NS_PRIVATE void _ns_warning_std( const nschar *warning, ns_va_list args )
{
nsint level;
ns_assert( NULL != warning );
ns_print( "**warning" );
level = _ns_warning_parse_level( warning );
if( 0 != level )
{
warning += 3;
switch( level )
{
case 1:
ns_print( "(level::caution)" );
break;
case 2:
ns_print( "(level::recoverable)" );
break;
case 3:
ns_print( "(level::critical)" );
break;
case 4:
ns_print( "(level::fatal)" );
break;
}
}
ns_print( "** " );
ns_vprint( warning, args );
ns_print_newline();
}
static const char *
fmt_sockaddr(struct sockaddr *sa, struct sockaddr *mask, int flags)
{
static char workbuf[128];
char *cplim;
char *cp = workbuf;
switch(sa->sa_family) {
case AF_INET:
{
register struct sockaddr_in *sin = (struct sockaddr_in *)sa;
if ((sin->sin_addr.s_addr == INADDR_ANY) &&
mask &&
ntohl(((struct sockaddr_in *)mask)->sin_addr.s_addr)
==0L)
cp = "default" ;
else if (flags & RTF_HOST)
cp = routename(sin->sin_addr.s_addr);
else if (mask)
cp = netname(sin->sin_addr.s_addr,
ntohl(((struct sockaddr_in *)mask)
->sin_addr.s_addr));
else
cp = netname(sin->sin_addr.s_addr, 0L);
break;
}
#ifdef INET6
case AF_INET6:
{
struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)sa;
struct in6_addr *in6 = &sa6->sin6_addr;
/*
* XXX: This is a special workaround for KAME kernels.
* sin6_scope_id field of SA should be set in the future.
*/
if (IN6_IS_ADDR_LINKLOCAL(in6) ||
IN6_IS_ADDR_MC_LINKLOCAL(in6) ||
IN6_IS_ADDR_MC_NODELOCAL(in6)) {
/* XXX: override is ok? */
sa6->sin6_scope_id = (u_int32_t)ntohs(*(u_short *)&in6->s6_addr[2]);
*(u_short *)&in6->s6_addr[2] = 0;
}
if (flags & RTF_HOST)
cp = routename6(sa6);
else if (mask)
cp = netname6(sa6,
&((struct sockaddr_in6 *)mask)->sin6_addr);
else {
cp = netname6(sa6, NULL);
}
break;
}
#endif /*INET6*/
case AF_IPX:
{
struct ipx_addr work = ((struct sockaddr_ipx *)sa)->sipx_addr;
if (ipx_nullnet(satoipx_addr(work)))
cp = "default";
else
cp = ipx_print(sa);
break;
}
case AF_APPLETALK:
{
if (!(flags & RTF_HOST) && mask)
cp = atalk_print2(sa,mask,9);
else
cp = atalk_print(sa,11);
break;
}
case AF_NETGRAPH:
{
printf("%s", ((struct sockaddr_ng *)sa)->sg_data);
break;
}
#ifdef NS
case AF_NS:
cp = ns_print(sa);
break;
#endif
case AF_LINK:
{
register struct sockaddr_dl *sdl = (struct sockaddr_dl *)sa;
if (sdl->sdl_nlen == 0 && sdl->sdl_alen == 0 &&
sdl->sdl_slen == 0)
(void) sprintf(workbuf, "link#%d", sdl->sdl_index);
else
switch (sdl->sdl_type) {
case IFT_ETHER:
case IFT_L2VLAN:
if (sdl->sdl_alen == ETHER_ADDR_LEN) {
cp = ether_ntoa((struct ether_addr *)
(sdl->sdl_data + sdl->sdl_nlen));
break;
}
/* FALLTHROUGH */
default:
cp = link_ntoa(sdl);
break;
}
break;
}
default:
{
register u_char *s = (u_char *)sa->sa_data, *slim;
slim = sa->sa_len + (u_char *) sa;
cplim = cp + sizeof(workbuf) - 6;
cp += sprintf(cp, "(%d)", sa->sa_family);
while (s < slim && cp < cplim) {
cp += sprintf(cp, " %02x", *s++);
if (s < slim)
cp += sprintf(cp, "%02x", *s++);
