mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
200 lines
6.7 KiB
C
200 lines
6.7 KiB
C
/* Copyright (C) 2007-2014 Open Information Security Foundation
|
|
*
|
|
* You can copy, redistribute or modify this Program under the terms of
|
|
* the GNU General Public License version 2 as published by the Free
|
|
* Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* version 2 along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
|
* 02110-1301, USA.
|
|
*/
|
|
|
|
/**
|
|
* \file
|
|
*
|
|
* \author Anoop Saldanha <anoopsaldanha@gmail.com>
|
|
*
|
|
*/
|
|
|
|
#ifndef __UTIL_MPM_AC__H__
|
|
#define __UTIL_MPM_AC__H__
|
|
|
|
#define SC_AC_STATE_TYPE_U16 uint16_t
|
|
#define SC_AC_STATE_TYPE_U32 uint32_t
|
|
|
|
#ifdef __SC_CUDA_SUPPORT__
|
|
#include "suricata-common.h"
|
|
#include "util-cuda.h"
|
|
#include "util-cuda-vars.h"
|
|
#include "decode.h"
|
|
#include "util-cuda-buffer.h"
|
|
#include "util-mpm.h"
|
|
#include "flow.h"
|
|
#endif /* __SC_CUDA_SUPPORT__ */
|
|
|
|
typedef struct SCACPatternList_ {
|
|
uint8_t *cs;
|
|
uint16_t patlen;
|
|
|
|
/* sid(s) for this pattern */
|
|
uint32_t sids_size;
|
|
SigIntId *sids;
|
|
} SCACPatternList;
|
|
|
|
typedef struct SCACOutputTable_ {
|
|
/* list of pattern sids */
|
|
uint32_t *pids;
|
|
/* no of entries we have in pids */
|
|
uint32_t no_of_entries;
|
|
} SCACOutputTable;
|
|
|
|
typedef struct SCACCtx_ {
|
|
/* pattern arrays. We need this only during the goto table creation phase */
|
|
MpmPattern **parray;
|
|
|
|
/* no of states used by ac */
|
|
uint32_t state_count;
|
|
|
|
uint32_t pattern_id_bitarray_size;
|
|
|
|
/* the all important memory hungry state_table */
|
|
SC_AC_STATE_TYPE_U16 (*state_table_u16)[256];
|
|
/* the all important memory hungry state_table */
|
|
SC_AC_STATE_TYPE_U32 (*state_table_u32)[256];
|
|
|
|
/* goto_table, failure table and output table. Needed to create state_table.
|
|
* Will be freed, once we have created the state_table */
|
|
int32_t (*goto_table)[256];
|
|
int32_t *failure_table;
|
|
SCACOutputTable *output_table;
|
|
SCACPatternList *pid_pat_list;
|
|
|
|
/* the size of each state */
|
|
uint32_t single_state_size;
|
|
|
|
uint32_t allocated_state_count;
|
|
|
|
#ifdef __SC_CUDA_SUPPORT__
|
|
CUdeviceptr state_table_u16_cuda;
|
|
CUdeviceptr state_table_u32_cuda;
|
|
#endif /* __SC_CUDA_SUPPORT__ */
|
|
} SCACCtx;
|
|
|
|
typedef struct SCACThreadCtx_ {
|
|
/* the total calls we make to the search function */
|
|
uint32_t total_calls;
|
|
/* the total patterns that we ended up matching against */
|
|
uint64_t total_matches;
|
|
} SCACThreadCtx;
|
|
|
|
void MpmACRegister(void);
|
|
|
|
|
|
#ifdef __SC_CUDA_SUPPORT__
|
|
|
|
#define MPM_AC_CUDA_MODULE_NAME "ac_cuda"
|
|
#define MPM_AC_CUDA_MODULE_CUDA_BUFFER_NAME "ac_cuda_cb"
|
|
|
|
static inline void CudaBufferPacket(CudaThreadVars *ctv, Packet *p)
|
|
{
|
|
if (p->cuda_pkt_vars.cuda_mpm_enabled) {
|
|
while (!p->cuda_pkt_vars.cuda_done) {
|
|
SCMutexLock(&p->cuda_pkt_vars.cuda_mutex);
|
|
if (p->cuda_pkt_vars.cuda_done) {
|
|
SCMutexUnlock(&p->cuda_pkt_vars.cuda_mutex);
|
|
break;
|
|
} else {
|
|
SCCondWait(&p->cuda_pkt_vars.cuda_cond, &p->cuda_pkt_vars.cuda_mutex);
|
|
