void Tee_init_socks()
{
struct tee_receiver *target = NULL;
struct sockaddr *sa;
int pool_idx, recv_idx, err;
char dest_addr[256], dest_serv[256];
for (pool_idx = 0; pool_idx < receivers.num; pool_idx++) {
for (recv_idx = 0; recv_idx < receivers.pools[pool_idx].num; recv_idx++) {
target = &receivers.pools[pool_idx].receivers[recv_idx];
sa = (struct sockaddr *) &target->dest;
if (sa->sa_family != 0) {
if ((err = getnameinfo(sa, target->dest_len, dest_addr, sizeof(dest_addr),
dest_serv, sizeof(dest_serv), NI_NUMERICHOST)) == -1) {
Log(LOG_ERR, "ERROR ( %s/%s ): getnameinfo: %d\n", config.name, config.type, err);
exit_plugin(1);
}
}
target->fd = Tee_prepare_sock((struct sockaddr *) &target->dest, target->dest_len);
if (config.debug) {
struct host_addr recv_addr;
u_char recv_addr_str[INET6_ADDRSTRLEN];
u_int16_t recv_port;
sa_to_addr(&target->dest, &recv_addr, &recv_port);
addr_to_str(recv_addr_str, &recv_addr);
Log(LOG_DEBUG, "DEBUG ( %s/%s ): pool ID: %u :: receiver: %s :: fd: %d.\n",
config.name, config.type, receivers.pools[pool_idx].id, recv_addr_str, target->fd);
}
}
}
}
void refresh_opt_template(void *hdr, struct template_cache_entry *tpl, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int8_t version)
{
struct options_template_hdr_v9 *hdr_v9 = (struct options_template_hdr_v9 *) hdr;
struct options_template_hdr_ipfix *hdr_v10 = (struct options_template_hdr_ipfix *) hdr;
struct template_cache_entry *next;
struct template_field_v9 *field;
u_int16_t slen, olen, count, type, port, tid;
u_char *ptr;
/* NetFlow v9 */
if (tpl_type == 1) {
tid = hdr_v9->template_id;
slen = ntohs(hdr_v9->scope_len)/sizeof(struct template_field_v9);
olen = ntohs(hdr_v9->option_len)/sizeof(struct template_field_v9);
}
/* IPFIX */
else if (tpl_type == 3) {
tid = hdr_v10->template_id;
slen = ntohs(hdr_v10->scope_count);
olen = ntohs(hdr_v10->option_count)-slen;
}
next = tpl->next;
memset(tpl, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &tpl->agent, &port);
tpl->source_id = sid;
tpl->template_id = tid;
tpl->template_type = 1;
tpl->num = olen+slen;
tpl->next = next;
log_template_header(tpl, pptrs, tpl_type, sid, version);
count = tpl->num;
ptr = (u_char *) hdr;
ptr += NfOptTplHdrV9Sz;
field = (struct template_field_v9 *)ptr;
while (count) {
type = ntohs(field->type);
log_opt_template_field(type, tpl->len, ntohs(field->len), version);
if (type < NF9_MAX_DEFINED_FIELD) {
tpl->tpl[type].off = tpl->len;
tpl->tpl[type].len = ntohs(field->len);
tpl->len += tpl->tpl[type].len;
}
else tpl->len += ntohs(field->len);
count--;
field++;
}
log_template_footer(tpl->len, version);
}
void log_template_header(struct template_cache_entry *tpl, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int8_t version)
{
struct host_addr a;
u_char agent_addr[50];
u_int16_t agent_port, count, size;
sa_to_addr((struct sockaddr *)pptrs->f_agent, &a, &agent_port);
addr_to_str(agent_addr, &a);
Log(LOG_DEBUG, "DEBUG ( default/core ): NfV%u agent : %s:%u\n", version, agent_addr, sid);
Log(LOG_DEBUG, "DEBUG ( default/core ): NfV%u template type : %s\n", version, ( tpl->template_type == 0 || tpl->template_type == 2 ) ? "flow" : "options");
Log(LOG_DEBUG, "DEBUG ( default/core ): NfV%u template ID : %u\n", version, ntohs(tpl->template_id));
Log(LOG_DEBUG, "DEBUG ( default/core ): -----------------------------------------------------\n");
Log(LOG_DEBUG, "DEBUG ( default/core ): | pen | field type | offset | size |\n");
}
struct template_cache_entry *insert_template(struct template_hdr_v9 *hdr, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int16_t *pens, u_int8_t version)
{
struct template_cache_entry *ptr, *prevptr = NULL;
struct template_field_v9 *field;
u_int16_t modulo = (ntohs(hdr->template_id)%tpl_cache.num), count;
u_int16_t num = ntohs(hdr->num), type, port;
u_int32_t *pen;
u_int8_t ipfix_ebit;
u_char *tpl;
ptr = tpl_cache.c[modulo];
while (ptr) {
prevptr = ptr;
ptr = ptr->next;
}
ptr = malloc(sizeof(struct template_cache_entry));
if (!ptr) {
Log(LOG_ERR, "ERROR ( default/core ): Unable to allocate enough memory for a new Template Cache Entry.\n");
return NULL;
}
memset(ptr, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &ptr->agent, &port);
ptr->source_id = sid;
ptr->template_id = hdr->template_id;
ptr->template_type = 0;
ptr->num = num;
log_template_header(ptr, pptrs, tpl_type, sid, version);
count = 0;
tpl = (u_char *) hdr;
tpl += NfTplHdrV9Sz;
field = (struct template_field_v9 *)tpl;
while (count < num) {
pen = NULL;
ipfix_ebit = FALSE;
type = ntohs(field->type);
if (type & IPFIX_TPL_EBIT && version == 10) {
ipfix_ebit = TRUE;
type ^= IPFIX_TPL_EBIT;
if (pens) (*pens)++;
pen = (u_int32_t *) field;
pen++;
}
log_template_field(ptr->vlen, pen, type, ptr->len, ntohs(field->len), version);
/* Let's determine if we use legacy template registry or the
new template database (ie. if we have a PEN or high field
value, >= 384) */
if (type < NF9_MAX_DEFINED_FIELD && !pen) {
ptr->tpl[type].off = ptr->len;
ptr->tpl[type].tpl_len = ntohs(field->len);
if (ptr->vlen) ptr->tpl[type].off = 0;
if (ptr->tpl[type].tpl_len == IPFIX_VARIABLE_LENGTH) {
ptr->tpl[type].len = 0;
ptr->vlen = TRUE;
ptr->len = 0;
}
else {
ptr->tpl[type].len = ptr->tpl[type].tpl_len;
if (!ptr->vlen) ptr->len += ptr->tpl[type].len;
}
ptr->list[count].ptr = (char *) &ptr->tpl[type];
ptr->list[count].type = TPL_TYPE_LEGACY;
}
else {
u_int16_t ie_idx, ext_db_modulo = (type%TPL_EXT_DB_ENTRIES);
struct utpl_field *ext_db_ptr = NULL;
for (ie_idx = 0; ie_idx < IES_PER_TPL_EXT_DB_ENTRY; ie_idx++) {
if (ptr->ext_db[ext_db_modulo].ie[ie_idx].type == 0) {
ext_db_ptr = &ptr->ext_db[ext_db_modulo].ie[ie_idx];
break;
}
}
if (ext_db_ptr) {
if (pen) ext_db_ptr->pen = ntohl(*pen);
ext_db_ptr->type = type;
ext_db_ptr->off = ptr->len;
ext_db_ptr->tpl_len = ntohs(field->len);
if (ptr->vlen) ext_db_ptr->off = 0;
if (ext_db_ptr->tpl_len == IPFIX_VARIABLE_LENGTH) {
ext_db_ptr->len = 0;
ptr->vlen = TRUE;
ptr->len = 0;
}
else {
ext_db_ptr->len = ext_db_ptr->tpl_len;
if (!ptr->vlen) ptr->len += ext_db_ptr->len;
}
}
ptr->list[count].ptr = (char *) ext_db_ptr;
ptr->list[count].type = TPL_TYPE_EXT_DB;
}
count++;
if (ipfix_ebit) field++; /* skip 32-bits ahead */
field++;
}
if (prevptr) prevptr->next = ptr;
else tpl_cache.c[modulo] = ptr;
log_template_footer(ptr->len, version);
return ptr;
}
struct template_cache_entry *insert_opt_template(void *hdr, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int8_t version)
{
struct options_template_hdr_v9 *hdr_v9 = (struct options_template_hdr_v9 *) hdr;
struct options_template_hdr_ipfix *hdr_v10 = (struct options_template_hdr_ipfix *) hdr;
struct template_cache_entry *ptr, *prevptr = NULL;
struct template_field_v9 *field;
u_int16_t modulo, count, slen, olen, type, port, tid;
u_char *tpl;
/* NetFlow v9 */
if (tpl_type == 1) {
modulo = ntohs(hdr_v9->template_id)%tpl_cache.num;
tid = hdr_v9->template_id;
slen = ntohs(hdr_v9->scope_len)/sizeof(struct template_field_v9);
olen = ntohs(hdr_v9->option_len)/sizeof(struct template_field_v9);
}
/* IPFIX */
else if (tpl_type == 3) {
modulo = ntohs(hdr_v10->template_id)%tpl_cache.num;
tid = hdr_v10->template_id;
slen = ntohs(hdr_v10->scope_count);
olen = ntohs(hdr_v10->option_count)-slen;
}
ptr = tpl_cache.c[modulo];
while (ptr) {
prevptr = ptr;
ptr = ptr->next;
}
ptr = malloc(sizeof(struct template_cache_entry));
if (!ptr) {
Log(LOG_ERR, "ERROR ( default/core ): Unable to allocate enough memory for a new Options Template Cache Entry.\n");
return NULL;
}
memset(ptr, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &ptr->agent, &port);
ptr->source_id = sid;
ptr->template_id = tid;
ptr->template_type = 1;
ptr->num = olen+slen;
log_template_header(ptr, pptrs, tpl_type, sid, version);
count = ptr->num;
tpl = (u_char *) hdr;
tpl += NfOptTplHdrV9Sz;
field = (struct template_field_v9 *)tpl;
while (count) {
type = ntohs(field->type);
log_opt_template_field(type, ptr->len, ntohs(field->len), version);
if (type < NF9_MAX_DEFINED_FIELD) {
ptr->tpl[type].off = ptr->len;
ptr->tpl[type].len = ntohs(field->len);
ptr->len += ptr->tpl[type].len;
}
else ptr->len += ntohs(field->len);
count--;
field++;
}
if (prevptr) prevptr->next = ptr;
else tpl_cache.c[modulo] = ptr;
log_template_footer(ptr->len, version);
return ptr;
}
void refresh_template(struct template_hdr_v9 *hdr, struct template_cache_entry *tpl, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int16_t *pens, u_int8_t version)
{
struct template_cache_entry *next;
struct template_field_v9 *field;
u_int16_t count, num = ntohs(hdr->num), type, port;
u_int32_t *pen;
u_int8_t ipfix_ebit;
u_char *ptr;
next = tpl->next;
memset(tpl, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &tpl->agent, &port);
tpl->source_id = sid;
tpl->template_id = hdr->template_id;
tpl->template_type = 0;
tpl->num = num;
tpl->next = next;
log_template_header(tpl, pptrs, tpl_type, sid, version);
count = 0;
ptr = (u_char *) hdr;
ptr += NfTplHdrV9Sz;
field = (struct template_field_v9 *)ptr;
while (count < num) {
pen = NULL;
ipfix_ebit = FALSE;
type = ntohs(field->type);
if (type & IPFIX_TPL_EBIT && version == 10) {
ipfix_ebit = TRUE;
type ^= IPFIX_TPL_EBIT;
if (pens) (*pens)++;
pen = (u_int32_t *) field; pen++;
}
log_template_field(tpl->vlen, pen, type, tpl->len, ntohs(field->len), version);
if (type < NF9_MAX_DEFINED_FIELD && !pen) {
tpl->tpl[type].off = tpl->len;
tpl->tpl[type].tpl_len = ntohs(field->len);
if (tpl->vlen) tpl->tpl[type].off = 0;
if (tpl->tpl[type].tpl_len == IPFIX_VARIABLE_LENGTH) {
tpl->tpl[type].len = 0;
tpl->vlen = TRUE;
tpl->len = 0;
}
else {
tpl->tpl[type].len = tpl->tpl[type].tpl_len;
if (!tpl->vlen) tpl->len += tpl->tpl[type].len;
}
tpl->list[count].ptr = (char *) &tpl->tpl[type];
tpl->list[count].type = TPL_TYPE_LEGACY;
}
else {
