/[darkstattype]/trunk/darkstattype.c
ViewVC logotype

Diff of /trunk/darkstattype.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 8 by trond, 2014-03-20T09:00:33Z Revision 13 by trond, 2014-03-21T16:59:56Z
# Line 17  Line 17 
17      this list of conditions and the following disclaimer in the documentation      this list of conditions and the following disclaimer in the documentation
18      and/or other materials provided with the distribution.      and/or other materials provided with the distribution.
19    
20   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
21   ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED   ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
22   WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE   WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
23   DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR   DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
24   ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES   ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
25   (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;   (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
26   LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND   LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
27   ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT   ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
29   SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.   SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30  */  */
31    
 // Define FOLLOW_SPECIFICATION to 0 (zero) to go with darkstat's own format as of 3.0.718.  
 #define FOLLOW_SPECIFICATION 0  
   
 // Define FOLLOW_SPECIFICATION to 1 (one) to go with the format specified in the export-format.txt file.  
 //#define FOLLOW_SPECIFICATION 1  
   
32  #include <errno.h>  #include <errno.h>
33    #include <stdbool.h>
34  #include <stdio.h>  #include <stdio.h>
35  #include <stdlib.h>  #include <stdlib.h>
36  #include <string.h>  #include <string.h>
37  #include <time.h>  #include <time.h>
38  #include <unistd.h>  #include <unistd.h>
39    
40  const char *progname = NULL;  const char *progname = NULL;
41  const char *filename = NULL;  const char *filename = NULL;
42  FILE *file = NULL;  FILE *file = NULL;
43    bool follow_specification = false;
44    
45  int main(int argc, char **argv)  int main(int argc, char **argv)
46  {  {
47    void show_usage(int exitcode);    void show_usage(int exitcode);
48    void show_version(void);    void show_version(void);
49    void decode_file(void);    void decode_file(void);
50    
51    int i;    int i;
52    
53    progname = argv[0];    progname = argv[0];
54    
55    opterr = 0;    opterr = 0;
56    while ( (i = getopt(argc, argv, "hv")) != -1) {    while ( (i = getopt(argc, argv, "fhv")) != -1) {
57      switch (i) {      switch (i) {
58          case 'f':
59            follow_specification = !follow_specification;
60            break;
61    
62        case 'h':        case 'h':
63          show_usage(EXIT_SUCCESS);          show_usage(EXIT_SUCCESS);
64          break;          break;
65    
66        case 'v':        case 'v':
67          show_version();          show_version();
68          break;          break;
69    
70        case '?':        case '?':
71          /*FALLTHROUGH*/          /*FALLTHROUGH*/
72        default:        default:
73          fprintf(stderr, "%s: illegal option -%c\n\n", progname, optopt);          fprintf(stderr, "%s: illegal option -%c\n\n", progname, optopt);
74          show_usage(EXIT_FAILURE);          show_usage(EXIT_FAILURE);
75          break;          break;
76      } // switch      } // switch
# Line 81  void show_usage(int exitcode) Line 81  void show_usage(int exitcode)
81    if (argv[0] == NULL) {    if (argv[0] == NULL) {
82      fprintf(stderr, "%s: missing filename\n\n", progname);      fprintf(stderr, "%s: missing filename\n\n", progname);
83      show_usage(EXIT_FAILURE);      show_usage(EXIT_FAILURE);
84    } // if    } // if
85    
86    filename = argv[0];    filename = argv[0];
87    
88    decode_file();    decode_file();
89    
90    return EXIT_SUCCESS;    return EXIT_SUCCESS;
91  } // main()  } // main()
92    
93  void show_usage(int exitcode)  void show_usage(int exitcode)
94  {  {
95    fprintf((exitcode == EXIT_SUCCESS) ? stdout : stderr,    fprintf((exitcode == EXIT_SUCCESS) ? stdout : stderr,
96      "Usage: %s [-h] [-v] filename\n"      "Usage: %s [-f] [-h] [-v] filename\n"
97      " E.g.: %s darkstat.db\n\n"      " E.g.: %s darkstat.db\n\n"
98    
99      "Options:\n"      "Options:\n"
100        "-f\tToggle follow strict specification, default is false.\n"
101      "-h\tShow this help message and exit.\n"      "-h\tShow this help message and exit.\n"
102      "-v\tShow version and copyright and exit.\n",      "-v\tShow version and copyright and exit.\n",
103      progname, progname);      progname, progname);
104    
