Logging.c 63 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043
  1. // SoftEther VPN Source Code - Stable Edition Repository
  2. // Cedar Communication Module
  3. //
  4. // SoftEther VPN Server, Client and Bridge are free software under GPLv2.
  5. //
  6. // Copyright (c) Daiyuu Nobori.
  7. // Copyright (c) SoftEther VPN Project, University of Tsukuba, Japan.
  8. // Copyright (c) SoftEther Corporation.
  9. //
  10. // All Rights Reserved.
  11. //
  12. // http://www.softether.org/
  13. //
  14. // Author: Daiyuu Nobori, Ph.D.
  15. // Comments: Tetsuo Sugiyama, Ph.D.
  16. //
  17. // This program is free software; you can redistribute it and/or
  18. // modify it under the terms of the GNU General Public License
  19. // version 2 as published by the Free Software Foundation.
  20. //
  21. // This program is distributed in the hope that it will be useful,
  22. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  23. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  24. // GNU General Public License for more details.
  25. //
  26. // You should have received a copy of the GNU General Public License version 2
  27. // along with this program; if not, write to the Free Software
  28. // Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
  29. //
  30. // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  31. // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  32. // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
  33. // IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
  34. // CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
  35. // TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
  36. // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  37. //
  38. // THE LICENSE AGREEMENT IS ATTACHED ON THE SOURCE-CODE PACKAGE
  39. // AS "LICENSE.TXT" FILE. READ THE TEXT FILE IN ADVANCE TO USE THE SOFTWARE.
  40. //
  41. //
  42. // THIS SOFTWARE IS DEVELOPED IN JAPAN, AND DISTRIBUTED FROM JAPAN,
  43. // UNDER JAPANESE LAWS. YOU MUST AGREE IN ADVANCE TO USE, COPY, MODIFY,
  44. // MERGE, PUBLISH, DISTRIBUTE, SUBLICENSE, AND/OR SELL COPIES OF THIS
  45. // SOFTWARE, THAT ANY JURIDICAL DISPUTES WHICH ARE CONCERNED TO THIS
  46. // SOFTWARE OR ITS CONTENTS, AGAINST US (SOFTETHER PROJECT, SOFTETHER
  47. // CORPORATION, DAIYUU NOBORI OR OTHER SUPPLIERS), OR ANY JURIDICAL
  48. // DISPUTES AGAINST US WHICH ARE CAUSED BY ANY KIND OF USING, COPYING,
  49. // MODIFYING, MERGING, PUBLISHING, DISTRIBUTING, SUBLICENSING, AND/OR
  50. // SELLING COPIES OF THIS SOFTWARE SHALL BE REGARDED AS BE CONSTRUED AND
  51. // CONTROLLED BY JAPANESE LAWS, AND YOU MUST FURTHER CONSENT TO
  52. // EXCLUSIVE JURISDICTION AND VENUE IN THE COURTS SITTING IN TOKYO,
  53. // JAPAN. YOU MUST WAIVE ALL DEFENSES OF LACK OF PERSONAL JURISDICTION
  54. // AND FORUM NON CONVENIENS. PROCESS MAY BE SERVED ON EITHER PARTY IN
  55. // THE MANNER AUTHORIZED BY APPLICABLE LAW OR COURT RULE.
