mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
117 lines
3.2 KiB
C
117 lines
3.2 KiB
C
/* Copyright (C) 2007-2010 Open Information Security Foundation
|
|
*
|
|
* You can copy, redistribute or modify this Program under the terms of
|
|
* the GNU General Public License version 2 as published by the Free
|
|
* Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* version 2 along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
|
* 02110-1301, USA.
|
|
*/
|
|
|
|
/**
|
|
* \file
|
|
*
|
|
* \author Gurvinder Singh <gurvindersinghdahiya@gmail.com>
|
|
*
|
|
* File to provide the protocol names based on protocol numbers defined in the
|
|
* specified protocol file.
|
|
*/
|
|
|
|
#include "suricata-common.h"
|
|
#include "util-proto-name.h"
|
|
|
|
static int init_once = 0;
|
|
|
|
/**
|
|
* \brief Function to load the protocol names from the specified protocol
|
|
* file.
|
|
*/
|
|
void SCProtoNameInit()
|
|
{
|
|
BUG_ON(init_once);
|
|
init_once++;
|
|
memset(known_proto, 0x00, sizeof(known_proto));
|
|
|
|
/* Load the known protocols name from the /etc/protocols file */
|
|
FILE *fp = fopen(PROTO_FILE,"r");
|
|
if (fp != NULL) {
|
|
char line[200];
|
|
char *ptr = NULL;
|
|
|
|
while(fgets(line, sizeof(line), fp) != NULL) {
|
|
if (line[0] == '#')
|
|
continue;
|
|
|
|
char *name = strtok_r(line," \t", &ptr);
|
|
if (name == NULL)
|
|
continue;
|
|
|
|
char *proto_ch = strtok_r(NULL," \t", &ptr);
|
|
if (proto_ch == NULL)
|
|
continue;
|
|
|
|
int proto = atoi(proto_ch);
|
|
if (proto >= 255)
|
|
continue;
|
|
|
|
char *cname = strtok_r(NULL, " \t", &ptr);
|
|
|
|
if (known_proto[proto] != NULL) {
|
|
SCFree(known_proto[proto]);
|
|
}
|
|
|
|
if (cname != NULL) {
|
|
known_proto[proto] = SCStrdup(cname);
|
|
} else {
|
|
known_proto[proto] = SCStrdup(name);
|
|
}
|
|
if (unlikely(known_proto[proto] == NULL)) {
|
|
SCLogError(SC_ERR_MEM_ALLOC, "Failed proto name allocation");
|
|
continue;
|
|
}
|
|
int proto_len = strlen(known_proto[proto]);
|
|
if (proto_len > 0 && known_proto[proto][proto_len - 1] == '\n')
|
|
known_proto[proto][proto_len - 1] = '\0';
|
|
}
|
|
fclose(fp);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* \brief Function to check if the received protocol number is valid and do
|
|
* we have corresponding name entry for this number or not.
|
|
*
|
|
* \param proto Protocol number to be validated
|
|
* \retval ret On success returns TRUE otherwise FALSE
|
|
*/
|
|
uint8_t SCProtoNameValid(uint16_t proto)
|
|
{
|
|
uint8_t ret = FALSE;
|
|
|
|
if (proto <= 255 && known_proto[proto] != NULL) {
|
|
ret = TRUE;
|
|
}
|
|
|
|
return ret;
|
|
}
|
|
|
|
/**
|
|
* \brief Function to clears the memory used in storing the protocol names.
|
|
*/
|
|
void SCProtoNameDeInit()
|
|
{
|
|
int cnt;
|
|
/* clears the memory of loaded protocol names */
|
|
for (cnt = 0; cnt < 255; cnt++) {
|
|
if (known_proto[cnt] != NULL)
|
|
SCFree(known_proto[cnt]);
|
|
}
|
|
}
|