105    exit(exitcode);    exit(exitcode);
106  } // show_usage()  } // show_usage()
107    
108  void show_version(void)  void show_version(void)
109  {  {
110    puts("darkstattype 1.0");    puts("darkstattype 1.0");
111    puts("$Ximalas$");    puts("$Ximalas$");
112    puts("");    puts("");
113    
114    puts("Copyright © 2014, Trond Endrestøl <Trond.Endrestol@ximalas.info>");    puts("Copyright © 2014, Trond Endrestøl <Trond.Endrestol@ximalas.info>");
115    puts("All rights reserved.");    puts("All rights reserved.");
# Line 165  void decode_file(void) Line 166  void decode_file(void)
166    void decode_graph_db_v1(void);    void decode_graph_db_v1(void);
167    
168    unsigned int fileheader;    unsigned int fileheader;
169    unsigned int sectionheader;    unsigned int sectionheader;
170    
171    unsigned int i;    unsigned int i;
172    
173    if ( (file = fopen(filename, "rb")) == NULL) {    if ( (file = fopen(filename, "rb")) == NULL) {
174      fprintf(stderr, "%s: fopen(\"%s\") = %s (%d)\n", progname, filename, strerror(errno), errno);      fprintf(stderr, "%s: fopen(\"%s\") = %s (%d)\n", progname, filename, strerror(errno), errno);
175      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
176    } // if    } // if
177    
178  #define FILE_HEADER_V1 0xDA314159U  #define FILE_HEADER_V1 0xDA314159U
179    
180    if ( (fileheader = read32u()) != FILE_HEADER_V1) { // not darkstat export format    if ( (fileheader = read32u()) != FILE_HEADER_V1) { // not darkstat export format
181      fprintf(stderr, "%s:%s: file header = 0x%x, not 0x%x\n", progname, filename, fileheader, FILE_HEADER_V1);      fprintf(stderr, "%s:%s:%ld: file header = 0x%x, not 0x%x\n", progname, filename, ftell(file), fileheader, FILE_HEADER_V1);
182      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
183    } // if    } // if
184    
185    printf("File header 0x%x\n", fileheader);    printf("File header 0x%x\n", fileheader);
186    
187    // Possible section header for host_db v1 and later graph_db v1.    // Possible section header for host_db v1 and later graph_db v1.
188    indent();    indent();
189    
190  #define HOST_DB_V1 0xDA485301U  #define HOST_DB_V1 0xDA485301U
191  #define GRAPH_DB_V1 0xDA475201U  #define GRAPH_DB_V1 0xDA475201U
192    
193    for (i = 0; i < 2; i++) {    for (i = 0; i < 2; i++) {
194      if ( (sectionheader = read32u()) == HOST_DB_V1) {      if ( (sectionheader = read32u()) == HOST_DB_V1) {
195        print_indentation();        print_indentation();
196        printf("Section header host_db v1 0x%x\n", sectionheader);        printf("Section header host_db v1 0x%x\n", sectionheader);
197        decode_host_db_v1();        decode_host_db_v1();
198      } // if      } // if
199      else if (sectionheader == GRAPH_DB_V1) {      else if (sectionheader == GRAPH_DB_V1) {
200        print_indentation();        print_indentation();
201        printf("Section header graph_db v1 0x%x\n", sectionheader);        printf("Section header graph_db v1 0x%x\n", sectionheader);
202        decode_graph_db_v1();        decode_graph_db_v1();
203      } // else if      } // else if
204      else {      else {
205        fprintf(stderr, "%s:%s: unknown section header = 0x%x, neither 0x%x nor 0x%x\n", progname, filename, sectionheader, HOST_DB_V1, GRAPH_DB_V1);        fprintf(stderr, "%s:%s:%ld: unknown section header = 0x%x, neither 0x%x nor 0x%x\n", progname, filename, ftell(file), sectionheader, HOST_DB_V1, GRAPH_DB_V1);
206        exit(EXIT_FAILURE);        exit(EXIT_FAILURE);
207      } // else      } // else
208    } // for    } // for
209    
210    exdent();    exdent();
211  } // decode_file()  } // decode_file()
212    
213  void decode_host_db_v1(void)  void decode_host_db_v1(void)
214  {  {
215    void decode_host_header_v1(void);    void decode_host_header_v1(void);
216    void decode_host_header_v2(void);    void decode_host_header_v2(void);
217    void decode_host_header_v3(void);    void decode_host_header_v3(void);
218    
219    unsigned int hostcount;    unsigned int hostcount;
220    unsigned int i;    unsigned int i;
# Line 241  void decode_host_db_v1(void) Line 242  void decode_host_db_v1(void)
242        print_indentation();        print_indentation();
243        printf("Host header v3 0x%x\n", hostheader);        printf("Host header v3 0x%x\n", hostheader);
244        decode_host_header_v3();        decode_host_header_v3();
245      } // if      } // if
246      else if (hostheader == HOST_HEADER_V2) { // host header v2      else if (hostheader == HOST_HEADER_V2) { // host header v2
247        print_indentation();        print_indentation();
248        printf("Host header v2 0x%x\n", hostheader);        printf("Host header v2 0x%x\n", hostheader);
249        decode_host_header_v2();        decode_host_header_v2();
250      } // else if      } // else if
251      else if (hostheader == HOST_HEADER_V1) { // host header v1      else if (hostheader == HOST_HEADER_V1) { // host header v1
