mirror of
https://github.com/BlackLight/Snort_AIPreproc.git
synced 2024-11-16 13:37:14 +01:00
204 lines
6.4 KiB
Text
204 lines
6.4 KiB
Text
/*
|
|
** Copyright (C) 2007-2010 Sourcefire, Inc.
|
|
**
|
|
** This program is free software; you can redistribute it and/or modify
|
|
** it under the terms of the GNU General Public License Version 2 as
|
|
** published by the Free Software Foundation. You may not use, modify or
|
|
** distribute this program under any other version of the GNU General
|
|
** Public License.
|
|
**
|
|
** This program is distributed in the hope that it will be useful,
|
|
** but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
** GNU General Public License for more details.
|
|
**
|
|
** You should have received a copy of the GNU General Public License
|
|
** along with this program; if not, write to the Free Software
|
|
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#ifndef IPV6_PORT_H
|
|
#define IPV6_PORT_H
|
|
|
|
#include "sf_types.h"
|
|
#include "debug.h"
|
|
|
|
///////////////////
|
|
/* IPv6 and IPv4 */
|
|
#ifdef SUP_IP6
|
|
|
|
#include "sf_ip.h"
|
|
|
|
typedef sfip_t snort_ip;
|
|
typedef sfip_t *snort_ip_p;
|
|
|
|
#define IpAddrNode sfip_node_t
|
|
#define IpAddrSet sfip_var_t
|
|
#define IpAddrSetContains(x,y) sfvar_ip_in(x, y)
|
|
#define IpAddrSetPrint sfvar_print
|
|
|
|
#ifdef inet_ntoa
|
|
#undef inet_ntoa
|
|
#endif
|
|
#define inet_ntoa sfip_ntoa
|
|
|
|
#define GET_SRC_IP(p) (p->iph_api->iph_ret_src(p))
|
|
#define GET_DST_IP(p) (p->iph_api->iph_ret_dst(p))
|
|
|
|
#define GET_ORIG_SRC(p) (p->orig_iph_api->orig_iph_ret_src(p))
|
|
#define GET_ORIG_DST(p) (p->orig_iph_api->orig_iph_ret_dst(p))
|
|
|
|
/* These are here for backwards compatibility */
|
|
#define GET_SRC_ADDR(x) GET_SRC_IP(x)
|
|
#define GET_DST_ADDR(x) GET_DST_IP(x)
|
|
|
|
#define IP_EQUALITY(x,y) (sfip_compare(x,y) == SFIP_EQUAL)
|
|
#define IP_EQUALITY_UNSET(x,y) (sfip_compare_unset(x,y) == SFIP_EQUAL)
|
|
#define IP_LESSER(x,y) (sfip_compare(x,y) == SFIP_LESSER)
|
|
#define IP_GREATER(x,y) (sfip_compare(x,y) == SFIP_GREATER)
|
|
|
|
#define GET_IPH_TOS(p) p->iph_api->iph_ret_tos(p)
|
|
#define GET_IPH_LEN(p) p->iph_api->iph_ret_len(p)
|
|
#define GET_IPH_TTL(p) p->iph_api->iph_ret_ttl(p)
|
|
#define GET_IPH_ID(p) p->iph_api->iph_ret_id(p)
|
|
#define GET_IPH_OFF(p) p->iph_api->iph_ret_off(p)
|
|
#define GET_IPH_VER(p) p->iph_api->iph_ret_ver(p)
|
|
#define GET_IPH_PROTO(p) p->iph_api->iph_ret_proto(p)
|
|
|
|
#define GET_ORIG_IPH_PROTO(p) p->orig_iph_api->orig_iph_ret_proto(p)
|
|
#define GET_ORIG_IPH_VER(p) p->orig_iph_api->orig_iph_ret_ver(p)
|
|
#define GET_ORIG_IPH_LEN(p) p->orig_iph_api->orig_iph_ret_len(p)
|
|
#define GET_ORIG_IPH_OFF(p) p->orig_iph_api->orig_iph_ret_off(p)
|
|
#define GET_ORIG_IPH_PROTO(p) p->orig_iph_api->orig_iph_ret_proto(p)
|
|
|
|
#define IS_IP4(x) (x->family == AF_INET)
|
|
#define IS_IP6(x) (x->family == AF_INET6)
|
|
/* XXX make sure these aren't getting confused with sfip_is_valid within the code */
|
|
#define IPH_IS_VALID(p) iph_is_valid(p)
|
|
|
|
#define IP_CLEAR(x) x.bits = x.family = x.ip32[0] = x.ip32[1] = x.ip32[2] = x.ip32[3] = 0;
|
|
|
|
#define IS_SET(x) sfip_is_set(&x)
|
|
|
|
/* This loop trickery is intentional. If each copy is performed
|
|
* individually on each field, then the following expression gets broken:
|
|
*
|
|
* if(conditional) IP_COPY_VALUE(a,b);
|
|
*
|
|
* If the macro is instead enclosed in braces, then having a semicolon
|
|
* trailing the macro causes compile breakage.