u_int16_t ie_idx, ext_db_modulo = (type%TPL_EXT_DB_ENTRIES);
struct utpl_field *ext_db_ptr = NULL;
for (ie_idx = 0; ie_idx < IES_PER_TPL_EXT_DB_ENTRY; ie_idx++) {
if (tpl->ext_db[ext_db_modulo].ie[ie_idx].type == 0) {
ext_db_ptr = &tpl->ext_db[ext_db_modulo].ie[ie_idx];
break;
}
}
if (ext_db_ptr) {
if (pen) ext_db_ptr->pen = ntohl(*pen);
ext_db_ptr->type = type;
ext_db_ptr->off = tpl->len;
ext_db_ptr->tpl_len = ntohs(field->len);
if (tpl->vlen) ext_db_ptr->off = 0;
if (ext_db_ptr->tpl_len == IPFIX_VARIABLE_LENGTH) {
ext_db_ptr->len = 0;
tpl->vlen = TRUE;
tpl->len = 0;
}
else {
ext_db_ptr->len = ext_db_ptr->tpl_len;
if (!tpl->vlen) tpl->len += ext_db_ptr->len;
}
}
tpl->list[count].ptr = (char *) ext_db_ptr;
tpl->list[count].type = TPL_TYPE_EXT_DB;
}
count++;
if (ipfix_ebit) field++; /* skip 32-bits ahead */
field++;
}
log_template_footer(tpl->len, version);
}
struct template_cache_entry *insert_template(struct template_hdr_v9 *hdr, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int16_t *pens, u_int8_t version, u_int16_t len)
{
struct template_cache_entry *ptr, *prevptr = NULL;
struct template_field_v9 *field;
u_int16_t modulo = (ntohs(hdr->template_id)%tpl_cache.num), count;
u_int16_t num = ntohs(hdr->num), type, port, off;
u_int32_t *pen;
u_int8_t ipfix_ebit;
u_char *tpl;
ptr = tpl_cache.c[modulo];
while (ptr) {
prevptr = ptr;
ptr = ptr->next;
}
ptr = malloc(sizeof(struct template_cache_entry));
if (!ptr) {
Log(LOG_ERR, "ERROR ( %s/core ): Unable to allocate enough memory for a new Template Cache Entry.\n", config.name);
return NULL;
}
memset(ptr, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &ptr->agent, &port);
ptr->source_id = sid;
ptr->template_id = hdr->template_id;
ptr->template_type = 0;
ptr->num = num;
log_template_header(ptr, pptrs, tpl_type, sid, version);
count = off = 0;
tpl = (u_char *) hdr;
tpl += NfTplHdrV9Sz;
off += NfTplHdrV9Sz;
field = (struct template_field_v9 *)tpl;
while (count < num) {
if (off >= len) {
notify_malf_packet(LOG_INFO, "INFO: unable to read next Template Flowset (malformed template)",
(struct sockaddr *) pptrs->f_agent);
xflow_tot_bad_datagrams++;
free(ptr);
return NULL;
}
pen = NULL;
ipfix_ebit = FALSE;
type = ntohs(field->type);
if (type & IPFIX_TPL_EBIT && version == 10) {
ipfix_ebit = TRUE;
type ^= IPFIX_TPL_EBIT;
if (pens) (*pens)++;
pen = (u_int32_t *) field;
pen++;
}
log_template_field(ptr->vlen, pen, type, ptr->len, ntohs(field->len), version);
/* Let's determine if we use legacy template registry or the
new template database (ie. if we have a PEN or high field
value, >= 384) */
if (type < NF9_MAX_DEFINED_FIELD && !pen) {
ptr->tpl[type].off = ptr->len;
ptr->tpl[type].tpl_len = ntohs(field->len);
if (ptr->vlen) ptr->tpl[type].off = 0;
if (ptr->tpl[type].tpl_len == IPFIX_VARIABLE_LENGTH) {
ptr->tpl[type].len = 0;
ptr->vlen = TRUE;
ptr->len = 0;
}
else {
ptr->tpl[type].len = ptr->tpl[type].tpl_len;
if (!ptr->vlen) ptr->len += ptr->tpl[type].len;
}
ptr->list[count].ptr = (char *) &ptr->tpl[type];
ptr->list[count].type = TPL_TYPE_LEGACY;
}
else {
struct utpl_field *ext_db_ptr = ext_db_get_next_ie(ptr, type);
if (ext_db_ptr) {
if (pen) ext_db_ptr->pen = ntohl(*pen);
ext_db_ptr->type = type;
ext_db_ptr->off = ptr->len;
ext_db_ptr->tpl_len = ntohs(field->len);
if (ptr->vlen) ext_db_ptr->off = 0;
if (ext_db_ptr->tpl_len == IPFIX_VARIABLE_LENGTH) {
ext_db_ptr->len = 0;
ptr->vlen = TRUE;
ptr->len = 0;
}
else {
ext_db_ptr->len = ext_db_ptr->tpl_len;
if (!ptr->vlen) ptr->len += ext_db_ptr->len;
}
}
ptr->list[count].ptr = (char *) ext_db_ptr;
ptr->list[count].type = TPL_TYPE_EXT_DB;
}
count++;
off += NfTplFieldV9Sz;
if (ipfix_ebit) {
field++; /* skip 32-bits ahead */
off += sizeof(u_int32_t);
}
field++;
}
if (prevptr) prevptr->next = ptr;
else tpl_cache.c[modulo] = ptr;
log_template_footer(ptr->len, version);
return ptr;
}
void Tee_send(struct pkt_msg *msg, struct sockaddr *target, int fd)
{
struct host_addr r;
u_char recv_addr[50];
u_int16_t recv_port;
if (config.debug) {
struct host_addr a;
u_char agent_addr[50];
u_int16_t agent_port;
sa_to_addr((struct sockaddr *)msg, &a, &agent_port);
addr_to_str(agent_addr, &a);
sa_to_addr((struct sockaddr *)target, &r, &recv_port);
addr_to_str(recv_addr, &r);
Log(LOG_DEBUG, "DEBUG ( %s/%s ): Sending NetFlow packet from [%s:%u] seqno [%u] to [%s]\n",
config.name, config.type, agent_addr, agent_port, msg->seqno, recv_addr);
}
if (!config.tee_transparent) {
if (send(fd, msg->payload, msg->len, 0) == -1) {
struct host_addr a;
u_char agent_addr[50];
u_int16_t agent_port;
sa_to_addr((struct sockaddr *)msg, &a, &agent_port);
addr_to_str(agent_addr, &a);
sa_to_addr((struct sockaddr *)target, &r, &recv_port);
addr_to_str(recv_addr, &r);
Log(LOG_ERR, "ERROR ( %s/%s ): send() from [%s:%u] seqno [%u] to [%s] failed (%s)\n",
config.name, config.type, agent_addr, agent_port, msg->seqno, recv_addr, strerror(errno));
}
}
else {
char *buf_ptr = tee_send_buf;
struct sockaddr_in *sa = (struct sockaddr_in *) &msg->agent;
struct my_iphdr *i4h = (struct my_iphdr *) buf_ptr;
#if defined ENABLE_IPV6
struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *) &msg->agent;
struct ip6_hdr *i6h = (struct ip6_hdr *) buf_ptr;
#endif
struct my_udphdr *uh;
if (msg->agent.sa_family == target->sa_family) {
/* UDP header first */
if (target->sa_family == AF_INET) {
buf_ptr += IP4HdrSz;
uh = (struct my_udphdr *) buf_ptr;
uh->uh_sport = sa->sin_port;
uh->uh_dport = ((struct sockaddr_in *)target)->sin_port;
}
#if defined ENABLE_IPV6
else if (target->sa_family == AF_INET6) {
buf_ptr += IP6HdrSz;
uh = (struct my_udphdr *) buf_ptr;
uh->uh_sport = sa6->sin6_port;
uh->uh_dport = ((struct sockaddr_in6 *)target)->sin6_port;
}
#endif
uh->uh_ulen = htons(msg->len+UDPHdrSz);
uh->uh_sum = 0;
/* IP header then */
if (target->sa_family == AF_INET) {
i4h->ip_vhl = 4;
i4h->ip_vhl <<= 4;
i4h->ip_vhl |= (IP4HdrSz/4);
if (config.nfprobe_ipprec) {
int opt = config.nfprobe_ipprec << 5;
i4h->ip_tos = opt;
}
else i4h->ip_tos = 0;
#if !defined BSD
i4h->ip_len = htons(IP4HdrSz+UDPHdrSz+msg->len);
#else
i4h->ip_len = IP4HdrSz+UDPHdrSz+msg->len;
#endif
i4h->ip_id = 0;
i4h->ip_off = 0;
i4h->ip_ttl = 255;
i4h->ip_p = IPPROTO_UDP;
i4h->ip_sum = 0;
i4h->ip_src.s_addr = sa->sin_addr.s_addr;
i4h->ip_dst.s_addr = ((struct sockaddr_in *)target)->sin_addr.s_addr;
}
#if defined ENABLE_IPV6
else if (target->sa_family == AF_INET6) {
i6h->ip6_vfc = 6;
i6h->ip6_vfc <<= 4;
i6h->ip6_plen = htons(UDPHdrSz+msg->len);
i6h->ip6_nxt = IPPROTO_UDP;
i6h->ip6_hlim = 255;
memcpy(&i6h->ip6_src, &sa6->sin6_addr, IP6AddrSz);
memcpy(&i6h->ip6_dst, &((struct sockaddr_in6 *)target)->sin6_addr, IP6AddrSz);
}
#endif
/* Put everything together and send */
buf_ptr += UDPHdrSz;
memcpy(buf_ptr, msg->payload, msg->len);
if (send(fd, tee_send_buf, IP4HdrSz+UDPHdrSz+msg->len, 0) == -1) {
struct host_addr a;
u_char agent_addr[50];
u_int16_t agent_port;
sa_to_addr((struct sockaddr *)msg, &a, &agent_port);
addr_to_str(agent_addr, &a);
sa_to_addr((struct sockaddr *)target, &r, &recv_port);
addr_to_str(recv_addr, &r);
Log(LOG_ERR, "ERROR ( %s/%s ): raw send() from [%s:%u] seqno [%u] to [%s] failed (%s)\n",
config.name, config.type, agent_addr, agent_port, msg->seqno, recv_addr, strerror(errno));
}
}
else {
time_t now = time(NULL);
if (now > err_cant_bridge_af + 60) {
Log(LOG_ERR, "ERROR ( %s/%s ): Can't bridge Address Families when in transparent mode\n", config.name, config.type);
err_cant_bridge_af = now;
}
}
}
}
struct template_cache_entry *refresh_opt_template(void *hdr, struct template_cache_entry *tpl, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int8_t version, u_int16_t len)
{
struct options_template_hdr_v9 *hdr_v9 = (struct options_template_hdr_v9 *) hdr;
struct options_template_hdr_ipfix *hdr_v10 = (struct options_template_hdr_ipfix *) hdr;
struct template_cache_entry backup, *next;
struct template_field_v9 *field;
u_int16_t slen, olen, count, type, port, tid, off;
u_char *ptr;
/* NetFlow v9 */
if (tpl_type == 1) {
tid = hdr_v9->template_id;
slen = ntohs(hdr_v9->scope_len)/sizeof(struct template_field_v9);
olen = ntohs(hdr_v9->option_len)/sizeof(struct template_field_v9);
}
/* IPFIX */
else if (tpl_type == 3) {
tid = hdr_v10->template_id;
slen = ntohs(hdr_v10->scope_count);
olen = ntohs(hdr_v10->option_count)-slen;
}
next = tpl->next;
memcpy(&backup, tpl, sizeof(struct template_cache_entry));
memset(tpl, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &tpl->agent, &port);
tpl->source_id = sid;
tpl->template_id = tid;
tpl->template_type = 1;
tpl->num = olen+slen;
tpl->next = next;
log_template_header(tpl, pptrs, tpl_type, sid, version);
off = 0;
count = tpl->num;
ptr = (u_char *) hdr;
ptr += NfOptTplHdrV9Sz;
off += NfOptTplHdrV9Sz;
field = (struct template_field_v9 *)ptr;
while (count) {
if (off >= len) {
notify_malf_packet(LOG_INFO, "INFO: unable to read next Options Template Flowset (malformed template)",
(struct sockaddr *) pptrs->f_agent);
xflow_tot_bad_datagrams++;
memcpy(tpl, &backup, sizeof(struct template_cache_entry));
return NULL;
}
type = ntohs(field->type);
log_opt_template_field(type, tpl->len, ntohs(field->len), version);
if (type < NF9_MAX_DEFINED_FIELD) {
tpl->tpl[type].off = tpl->len;
tpl->tpl[type].len = ntohs(field->len);
tpl->len += tpl->tpl[type].len;
}
else tpl->len += ntohs(field->len);
count--;
field++;
off += NfTplFieldV9Sz;
}
log_template_footer(tpl->len, version);
return tpl;
}
struct template_cache_entry *refresh_template(struct template_hdr_v9 *hdr, struct template_cache_entry *tpl, struct packet_ptrs *pptrs, u_int16_t tpl_type, u_int32_t sid, u_int16_t *pens, u_int8_t version, u_int16_t len)
{
struct template_cache_entry backup, *next;
struct template_field_v9 *field;
u_int16_t count, num = ntohs(hdr->num), type, port, off;
u_int32_t *pen;