}
cp = workbuf;
}
}
return (cp);
}
char *
RaDumpUserBuffer (struct ArgusParserStruct *parser, struct ArgusRecordStruct *argus, int ind, int len)
{
struct ArgusFlow *flow = (struct ArgusFlow *) argus->dsrs[ARGUS_FLOW_INDEX];
unsigned short sport = 0, dport = 0;
int type, proto, process = 0;
struct ArgusDataStruct *user = NULL;
u_char buf[MAXSTRLEN], *bp = NULL, dchr;
int slen = 0, done = 0;
switch (ind) {
case ARGUS_SRCUSERDATA_INDEX:
dchr = 's';
break;
case ARGUS_DSTUSERDATA_INDEX:
dchr = 'd';
break;
}
if ((user = (struct ArgusDataStruct *)argus->dsrs[ind]) != NULL) {
bp = (u_char *) &user->array;
slen = (user->hdr.argus_dsrvl16.len - 2 ) * 4;
slen = (user->count < slen) ? user->count : slen;
slen = (slen > len) ? len : slen;
snapend = bp + slen;
}
if (flow != NULL) {
switch (flow->hdr.subtype & 0x3F) {
case ARGUS_FLOW_CLASSIC5TUPLE: {
switch (type = flow->hdr.argus_dsrvl8.qual) {
case ARGUS_TYPE_IPV4:
switch (flow->ip_flow.ip_p) {
case IPPROTO_TCP:
case IPPROTO_UDP: {
proto = flow->ip_flow.ip_p;
sport = flow->ip_flow.sport;
dport = flow->ip_flow.dport;
process++;
break;
}
case IPPROTO_IGMP: {
struct ArgusMetricStruct *metric = (void *)argus->dsrs[ARGUS_METRIC_INDEX];
if ((metric != NULL) && (((ind == ARGUS_SRCUSERDATA_INDEX) && metric->src.pkts) ||
((ind == ARGUS_DSTUSERDATA_INDEX) && metric->dst.pkts))) {
igmp_print(bp, slen);
done++;
break;
}
}
case IPPROTO_PIM: {
struct ArgusMetricStruct *metric = (void *)argus->dsrs[ARGUS_METRIC_INDEX];
if ((metric != NULL) && (((ind == ARGUS_SRCUSERDATA_INDEX) && metric->src.pkts) ||
((ind == ARGUS_DSTUSERDATA_INDEX) && metric->dst.pkts))) {
pim_print(bp, slen);
done++;
break;
}
}
}
break;
case ARGUS_TYPE_IPV6: {
switch (flow->ipv6_flow.ip_p) {
case IPPROTO_TCP:
case IPPROTO_UDP: {
proto = flow->ipv6_flow.ip_p;
sport = flow->ipv6_flow.sport;
dport = flow->ipv6_flow.dport;
process++;
break;
}
case IPPROTO_PIM: {
struct ArgusMetricStruct *metric = (void *)argus->dsrs[ARGUS_METRIC_INDEX];
if ((metric != NULL) && (((ind == ARGUS_SRCUSERDATA_INDEX) && metric->src.pkts) ||
((ind == ARGUS_DSTUSERDATA_INDEX) && metric->dst.pkts))) {
pim_print(bp, slen);
done++;
break;
}
}
}
break;
}
case ARGUS_TYPE_ARP: {
if (ind == ARGUS_SRCUSERDATA_INDEX) {
arp_src_print(parser, argus);
}
if (ind == ARGUS_DSTUSERDATA_INDEX) {
arp_dst_print(parser, argus);
}
done++;
break;
}
/*
struct ArgusMacFlow {
struct ether_header ehdr;
unsigned char dsap, ssap;
};
*/
case ARGUS_TYPE_ETHER: {
if (flow != NULL)
if ((flow->mac_flow.mac_union.ether.ssap == LLCSAP_BPDU) &&
(flow->mac_flow.mac_union.ether.dsap == LLCSAP_BPDU))
stp_print (bp, slen);
done++;
break;
}
}
}
}
}
if (process && bp) {
*(int *)&buf = 0;
#define ISPORT(p) (dport == (p) || sport == (p))
switch (proto) {
case IPPROTO_TCP: {
if (ISPORT(BGP_PORT))
bgp_print(bp, slen);
else if (ISPORT(TELNET_PORT))
telnet_print(bp, slen);
else if (ISPORT(PPTP_PORT))
pptp_print(bp, slen);
