139 lines
4.3 KiB
C
139 lines
4.3 KiB
C
/*
|
|
** Copyright (C) 1998-2010 Sourcefire, Inc.
|
|
**
|
|
** This program is free software; you can redistribute it and/or modify
|
|
** it under the terms of the GNU General Public License Version 2 as
|
|
** published by the Free Software Foundation. You may not use, modify or
|
|
** distribute this program under any other version of the GNU General
|
|
** Public License.
|
|
**
|
|
** This program is distributed in the hope that it will be useful,
|
|
** but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
** GNU General Public License for more details.
|
|
**
|
|
** You should have received a copy of the GNU General Public License
|
|
** along with this program; if not, write to the Free Software
|
|
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
/*
|
|
* Adam Keeton
|
|
* sf_ipvar.h
|
|
* 11/17/06
|
|
*/
|
|
|
|
|
|
#ifndef SF_IPVAR_H
|
|
#define SF_IPVAR_H
|
|
|
|
/* Flags */
|
|
#define SFIP_NEGATED 1
|
|
#define SFIP_ANY 2
|
|
|
|
#include <stdio.h>
|
|
#include "sf_ip.h"
|
|
|
|
/* Selects which mode a given variable is using to
|
|
* store and lookup IP addresses */
|
|
typedef enum _modes {
|
|
SFIP_LIST,
|
|
SFIP_TABLE
|
|
} MODES;
|
|
|
|
/* Used by the "list" mode. A doubly linked list of sfip_t objects. */
|
|
typedef struct _ip_node {
|
|
sfip_t *ip;
|
|
#ifdef SUP_IP6
|
|
#define ip_addr ip; /* To ease porting Snort */
|
|
#endif
|
|
struct _ip_node *next;
|
|
int flags;
|
|
// XXX
|
|
int addr_flags; /* Flags used exlusively by Snort */
|
|
/* Keeping these variables seperate keeps
|
|
* this from stepping on Snort's toes. */
|
|
/* Should merge them later */
|
|
} sfip_node_t;
|
|
|
|
/* An IP variable onkect */
|
|
typedef struct _var_t {
|
|
/* Selects whether or not to use the list, the table,
|
|
* or any other method added later */
|
|
MODES mode;
|
|
|
|
/* Linked lists. Switch to something faster later */
|
|
sfip_node_t *head;
|
|
sfip_node_t *neg_head;
|
|
|
|
/* The mode above will select whether to use the sfip_node_t linked list
|
|
* or the IP routing table */
|
|
// sfrt rt;
|
|
|
|
/* Linked list of IP variables for the variable table */
|
|
struct _var_t *next;
|
|
|
|
uint32_t id;
|
|
char *name;
|
|
} sfip_var_t;
|
|
|
|
/* A variable table for storing and looking up variables */
|
|
/* Expand later to use a faster data structure */
|
|
typedef struct _vartable_t {
|
|
sfip_var_t *head;
|
|
uint32_t id;
|
|
} vartable_t;
|
|
|
|
/* Creates a new variable that is an alias of another variable
|
|
* Does a "deep" copy so it owns it's own pointers */
|
|
sfip_var_t * sfvar_create_alias(const sfip_var_t *alias_from, const char *alias_to);
|
|
|
|
/* Returns 1 if the two variables are aliases of each other, 0 otherwise */
|
|
int sfvar_is_alias(const sfip_var_t *one, const sfip_var_t *two);
|
|
|
|
/* Allocates a new variable as according to "str" */
|
|
sfip_var_t *sfvar_alloc(vartable_t *table, char *str, SFIP_RET *status);
|
|
|
|
/* Makes sure there are no IP address conflicts in the variable */
|
|
/* Returns SFIP_CONFLICT if so */
|
|
SFIP_RET sfvar_validate(sfip_var_t *var);
|
|
|
|
/* Parses an IP list described by 'str' and saves the results in 'var'. */
|
|
SFIP_RET sfvar_parse_iplist(vartable_t *table, sfip_var_t *var,
|
|
char *str, int negation);
|
|
|
|
/* Allocaties and returns an IP node described by 'str' */
|
|
sfip_node_t *sfipnode_alloc(char *str, SFIP_RET *status);
|
|
|
|
/* Adds a deep copy of src to dst */
|
|
/* Ordering is not necessarily preserved */
|
|
SFIP_RET sfvar_add(sfip_var_t *dst, sfip_var_t *src);
|
|
|
|
/* Adds the nodes in 'src' to the variable 'dst' */
|
|
/* The mismatch of types is for ease-of-supporting Snort4 and
|
|
* Snort6 simultaneously */
|
|
SFIP_RET sfvar_add_node(sfip_var_t *dst, sfip_node_t *src, int negated);
|
|
|
|
/* Compares two variables. Necessary when building RTN structure */
|
|
SFIP_RET sfvar_compare(const sfip_var_t *one, const sfip_var_t *two);
|
|
|
|
/* Deep copy. Returns identical, new, linked list of sfipnodes. */
|
|
sfip_var_t *sfvar_deep_copy(const sfip_var_t *src);
|
|
|
|
/* Free an allocated variable */
|
|
void sfvar_free(sfip_var_t *var);
|
|
|
|
/* Returns non-zero if ip is contained in 'var', 0 otherwise */
|
|
/* If either argument is NULL, 0 is returned. */
|
|
int sfvar_ip_in(sfip_var_t *var, sfip_t *ip);
|
|
|
|
/* Prints the variable "var" to the file descriptor 'f' */
|
|
void sfvar_print(FILE *f, sfip_var_t *var);
|
|
|
|
void sfip_set_print(FILE *f, sfip_node_t *head);
|
|
|
|
/* Returns the node's flags */
|
|
int sfvar_flags(sfip_node_t *node);
|
|
|
|
#endif
|