u_int8_t ipfix_ebit;
u_char *ptr;
next = tpl->next;
memcpy(&backup, tpl, sizeof(struct template_cache_entry));
memset(tpl, 0, sizeof(struct template_cache_entry));
sa_to_addr((struct sockaddr *)pptrs->f_agent, &tpl->agent, &port);
tpl->source_id = sid;
tpl->template_id = hdr->template_id;
tpl->template_type = 0;
tpl->num = num;
tpl->next = next;
log_template_header(tpl, pptrs, tpl_type, sid, version);
count = off = 0;
ptr = (u_char *) hdr;
ptr += NfTplHdrV9Sz;
off += NfTplHdrV9Sz;
field = (struct template_field_v9 *)ptr;
while (count < num) {
if (off >= len) {
notify_malf_packet(LOG_INFO, "INFO: unable to read next Template Flowset (malformed template)",
(struct sockaddr *) pptrs->f_agent);
xflow_tot_bad_datagrams++;
memcpy(tpl, &backup, sizeof(struct template_cache_entry));
return NULL;
}
pen = NULL;
ipfix_ebit = FALSE;
type = ntohs(field->type);
if (type & IPFIX_TPL_EBIT && version == 10) {
ipfix_ebit = TRUE;
type ^= IPFIX_TPL_EBIT;
if (pens) (*pens)++;
pen = (u_int32_t *) field; pen++;
}
log_template_field(tpl->vlen, pen, type, tpl->len, ntohs(field->len), version);
if (type < NF9_MAX_DEFINED_FIELD && !pen) {
tpl->tpl[type].off = tpl->len;
tpl->tpl[type].tpl_len = ntohs(field->len);
if (tpl->vlen) tpl->tpl[type].off = 0;
if (tpl->tpl[type].tpl_len == IPFIX_VARIABLE_LENGTH) {
tpl->tpl[type].len = 0;
tpl->vlen = TRUE;
tpl->len = 0;
}
else {
tpl->tpl[type].len = tpl->tpl[type].tpl_len;
if (!tpl->vlen) tpl->len += tpl->tpl[type].len;
}
tpl->list[count].ptr = (char *) &tpl->tpl[type];
tpl->list[count].type = TPL_TYPE_LEGACY;
}
else {
struct utpl_field *ext_db_ptr = ext_db_get_next_ie(tpl, type);
if (ext_db_ptr) {
if (pen) ext_db_ptr->pen = ntohl(*pen);
ext_db_ptr->type = type;
ext_db_ptr->off = tpl->len;
ext_db_ptr->tpl_len = ntohs(field->len);
if (tpl->vlen) ext_db_ptr->off = 0;
if (ext_db_ptr->tpl_len == IPFIX_VARIABLE_LENGTH) {
ext_db_ptr->len = 0;
tpl->vlen = TRUE;
tpl->len = 0;
}
else {
ext_db_ptr->len = ext_db_ptr->tpl_len;
if (!tpl->vlen) tpl->len += ext_db_ptr->len;
}
}
tpl->list[count].ptr = (char *) ext_db_ptr;
tpl->list[count].type = TPL_TYPE_EXT_DB;
}
count++;
off += NfTplFieldV9Sz;
if (ipfix_ebit) {
field++; /* skip 32-bits ahead */
off += sizeof(u_int32_t);
}
field++;
}
log_template_footer(tpl->len, version);
return tpl;
}
void skinny_bmp_daemon()
{
int slen, clen, ret, rc, peers_idx, allowed, yes=1, no=0;
int peers_idx_rr = 0, max_peers_idx = 0;
u_int32_t pkt_remaining_len=0;
time_t now;
afi_t afi;
safi_t safi;
struct bmp_peer *bmpp = NULL;
struct bgp_peer *peer = NULL;
#if defined ENABLE_IPV6
struct sockaddr_storage server, client;
#else
struct sockaddr server, client;
#endif
struct hosts_table allow;
struct host_addr addr;
struct bgp_peer_batch bp_batch;
/* select() stuff */
fd_set read_descs, bkp_read_descs;
int fd, select_fd, bkp_select_fd, recalc_fds, select_num;
/* logdump time management */
time_t dump_refresh_deadline;
struct timeval dump_refresh_timeout, *drt_ptr;
/* initial cleanups */
reload_map_bmp_thread = FALSE;
reload_log_bmp_thread = FALSE;
memset(&server, 0, sizeof(server));
memset(&client, 0, sizeof(client));
memset(&allow, 0, sizeof(struct hosts_table));
clen = sizeof(client);
bmp_routing_db = &inter_domain_routing_dbs[FUNC_TYPE_BMP];
memset(bmp_routing_db, 0, sizeof(struct bgp_rt_structs));
/* socket creation for BMP server: IPv4 only */
#if (defined ENABLE_IPV6)
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)&server;
sa6->sin6_family = AF_INET6;
sa6->sin6_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in6);
}
#else
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in);
}
#endif
else {
trim_spaces(config.nfacctd_bmp_ip);
ret = str_to_addr(config.nfacctd_bmp_ip, &addr);
if (!ret) {
Log(LOG_ERR, "ERROR ( %s/%s ): 'bmp_daemon_ip' value is not a valid IPv4/IPv6 address. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
slen = addr_to_sa((struct sockaddr *)&server, &addr, config.nfacctd_bmp_port);
}
if (!config.nfacctd_bmp_max_peers) config.nfacctd_bmp_max_peers = BMP_MAX_PEERS_DEFAULT;
Log(LOG_INFO, "INFO ( %s/%s ): maximum BMP peers allowed: %d\n", config.name, bmp_misc_db->log_str, config.nfacctd_bmp_max_peers);
bmp_peers = malloc(config.nfacctd_bmp_max_peers*sizeof(struct bmp_peer));
if (!bmp_peers) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() BMP peers structure. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
memset(bmp_peers, 0, config.nfacctd_bmp_max_peers*sizeof(struct bmp_peer));
if (config.nfacctd_bmp_msglog_file || config.nfacctd_bmp_msglog_amqp_routing_key || config.nfacctd_bmp_msglog_kafka_topic) {
if (config.nfacctd_bmp_msglog_file) bmp_misc_db->msglog_backend_methods++;
if (config.nfacctd_bmp_msglog_amqp_routing_key) bmp_misc_db->msglog_backend_methods++;
if (config.nfacctd_bmp_msglog_kafka_topic) bmp_misc_db->msglog_backend_methods++;
if (bmp_misc_db->msglog_backend_methods > 1) {
Log(LOG_ERR, "ERROR ( %s/%s ): bmp_daemon_msglog_file, bmp_daemon_msglog_amqp_routing_key and bmp_daemon_msglog_kafka_topic are mutually exclusive. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
}
if (config.bmp_dump_file || config.bmp_dump_amqp_routing_key || config.bmp_dump_kafka_topic) {
if (config.bmp_dump_file) bmp_misc_db->dump_backend_methods++;
if (config.bmp_dump_amqp_routing_key) bmp_misc_db->dump_backend_methods++;
if (config.bmp_dump_kafka_topic) bmp_misc_db->dump_backend_methods++;
if (bmp_misc_db->dump_backend_methods > 1) {
Log(LOG_ERR, "ERROR ( %s/%s ): bmp_dump_file, bmp_dump_amqp_routing_key and bmp_dump_kafka_topic are mutually exclusive. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
}
if (bmp_misc_db->msglog_backend_methods || bmp_misc_db->dump_backend_methods)
bgp_peer_log_seq_init(&bmp_misc_db->log_seq);
if (bmp_misc_db->msglog_backend_methods) {
bmp_misc_db->peers_log = malloc(config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer_log));
if (!bmp_misc_db->peers_log) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() BMP peers log structure. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
memset(bmp_misc_db->peers_log, 0, config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer_log));
if (config.nfacctd_bmp_msglog_amqp_routing_key) {
#ifdef WITH_RABBITMQ
bmp_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&bmp_daemon_msglog_amqp_host);
if (!config.nfacctd_bmp_msglog_amqp_retry)
config.nfacctd_bmp_msglog_amqp_retry = AMQP_DEFAULT_RETRY;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): p_amqp_connect_to_publish() not possible due to missing --enable-rabbitmq\n", config.name, bmp_misc_db->log_str);
#endif
}
if (config.nfacctd_bmp_msglog_kafka_topic) {
#ifdef WITH_KAFKA
bmp_daemon_msglog_init_kafka_host();
#else
Log(LOG_WARNING, "WARN ( %s/%s ): p_kafka_connect_to_produce() not possible due to missing --enable-kafka\n", config.name, bmp_misc_db->log_str);
#endif
}
}
if (!config.bmp_table_attr_hash_buckets) config.bmp_table_attr_hash_buckets = HASHTABSIZE;
bgp_attr_init(config.bmp_table_attr_hash_buckets, bmp_routing_db);
if (!config.bmp_table_peer_buckets) config.bmp_table_peer_buckets = DEFAULT_BGP_INFO_HASH;
if (!config.bmp_table_per_peer_buckets) config.bmp_table_per_peer_buckets = DEFAULT_BGP_INFO_PER_PEER_HASH;
if (config.bmp_table_per_peer_hash == BGP_ASPATH_HASH_PATHID)
bmp_route_info_modulo = bmp_route_info_modulo_pathid;
else {
Log(LOG_ERR, "ERROR ( %s/%s ): Unknown 'bmp_table_per_peer_hash' value. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
config.bmp_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
if (config.bmp_sock < 0) {
#if (defined ENABLE_IPV6)
/* retry with IPv4 */
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in);
config.bmp_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
}
#endif
if (config.bmp_sock < 0) {
Log(LOG_ERR, "ERROR ( %s/%s ): thread socket() failed. Terminating thread.\n", config.name, bmp_misc_db->log_str);
exit_all(1);
}
}
if (config.nfacctd_bmp_ipprec) {
int opt = config.nfacctd_bmp_ipprec << 5;
rc = setsockopt(config.bmp_sock, IPPROTO_IP, IP_TOS, &opt, sizeof(opt));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for IP_TOS (errno: %d).\n", config.name, bmp_misc_db->log_str, errno);
}
rc = setsockopt(config.bmp_sock, SOL_SOCKET, SO_REUSEADDR, (char *)&yes, sizeof(yes));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for SO_REUSEADDR (errno: %d).\n", config.name, bmp_misc_db->log_str, errno);
#if (defined ENABLE_IPV6) && (defined IPV6_BINDV6ONLY)
rc = setsockopt(config.bmp_sock, IPPROTO_IPV6, IPV6_BINDV6ONLY, (char *) &no, (socklen_t) sizeof(no));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for IPV6_BINDV6ONLY (errno: %d).\n", config.name, bmp_misc_db->log_str, errno);
#endif
if (config.nfacctd_bmp_pipe_size) {
int l = sizeof(config.nfacctd_bmp_pipe_size);
int saved = 0, obtained = 0;
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &saved, &l);
Setsocksize(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &config.nfacctd_bmp_pipe_size, sizeof(config.nfacctd_bmp_pipe_size));
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Setsocksize(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &saved, l);
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Log(LOG_INFO, "INFO ( %s/%s ): bmp_daemon_pipe_size: obtained=%d target=%d.\n", config.name, bmp_misc_db->log_str, obtained, config.nfacctd_bmp_pipe_size);
}
rc = bind(config.bmp_sock, (struct sockaddr *) &server, slen);
if (rc < 0) {
char null_ip_address[] = "0.0.0.0";
char *ip_address;
ip_address = config.nfacctd_bmp_ip ? config.nfacctd_bmp_ip : null_ip_address;
Log(LOG_ERR, "ERROR ( %s/%s ): bind() to ip=%s port=%d/tcp failed (errno: %d).\n", config.name, bmp_misc_db->log_str, ip_address, config.nfacctd_bmp_port, errno);
exit_all(1);
}
rc = listen(config.bmp_sock, 1);
if (rc < 0) {
