*)&addr.ipType.ipv6, 128);
return((node == NULL) ? false : true);
}
}
/* ****************************** */
char* IpAddress::intoa(char* buf, u_short bufLen, u_int8_t bitmask) const {
if((addr.ipVersion == 4) || (addr.ipVersion == 0 /* Misconfigured */)) {
bitmask = bitmask <= 32 ? bitmask : 32;
u_int32_t a = ntohl(addr.ipType.ipv4);
if(bitmask > 0) {
/* bitmask 0 here causes integer overflow */
u_int32_t netmask = ~((((u_int32_t)1) << (32 - bitmask)) - 1);
a &= netmask;
} else {
/* bitmask is 0 */
a = 0;
}
return(Utils::intoaV4(a, buf, bufLen));
} else {
bitmask = bitmask <= 128 ? bitmask : 128;
return(Utils::intoaV6(addr.ipType.ipv6, bitmask, buf, bufLen));
}
}
/* ****************************** */
void IpAddress::incCardinality(Cardinality *c) {
if(isIPv4())
c->addElement(get_ipv4());
else
c->addElement((const char *)get_ipv6(), sizeof(struct ndpi_in6_addr));
}
/* ****************************** */
void IpAddress::dump() {
int16_t network_id;
char buf[48];
const char *local, *system;
ntop->getTrace()->traceEvent(TRACE_NORMAL, "-------------------- [ Local ]");
local = isLocalHost(&network_id) ? "Yes" : "No";
ntop->getTrace()->traceEvent(TRACE_NORMAL, "-------------------- [ System ]");
system = isLocalInterfaceAddress() ? "Yes" : "No";
ntop->getTrace()->traceEvent(TRACE_NORMAL, "--------------------");
ntop->getTrace()->traceEvent(TRACE_NORMAL, "%s [Local: %s][SystemHost: %s]",
print(buf, sizeof(buf)), local, system);
}
/* ****************************** */
IpAddress* IpAddress::clone() {
return(new IpAddress(*this));
}
Reference in a new issue View git blame Copy permalink