SCMutexUnlock(&p->cuda_pkt_vars.cuda_mutex);
|
|
}
|
|
}
|
|
}
|
|
p->cuda_pkt_vars.cuda_done = 0;
|
|
|
|
if (p->payload_len == 0 ||
|
|
(p->flags & (PKT_NOPAYLOAD_INSPECTION & PKT_NOPACKET_INSPECTION)) ||
|
|
(p->flags & PKT_ALLOC) ||
|
|
(ctv->data_buffer_size_min_limit != 0 && p->payload_len < ctv->data_buffer_size_min_limit) ||
|
|
(p->payload_len > ctv->data_buffer_size_max_limit && ctv->data_buffer_size_max_limit != 0) ) {
|
|
p->cuda_pkt_vars.cuda_mpm_enabled = 0;
|
|
return;
|
|
}
|
|
|
|
MpmCtx *mpm_ctx = NULL;
|
|
if (p->proto == IPPROTO_TCP) {
|
|
if (p->flowflags & FLOW_PKT_TOSERVER)
|
|
mpm_ctx = ctv->mpm_proto_tcp_ctx_ts;
|
|
else
|
|
mpm_ctx = ctv->mpm_proto_tcp_ctx_tc;
|
|
} else if (p->proto == IPPROTO_UDP) {
|
|
if (p->flowflags & FLOW_PKT_TOSERVER)
|
|
mpm_ctx = ctv->mpm_proto_udp_ctx_ts;
|
|
else
|
|
mpm_ctx = ctv->mpm_proto_udp_ctx_tc;
|
|
} else {
|
|
mpm_ctx = ctv->mpm_proto_other_ctx;
|
|
}
|
|
if (mpm_ctx == NULL || mpm_ctx->pattern_cnt == 0) {
|
|
p->cuda_pkt_vars.cuda_mpm_enabled = 0;
|
|
return;
|
|
}
|
|
|
|
#if __WORDSIZE==64
|
|
CudaBufferSlice *slice = CudaBufferGetSlice(ctv->cuda_ac_cb,
|
|
p->payload_len + sizeof(uint64_t) + sizeof(CUdeviceptr),
|
|
(void *)p);
|
|
if (slice == NULL) {
|
|
SCLogError(SC_ERR_FATAL, "Error retrieving slice. Please report "
|
|
"this to dev.");
|
|
p->cuda_pkt_vars.cuda_mpm_enabled = 0;
|
|
return;
|
|
}
|
|
*((uint64_t *)(slice->buffer + slice->start_offset)) = p->payload_len;
|
|
*((CUdeviceptr *)(slice->buffer + slice->start_offset + sizeof(uint64_t))) = ((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda;
|
|
memcpy(slice->buffer + slice->start_offset + sizeof(uint64_t) + sizeof(CUdeviceptr), p->payload, p->payload_len);
|
|
#else
|
|
CudaBufferSlice *slice = CudaBufferGetSlice(ctv->cuda_ac_cb,
|
|
p->payload_len + sizeof(uint32_t) + sizeof(CUdeviceptr),
|
|
(void *)p);
|
|
if (slice == NULL) {
|
|
SCLogError(SC_ERR_FATAL, "Error retrieving slice. Please report "
|
|
"this to dev.");
|
|
p->cuda_pkt_vars.cuda_mpm_enabled = 0;
|
|
return;
|
|
}
|
|
*((uint32_t *)(slice->buffer + slice->start_offset)) = p->payload_len;
|
|
*((CUdeviceptr *)(slice->buffer + slice->start_offset + sizeof(uint32_t))) = ((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda;
|
|
memcpy(slice->buffer + slice->start_offset + sizeof(uint32_t) + sizeof(CUdeviceptr), p->payload, p->payload_len);
|
|
#endif
|
|
p->cuda_pkt_vars.cuda_mpm_enabled = 1;
|
|
SC_ATOMIC_SET(slice->done, 1);
|
|
|
|
SCLogDebug("cuda ac buffering packet %p, payload_len - %"PRIu16" and deviceptr - %"PRIu64"\n",
|
|
p, p->payload_len, (unsigned long)((SCACCtx *)(mpm_ctx->ctx))->state_table_u32_cuda);
|
|
|
|
return;
|
|
}
|
|
|
|
void MpmACCudaRegister(void);
|
|
void SCACConstructBoth16and32StateTables(void);
|
|
int MpmCudaBufferSetup(void);
|
|
int MpmCudaBufferDeSetup(void);
|
|
void SCACCudaStartDispatcher(void);
|
|
void SCACCudaKillDispatcher(void);
|
|
uint32_t SCACCudaPacketResultsProcessing(Packet *p, const MpmCtx *mpm_ctx,
|
|
PrefilterRuleStore *pmq);
|
|
void DetermineCudaStateTableSize(DetectEngineCtx *de_ctx);
|
|
|
|
void CudaReleasePacket(Packet *p);
|
|
|
|
#endif /* __SC_CUDA_SUPPORT__ */
|
|
|
|
|
|
#endif /* __UTIL_MPM_AC__H__ */
|