252        print_indentation();        print_indentation();
253        printf("Host header v1 0x%x\n", hostheader);        printf("Host header v1 0x%x\n", hostheader);
254        decode_host_header_v1();        decode_host_header_v1();
255      } // else if      } // else if
256      else { // unknown host header version      else { // unknown host header version
257        fprintf(stderr, "%s:%s: unknown host header = 0x%x, neither 0x%x nor 0x%x nor 0x%x\n", progname, filename, hostheader, HOST_HEADER_V3, HOST_HEADER_V2, HOST_HEADER_V1);        fprintf(stderr, "%s:%s:%ld: unknown host header = 0x%x, neither 0x%x nor 0x%x nor 0x%x\n", progname, filename, ftell(file), hostheader, HOST_HEADER_V3, HOST_HEADER_V2, HOST_HEADER_V1);
258        exit(EXIT_FAILURE);        exit(EXIT_FAILURE);
259      } // else      } // else
260    
261      exdent();      exdent();
262    } // for    } // for
263    
264    exdent();    exdent();
265  } // decode_host_db_v1()  } // decode_host_db_v1()
266    
267  void decode_protos_data(void);  void decode_protos_data(void);
268  void decode_tcp_data(void);  void decode_tcp_data(void);
269  void decode_udp_data(void);  void decode_udp_data(void);
270    
271  void decode_host_header_v1(void)  void decode_host_header_v1(void)
272  {  {
# Line 277  void decode_host_header_v1(void) Line 278  void decode_host_header_v1(void)
278    unsigned long bytesout;    unsigned long bytesout;
279    unsigned char protosdata;    unsigned char protosdata;
280    unsigned char tcpdata;    unsigned char tcpdata;
281    unsigned char udpdata;    unsigned char udpdata;
282    
283    unsigned char i;    unsigned char i;
284    
285    indent();    indent();
286    
287    ipv4address[0] = read8u();    ipv4address[0] = read8u();
288    ipv4address[1] = read8u();    ipv4address[1] = read8u();
289    ipv4address[2] = read8u();    ipv4address[2] = read8u();
290    ipv4address[3] = read8u();    ipv4address[3] = read8u();
291    
292    print_indentation();    print_indentation();
293    printf("IPv4 address %d.%d.%d.%d\n",    printf("IPv4 address %u.%u.%u.%u\n",
294           ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);           ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);
295    
296    macaddress[0] = read8u();    macaddress[0] = read8u();
297    macaddress[1] = read8u();    macaddress[1] = read8u();
298    macaddress[2] = read8u();    macaddress[2] = read8u();
299    macaddress[3] = read8u();    macaddress[3] = read8u();
300    macaddress[4] = read8u();    macaddress[4] = read8u();
301    macaddress[5] = read8u();    macaddress[5] = read8u();
302    
303    print_indentation();    print_indentation();
304    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);
305    
306    hostnamelen = read8u();    hostnamelen = read8u();
307    
308    print_indentation();    print_indentation();
309    printf("Hostname length %d\n", hostnamelen);    printf("Hostname length %u\n", hostnamelen);
310    
311    for (i = 0; i < hostnamelen; i++) {    for (i = 0; i < hostnamelen; i++) {
312      hostname[i] = read8u();      hostname[i] = read8u();
313    } // for    } // for
314    hostname[i] = '\0';    hostname[i] = '\0';
315    
316    print_indentation();    print_indentation();
317    printf("Hostname %s\n", hostname);    printf("Hostname %s\n", hostname);
318    
319    bytesin = read64u();    bytesin = read64u();
320    
321    print_indentation();    print_indentation();
322    printf("Bytes in %lu\n", bytesin);    printf("Bytes in %lu\n", bytesin);
323    
324    bytesout = read64u();    bytesout = read64u();
325    
326    print_indentation();    print_indentation();
327    printf("Bytes out %lu\n", bytesout);    printf("Bytes out %lu\n", bytesout);
328    
329    if ( (protosdata = read8u()) != 'P') { // missing protos data    if ( (protosdata = read8u()) != 'P') { // missing protos data
330      fprintf(stderr, "%s: expecting character P, not %c\n", progname, protosdata);      fprintf(stderr, "%s:%s:%ld: expecting character P, not %c\n", progname, filename, ftell(file), protosdata);
331      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
332    } // if    } // if
333    
334    decode_protos_data();    decode_protos_data();
335    
336    if ( (tcpdata = read8u()) != 'T') { // missing tcp data    if ( (tcpdata = read8u()) != 'T') { // missing tcp data
337      fprintf(stderr, "%s: expecting character T, not %c\n", progname, tcpdata);      fprintf(stderr, "%s:%s:%ld: expecting character T, not %c\n", progname, filename, ftell(file), tcpdata);
338      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
339    } // if    } // if
340    
341    decode_tcp_data();    decode_tcp_data();
342    
343    if ( (udpdata = read8u()) != 'U') { // missing udp data    if ( (udpdata = read8u()) != 'U') { // missing udp data
344      fprintf(stderr, "%s: expecting character U, not %c\n", progname, udpdata);      fprintf(stderr, "%s:%s:%ld: expecting character U, not %c\n", progname, filename, ftell(file), udpdata);