Log(LOG_ERR, "ERROR ( %s/%s ): listen() failed (errno: %d).\n", config.name, bmp_misc_db->log_str, errno);
exit_all(1);
}
/* Preparing for syncronous I/O multiplexing */
select_fd = 0;
FD_ZERO(&bkp_read_descs);
FD_SET(config.bmp_sock, &bkp_read_descs);
{
char srv_string[INET6_ADDRSTRLEN];
struct host_addr srv_addr;
u_int16_t srv_port;
sa_to_addr((struct sockaddr *)&server, &srv_addr, &srv_port);
addr_to_str(srv_string, &srv_addr);
Log(LOG_INFO, "INFO ( %s/%s ): waiting for BMP data on %s:%u\n", config.name, bmp_misc_db->log_str, srv_string, srv_port);
}
/* Preparing ACL, if any */
if (config.nfacctd_bmp_allow_file) load_allow_file(config.nfacctd_bmp_allow_file, &allow);
/* Let's initialize clean shared RIB */
for (afi = AFI_IP; afi < AFI_MAX; afi++) {
for (safi = SAFI_UNICAST; safi < SAFI_MAX; safi++) {
bmp_routing_db->rib[afi][safi] = bgp_table_init(afi, safi);
}
}
/* BMP peers batching checks */
if ((config.nfacctd_bmp_batch && !config.nfacctd_bmp_batch_interval) ||
(config.nfacctd_bmp_batch_interval && !config.nfacctd_bmp_batch)) {
Log(LOG_WARNING, "WARN ( %s/%s ): 'bmp_daemon_batch_interval' and 'bmp_daemon_batch' both set to zero.\n", config.name, bmp_misc_db->log_str);
config.nfacctd_bmp_batch = 0;
config.nfacctd_bmp_batch_interval = 0;
}
else bgp_batch_init(&bp_batch, config.nfacctd_bmp_batch, config.nfacctd_bmp_batch_interval);
if (bmp_misc_db->msglog_backend_methods) {
#ifdef WITH_JANSSON
if (!config.nfacctd_bmp_msglog_output) config.nfacctd_bmp_msglog_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): bmp_daemon_msglog_output set to json but will produce no output (missing --enable-jansson).\n", config.name, bmp_misc_db->log_str);
#endif
}
if (bmp_misc_db->dump_backend_methods) {
#ifdef WITH_JANSSON
if (!config.bmp_dump_output) config.bmp_dump_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): bmp_table_dump_output set to json but will produce no output (missing --enable-jansson).\n", config.name, bmp_misc_db->log_str);
#endif
}
if (bmp_misc_db->dump_backend_methods) {
char dump_roundoff[] = "m";
time_t tmp_time;
if (config.bmp_dump_refresh_time) {
gettimeofday(&bmp_misc_db->log_tstamp, NULL);
dump_refresh_deadline = bmp_misc_db->log_tstamp.tv_sec;
tmp_time = roundoff_time(dump_refresh_deadline, dump_roundoff);
while ((tmp_time+config.bmp_dump_refresh_time) < dump_refresh_deadline) {
tmp_time += config.bmp_dump_refresh_time;
}
dump_refresh_deadline = tmp_time;
dump_refresh_deadline += config.bmp_dump_refresh_time; /* it's a deadline not a basetime */
}
else {
config.bmp_dump_file = NULL;
bmp_misc_db->dump_backend_methods = FALSE;
Log(LOG_WARNING, "WARN ( %s/%s ): Invalid 'bmp_dump_refresh_time'.\n", config.name, bmp_misc_db->log_str);
}
if (config.bmp_dump_amqp_routing_key) bmp_dump_init_amqp_host();
if (config.bmp_dump_kafka_topic) bmp_dump_init_kafka_host();
}
select_fd = bkp_select_fd = (config.bmp_sock + 1);
recalc_fds = FALSE;
bmp_link_misc_structs(bmp_misc_db);
for (;;) {
select_again:
if (recalc_fds) {
select_fd = config.bmp_sock;
max_peers_idx = -1; /* .. since valid indexes include 0 */
for (peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (select_fd < bmp_peers[peers_idx].self.fd) select_fd = bmp_peers[peers_idx].self.fd;
if (bmp_peers[peers_idx].self.fd) max_peers_idx = peers_idx;
}
select_fd++;
max_peers_idx++;
bkp_select_fd = select_fd;
recalc_fds = FALSE;
}
else select_fd = bkp_select_fd;
memcpy(&read_descs, &bkp_read_descs, sizeof(bkp_read_descs));
if (bmp_misc_db->dump_backend_methods) {
int delta;
calc_refresh_timeout_sec(dump_refresh_deadline, bmp_misc_db->log_tstamp.tv_sec, &delta);
dump_refresh_timeout.tv_sec = delta;
dump_refresh_timeout.tv_usec = 0;
drt_ptr = &dump_refresh_timeout;
}
else drt_ptr = NULL;
select_num = select(select_fd, &read_descs, NULL, NULL, drt_ptr);
if (select_num < 0) goto select_again;
if (reload_map_bmp_thread) {
if (config.nfacctd_bmp_allow_file) load_allow_file(config.nfacctd_bmp_allow_file, &allow);
reload_map_bmp_thread = FALSE;
}
if (reload_log_bmp_thread) {
for (peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (bmp_misc_db->peers_log[peers_idx].fd) {
fclose(bmp_misc_db->peers_log[peers_idx].fd);
bmp_misc_db->peers_log[peers_idx].fd = open_output_file(bmp_misc_db->peers_log[peers_idx].filename, "a", FALSE);
setlinebuf(bmp_misc_db->peers_log[peers_idx].fd);
}
else break;
}
reload_log_bmp_thread = FALSE;
}
if (bmp_misc_db->msglog_backend_methods || bmp_misc_db->dump_backend_methods) {
gettimeofday(&bmp_misc_db->log_tstamp, NULL);
compose_timestamp(bmp_misc_db->log_tstamp_str, SRVBUFLEN, &bmp_misc_db->log_tstamp, TRUE,
config.timestamps_since_epoch, config.timestamps_rfc3339, config.timestamps_utc);
if (bmp_misc_db->dump_backend_methods) {
while (bmp_misc_db->log_tstamp.tv_sec > dump_refresh_deadline) {
bmp_misc_db->dump.tstamp.tv_sec = dump_refresh_deadline;
bmp_misc_db->dump.tstamp.tv_usec = 0;
compose_timestamp(bmp_misc_db->dump.tstamp_str, SRVBUFLEN, &bmp_misc_db->dump.tstamp, FALSE,
config.timestamps_since_epoch, config.timestamps_rfc3339, config.timestamps_utc);
bmp_misc_db->dump.period = config.bmp_dump_refresh_time;
bmp_handle_dump_event();
dump_refresh_deadline += config.bmp_dump_refresh_time;
}
}
#ifdef WITH_RABBITMQ
if (config.nfacctd_bmp_msglog_amqp_routing_key) {
time_t last_fail = P_broker_timers_get_last_fail(&bmp_daemon_msglog_amqp_host.btimers);
if (last_fail && ((last_fail + P_broker_timers_get_retry_interval(&bmp_daemon_msglog_amqp_host.btimers)) <= bmp_misc_db->log_tstamp.tv_sec)) {
bmp_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&bmp_daemon_msglog_amqp_host);
}
}
#endif
#ifdef WITH_KAFKA
if (config.nfacctd_bmp_msglog_kafka_topic) {
time_t last_fail = P_broker_timers_get_last_fail(&bmp_daemon_msglog_kafka_host.btimers);
if (last_fail && ((last_fail + P_broker_timers_get_retry_interval(&bmp_daemon_msglog_kafka_host.btimers)) <= bmp_misc_db->log_tstamp.tv_sec))
bmp_daemon_msglog_init_kafka_host();
}
#endif
}
/*
If select_num == 0 then we got out of select() due to a timeout rather
than because we had a message from a peer to handle. By now we did all
routine checks and can happily return to select() again.
*/
if (!select_num) goto select_again;
/* New connection is coming in */
if (FD_ISSET(config.bmp_sock, &read_descs)) {
int peers_check_idx, peers_num;
fd = accept(config.bmp_sock, (struct sockaddr *) &client, &clen);
if (fd == ERR) goto read_data;
#if defined ENABLE_IPV6
ipv4_mapped_to_ipv4(&client);
#endif
/* If an ACL is defined, here we check against and enforce it */
if (allow.num) allowed = check_allow(&allow, (struct sockaddr *)&client);
else allowed = TRUE;
if (!allowed) {
close(fd);
goto read_data;
}
for (peer = NULL, peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (!bmp_peers[peers_idx].self.fd) {
now = time(NULL);
/*
Admitted if:
* batching feature is disabled or
* we have room in the current batch or
* we can start a new batch
*/
if (bgp_batch_is_admitted(&bp_batch, now)) {
peer = &bmp_peers[peers_idx].self;
bmpp = &bmp_peers[peers_idx];
if (bmp_peer_init(bmpp, FUNC_TYPE_BMP)) {
peer = NULL;
bmpp = NULL;
}
else recalc_fds = TRUE;
log_notification_unset(&log_notifications.bgp_peers_throttling);
if (bgp_batch_is_enabled(&bp_batch) && peer) {
if (bgp_batch_is_expired(&bp_batch, now)) bgp_batch_reset(&bp_batch, now);
if (bgp_batch_is_not_empty(&bp_batch)) bgp_batch_decrease_counter(&bp_batch);
}
break;
}
else { /* throttle */
/* We briefly accept the new connection to be able to drop it */
if (!log_notification_isset(&log_notifications.bmp_peers_throttling, now)) {
Log(LOG_INFO, "INFO ( %s/%s ): throttling at BMP peer #%u\n", config.name, bmp_misc_db->log_str, peers_idx);
log_notification_set(&log_notifications.bmp_peers_throttling, now, FALSE);
}
close(fd);
goto read_data;
}
}
}
if (!peer) {
int fd;
/* We briefly accept the new connection to be able to drop it */
Log(LOG_ERR, "ERROR ( %s/%s ): Insufficient number of BMP peers has been configured by 'bmp_daemon_max_peers' (%d).\n",
config.name, bmp_misc_db->log_str, config.nfacctd_bmp_max_peers);
close(fd);
goto read_data;
}
peer->fd = fd;
FD_SET(peer->fd, &bkp_read_descs);
peer->addr.family = ((struct sockaddr *)&client)->sa_family;
if (peer->addr.family == AF_INET) {
peer->addr.address.ipv4.s_addr = ((struct sockaddr_in *)&client)->sin_addr.s_addr;
peer->tcp_port = ntohs(((struct sockaddr_in *)&client)->sin_port);
}
#if defined ENABLE_IPV6
else if (peer->addr.family == AF_INET6) {
memcpy(&peer->addr.address.ipv6, &((struct sockaddr_in6 *)&client)->sin6_addr, 16);
peer->tcp_port = ntohs(((struct sockaddr_in6 *)&client)->sin6_port);
}
#endif
addr_to_str(peer->addr_str, &peer->addr);
memcpy(&peer->id, &peer->addr, sizeof(struct host_addr)); /* XXX: some inet_ntoa()'s could be around against peer->id */
if (bmp_misc_db->msglog_backend_methods)
bgp_peer_log_init(peer, config.nfacctd_bmp_msglog_output, FUNC_TYPE_BMP);
if (bmp_misc_db->dump_backend_methods)
bmp_dump_init_peer(peer);
/* Check: multiple TCP connections per peer */
for (peers_check_idx = 0, peers_num = 0; peers_check_idx < config.nfacctd_bmp_max_peers; peers_check_idx++) {
if (peers_idx != peers_check_idx && !memcmp(&bmp_peers[peers_check_idx].self.addr, &peer->addr, sizeof(bmp_peers[peers_check_idx].self.addr))) {
if (bmp_misc_db->is_thread && !config.nfacctd_bgp_to_agent_map) {
Log(LOG_WARNING, "WARN ( %s/%s ): [%s] Multiple connections from peer and no bgp_agent_map defined.\n",
config.name, bmp_misc_db->log_str, bmp_peers[peers_check_idx].self.addr_str);
}
}
else {
if (bmp_peers[peers_check_idx].self.fd) peers_num++;
}
}
Log(LOG_INFO, "INFO ( %s/%s ): [%s] BMP peers usage: %u/%u\n", config.name, bmp_misc_db->log_str, peer->addr_str, peers_num, config.nfacctd_bmp_max_peers);
}
read_data:
/*
We have something coming in: let's lookup which peer is that.
