1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
/* darkstat 3
* copyright (c) 2001-2011 Emil Mikulic.
*
* hosts_db.h: database of hosts, ports, protocols.
*
* You may use, modify and redistribute this file under the terms of the
* GNU General Public License version 2. (see COPYING.GPL)
*/
#ifndef __DARKSTAT_HOSTS_DB_H
#define __DARKSTAT_HOSTS_DB_H
#include <sys/types.h> /* for time_t and uint64_t (esp on FreeBSD) */
#include "addr.h"
struct hashtable;
struct host {
struct addr addr;
char *dns;
uint8_t mac_addr[6];
time_t lastseen;
struct hashtable *ports_tcp, *ports_udp, *ip_protos;
};
struct port_tcp {
uint16_t port;
uint64_t syn;
};
struct port_udp {
uint16_t port;
};
struct ip_proto {
uint8_t proto;
};
struct bucket {
struct bucket *next;
uint64_t in, out, total;
union {
struct host host;
struct port_tcp port_tcp;
struct port_udp port_udp;
struct ip_proto ip_proto;
} u;
};
enum sort_dir { IN, OUT, TOTAL, LASTSEEN };
extern int hosts_db_show_macs;
void hosts_db_init(void);
void hosts_db_reduce(void);
void hosts_db_reset(void);
void hosts_db_free(void);
int hosts_db_import(const int fd);
int hosts_db_export(const int fd);
struct bucket *host_find(const struct addr *const a); /* can return NULL */
struct bucket *host_get(const struct addr *const a);
struct bucket *host_get_port_tcp(struct bucket *host, const uint16_t port);
struct bucket *host_get_port_udp(struct bucket *host, const uint16_t port);
struct bucket *host_get_ip_proto(struct bucket *host, const uint8_t proto);
/* Web pages. */
struct str *html_hosts(const char *uri, const char *query);
/* From hosts_sort */
void qsort_buckets(const struct bucket **a, size_t n,
size_t left, size_t right, const enum sort_dir d);
#endif /* __DARKSTAT_HOSTS_DB_H */
/* vim:set ts=3 sw=3 tw=78 expandtab: */
|