345      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
346    } // if    } // if
347    
348    decode_udp_data();    decode_udp_data();
349    
350    exdent();    exdent();
351  } // decode_host_header_v1  } // decode_host_header_v1
352    
353  void decode_host_header_v2(void)  void decode_host_header_v2(void)
354  {  {
355    unsigned char ipv4address[4];    unsigned char ipv4address[4];
356    unsigned char macaddress[6];    unsigned char macaddress[6];
357      signed long lastseen;      signed long lastseen;
358    unsigned char hostnamelen;    unsigned char hostnamelen;
359    unsigned char hostname[256];    unsigned char hostname[256];
# Line 360  void decode_host_header_v2(void) Line 361  void decode_host_header_v2(void)
361    unsigned long bytesout;    unsigned long bytesout;
362    unsigned char protosdata;    unsigned char protosdata;
363    unsigned char tcpdata;    unsigned char tcpdata;
364    unsigned char udpdata;    unsigned char udpdata;
365    
366    unsigned char i;    unsigned char i;
367    
368    indent();    indent();
369    
370    ipv4address[0] = read8u();    ipv4address[0] = read8u();
371    ipv4address[1] = read8u();    ipv4address[1] = read8u();
372    ipv4address[2] = read8u();    ipv4address[2] = read8u();
373    ipv4address[3] = read8u();    ipv4address[3] = read8u();
374    
375    print_indentation();    print_indentation();
376    printf("IPv4 address %d.%d.%d.%d\n",    printf("IPv4 address %u.%u.%u.%u\n",
377           ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);           ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);
378    
379  #if FOLLOW_SPECIFICATION == 1    if (follow_specification == true) {
380    macaddress[0] = read8u();      macaddress[0] = read8u();
381    macaddress[1] = read8u();      macaddress[1] = read8u();
382    macaddress[2] = read8u();      macaddress[2] = read8u();
383    macaddress[3] = read8u();      macaddress[3] = read8u();
384    macaddress[4] = read8u();      macaddress[4] = read8u();
385    macaddress[5] = read8u();      macaddress[5] = read8u();
386    
387    print_indentation();      print_indentation();
388    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);      printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);
389    
390    lastseen = read64s();      lastseen = read64s();
391    
392    print_indentation();      print_indentation();
393    printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);      printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);
394    print_time_t(lastseen);      print_time_t(lastseen);
395    puts("");      puts("");
396  #else    } // if
397    lastseen = read64s();    else {
398        lastseen = read64s();
399    
400    print_indentation();      print_indentation();
401    printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);      printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);
402    print_time_t(lastseen);      print_time_t(lastseen);
403    puts("");      puts("");
404    
405    macaddress[0] = read8u();      macaddress[0] = read8u();
406    macaddress[1] = read8u();      macaddress[1] = read8u();
407    macaddress[2] = read8u();      macaddress[2] = read8u();
408    macaddress[3] = read8u();      macaddress[3] = read8u();
409    macaddress[4] = read8u();      macaddress[4] = read8u();
410    macaddress[5] = read8u();      macaddress[5] = read8u();
411    
412    print_indentation();      print_indentation();
413    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);      printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);
414  #endif    } // else
415    
416    hostnamelen = read8u();    hostnamelen = read8u();
417    
418    print_indentation();    print_indentation();
419    printf("Hostname length %d\n", hostnamelen);    printf("Hostname length %u\n", hostnamelen);
420    
421    for (i = 0; i < hostnamelen; i++) {    for (i = 0; i < hostnamelen; i++) {
422      hostname[i] = read8u();      hostname[i] = read8u();
423    } // for    } // for
424    hostname[i] = '\0';    hostname[i] = '\0';
425    
426    print_indentation();    print_indentation();
427    printf("Hostname %s\n", hostname);    printf("Hostname %s\n", hostname);
428    
429    bytesin = read64u();    bytesin = read64u();
430    
431    print_indentation();    print_indentation();
432    printf("Bytes in %lu\n", bytesin);    printf("Bytes in %lu\n", bytesin);
433    
434    bytesout = read64u();    bytesout = read64u();
435    
436    print_indentation();    print_indentation();
437    printf("Bytes out %lu\n", bytesout);    printf("Bytes out %lu\n", bytesout);
438    
439    if ( (protosdata = read8u()) != 'P') { // missing protos data    if ( (protosdata = read8u()) != 'P') { // missing protos data
440      fprintf(stderr, "%s: expecting character P, not %c\n", progname, protosdata);      fprintf(stderr, "%s:%s:%ld: expecting character P, not %c\n", progname, filename, ftell(file), protosdata);