|
|
* So: use loop. */
|
|
#define IP_COPY_VALUE(x,y) \
|
|
do { \
|
|
x.bits = y->bits; \
|
|
x.family = y->family; \
|
|
x.ip32[0] = y->ip32[0]; \
|
|
x.ip32[1] = y->ip32[1]; \
|
|
x.ip32[2] = y->ip32[2]; \
|
|
x.ip32[3] = y->ip32[3]; \
|
|
} while(0)
|
|
|
|
#define GET_IPH_HLEN(p) (p->iph_api->iph_ret_hlen(p))
|
|
#define SET_IPH_HLEN(p, val)
|
|
|
|
#define GET_IP_DGMLEN(p) IS_IP6(p) ? (ntohs(GET_IPH_LEN(p)) + (GET_IPH_HLEN(p) << 2)) : ntohs(GET_IPH_LEN(p))
|
|
#define GET_IP_PAYLEN(p) IS_IP6(p) ? ntohs(GET_IPH_LEN(p)) : (ntohs(GET_IPH_LEN(p)) - (GET_IPH_HLEN(p) << 2))
|
|
|
|
#define IP_ARG(ipt) (&ipt)
|
|
#define IP_PTR(ipp) (ipp)
|
|
#define IP_VAL(ipt) (*ipt)
|
|
#define IP_SIZE(ipp) (sfip_size(ipp))
|
|
|
|
static INLINE int sfip_equal (snort_ip* ip1, snort_ip* ip2)
|
|
{
|
|
if ( ip1->family != ip2->family )
|
|
{
|
|
return 0;
|
|
}
|
|
if ( ip1->family == AF_INET )
|
|
{
|
|
return _ip4_cmp(ip1->ip32[0], ip2->ip32[0]) == SFIP_EQUAL;
|
|
}
|
|
if ( ip1->family == AF_INET6 )
|
|
{
|
|
return _ip6_cmp(ip1, ip2) == SFIP_EQUAL;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
#else
|
|
///////////////
|
|
/* IPv4 only */
|
|
#include <sys/types.h>
|
|
#ifdef HAVE_CONFIG_H
|
|
#include <config.h>
|
|
#endif
|
|
|
|
typedef u_int32_t snort_ip; /* 32 bits only -- don't use unsigned long */
|
|
typedef u_int32_t snort_ip_p; /* 32 bits only -- don't use unsigned long */
|
|
|
|
#define IP_SRC_EQUALITY(x,y) (x->ip_addr == (y->iph->ip_src.s_addr & x->netmask))
|
|
#define IP_DST_EQUALITY(x,y) (x->ip_addr == (y->iph->ip_dst.s_addr & x->netmask))
|
|
|
|
#define GET_SRC_IP(x) x->iph->ip_src.s_addr
|
|
#define GET_DST_IP(x) x->iph->ip_dst.s_addr
|
|
|
|
#define GET_ORIG_SRC(p) (p->orig_iph->ip_src.s_addr)
|
|
#define GET_ORIG_DST(p) (p->orig_iph->ip_dst.s_addr)
|
|
|
|
#define GET_SRC_ADDR(x) x->iph->ip_src
|
|
#define GET_DST_ADDR(x) x->iph->ip_dst
|
|
|
|
#define IP_CLEAR_SRC(x) x->iph->ip_src.s_addr = 0
|
|
#define IP_CLEAR_DST(x) x->iph->ip_dst.s_addr = 0
|
|
|
|
#define IP_EQUALITY(x,y) (x == y)
|
|
#define IP_EQUALITY_UNSET(x,y) (x == y)
|
|
#define IP_LESSER(x,y) (x < y)
|
|
#define IP_GREATER(x,y) (x > y)
|
|
|
|
#define GET_IPH_PROTO(p) p->iph->ip_proto
|
|
#define GET_IPH_TOS(p) p->iph->ip_tos
|
|
#define GET_IPH_LEN(p) p->iph->ip_len
|
|
#define GET_IPH_TTL(p) p->iph->ip_ttl
|
|
#define GET_IPH_VER(p) ((p->iph->ip_verhl & 0xf0) >> 4)
|
|
#define GET_IPH_ID(p) p->iph->ip_id
|
|
#define GET_IPH_OFF(p) p->iph->ip_off
|
|
|
|
#define GET_ORIG_IPH_VER(p) IP_VER(p->orig_iph)
|
|
#define GET_ORIG_IPH_LEN(p) p->orig_iph->ip_len
|
|
#define GET_ORIG_IPH_OFF(p) p->orig_iph->ip_off
|
|
#define GET_ORIG_IPH_PROTO(p) p->orig_iph->ip_proto
|
|
|
|
#define IS_IP4(x) 1
|
|
#define IS_IP6(x) 0
|
|
#define IPH_IS_VALID(p) p->iph
|
|
|
|
#define IP_CLEAR(x) x = 0;
|
|
#define IS_SET(x) x
|
|
|
|
#define IP_COPY_VALUE(x,y) x = y
|
|
|
|
#define GET_IPH_HLEN(p) ((p)->iph->ip_verhl & 0x0f)
|
|
#define SET_IPH_HLEN(p, val) (((IPHdr *)(p)->iph)->ip_verhl = (unsigned char)(((p)->iph->ip_verhl & 0xf0) | ((val) & 0x0f)))
|
|
|
|
#define GET_IP_DGMLEN(p) ntohs(GET_IPH_LEN(p))
|
|
#define GET_IP_PAYLEN(p) ntohs(GET_IPH_LEN(p)) - (GET_IPH_HLEN(p) << 2)
|
|
|
|
#define IP_ARG(ipt) (ipt)
|
|
#define IP_PTR(ipp) (&ipp)
|
|
#define IP_VAL(ipt) (ipt)
|
|
#define IP_SIZE(ipp) (sizeof(ipp))
|
|
|
|
static INLINE int sfip_equal (snort_ip ip1, snort_ip ip2)
|
|
{
|
|
return IP_EQUALITY(ip1, ip2);
|
|
}
|
|
|
|
#endif /* SUP_IP6 */
|
|
|
|
#if !defined(IPPROTO_IPIP) && defined(WIN32) /* Needed for some Win32 */
|
|
#define IPPROTO_IPIP 4
|
|
#endif
|
|
|
|
#endif /* IPV6_PORT_H */
|