/**
* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * -
*
* Name : Project Riddle
* Author : Andrea Bontempi
* Version : 0.1 aplha
* Description : Modular Network Sniffer
*
* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * -
*
* This file is part of the project Riddle.
*
* The project Riddle is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* The project Riddle is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this project. If not, see .
*
* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * -
*/
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include "./libraries/libCigarette.h"
#include "./commons/classMacAddress.h"
#include "./commons/classPacket.h"
#include "./libraries/libPursuer.h"
using namespace std;
using namespace boost;
using namespace boost::program_options;
using namespace libNetwork;
boost::mutex mymutex;
/** Hello, my job is clean up and finalize the flows */
void dustman ( std::list *packet_stream, bool tofile ) {
static boost::posix_time::seconds delay ( 2 );
static int maxBufferLength = 512; // byte
static int maxFlowLength = 10*1024*1024; // byte
static unsigned int maxTime = 5*60; // second
while ( 1 ) {
boost::mutex::scoped_lock mylock ( mymutex );
for ( list::iterator element = packet_stream->begin(); element != packet_stream->end(); ) {
list::iterator temp;
bool mustRemove = false;
if ( ! ( *element )->firstFIN() && ( *element )->getFirstBufferLength() > maxBufferLength ) {
( *element )->flushFirstBuffer();
}
if ( ! ( *element )->secondFIN() && ( *element )->getSecondBufferLength() > maxBufferLength ) {
( *element )->flushSecondBuffer();
}
if ( ( ( *element )->firstFIN() && ( *element )->secondFIN() ) || ( *element )->getFlowLength() > maxFlowLength || time ( NULL ) > ( *element )->getTimeEpoch() + maxTime ) {
( *element )->flushFirstBuffer();
( *element )->flushSecondBuffer();
writeout ( ( *element ), tofile );
temp = element;
mustRemove = true;
}
element++;
if ( mustRemove ) {
packet_stream->erase ( temp );
mustRemove = false;
}
}
mylock.unlock();
boost::this_thread::sleep ( delay );
}
}
/** Hello, my job is read and sort packets */
void scribe ( std::list *packet_stream ) {
string r_packet;
while ( 1 ) {
try {
getline ( cin,r_packet );
if ( cin.eof() ) break;
packet* pkg = packet::factory ( r_packet );
if ( pkg->isIPv4() ) {
IPv4packet *pkg_ipv4 = dynamic_cast ( pkg );
if ( pkg_ipv4->isTCP() ) {
TCPv4packet *pkg_tcpv4 = dynamic_cast ( pkg );
boost::mutex::scoped_lock mylock ( mymutex );
if ( pkg_tcpv4->isSYN() && !pkg_tcpv4->isACK() ) {
stream *temp = new stream();
temp->factory ( pkg_tcpv4 );
packet_stream->push_back ( temp );
} else {
for ( list::iterator it = packet_stream->begin(); it != packet_stream->end(); it++ ) {
if ( isStream ( it, pkg_tcpv4 ) ) {
if ( pkg_tcpv4->isSYN() ) {
( *it )->factory ( pkg_tcpv4 );
} else {
( *it )->addPacket ( pkg_tcpv4 );
}
break;
}
}
}
mylock.unlock();
}
}
} catch ( packet::Overflow ) {
std::cerr<<"Overflow! :-P"<> " << ex1.what() << "" << endl;
cerr << ">> Try '" << argv[0] << " --help' for more information." << endl;
return EXIT_SUCCESS;
} catch ( boost::program_options::invalid_command_line_syntax ex2 ) {
cerr << "ERROR >> " << ex2.what() << "" << endl;
cerr << ">> Try '" << argv[0] << " --help' for more information." << endl;
return EXIT_SUCCESS;
}
if ( vm.count ( "help" ) ) {
cout< packet_stream;
boost::thread dustman_t ( dustman, &packet_stream, vm.count ( "tofile" ) );
boost::thread scribe_t ( scribe, &packet_stream );
scribe_t.join();
// Esporto fussi non terminati prima dell'uscita.
// Non usare il for, non va d'accordo con gli erase.
boost::mutex::scoped_lock mylock ( mymutex );
while ( !packet_stream.empty() ) {
list::iterator it3 = packet_stream.begin();
( *it3 )->flushFirstBuffer();
( *it3 )->flushSecondBuffer();
writeout ( ( *it3 ), vm.count ( "tofile" ) );
packet_stream.erase ( it3 );
}
return EXIT_SUCCESS;
}