441      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
442    } // if    } // if
443    
444    decode_protos_data();    decode_protos_data();
445    
446    if ( (tcpdata = read8u()) != 'T') { // missing tcp data    if ( (tcpdata = read8u()) != 'T') { // missing tcp data
447      fprintf(stderr, "%s: expecting character T, not %c\n", progname, tcpdata);      fprintf(stderr, "%s:%s:%ld: expecting character T, not %c\n", progname, filename, ftell(file), tcpdata);
448      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
449    } // if    } // if
450    
451    decode_tcp_data();    decode_tcp_data();
452    
453    if ( (udpdata = read8u()) != 'U') { // missing udp data    if ( (udpdata = read8u()) != 'U') { // missing udp data
454      fprintf(stderr, "%s: expecting character U, not %c\n", progname, udpdata);      fprintf(stderr, "%s:%s:%ld: expecting character U, not %c\n", progname, filename, ftell(file), udpdata);
455      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
456    } // if    } // if
457    
458    decode_udp_data();    decode_udp_data();
459    
460    exdent();    exdent();
461  } // decode_host_header_v2  } // decode_host_header_v2
462    
463  void decode_host_header_v3(void)  void decode_host_header_v3(void)
464  {  {
465    unsigned char addressfamily;    unsigned char  addressfamily;
466    unsigned char ipv4address[4];    unsigned char  ipv4address[4];
467    unsigned char ipv6address[16];    unsigned short ipv6address[8];
468    unsigned char macaddress[6];    unsigned char  macaddress[6];
469      signed long lastseen;      signed long  lastseen;
470    unsigned char hostnamelen;    unsigned char  hostnamelen;
471    unsigned char hostname[256];    unsigned char  hostname[256];
472    unsigned long bytesin;    unsigned long  bytesin;
473    unsigned long bytesout;    unsigned long  bytesout;
474    unsigned char protosdata;    unsigned char  protosdata;
475    unsigned char tcpdata;    unsigned char  tcpdata;
476    unsigned char udpdata;    unsigned char  udpdata;
477    
478    unsigned char i;    unsigned char  i;
479    
480    indent();    indent();
481    
482    if ( (addressfamily = read8u()) == 0x04) { // IPv4 address    if ( (addressfamily = read8u()) == 0x04) { // IPv4 address
483      print_indentation();      print_indentation();
484      printf("IPv4 address family (0x%02x)\n", addressfamily);      printf("IPv4 address family (0x%02x)\n", addressfamily);
485    
486      ipv4address[0] = read8u();      ipv4address[0] = read8u();
487      ipv4address[1] = read8u();      ipv4address[1] = read8u();
488      ipv4address[2] = read8u();      ipv4address[2] = read8u();
489      ipv4address[3] = read8u();      ipv4address[3] = read8u();
490    
491      print_indentation();      print_indentation();
492      printf("IPv4 address %d.%d.%d.%d\n",      printf("IPv4 address %u.%u.%u.%u\n",
493             ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);             ipv4address[0], ipv4address[1], ipv4address[2], ipv4address[3]);
494    } // if    } // if
495    else if (addressfamily == 0x06) { // IPv6 address    else if (addressfamily == 0x06) { // IPv6 address
496      print_indentation();      print_indentation();
497      printf("IPv6 address family (0x%02x)\n", addressfamily);      printf("IPv6 address family (0x%02x)\n", addressfamily);
498    
499      ipv6address[ 0] = read8u();      ipv6address[0] = read16u();
500      ipv6address[ 1] = read8u();      ipv6address[1] = read16u();
501      ipv6address[ 2] = read8u();      ipv6address[2] = read16u();
502      ipv6address[ 3] = read8u();      ipv6address[3] = read16u();
503      ipv6address[ 4] = read8u();      ipv6address[4] = read16u();
504      ipv6address[ 5] = read8u();      ipv6address[5] = read16u();
505      ipv6address[ 6] = read8u();      ipv6address[6] = read16u();
506      ipv6address[ 7] = read8u();      ipv6address[7] = read16u();
     ipv6address[ 8] = read8u();  
     ipv6address[ 9] = read8u();  
     ipv6address[10] = read8u();  
     ipv6address[11] = read8u();  
     ipv6address[12] = read8u();  
     ipv6address[13] = read8u();  
     ipv6address[14] = read8u();  
     ipv6address[15] = read8u();  
507    
508      print_indentation();      print_indentation();
509      printf("IPv6 address %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x\n",      printf("IPv6 address %04x:%04x:%04x:%04x:%04x:%04x:%04x:%04x\n",
510             ipv6address[ 0],             ipv6address[0],
511             ipv6address[ 1],             ipv6address[1],
512             ipv6address[ 2],             ipv6address[2],
513             ipv6address[ 3],             ipv6address[3],
514             ipv6address[ 4],             ipv6address[4],
515             ipv6address[ 5],             ipv6address[5],
516             ipv6address[ 6],             ipv6address[6],
517             ipv6address[ 7],             ipv6address[7]);