FvD: To avoid starvation of the "later established" peers, we
offset the start of the search in a round-robin style.
*/
for (peer = NULL, peers_idx = 0; peers_idx < max_peers_idx; peers_idx++) {
int loc_idx = (peers_idx + peers_idx_rr) % max_peers_idx;
if (bmp_peers[loc_idx].self.fd && FD_ISSET(bmp_peers[loc_idx].self.fd, &read_descs)) {
peer = &bmp_peers[loc_idx].self;
bmpp = &bmp_peers[loc_idx];
peers_idx_rr = (peers_idx_rr + 1) % max_peers_idx;
break;
}
}
if (!peer) goto select_again;
ret = recv(peer->fd, &peer->buf.base[peer->buf.truncated_len], (peer->buf.len - peer->buf.truncated_len), 0);
peer->msglen = (ret + peer->buf.truncated_len);
if (ret <= 0) {
Log(LOG_INFO, "INFO ( %s/%s ): [%s] BMP connection reset by peer (%d).\n", config.name, bmp_misc_db->log_str, peer->addr_str, errno);
FD_CLR(peer->fd, &bkp_read_descs);
bmp_peer_close(bmpp, FUNC_TYPE_BMP);
recalc_fds = TRUE;
goto select_again;
}
else {
pkt_remaining_len = bmp_process_packet(peer->buf.base, peer->msglen, bmpp);
/* handling offset for TCP segment reassembly */
if (pkt_remaining_len) peer->buf.truncated_len = bmp_packet_adj_offset(peer->buf.base, peer->buf.len, peer->msglen,
pkt_remaining_len, peer->addr_str);
else peer->buf.truncated_len = 0;
}
}
}
void skinny_bmp_daemon()
{
int slen, clen, ret, rc, peers_idx, allowed, yes=1;
char bmp_packet[BMP_MAX_PACKET_SIZE], *bmp_packet_ptr;
time_t now;
afi_t afi;
safi_t safi;
struct bgp_peer *peer;
#if defined ENABLE_IPV6
struct sockaddr_storage server, client;
struct ipv6_mreq multi_req6;
#else
struct sockaddr server, client;
#endif
struct hosts_table allow;
struct host_addr addr;
/* BMP peer batching vars */
int bmp_current_batch_elem = 0;
time_t bmp_current_batch_stamp_base = 0;
/* select() stuff */
fd_set read_descs, bkp_read_descs;
int select_fd, select_num;
/* logdump time management */
time_t dump_refresh_deadline;
struct timeval dump_refresh_timeout, *drt_ptr;
/* initial cleanups */
reload_log_bmp_thread = FALSE;
memset(&server, 0, sizeof(server));
memset(&client, 0, sizeof(client));
memset(bmp_packet, 0, BMP_MAX_PACKET_SIZE);
memset(&allow, 0, sizeof(struct hosts_table));
clen = sizeof(client);
/* socket creation for BMP server: IPv4 only */
#if (defined ENABLE_IPV6)
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)&server;
sa6->sin6_family = AF_INET6;
sa6->sin6_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in6);
}
#else
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in);
}
#endif
else {
trim_spaces(config.nfacctd_bmp_ip);
ret = str_to_addr(config.nfacctd_bmp_ip, &addr);
if (!ret) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): 'bmp_daemon_ip' value is not a valid IPv4/IPv6 address. Terminating thread.\n", config.name);
exit_all(1);
}
slen = addr_to_sa((struct sockaddr *)&server, &addr, config.nfacctd_bmp_port);
}
if (!config.nfacctd_bmp_max_peers) config.nfacctd_bmp_max_peers = BMP_MAX_PEERS_DEFAULT;
Log(LOG_INFO, "INFO ( %s/core/BMP ): maximum BMP peers allowed: %d\n", config.name, config.nfacctd_bmp_max_peers);
bmp_peers = malloc(config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer));
if (!bmp_peers) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): Unable to malloc() BMP peers structure. Terminating thread.\n", config.name);
exit_all(1);
}
memset(bmp_peers, 0, config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer));
if (config.nfacctd_bmp_msglog_file && config.nfacctd_bmp_msglog_amqp_routing_key) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): bmp_daemon_msglog_file and bmp_daemon_msglog_amqp_routing_key are mutually exclusive. Terminating thread.\n", config.name);
exit_all(1);
}
if (config.bmp_dump_file && config.bmp_dump_amqp_routing_key) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): bmp_dump_file and bmp_dump_amqp_routing_key are mutually exclusive. Terminating thread.\n", config.name);
exit_all(1);
}
if (config.nfacctd_bmp_msglog_file || config.nfacctd_bmp_msglog_amqp_routing_key) {
bmp_peers_log = malloc(config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer_log));
if (!bmp_peers_log) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): Unable to malloc() BMP peers log structure. Terminating thread.\n", config.name);
exit_all(1);
}
memset(bmp_peers_log, 0, config.nfacctd_bmp_max_peers*sizeof(struct bgp_peer_log));
bgp_peer_log_seq_init(&bmp_log_seq);
if (config.nfacctd_bmp_msglog_amqp_routing_key) {
#ifdef WITH_RABBITMQ
bmp_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&bmp_daemon_msglog_amqp_host);
if (!config.nfacctd_bmp_msglog_amqp_retry)
config.nfacctd_bmp_msglog_amqp_retry = AMQP_DEFAULT_RETRY;
#else
Log(LOG_WARNING, "WARN ( %s/core/BMP ): p_amqp_connect_to_publish() not possible due to missing --enable-rabbitmq\n", config.name);
#endif
}
}
if (!config.bmp_table_attr_hash_buckets) config.bmp_table_attr_hash_buckets = HASHTABSIZE;
bmp_attr_init();
if (!config.bmp_table_peer_buckets) config.bmp_table_peer_buckets = DEFAULT_BGP_INFO_HASH;
if (!config.bmp_table_per_peer_buckets) config.bmp_table_per_peer_buckets = DEFAULT_BGP_INFO_PER_PEER_HASH;
if (config.bmp_table_per_peer_hash == BGP_ASPATH_HASH_PATHID)
bmp_route_info_modulo = bgp_route_info_modulo_pathid;
else {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): Unknown 'bmp_table_per_peer_hash' value. Terminating thread.\n", config.name);
exit_all(1);
}
config.bmp_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
if (config.bmp_sock < 0) {
#if (defined ENABLE_IPV6)
/* retry with IPv4 */
if (!config.nfacctd_bmp_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(config.nfacctd_bmp_port);
slen = sizeof(struct sockaddr_in);
config.bmp_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
}
#endif
if (config.bmp_sock < 0) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): thread socket() failed. Terminating thread.\n", config.name);
exit_all(1);
}
}
if (config.nfacctd_bmp_ipprec) {
int opt = config.nfacctd_bmp_ipprec << 5;
rc = setsockopt(config.bmp_sock, IPPROTO_IP, IP_TOS, &opt, sizeof(opt));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/core/BMP ): setsockopt() failed for IP_TOS (errno: %d).\n", config.name, errno);
}
rc = setsockopt(config.bmp_sock, SOL_SOCKET, SO_REUSEADDR, (char *)&yes, sizeof(yes));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/core/BMP ): setsockopt() failed for SO_REUSEADDR (errno: %d).\n", config.name, errno);
if (config.nfacctd_bmp_pipe_size) {
int l = sizeof(config.nfacctd_bmp_pipe_size);
int saved = 0, obtained = 0;
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &saved, &l);
Setsocksize(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &config.nfacctd_bmp_pipe_size, sizeof(config.nfacctd_bmp_pipe_size));
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Setsocksize(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &saved, l);
getsockopt(config.bmp_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Log(LOG_INFO, "INFO ( %s/core/BMP ): bmp_daemon_pipe_size: obtained=%d target=%d.\n", config.name, obtained, config.nfacctd_bmp_pipe_size);
}
rc = bind(config.bmp_sock, (struct sockaddr *) &server, slen);
if (rc < 0) {
char null_ip_address[] = "0.0.0.0";
char *ip_address;
ip_address = config.nfacctd_bmp_ip ? config.nfacctd_bmp_ip : null_ip_address;
Log(LOG_ERR, "ERROR ( %s/core/BMP ): bind() to ip=%s port=%d/tcp failed (errno: %d).\n", config.name, ip_address, config.nfacctd_bmp_port, errno);
exit_all(1);
}
rc = listen(config.bmp_sock, 1);
if (rc < 0) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): listen() failed (errno: %d).\n", config.name, errno);
exit_all(1);
}
/* Preparing for syncronous I/O multiplexing */
select_fd = 0;
FD_ZERO(&bkp_read_descs);
FD_SET(config.bmp_sock, &bkp_read_descs);
{
char srv_string[INET6_ADDRSTRLEN];
struct host_addr srv_addr;
u_int16_t srv_port;
sa_to_addr(&server, &srv_addr, &srv_port);
addr_to_str(srv_string, &srv_addr);
Log(LOG_INFO, "INFO ( %s/core/BMP ): waiting for BMP data on %s:%u\n", config.name, srv_string, srv_port);
}
/* Preparing ACL, if any */
if (config.nfacctd_bmp_allow_file) load_allow_file(config.nfacctd_bmp_allow_file, &allow);
/* Let's initialize clean shared RIB */
for (afi = AFI_IP; afi < AFI_MAX; afi++) {
for (safi = SAFI_UNICAST; safi < SAFI_MAX; safi++) {
bmp_rib[afi][safi] = bgp_table_init(afi, safi);
}
}
/* BMP peers batching checks */
if ((config.nfacctd_bmp_batch && !config.nfacctd_bmp_batch_interval) ||
(config.nfacctd_bmp_batch_interval && !config.nfacctd_bmp_batch)) {
Log(LOG_WARNING, "WARN ( %s/core/BMP ): 'bmp_daemon_batch_interval' and 'bmp_daemon_batch' both set to zero.\n", config.name);
config.nfacctd_bmp_batch = 0;
config.nfacctd_bmp_batch_interval = 0;
}
if (!config.nfacctd_bmp_msglog_output && (config.nfacctd_bmp_msglog_file ||
config.nfacctd_bmp_msglog_amqp_routing_key))
#ifdef WITH_JANSSON
config.nfacctd_bmp_msglog_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/core/BMP ): bmp_daemon_msglog_output set to json but will produce no output (missing --enable-jansson).\n", config.name);
#endif
if (!config.bmp_dump_output && (config.bmp_dump_file ||
config.bmp_dump_amqp_routing_key))
#ifdef WITH_JANSSON
config.bmp_dump_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/core/BMP ): bmp_table_dump_output set to json but will produce no output (missing --enable-jansson).\n", config.name);
#endif
if (config.bmp_dump_file || config.bmp_dump_amqp_routing_key) {
char dump_roundoff[] = "m";
time_t tmp_time;
if (config.bmp_dump_refresh_time) {
gettimeofday(&bmp_log_tstamp, NULL);
dump_refresh_deadline = bmp_log_tstamp.tv_sec;
tmp_time = roundoff_time(dump_refresh_deadline, dump_roundoff);
while ((tmp_time+config.bmp_dump_refresh_time) < dump_refresh_deadline) {
tmp_time += config.bmp_dump_refresh_time;
}
dump_refresh_deadline = tmp_time;