  56. //
  57. // USE ONLY IN JAPAN. DO NOT USE THIS SOFTWARE IN ANOTHER COUNTRY UNLESS
  58. // YOU HAVE A CONFIRMATION THAT THIS SOFTWARE DOES NOT VIOLATE ANY
  59. // CRIMINAL LAWS OR CIVIL RIGHTS IN THAT PARTICULAR COUNTRY. USING THIS
  60. // SOFTWARE IN OTHER COUNTRIES IS COMPLETELY AT YOUR OWN RISK. THE
  61. // SOFTETHER VPN PROJECT HAS DEVELOPED AND DISTRIBUTED THIS SOFTWARE TO
  62. // COMPLY ONLY WITH THE JAPANESE LAWS AND EXISTING CIVIL RIGHTS INCLUDING
  63. // PATENTS WHICH ARE SUBJECTS APPLY IN JAPAN. OTHER COUNTRIES' LAWS OR
  64. // CIVIL RIGHTS ARE NONE OF OUR CONCERNS NOR RESPONSIBILITIES. WE HAVE
  65. // NEVER INVESTIGATED ANY CRIMINAL REGULATIONS, CIVIL LAWS OR
  66. // INTELLECTUAL PROPERTY RIGHTS INCLUDING PATENTS IN ANY OF OTHER 200+
  67. // COUNTRIES AND TERRITORIES. BY NATURE, THERE ARE 200+ REGIONS IN THE
  68. // WORLD, WITH DIFFERENT LAWS. IT IS IMPOSSIBLE TO VERIFY EVERY
  69. // COUNTRIES' LAWS, REGULATIONS AND CIVIL RIGHTS TO MAKE THE SOFTWARE
  70. // COMPLY WITH ALL COUNTRIES' LAWS BY THE PROJECT. EVEN IF YOU WILL BE
  71. // SUED BY A PRIVATE ENTITY OR BE DAMAGED BY A PUBLIC SERVANT IN YOUR
  72. // COUNTRY, THE DEVELOPERS OF THIS SOFTWARE WILL NEVER BE LIABLE TO
  73. // RECOVER OR COMPENSATE SUCH DAMAGES, CRIMINAL OR CIVIL
  74. // RESPONSIBILITIES. NOTE THAT THIS LINE IS NOT LICENSE RESTRICTION BUT
  75. // JUST A STATEMENT FOR WARNING AND DISCLAIMER.
  76. //
  77. //
  78. // SOURCE CODE CONTRIBUTION
  79. // ------------------------
  80. //
  81. // Your contribution to SoftEther VPN Project is much appreciated.
  82. // Please send patches to us through GitHub.
  83. // Read the SoftEther VPN Patch Acceptance Policy in advance:
  84. // http://www.softether.org/5-download/src/9.patch
  85. //
  86. //
  87. // DEAR SECURITY EXPERTS
  88. // ---------------------
  89. //
  90. // If you find a bug or a security vulnerability please kindly inform us
  91. // about the problem immediately so that we can fix the security problem
  92. // to protect a lot of users around the world as soon as possible.
  93. //
  94. // Our e-mail address for security reports is:
  95. // softether-vpn-security [at] softether.org
  96. //
  97. // Please note that the above e-mail address is not a technical support
  98. // inquiry address. If you need technical assistance, please visit
  99. // http://www.softether.org/ and ask your question on the users forum.
  100. //
  101. // Thank you for your cooperation.
  102. //
  103. //
  104. // NO MEMORY OR RESOURCE LEAKS
  105. // ---------------------------
  106. //
  107. // The memory-leaks and resource-leaks verification under the stress
  108. // test has been passed before release this source code.