            ipv6address[ 8],  
            ipv6address[ 9],  
            ipv6address[10],  
            ipv6address[11],  
            ipv6address[12],  
            ipv6address[13],  
            ipv6address[14],  
            ipv6address[15]);  
518    } // else if    } // else if
519    else { // unknown address family    else { // unknown address family
520      fprintf(stderr, "%s:%s: unknown address family = 0x%x, neither 0x%x nor 0x%x\n", progname, filename, addressfamily, 0x04, 0x06);      fprintf(stderr, "%s:%s:%ld: unknown address family = 0x%x, neither 0x%x nor 0x%x\n", progname, filename, ftell(file), addressfamily, 0x04, 0x06);
521      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
522    } // else    } // else
523    
524  #if FOLLOW_SPECIFICATION == 1    if (follow_specification == true) {
525    macaddress[0] = read8u();      macaddress[0] = read8u();
526    macaddress[1] = read8u();      macaddress[1] = read8u();
527    macaddress[2] = read8u();      macaddress[2] = read8u();
528    macaddress[3] = read8u();      macaddress[3] = read8u();
529    macaddress[4] = read8u();      macaddress[4] = read8u();
530    macaddress[5] = read8u();      macaddress[5] = read8u();
531    
532    print_indentation();      print_indentation();
533    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);      printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);
534    
535    lastseen = read64s();      lastseen = read64s();
536    
537    print_indentation();      print_indentation();
538    printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);      printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);
539    print_time_t(lastseen);      print_time_t(lastseen);
540    puts("");      puts("");
541  #else    } // if
542    lastseen = read64s();    else {
543        lastseen = read64s();
544    
545    print_indentation();      print_indentation();
546    printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);      printf("Last seen 0x%lx = %ld = ", lastseen, lastseen);
547    print_time_t(lastseen);      print_time_t(lastseen);
548    puts("");      puts("");
549    
550    macaddress[0] = read8u();      macaddress[0] = read8u();
551    macaddress[1] = read8u();      macaddress[1] = read8u();
552    macaddress[2] = read8u();      macaddress[2] = read8u();
553    macaddress[3] = read8u();      macaddress[3] = read8u();
554    macaddress[4] = read8u();      macaddress[4] = read8u();
555    macaddress[5] = read8u();      macaddress[5] = read8u();
556    
557    print_indentation();      print_indentation();
558    printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);      printf("MAC address %02x:%02x:%02x:%02x:%02x:%02x\n", macaddress[0], macaddress[1], macaddress[2], macaddress[3], macaddress[4], macaddress[5]);
559  #endif    } // else
560    
561    hostnamelen = read8u();    hostnamelen = read8u();
562    
563    print_indentation();    print_indentation();
564    printf("Hostname length %d\n", hostnamelen);    printf("Hostname length %u\n", hostnamelen);
565    
566    for (i = 0; i < hostnamelen; i++) {    for (i = 0; i < hostnamelen; i++) {
567      hostname[i] = read8u();      hostname[i] = read8u();
568    } // for    } // for
569    hostname[i] = '\0';    hostname[i] = '\0';
570    
571    print_indentation();    print_indentation();
572    printf("Hostname %s\n", hostname);    printf("Hostname %s\n", hostname);
573    
574    bytesin = read64u();    bytesin = read64u();
575    
576    print_indentation();    print_indentation();
577    printf("Bytes in %lu\n", bytesin);    printf("Bytes in %lu\n", bytesin);
578    
579    bytesout = read64u();    bytesout = read64u();
580    
581    print_indentation();    print_indentation();
582    printf("Bytes out %lu\n", bytesout);    printf("Bytes out %lu\n", bytesout);
583    
584    if ( (protosdata = read8u()) != 'P') { // missing protos data    if ( (protosdata = read8u()) != 'P') { // missing protos data
585      fprintf(stderr, "%s: expecting character P, not %c\n", progname, protosdata);      fprintf(stderr, "%s:%s:%ld: expecting character P, not %c\n", progname, filename, ftell(file), protosdata);
586      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
587    } // if    } // if
588    
589    decode_protos_data();    decode_protos_data();
590    
591    if ( (tcpdata = read8u()) != 'T') { // missing tcp data    if ( (tcpdata = read8u()) != 'T') { // missing tcp data
592      fprintf(stderr, "%s: expecting character T, not %c\n", progname, tcpdata);      fprintf(stderr, "%s:%s:%ld: expecting character T, not %c\n", progname, filename, ftell(file), tcpdata);
593      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
594    } // if    } // if
595    
596    decode_tcp_data();    decode_tcp_data();
597    
598    if ( (udpdata = read8u()) != 'U') { // missing udp data    if ( (udpdata = read8u()) != 'U') { // missing udp data