dump_refresh_deadline += config.bmp_dump_refresh_time; /* it's a deadline not a basetime */
}
else {
config.bmp_dump_file = NULL;
Log(LOG_WARNING, "WARN ( %s/core/BMP ): Invalid 'bmp_dump_refresh_time'.\n", config.name);
}
bmp_dump_init_amqp_host();
}
for (;;) {
select_again:
select_fd = config.bmp_sock;
for (peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++)
if (select_fd < bmp_peers[peers_idx].fd) select_fd = bmp_peers[peers_idx].fd;
select_fd++;
memcpy(&read_descs, &bkp_read_descs, sizeof(bkp_read_descs));
if (config.bmp_dump_file || config.bmp_dump_amqp_routing_key) {
int delta;
calc_refresh_timeout_sec(dump_refresh_deadline, bmp_log_tstamp.tv_sec, &delta);
dump_refresh_timeout.tv_sec = delta;
dump_refresh_timeout.tv_usec = 0;
drt_ptr = &dump_refresh_timeout;
}
else drt_ptr = NULL;
select_num = select(select_fd, &read_descs, NULL, NULL, drt_ptr);
if (select_num < 0) goto select_again;
if (reload_log_bmp_thread) {
for (peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (bmp_peers_log[peers_idx].fd) {
fclose(bmp_peers_log[peers_idx].fd);
bmp_peers_log[peers_idx].fd = open_logfile(bmp_peers_log[peers_idx].filename, "a");
}
else break;
}
}
if (config.nfacctd_bmp_msglog_file || config.nfacctd_bmp_msglog_amqp_routing_key ||
config.bmp_dump_file || config.bmp_dump_amqp_routing_key) {
gettimeofday(&bmp_log_tstamp, NULL);
compose_timestamp(bmp_log_tstamp_str, SRVBUFLEN, &bmp_log_tstamp, TRUE, config.sql_history_since_epoch);
if (config.bmp_dump_file || config.bmp_dump_amqp_routing_key) {
while (bmp_log_tstamp.tv_sec > dump_refresh_deadline) {
bmp_handle_dump_event();
dump_refresh_deadline += config.bmp_dump_refresh_time;
}
}
#ifdef WITH_RABBITMQ
if (config.nfacctd_bmp_msglog_amqp_routing_key) {
time_t last_fail = p_amqp_get_last_fail(&bmp_daemon_msglog_amqp_host);
if (last_fail && ((last_fail + p_amqp_get_retry_interval(&bmp_daemon_msglog_amqp_host)) <= log_tstamp.tv_sec)) {
bmp_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&bmp_daemon_msglog_amqp_host);
}
}
#endif
}
/*
If select_num == 0 then we got out of select() due to a timeout rather
than because we had a message from a peeer to handle. By now we did all
routine checks and can happily return to selet() again.
*/
if (!select_num) goto select_again;
/* New connection is coming in */
if (FD_ISSET(config.bmp_sock, &read_descs)) {
int peers_check_idx, peers_num;
for (peer = NULL, peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (bmp_peers[peers_idx].fd == 0) {
now = time(NULL);
if (bmp_current_batch_elem > 0 || now > (bmp_current_batch_stamp_base + config.nfacctd_bmp_batch_interval)) {
peer = &bmp_peers[peers_idx];
if (bgp_peer_init(peer)) peer = NULL;
log_notification_unset(&log_notifications.bmp_peers_throttling);
if (config.nfacctd_bmp_batch && peer) {
if (now > (bmp_current_batch_stamp_base + config.nfacctd_bmp_batch_interval)) {
bmp_current_batch_elem = config.nfacctd_bmp_batch;
bmp_current_batch_stamp_base = now;
}
if (bmp_current_batch_elem > 0) bmp_current_batch_elem--;
}
break;
}
else { /* throttle */
int fd = 0;
/* We briefly accept the new connection to be able to drop it */
if (!log_notification_isset(log_notifications.bmp_peers_throttling)) {
Log(LOG_INFO, "INFO ( %s/core/BMP ): throttling at BMP peer #%u\n", config.name, peers_idx);
log_notification_set(&log_notifications.bmp_peers_throttling);
}
fd = accept(config.bmp_sock, (struct sockaddr *) &client, &clen);
close(fd);
goto select_again;
}
}
}
if (!peer) {
int fd;
/* We briefly accept the new connection to be able to drop it */
Log(LOG_ERR, "ERROR ( %s/core/BMP ): Insufficient number of BMP peers has been configured by 'bmp_daemon_max_peers' (%d).\n",
config.name, config.nfacctd_bmp_max_peers);
fd = accept(config.bmp_sock, (struct sockaddr *) &client, &clen);
close(fd);
goto select_again;
}
peer->fd = accept(config.bmp_sock, (struct sockaddr *) &client, &clen);
#if defined ENABLE_IPV6
ipv4_mapped_to_ipv4(&client);
#endif
/* If an ACL is defined, here we check against and enforce it */
if (allow.num) allowed = check_allow(&allow, (struct sockaddr *)&client);
else allowed = TRUE;
if (!allowed) {
bgp_peer_close(peer, FUNC_TYPE_BMP);
goto select_again;
}
FD_SET(peer->fd, &bkp_read_descs);
peer->addr.family = ((struct sockaddr *)&client)->sa_family;
if (peer->addr.family == AF_INET) {
peer->addr.address.ipv4.s_addr = ((struct sockaddr_in *)&client)->sin_addr.s_addr;
peer->tcp_port = ntohs(((struct sockaddr_in *)&client)->sin_port);
}
#if defined ENABLE_IPV6
else if (peer->addr.family == AF_INET6) {
memcpy(&peer->addr.address.ipv6, &((struct sockaddr_in6 *)&client)->sin6_addr, 16);
peer->tcp_port = ntohs(((struct sockaddr_in6 *)&client)->sin6_port);
}
#endif
addr_to_str(peer->addr_str, &peer->addr);
memcpy(&peer->id, &peer->addr, sizeof(struct host_addr)); /* XXX: some inet_ntoa()'s could be around against peer->id */
if (config.nfacctd_bmp_msglog_file || config.nfacctd_bmp_msglog_amqp_routing_key)
bgp_peer_log_init(peer, config.nfacctd_bmp_msglog_output, FUNC_TYPE_BMP);
if (config.bmp_dump_file || config.bmp_dump_amqp_routing_key)
bmp_dump_init_peer(peer);
/* Check: only one TCP connection is allowed per peer */
for (peers_check_idx = 0, peers_num = 0; peers_check_idx < config.nfacctd_bmp_max_peers; peers_check_idx++) {
if (peers_idx != peers_check_idx && !memcmp(&bmp_peers[peers_check_idx].addr, &peer->addr, sizeof(bmp_peers[peers_check_idx].addr))) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): [Id: %s] Refusing new connection from existing peer.\n",
config.name, bmp_peers[peers_check_idx].addr_str);
FD_CLR(peer->fd, &bkp_read_descs);
bgp_peer_close(peer, FUNC_TYPE_BMP);
goto select_again;
}
else {
if (bmp_peers[peers_check_idx].fd) peers_num++;
}
}
Log(LOG_INFO, "INFO ( %s/core/BMP ): BMP peers usage: %u/%u\n", config.name, peers_num, config.nfacctd_bmp_max_peers);
if (config.nfacctd_bmp_neighbors_file)
write_neighbors_file(config.nfacctd_bmp_neighbors_file);
goto select_again;
}
/* We have something coming in: let's lookup which peer is that; XXX old: to be optimized */
for (peer = NULL, peers_idx = 0; peers_idx < config.nfacctd_bmp_max_peers; peers_idx++) {
if (bmp_peers[peers_idx].fd && FD_ISSET(bmp_peers[peers_idx].fd, &read_descs)) {
peer = &bmp_peers[peers_idx];
break;
}
}
if (!peer) {
Log(LOG_ERR, "ERROR ( %s/core/BMP ): message delivered to an unknown peer (FD bits: %d; FD max: %d)\n", config.name, select_num, select_fd);
goto select_again;
}
peer->msglen = ret = recv(peer->fd, bmp_packet, BMP_MAX_PACKET_SIZE, 0);
if (ret <= 0) {
Log(LOG_INFO, "INFO ( %s/core/BMP ): [Id: %s] Existing BMP connection was reset (%d).\n", config.name, peer->addr_str, errno);
FD_CLR(peer->fd, &bkp_read_descs);
bgp_peer_close(peer, FUNC_TYPE_BMP);
goto select_again;
}
else bmp_process_packet(bmp_packet, peer->msglen, peer);
}
}
void telemetry_daemon(void *t_data_void)
{
struct telemetry_data *t_data = t_data_void;
telemetry_peer_udp_cache tpuc;
int slen, clen, ret, rc, peers_idx, allowed, yes=1, no=0;
int peers_idx_rr = 0, max_peers_idx = 0, peers_num = 0;
int decoder = 0, data_decoder = 0, recv_flags = 0;
u_int16_t port = 0;
char *srv_proto = NULL;
time_t now, last_udp_timeout_check;
telemetry_peer *peer = NULL;
telemetry_peer_z *peer_z = NULL;
#if defined ENABLE_IPV6
struct sockaddr_storage server, client;
#else
struct sockaddr server, client;
#endif
struct hosts_table allow;
struct host_addr addr;
/* select() stuff */
fd_set read_descs, bkp_read_descs;
int fd, select_fd, bkp_select_fd, recalc_fds, select_num;
/* logdump time management */
time_t dump_refresh_deadline;
struct timeval dump_refresh_timeout, *drt_ptr;
if (!t_data) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon(): missing telemetry data. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
/* initial cleanups */
reload_log_telemetry_thread = FALSE;
memset(&server, 0, sizeof(server));
memset(&client, 0, sizeof(client));
memset(&allow, 0, sizeof(struct hosts_table));
clen = sizeof(client);
telemetry_peers_udp_cache = NULL;
last_udp_timeout_check = FALSE;
telemetry_misc_db = &inter_domain_misc_dbs[FUNC_TYPE_TELEMETRY];
memset(telemetry_misc_db, 0, sizeof(telemetry_misc_structs));
/* initialize variables */
if (config.telemetry_port_tcp && config.telemetry_port_udp) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_port_tcp and telemetry_daemon_port_udp are mutually exclusive. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
else if (!config.telemetry_port_tcp && !config.telemetry_port_udp) {
/* defaulting to TCP */
port = config.telemetry_port_tcp = TELEMETRY_TCP_PORT;
srv_proto = malloc(strlen("tcp") + 1);
strcpy(srv_proto, "tcp");
}
else {
if (config.telemetry_port_tcp) {
port = config.telemetry_port_tcp;
srv_proto = malloc(strlen("tcp") + 1);
strcpy(srv_proto, "tcp");
}
if (config.telemetry_port_udp) {
port = config.telemetry_port_udp;
srv_proto = malloc(strlen("udp") + 1);
strcpy(srv_proto, "udp");
}
}
/* socket creation for telemetry server: IPv4 only */
#if (defined ENABLE_IPV6)
if (!config.telemetry_ip) {
struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)&server;
sa6->sin6_family = AF_INET6;
sa6->sin6_port = htons(port);
slen = sizeof(struct sockaddr_in6);
}
#else
if (!config.telemetry_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(port);
slen = sizeof(struct sockaddr_in);
}
#endif
else {
trim_spaces(config.telemetry_ip);
ret = str_to_addr(config.telemetry_ip, &addr);
if (!ret) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_ip value is not a valid IPv4/IPv6 address. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
slen = addr_to_sa((struct sockaddr *)&server, &addr, port);
}
if (!config.telemetry_decoder) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_decoder is not specified. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