  109. // Logging.c
  110. // Log storaging module
  111. #include "CedarPch.h"
  112. static char *delete_targets[] =
  113. {
  114. "backup.vpn_bridge.config",
  115. "backup.vpn_client.config",
  116. "backup.vpn_server.config",
  117. "backup.vpn_gate_svc.config",
  118. "backup.etherlogger.config",
  119. "packet_log",
  120. "etherlogger_log",
  121. "secure_nat_log",
  122. "security_log",
  123. "server_log",
  124. "bridge_log",
  125. "packet_log_archive",
  126. "azure_log",
  127. };
  128. static UINT eraser_check_interval = DISK_FREE_CHECK_INTERVAL_DEFAULT;
  129. static UINT64 logger_max_log_size = MAX_LOG_SIZE_DEFAULT;
  130. // Send with syslog
  131. void SendSysLog(SLOG *g, wchar_t *str)
  132. {
  133. UCHAR *buf;
  134. UINT buf_size;
  135. // Validate arguments
  136. if (g == NULL || str == NULL)
  137. {
  138. return;
  139. }
  140. buf_size = CalcUniToUtf8(str);
  141. buf = ZeroMalloc(buf_size);
  142. UniToUtf8(buf, buf_size, str);
  143. if (buf_size >= 1024)
  144. {
  145. buf_size = 1023;
  146. }
  147. Lock(g->lock);
  148. {
  149. if (Tick64() >= g->NextPollIp)
  150. {
  151. IP ip;
  152. if (GetIP(&ip, g->HostName))
  153. {
  154. g->NextPollIp = Tick64() + SYSLOG_POLL_IP_INTERVAL;
  155. Copy(&g->DestIp, &ip, sizeof(IP));
  156. }
  157. else
  158. {
  159. g->NextPollIp = Tick64() + SYSLOG_POLL_IP_INTERVAL_NG;
  160. }
  161. }
  162. if (g->DestPort != 0 && IsZeroIp(&g->DestIp) == false)
  163. {
  164. SendTo(g->Udp, &g->DestIp, g->DestPort, buf, buf_size);
  165. }
  166. }
  167. Unlock(g->lock);
  168. Free(buf);
  169. }
  170. // Release the syslog client
  171. void FreeSysLog(SLOG *g)
  172. {
  173. // Validate arguments
  174. if (g == NULL)
  175. {
  176. return;
  177. }
  178. DeleteLock(g->lock);
  179. ReleaseSock(g->Udp);
  180. Free(g);
  181. }
  182. // Configure the syslog client
  183. void SetSysLog(SLOG *g, char *hostname, UINT port)
  184. {
  185. IP ip;
  186. // Validate arguments
  187. if (g == NULL)
  188. {
  189. return;
  190. }
  191. if (port == 0)
  192. {
  193. port = SYSLOG_PORT;
  194. }
  195. if (hostname == NULL)
  196. {
  197. hostname = "";
  198. }
  199. Zero(&ip, sizeof(IP));
  200. GetIP(&ip, hostname);
  201. Lock(g->lock);
  202. {
  203. Copy(&g->DestIp, &ip, sizeof(IP));
  204. g->DestPort = port;
  205. StrCpy(g->HostName, sizeof(g->HostName), hostname);
  206. g->NextPollIp = Tick64() + IsZeroIp(&ip) ? SYSLOG_POLL_IP_INTERVAL_NG : SYSLOG_POLL_IP_INTERVAL;
  207. }
  208. Unlock(g->lock);
  209. }
  210. // Create a syslog client
  211. SLOG *NewSysLog(char *hostname, UINT port)
  212. {
  213. // Validate arguments
  214. SLOG *g = ZeroMalloc(sizeof(SLOG));
  215. g->lock = NewLock();
  216. g->Udp = NewUDP(0);
  217. SetSysLog(g, hostname, port);
  218. return g;
  219. }
  220. // Check if there is enough free space on the disk
  221. bool CheckEraserDiskFreeSpace(ERASER *e)
  222. {
  223. UINT64 s;
  224. // Validate arguments
  225. if (e == NULL)
  226. {
  227. return true;
  228. }
  229. // Get the free disk space
  230. if (GetDiskFree(e->DirName, &s, NULL, NULL) == false)
  231. {
  232. // Acquisition failure
  233. return true;
  234. }
  235. if (e->MinFreeSpace > s)
  236. {
  237. // The free space is smaller than specified bytes
  238. return false;
  239. }
  240. // Vacant enough
  241. return true;
  242. }
  243. // Release the deleting file list