599      fprintf(stderr, "%s: expecting character U, not %c\n", progname, udpdata);      fprintf(stderr, "%s:%s:%ld: expecting character U, not %c\n", progname, filename, ftell(file), udpdata);
600      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
601    } // if    } // if
602    
603    decode_udp_data();    decode_udp_data();
604    
605    exdent();    exdent();
606  } // decode_host_header_v3  } // decode_host_header_v3
607    
608  void decode_protos_data(void)  void decode_protos_data(void)
609  {  {
610    unsigned char ipprotocount;    unsigned char ipprotocount;
611    
612    unsigned char u;    unsigned char i;
613    
614    ipprotocount = read8u();    ipprotocount = read8u();
615    
616    print_indentation();    print_indentation();
617    printf("IP Proto count %d\n", ipprotocount);    printf("IP Proto count %u\n", ipprotocount);
618    
619    indent();    indent();
620    
621    for (u = 0; u < ipprotocount; u++) {    for (i = 0; i < ipprotocount; i++) {
622      unsigned char proto;      unsigned char proto;
623      unsigned long in;      unsigned long in;
624      unsigned long out;      unsigned long out;
625    
626      print_indentation();      print_indentation();
627      printf("Protocol #%u of %u:\n", u + 1, ipprotocount);      printf("Protocol #%u of %u:\n", i + 1, ipprotocount);
628    
629      proto = read8u();      proto = read8u();
630    
631      indent();      indent();
632      print_indentation();      print_indentation();
633      printf("Protocol 0x%02x\n", proto);      printf("Protocol 0x%02x\n", proto);
634    
635      in = read64u();      in = read64u();
636    
637      print_indentation();      print_indentation();
638      printf("In %lu\n", in);      printf("In %lu\n", in);
639    
640      out = read64u();      out = read64u();
641    
642      print_indentation();      print_indentation();
# Line 658  void decode_tcp_data(void) Line 645  void decode_tcp_data(void)
645      exdent();      exdent();
646    } // for    } // for
647    
648    exdent();    exdent();
649  } // decode_protos_data();  } // decode_protos_data();
650    
651  void decode_tcp_data(void)  void decode_tcp_data(void)
652  {  {
653    unsigned char tcpprotocount;    unsigned char tcpprotocount;
654    
655    unsigned short i;    unsigned short i;
656    
657    tcpprotocount = read16u();    tcpprotocount = read16u();
658    
659    print_indentation();    print_indentation();
660    printf("TCP proto count %d\n", tcpprotocount);    printf("TCP proto count %u\n", tcpprotocount);
661    
662    indent();    indent();
663    
664    for (i = 0; i < tcpprotocount; i++) {    for (i = 0; i < tcpprotocount; i++) {
665      unsigned short port;      unsigned short port;
666      unsigned long syn;      unsigned long syn;
667      unsigned long in;      unsigned long in;
668      unsigned long out;      unsigned long out;
669    
670      port = read16u();      port = read16u();
671    
672      print_indentation();      print_indentation();
673      printf("Port %d:\n", port);      printf("Port %u:\n", port);
674    
675      syn = read64u();      syn = read64u();
676    
677      indent();      indent();
678      print_indentation();      print_indentation();
679      printf("SYN %lu\n", syn);      printf("SYN %lu\n", syn);
680    
681      in = read64u();      in = read64u();
682    
683      print_indentation();      print_indentation();
684      printf("In %lu\n", in);      printf("In %lu\n", in);
685    
686      out = read64u();      out = read64u();
687    
688      print_indentation();      print_indentation();
# Line 704  void decode_udp_data(void) Line 691  void decode_udp_data(void)
691      exdent();      exdent();
692    } // for    } // for
693    
694    exdent();    exdent();
695  } // decode_tcp_data()  } // decode_tcp_data()
696    
697  void decode_udp_data(void)  void decode_udp_data(void)
698  {  {
699    unsigned char udpprotocount;    unsigned char udpprotocount;
700    
701    unsigned short i;    unsigned short i;
702    
703    udpprotocount = read16u();    udpprotocount = read16u();
704    
705    print_indentation();    print_indentation();
706    printf("UDP proto count %d\n", udpprotocount);    printf("UDP proto count %u\n", udpprotocount);
707    
708    indent();    indent();
709    
710    for (i = 0; i < udpprotocount; i++) {    for (i = 0; i < udpprotocount; i++) {
711      unsigned short port;      unsigned short port;
712      unsigned long in;      unsigned long in;
713      unsigned long out;      unsigned long out;
714    
715      port = read16u();      port = read16u();
716    
717      print_indentation();      print_indentation();
718      printf("Port %d:\n", port);      printf("Port %u:\n", port);
719    
720      in = read64u();      in = read64u();
721    
722      indent();      indent();
723      print_indentation();      print_indentation();
724      printf("In %lu\n", in);      printf("In %lu\n", in);
725    