else if (ISPORT(NETBIOS_SSN_PORT))
nbt_tcp_print(bp, slen);
else if (ISPORT(BEEP_PORT))
beep_print(bp, slen);
else if (ISPORT(NAMESERVER_PORT) || ISPORT(MULTICASTDNS_PORT))
ns_print(bp + 2, slen - 2, 0);
else if (ISPORT(MSDP_PORT))
msdp_print(bp, slen);
else if (ISPORT(LDP_PORT))
ldp_print(bp, slen);
else {
int elen = 0;
parser->eflag = ArgusThisEflag;
elen = ArgusEncode (parser, (const char *)bp, NULL, slen, ArgusBuf, sizeof(ArgusBuf));
parser->eflag = ARGUS_HEXDUMP;
}
break;
}
case IPPROTO_UDP: {
if (ISPORT(NAMESERVER_PORT))
ns_print(bp, slen, 0);
else if (ISPORT(MULTICASTDNS_PORT))
ns_print(bp, slen, 1);
else if (ISPORT(NTP_PORT))
ntp_print(bp, slen);
else if (ISPORT(LDP_PORT))
ldp_print(bp, slen);
else if (ISPORT(RADIUS_PORT) || ISPORT(RADIUS_NEW_PORT) ||
ISPORT(RADIUS_ACCOUNTING_PORT) ||
ISPORT(RADIUS_NEW_ACCOUNTING_PORT) )
radius_print(bp, slen);
else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
krb_print(bp, slen);
else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
snmp_print(bp, slen);
else if (ISPORT(TIMED_PORT))
timed_print(bp, slen);
else if (ISPORT(TFTP_PORT))
tftp_print(bp, slen);
else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
bootp_print(bp, slen);
else if (ISPORT(RIP_PORT))
rip_print(bp, slen);
else if (ISPORT(AODV_PORT))
aodv_print(bp, slen, 0);
else if (ISPORT(L2TP_PORT))
l2tp_print(bp, slen);
else if (ISPORT(SYSLOG_PORT))
syslog_print(bp, slen);
else if (ISPORT(LMP_PORT))
lmp_print(bp, slen);
else if ((sport >= RX_PORT_LOW && sport <= RX_PORT_HIGH) ||
(dport >= RX_PORT_LOW && dport <= RX_PORT_HIGH))
rx_print(bp, slen, sport, dport);
else if (dport == BFD_CONTROL_PORT || dport == BFD_ECHO_PORT )
bfd_print(bp, slen, dport);
else if (ISPORT(NETBIOS_NS_PORT))
nbt_udp137_print(bp, slen);
else if (ISPORT(NETBIOS_DGRAM_PORT))
nbt_udp138_print(bp, slen);
else if (ISPORT(ISAKMP_PORT))
isakmp_print(bp, slen);
else if (ISPORT(ISAKMP_PORT_NATT))
isakmp_rfc3948_print(bp, slen);
else if (ISPORT(ISAKMP_PORT_USER1) || ISPORT(ISAKMP_PORT_USER2))
isakmp_print(bp, slen);
else {
int elen = 0;
parser->eflag = ArgusThisEflag;
elen = ArgusEncode (parser, (const char *)bp, NULL, slen, ArgusBuf, sizeof(ArgusBuf));
parser->eflag = ARGUS_HEXDUMP;
}
/*
else if (ISPORT(3456))
vat_print(bp, slen);
else if (ISPORT(ZEPHYR_SRV_PORT) || ISPORT(ZEPHYR_CLT_PORT))
zephyr_print(bp, slen);
else if (ISPORT(RIPNG_PORT))
ripng_print(bp, slen);
else if (ISPORT(DHCP6_SERV_PORT) || ISPORT(DHCP6_CLI_PORT))
dhcp6_print(bp, slen);
else if (dport == 4567)
wb_print(bp, slen);
else if (ISPORT(CISCO_AUTORP_PORT))
cisco_autorp_print(bp, slen);
else if (ISPORT(RADIUS_PORT) || ISPORT(RADIUS_NEW_PORT) ||
ISPORT(RADIUS_ACCOUNTING_PORT) || ISPORT(RADIUS_NEW_ACCOUNTING_PORT) )
radius_print(bp, slen);
else if (dport == HSRP_PORT)
hsrp_print(bp, slen);
else if (ISPORT(LWRES_PORT))
lwres_print(bp, slen);
else if (ISPORT(MPLS_LSP_PING_PORT))
lspping_print(bp, slen);
*/
}
}
}
return (ArgusBuf);
}