else {
if (!strcmp(config.telemetry_decoder, "json")) decoder = TELEMETRY_DECODER_JSON;
else if (!strcmp(config.telemetry_decoder, "zjson")) {
#if defined (HAVE_ZLIB)
decoder = TELEMETRY_DECODER_ZJSON;
#else
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_decoder set to 'zjson' but zlib not available. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
#endif
}
else if (!strcmp(config.telemetry_decoder, "cisco_json")) decoder = TELEMETRY_DECODER_CISCO_JSON;
else if (!strcmp(config.telemetry_decoder, "cisco_zjson")) {
#if defined (HAVE_ZLIB)
decoder = TELEMETRY_DECODER_CISCO_ZJSON;
#else
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_decoder set to 'cisco_zjson' but zlib not available. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
#endif
}
else if (!strcmp(config.telemetry_decoder, "cisco")) decoder = TELEMETRY_DECODER_CISCO;
else if (!strcmp(config.telemetry_decoder, "cisco_gpb")) decoder = TELEMETRY_DECODER_CISCO_GPB;
else if (!strcmp(config.telemetry_decoder, "cisco_gpb_kv")) decoder = TELEMETRY_DECODER_CISCO_GPB_KV;
else {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_decoder set to unknown value. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
}
if (!config.telemetry_max_peers) config.telemetry_max_peers = TELEMETRY_MAX_PEERS_DEFAULT;
Log(LOG_INFO, "INFO ( %s/%s ): maximum telemetry peers allowed: %d\n", config.name, t_data->log_str, config.telemetry_max_peers);
if (config.telemetry_port_udp) {
if (!config.telemetry_udp_timeout) config.telemetry_udp_timeout = TELEMETRY_UDP_TIMEOUT_DEFAULT;
Log(LOG_INFO, "INFO ( %s/%s ): telemetry UDP peers timeout: %u\n", config.name, t_data->log_str, config.telemetry_udp_timeout);
}
telemetry_peers = malloc(config.telemetry_max_peers*sizeof(telemetry_peer));
if (!telemetry_peers) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() telemetry_peers structure. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
memset(telemetry_peers, 0, config.telemetry_max_peers*sizeof(telemetry_peer));
if (telemetry_is_zjson(decoder)) {
telemetry_peers_z = malloc(config.telemetry_max_peers*sizeof(telemetry_peer_z));
if (!telemetry_peers_z) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() telemetry_peers_z structure. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
memset(telemetry_peers_z, 0, config.telemetry_max_peers*sizeof(telemetry_peer_z));
}
if (config.telemetry_port_udp) {
telemetry_peers_udp_timeout = malloc(config.telemetry_max_peers*sizeof(telemetry_peer_udp_timeout));
if (!telemetry_peers_udp_timeout) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() telemetry_peers_udp_timeout structure. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
memset(telemetry_peers_udp_timeout, 0, config.telemetry_max_peers*sizeof(telemetry_peer_udp_timeout));
}
if (config.telemetry_msglog_file || config.telemetry_msglog_amqp_routing_key || config.telemetry_msglog_kafka_topic) {
if (config.telemetry_msglog_file) telemetry_misc_db->msglog_backend_methods++;
if (config.telemetry_msglog_amqp_routing_key) telemetry_misc_db->msglog_backend_methods++;
if (config.telemetry_msglog_kafka_topic) telemetry_misc_db->msglog_backend_methods++;
if (telemetry_misc_db->msglog_backend_methods > 1) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_daemon_msglog_file, telemetry_daemon_msglog_amqp_routing_key and telemetry_daemon_msglog_kafka_topic are mutually exclusive. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
}
if (config.telemetry_dump_file || config.telemetry_dump_amqp_routing_key || config.telemetry_dump_kafka_topic) {
if (config.telemetry_dump_file) telemetry_misc_db->dump_backend_methods++;
if (config.telemetry_dump_amqp_routing_key) telemetry_misc_db->dump_backend_methods++;
if (config.telemetry_dump_kafka_topic) telemetry_misc_db->dump_backend_methods++;
if (telemetry_misc_db->dump_backend_methods > 1) {
Log(LOG_ERR, "ERROR ( %s/%s ): telemetry_dump_file, telemetry_dump_amqp_routing_key and telemetry_dump_kafka_topic are mutually exclusive. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
}
if (telemetry_misc_db->msglog_backend_methods) {
telemetry_misc_db->peers_log = malloc(config.telemetry_max_peers*sizeof(telemetry_peer_log));
if (!telemetry_misc_db->peers_log) {
Log(LOG_ERR, "ERROR ( %s/%s ): Unable to malloc() telemetry peers_log structure. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
memset(telemetry_misc_db->peers_log, 0, config.telemetry_max_peers*sizeof(telemetry_peer_log));
telemetry_peer_log_seq_init(&telemetry_misc_db->log_seq);
if (config.telemetry_msglog_amqp_routing_key) {
#ifdef WITH_RABBITMQ
telemetry_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&telemetry_daemon_msglog_amqp_host);
if (!config.telemetry_msglog_amqp_retry)
config.telemetry_msglog_amqp_retry = AMQP_DEFAULT_RETRY;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): p_amqp_connect_to_publish() not possible due to missing --enable-rabbitmq\n", config.name, t_data->log_str);
#endif
}
if (config.telemetry_msglog_kafka_topic) {
#ifdef WITH_KAFKA
telemetry_daemon_msglog_init_kafka_host();
#else
Log(LOG_WARNING, "WARN ( %s/%s ): p_kafka_connect_to_produce() not possible due to missing --enable-kafka\n", config.name, t_data->log_str);
#endif
}
}
if (config.telemetry_port_tcp) config.telemetry_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
else if (config.telemetry_port_udp) config.telemetry_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_DGRAM, 0);
if (config.telemetry_sock < 0) {
#if (defined ENABLE_IPV6)
/* retry with IPv4 */
if (!config.telemetry_ip) {
struct sockaddr_in *sa4 = (struct sockaddr_in *)&server;
sa4->sin_family = AF_INET;
sa4->sin_addr.s_addr = htonl(0);
sa4->sin_port = htons(port);
slen = sizeof(struct sockaddr_in);
if (config.telemetry_port_tcp) config.telemetry_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_STREAM, 0);
else if (config.telemetry_port_udp) config.telemetry_sock = socket(((struct sockaddr *)&server)->sa_family, SOCK_DGRAM, 0);
}
#endif
if (config.telemetry_sock < 0) {
Log(LOG_ERR, "ERROR ( %s/%s ): socket() failed. Terminating.\n", config.name, t_data->log_str);
exit_all(1);
}
}
if (config.telemetry_ipprec) {
int opt = config.telemetry_ipprec << 5;
rc = setsockopt(config.telemetry_sock, IPPROTO_IP, IP_TOS, &opt, sizeof(opt));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for IP_TOS (errno: %d).\n", config.name, t_data->log_str, errno);
}
rc = setsockopt(config.telemetry_sock, SOL_SOCKET, SO_REUSEADDR, (char *)&yes, sizeof(yes));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for SO_REUSEADDR (errno: %d).\n", config.name, t_data->log_str, errno);
#if (defined ENABLE_IPV6) && (defined IPV6_BINDV6ONLY)
rc = setsockopt(config.telemetry_sock, IPPROTO_IPV6, IPV6_BINDV6ONLY, (char *) &no, (socklen_t) sizeof(no));
if (rc < 0) Log(LOG_ERR, "WARN ( %s/%s ): setsockopt() failed for IPV6_BINDV6ONLY (errno: %d).\n", config.name, t_data->log_str, errno);
#endif
if (config.telemetry_pipe_size) {
int l = sizeof(config.telemetry_pipe_size);
int saved = 0, obtained = 0;
getsockopt(config.telemetry_sock, SOL_SOCKET, SO_RCVBUF, &saved, &l);
Setsocksize(config.telemetry_sock, SOL_SOCKET, SO_RCVBUF, &config.telemetry_pipe_size, sizeof(config.telemetry_pipe_size));
getsockopt(config.telemetry_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Setsocksize(config.telemetry_sock, SOL_SOCKET, SO_RCVBUF, &saved, l);
getsockopt(config.telemetry_sock, SOL_SOCKET, SO_RCVBUF, &obtained, &l);
Log(LOG_INFO, "INFO ( %s/%s ): telemetry_daemon_pipe_size: obtained=%d target=%d.\n",
config.name, t_data->log_str, obtained, config.telemetry_pipe_size);
}
rc = bind(config.telemetry_sock, (struct sockaddr *) &server, slen);
if (rc < 0) {
char null_ip_address[] = "0.0.0.0";
char *ip_address;
ip_address = config.telemetry_ip ? config.telemetry_ip : null_ip_address;
Log(LOG_ERR, "ERROR ( %s/%s ): bind() to ip=%s port=%u/%s failed (errno: %d).\n",
config.name, t_data->log_str, ip_address, port, srv_proto, errno);
exit_all(1);
}
if (config.telemetry_port_tcp) {
rc = listen(config.telemetry_sock, 1);
if (rc < 0) {
Log(LOG_ERR, "ERROR ( %s/%s ): listen() failed (errno: %d).\n", config.name, t_data->log_str, errno);
exit_all(1);
}
}
/* Preparing for syncronous I/O multiplexing */
select_fd = 0;
FD_ZERO(&bkp_read_descs);
FD_SET(config.telemetry_sock, &bkp_read_descs);
{
char srv_string[INET6_ADDRSTRLEN];
struct host_addr srv_addr;
u_int16_t srv_port;
sa_to_addr(&server, &srv_addr, &srv_port);
addr_to_str(srv_string, &srv_addr);
Log(LOG_INFO, "INFO ( %s/%s ): waiting for telemetry data on %s:%u/%s\n", config.name, t_data->log_str, srv_string, srv_port, srv_proto);
}
/* Preparing ACL, if any */
if (config.telemetry_allow_file) load_allow_file(config.telemetry_allow_file, &allow);
if (telemetry_misc_db->msglog_backend_methods) {
#ifdef WITH_JANSSON
if (!config.telemetry_msglog_output) config.telemetry_msglog_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): telemetry_daemon_msglog_output set to json but will produce no output (missing --enable-jansson).\n", config.name, t_data->log_str);
#endif
}
if (telemetry_misc_db->dump_backend_methods) {
#ifdef WITH_JANSSON
if (!config.telemetry_dump_output) config.telemetry_dump_output = PRINT_OUTPUT_JSON;
#else
Log(LOG_WARNING, "WARN ( %s/%s ): telemetry_table_dump_output set to json but will produce no output (missing --enable-jansson).\n", config.name, t_data->log_str);
#endif
}
if (telemetry_misc_db->dump_backend_methods) {
char dump_roundoff[] = "m";
time_t tmp_time;
if (config.telemetry_dump_refresh_time) {
gettimeofday(&telemetry_misc_db->log_tstamp, NULL);
dump_refresh_deadline = telemetry_misc_db->log_tstamp.tv_sec;
tmp_time = roundoff_time(dump_refresh_deadline, dump_roundoff);