726      out = read64u();      out = read64u();
727    
728      print_indentation();      print_indentation();
729      printf("Out %lu\n", out);      printf("Out %lu\n", out);
730    
731      exdent();      exdent();
732    } // for    } // for
733    
# Line 756  void decode_graph_db_v1(void) Line 743  void decode_graph_db_v1(void)
743    lasttime = read64s();    lasttime = read64s();
744    
745    indent();    indent();
746    print_indentation();    print_indentation();
747    printf("Last time 0x%lx = %ld = ", lasttime, lasttime);    printf("Last time 0x%lx = %ld = ", lasttime, lasttime);
748    print_time_t(lasttime);    print_time_t(lasttime);
749    puts("");    puts("");
750    
751    for (i = 0; i < 4; i++) {    for (i = 0; i < 4; i++) {
752      unsigned char nbars;      unsigned char nbars;
753      unsigned char idxlastbar;      unsigned char idxlastbar;
754    
755      unsigned int j;      unsigned int j;
756    
757      print_indentation();      print_indentation();
758      printf("Graph #%d of 4:\n", i + 1);      printf("Graph #%u of 4:\n", i + 1);
759    
760      nbars = read8u();      nbars = read8u();
761    
762      indent();      indent();
763      print_indentation();      print_indentation();
764      printf("Number of bars %u\n", nbars);      printf("Number of bars %u\n", nbars);
765    
766      idxlastbar = read8u();      idxlastbar = read8u();
767    
768      print_indentation();      print_indentation();
769      printf("Index of last bar %u\n", idxlastbar);      printf("Index of last bar %u\n", idxlastbar);
770    
771      indent();      indent();
772      for (j = 0; j < idxlastbar; j++) {      for (j = 0; j < idxlastbar; j++) {
773        unsigned long in;        unsigned long in;
# Line 958  void handle_file_error(void) Line 945  void handle_file_error(void)
945    if ( (r = fread((void *)&v, sizeof(v), 1, file)) != 1) {    if ( (r = fread((void *)&v, sizeof(v), 1, file)) != 1) {
946      handle_file_error();      handle_file_error();
947    } // if    } // if
948    
949  #ifdef __LITTLE_ENDIAN__  #ifdef __LITTLE_ENDIAN__
950    p2[1] = ntohl(p1[0]);    p2[1] = ntohl(p1[0]);
951    p2[0] = ntohl(p1[1]);    p2[0] = ntohl(p1[1]);
952    v = tmp;    v = tmp;
953  #endif  #endif
954    
955    return v;    return v;
956  } // read64s()  } // read64s()
957    
958  void handle_file_error(void)  void handle_file_error(void)
959  {  {
960      int saved_errno = errno;
961    
962    if (feof(file) != 0) {    if (feof(file) != 0) {
963      fprintf(stderr, "%s:%s: premature end-of-file\n", progname, filename);      fprintf(stderr, "%s:%s:%ld: premature end-of-file\n", progname, filename, ftell(file));
964      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
965    } // if    } // if
966    
967    if (ferror(file) != 0) {    if (ferror(file) != 0) {
968      fprintf(stderr, "%s:%s: file error, errno = %s (%d)\n", progname, filename, strerror(errno), errno);      fprintf(stderr, "%s:%s:%ld: file error, errno = %s (%d)\n", progname, filename, ftell(file), strerror(saved_errno), saved_errno);
969      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
970    } // if    } // if
971  } // handle_file_error()  } // handle_file_error()
972    
973  signed long long indentation = 0LL;  signed long long indentation = 0LL;
974    
975  void indent(void)  void indent(void)
976  {  {
977    indentation += 2LL;    indentation += 2LL;
978  } // indent()  } // indent()
979    
980  void exdent(void)  void exdent(void)
981  {  {
982    indentation -= 2LL;    indentation -= 2LL;
983    
# Line 1003  void print_time_t(time_t t) Line 992  void print_time_t(time_t t)
992    
993    for (i = 0; i < indentation; i++) {    for (i = 0; i < indentation; i++) {
994      putchar(' ');      putchar(' ');
995    } // for    } // for
996  } // print_indentation()  } // print_indentation()
997    
998  void print_time_t(time_t t)  void print_time_t(time_t t)
999  {  {
1000    struct tm *stm;    struct tm *stm;
1001    char buffer[1024];    char buffer[1024];
1002    
1003    stm = gmtime(&t);    stm = gmtime(&t);
1004    
1005    // ISO 8601 format    // ISO 8601 format
1006    if (strftime(buffer, sizeof(buffer), "%Y-%m-%dT%H:%M:%S%z", stm) == 0) {    if (strftime(buffer, sizeof(buffer), "%Y-%m-%dT%H:%M:%S%z", stm) == 0) {
1007      fprintf(stderr, "%s:%s: strftime() error, errno = %s (%d)\n", progname, filename, strerror(errno), errno);      int saved_errno = errno;
1008    
1009        fprintf(stderr, "%s:%s:%ld: strftime() error, errno = %s (%d)\n", progname, filename, ftell(file), strerror(saved_errno), saved_errno);
1010      exit(EXIT_FAILURE);      exit(EXIT_FAILURE);
1011    } // if    } // if
1012    
1013    fputs(buffer, stdout);    fputs(buffer, stdout);
1014  } // print_time_t()  } // print_time_t()
1015    
1016  // darkstattype.c  // darkstattype.c

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
svn@ximalas.info
 ViewVC Help
Powered by ViewVC 1.3.0-dev