while ((tmp_time+config.telemetry_dump_refresh_time) < dump_refresh_deadline) {
tmp_time += config.telemetry_dump_refresh_time;
}
dump_refresh_deadline = tmp_time;
dump_refresh_deadline += config.telemetry_dump_refresh_time; /* it's a deadline not a basetime */
}
else {
config.telemetry_dump_file = NULL;
telemetry_misc_db->dump_backend_methods = FALSE;
Log(LOG_WARNING, "WARN ( %s/%s ): Invalid 'telemetry_dump_refresh_time'.\n", config.name, t_data->log_str);
}
if (config.telemetry_dump_amqp_routing_key) telemetry_dump_init_amqp_host();
if (config.telemetry_dump_kafka_topic) telemetry_dump_init_kafka_host();
}
select_fd = bkp_select_fd = (config.telemetry_sock + 1);
recalc_fds = FALSE;
telemetry_link_misc_structs(telemetry_misc_db);
for (;;) {
select_again:
if (recalc_fds) {
select_fd = config.telemetry_sock;
max_peers_idx = -1; /* .. since valid indexes include 0 */
for (peers_idx = 0, peers_num = 0; peers_idx < config.telemetry_max_peers; peers_idx++) {
if (select_fd < telemetry_peers[peers_idx].fd) select_fd = telemetry_peers[peers_idx].fd;
if (telemetry_peers[peers_idx].fd) {
max_peers_idx = peers_idx;
peers_num++;
}
}
select_fd++;
max_peers_idx++;
bkp_select_fd = select_fd;
recalc_fds = FALSE;
}
else select_fd = bkp_select_fd;
memcpy(&read_descs, &bkp_read_descs, sizeof(bkp_read_descs));
if (telemetry_misc_db->dump_backend_methods) {
int delta;
calc_refresh_timeout_sec(dump_refresh_deadline, telemetry_misc_db->log_tstamp.tv_sec, &delta);
dump_refresh_timeout.tv_sec = delta;
dump_refresh_timeout.tv_usec = 0;
drt_ptr = &dump_refresh_timeout;
}
else drt_ptr = NULL;
select_num = select(select_fd, &read_descs, NULL, NULL, drt_ptr);
if (select_num < 0) goto select_again;
// XXX: UDP case: timeout handling (to be tested)
if (config.telemetry_port_udp) {
now = time(NULL);
if (now > (last_udp_timeout_check + TELEMETRY_UDP_TIMEOUT_INTERVAL)) {
for (peers_idx = 0; peers_idx < config.telemetry_max_peers; peers_idx++) {
telemetry_peer_udp_timeout *peer_udp_timeout;
peer = &telemetry_peers[peers_idx];
peer_z = &telemetry_peers_z[peers_idx];
peer_udp_timeout = &telemetry_peers_udp_timeout[peers_idx];
if (peer->fd) {
if (now > (peer_udp_timeout->last_msg + config.telemetry_udp_timeout)) {
Log(LOG_INFO, "INFO ( %s/%s ): [%s] telemetry UDP peer removed (timeout).\n", config.name, t_data->log_str, peer->addr_str);
telemetry_peer_close(peer, FUNC_TYPE_TELEMETRY);
if (telemetry_is_zjson(decoder)) telemetry_peer_z_close(peer_z);
recalc_fds = TRUE;
}
}
}
}
}
if (reload_log_telemetry_thread) {
for (peers_idx = 0; peers_idx < config.telemetry_max_peers; peers_idx++) {
if (telemetry_misc_db->peers_log[peers_idx].fd) {
fclose(telemetry_misc_db->peers_log[peers_idx].fd);
telemetry_misc_db->peers_log[peers_idx].fd = open_output_file(telemetry_misc_db->peers_log[peers_idx].filename, "a", FALSE);
setlinebuf(telemetry_misc_db->peers_log[peers_idx].fd);
}
else break;
}
}
if (telemetry_misc_db->msglog_backend_methods || telemetry_misc_db->dump_backend_methods) {
gettimeofday(&telemetry_misc_db->log_tstamp, NULL);
compose_timestamp(telemetry_misc_db->log_tstamp_str, SRVBUFLEN, &telemetry_misc_db->log_tstamp, TRUE, config.timestamps_since_epoch);
if (telemetry_misc_db->dump_backend_methods) {
while (telemetry_misc_db->log_tstamp.tv_sec > dump_refresh_deadline) {
telemetry_handle_dump_event(t_data);
dump_refresh_deadline += config.telemetry_dump_refresh_time;
}
}
#ifdef WITH_RABBITMQ
if (config.telemetry_msglog_amqp_routing_key) {
time_t last_fail = P_broker_timers_get_last_fail(&telemetry_daemon_msglog_amqp_host.btimers);
if (last_fail && ((last_fail + P_broker_timers_get_retry_interval(&telemetry_daemon_msglog_amqp_host.btimers)) <= telemetry_misc_db->log_tstamp.tv_sec)) {
telemetry_daemon_msglog_init_amqp_host();
p_amqp_connect_to_publish(&telemetry_daemon_msglog_amqp_host);
}
}
#endif
#ifdef WITH_KAFKA
if (config.telemetry_msglog_kafka_topic) {
time_t last_fail = P_broker_timers_get_last_fail(&telemetry_daemon_msglog_kafka_host.btimers);
if (last_fail && ((last_fail + P_broker_timers_get_retry_interval(&telemetry_daemon_msglog_kafka_host.btimers)) <= telemetry_misc_db->log_tstamp.tv_sec))
telemetry_daemon_msglog_init_kafka_host();
}
#endif
}
/*
If select_num == 0 then we got out of select() due to a timeout rather
than because we had a message from a peeer to handle. By now we did all
routine checks and can happily return to selet() again.
*/
if (!select_num) goto select_again;
/* New connection is coming in */
if (FD_ISSET(config.telemetry_sock, &read_descs)) {
if (config.telemetry_port_tcp) {
fd = accept(config.telemetry_sock, (struct sockaddr *) &client, &clen);
if (fd == ERR) goto read_data;
}
else if (config.telemetry_port_udp) {
char dummy_local_buf[TRUE];
ret = recvfrom(config.telemetry_sock, dummy_local_buf, TRUE, MSG_PEEK, (struct sockaddr *) &client, &clen);
if (ret <= 0) goto select_again;
else fd = config.telemetry_sock;
}
#if defined ENABLE_IPV6
ipv4_mapped_to_ipv4(&client);
#endif
/* If an ACL is defined, here we check against and enforce it */
if (allow.num) allowed = check_allow(&allow, (struct sockaddr *)&client);
else allowed = TRUE;
if (!allowed) {
if (config.telemetry_port_tcp) close(fd);
goto read_data;
}
/* XXX: UDP case may be optimized further */
if (config.telemetry_port_udp) {
telemetry_peer_udp_cache *tpuc_ret;
u_int16_t client_port;
sa_to_addr(&client, &tpuc.addr, &client_port);
tpuc_ret = pm_tfind(&tpuc, &telemetry_peers_udp_cache, telemetry_tpuc_addr_cmp);
if (tpuc_ret) {
peer = &telemetry_peers[tpuc_ret->index];
telemetry_peers_udp_timeout[tpuc_ret->index].last_msg = now;
goto read_data;
}
}
for (peer = NULL, peers_idx = 0; peers_idx < config.telemetry_max_peers; peers_idx++) {
if (!telemetry_peers[peers_idx].fd) {
peer = &telemetry_peers[peers_idx];
if (telemetry_peer_init(peer, FUNC_TYPE_TELEMETRY)) peer = NULL;
if (telemetry_is_zjson(decoder)) {
peer_z = &telemetry_peers_z[peers_idx];
if (telemetry_peer_z_init(peer_z)) {
peer = NULL;
peer_z = NULL;
}
}
if (peer) {
recalc_fds = TRUE;
if (config.telemetry_port_udp) {
tpuc.index = peers_idx;
telemetry_peers_udp_timeout[peers_idx].last_msg = now;
if (!pm_tsearch(&tpuc, &telemetry_peers_udp_cache, telemetry_tpuc_addr_cmp, sizeof(telemetry_peer_udp_cache)))
Log(LOG_WARNING, "WARN ( %s/%s ): tsearch() unable to insert in UDP peers cache.\n", config.name, t_data->log_str);
}
}
break;
}
}
if (!peer) {
/* We briefly accept the new connection to be able to drop it */
Log(LOG_ERR, "ERROR ( %s/%s ): Insufficient number of telemetry peers has been configured by telemetry_max_peers (%d).\n",
config.name, t_data->log_str, config.telemetry_max_peers);
if (config.telemetry_port_tcp) close(fd);
goto read_data;
}
peer->fd = fd;
if (config.telemetry_port_tcp) FD_SET(peer->fd, &bkp_read_descs);
peer->addr.family = ((struct sockaddr *)&client)->sa_family;
if (peer->addr.family == AF_INET) {
peer->addr.address.ipv4.s_addr = ((struct sockaddr_in *)&client)->sin_addr.s_addr;
peer->tcp_port = ntohs(((struct sockaddr_in *)&client)->sin_port);
}
#if defined ENABLE_IPV6
else if (peer->addr.family == AF_INET6) {
memcpy(&peer->addr.address.ipv6, &((struct sockaddr_in6 *)&client)->sin6_addr, 16);
peer->tcp_port = ntohs(((struct sockaddr_in6 *)&client)->sin6_port);
}
#endif
addr_to_str(peer->addr_str, &peer->addr);
if (telemetry_misc_db->msglog_backend_methods)
telemetry_peer_log_init(peer, config.telemetry_msglog_output, FUNC_TYPE_TELEMETRY);
if (telemetry_misc_db->dump_backend_methods)
telemetry_dump_init_peer(peer);
peers_num++;
Log(LOG_INFO, "INFO ( %s/%s ): [%s] telemetry peers usage: %u/%u\n",
config.name, t_data->log_str, peer->addr_str, peers_num, config.telemetry_max_peers);
}
read_data:
/*
We have something coming in: let's lookup which peer is that.
FvD: To avoid starvation of the "later established" peers, we
offset the start of the search in a round-robin style.
*/
if (config.telemetry_port_tcp) {
for (peer = NULL, peers_idx = 0; peers_idx < max_peers_idx; peers_idx++) {
int loc_idx = (peers_idx + peers_idx_rr) % max_peers_idx;
if (telemetry_peers[loc_idx].fd && FD_ISSET(telemetry_peers[loc_idx].fd, &read_descs)) {
peer = &telemetry_peers[loc_idx];
if (telemetry_is_zjson(decoder)) peer_z = &telemetry_peers_z[loc_idx];
peers_idx_rr = (peers_idx_rr + 1) % max_peers_idx;
break;
}
}
}
if (!peer) goto select_again;
recv_flags = 0;
switch (decoder) {
case TELEMETRY_DECODER_JSON:
ret = telemetry_recv_json(peer, 0, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_JSON;
break;
case TELEMETRY_DECODER_ZJSON:
ret = telemetry_recv_zjson(peer, peer_z, 0, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_JSON;
break;
case TELEMETRY_DECODER_CISCO:
ret = telemetry_recv_cisco(peer, &recv_flags, &data_decoder);
break;
case TELEMETRY_DECODER_CISCO_JSON:
ret = telemetry_recv_cisco_json(peer, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_JSON;
break;
case TELEMETRY_DECODER_CISCO_ZJSON:
ret = telemetry_recv_cisco_zjson(peer, peer_z, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_JSON;
break;
case TELEMETRY_DECODER_CISCO_GPB:
ret = telemetry_recv_cisco_gpb(peer, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_GPB;
break;
case TELEMETRY_DECODER_CISCO_GPB_KV:
ret = telemetry_recv_cisco_gpb_kv(peer, &recv_flags);
data_decoder = TELEMETRY_DATA_DECODER_GPB;
break;
default:
ret = TRUE; recv_flags = ERR;
data_decoder = TELEMETRY_DATA_DECODER_UNKNOWN;
break;
}
if (ret <= 0) {
Log(LOG_INFO, "INFO ( %s/%s ): [%s] connection reset by peer (%d).\n", config.name, t_data->log_str, peer->addr_str, errno);
FD_CLR(peer->fd, &bkp_read_descs);
telemetry_peer_close(peer, FUNC_TYPE_TELEMETRY);
if (telemetry_is_zjson(decoder)) telemetry_peer_z_close(peer_z);
recalc_fds = TRUE;
}
else {
if (recv_flags != ERR) telemetry_process_data(peer, t_data, data_decoder);
}
}
}