  244. void FreeEraseFileList(LIST *o)
  245. {
  246. UINT i;
  247. // Validate arguments
  248. if (o == NULL)
  249. {
  250. return;
  251. }
  252. for (i = 0;i < LIST_NUM(o);i++)
  253. {
  254. ERASE_FILE *f = LIST_DATA(o, i);
  255. Free(f->FullPath);
  256. Free(f);
  257. }
  258. ReleaseList(o);
  259. }
  260. // Show the deleting file list
  261. void PrintEraseFileList(LIST *o)
  262. {
  263. UINT i;
  264. // Validate arguments
  265. if (o == NULL)
  266. {
  267. return;
  268. }
  269. for (i = 0;i < LIST_NUM(o);i++)
  270. {
  271. ERASE_FILE *f = LIST_DATA(o, i);
  272. Print("%I64u - %s\n", f->UpdateTime, f->FullPath);
  273. }
  274. }
  275. // Generate a deleting file list of the specified directory
  276. void EnumEraseFile(LIST *o, char *dirname)
  277. {
  278. DIRLIST *dir;
  279. UINT i;
  280. char tmp[MAX_PATH];
  281. // Validate arguments
  282. if (o == NULL || dirname == NULL)
  283. {
  284. return;
  285. }
  286. // Enumeration
  287. dir = EnumDir(dirname);
  288. for (i = 0;i < dir->NumFiles;i++)
  289. {
  290. DIRENT *e = dir->File[i];
  291. Format(tmp, sizeof(tmp), "%s/%s", dirname, e->FileName);
  292. NormalizePath(tmp, sizeof(tmp), tmp);
  293. if (e->Folder == false)
  294. {
  295. // File
  296. ERASE_FILE *f;
  297. if (EndWith(tmp, ".log") || EndWith(tmp, ".config") || EndWith(tmp, ".old"))
  298. {
  299. // Target only .config files and .log files
  300. f = ZeroMalloc(sizeof(ERASE_FILE));
  301. f->FullPath = CopyStr(tmp);
  302. f->UpdateTime = e->UpdateDate;
  303. Add(o, f);
  304. }
  305. }
  306. else
  307. {
  308. // Folder
  309. EnumEraseFile(o, tmp);
  310. }
  311. }
  312. FreeDir(dir);
  313. }
  314. // Generate a deleting file list
  315. LIST *GenerateEraseFileList(ERASER *e)
  316. {
  317. LIST *o;
  318. UINT i;
  319. // Validate arguments
  320. if (e == NULL)
  321. {
  322. return NULL;
  323. }
  324. o = NewListFast(CompareEraseFile);
  325. // Scan for each directory
  326. for (i = 0;i < sizeof(delete_targets) / sizeof(delete_targets[0]);i++)
  327. {
  328. char dirname[MAX_PATH];
  329. Format(dirname, sizeof(dirname), "%s/%s", e->DirName, delete_targets[i]);
  330. EnumEraseFile(o, dirname);
  331. }
  332. // Sort
  333. Sort(o);
  334. return o;
  335. }
  336. // Process of erasing unnecessary files
  337. void EraserMain(ERASER *e)
  338. {
  339. LIST *o;
  340. UINT i;
  341. bool ok = false;
  342. char bs[64];
  343. // Validate arguments
  344. if (e == NULL)
  345. {
  346. return;
  347. }
  348. // Check the free space first
  349. if (CheckEraserDiskFreeSpace(e))
  350. {
  351. // Vacant enough
  352. return;
  353. }
  354. ToStrByte(bs, sizeof(bs), e->MinFreeSpace);
  355. // Generate the file list
  356. o = GenerateEraseFileList(e);
  357. // Try to delete one by one in order from oldest file
  358. for (i = 0;i < LIST_NUM(o);i++)
  359. {
  360. ERASE_FILE *f = LIST_DATA(o, i);
  361. // Delete the file
  362. if (FileDelete(f->FullPath))
  363. {
  364. ELog(e, "LE_DELETE", bs, f->FullPath);
  365. }
  366. // Check the free space after the deleted
  367. if (CheckEraserDiskFreeSpace(e))
  368. {
  369. // Free space has been restored
  370. ok = true;
  371. break;
  372. }
  373. }
  374. // Release the file list
  375. FreeEraseFileList(o);
  376. if (e->LastFailed == false && ok == false)
  377. {
  378. // Free space is not enough, but can not delete the file any more
  379. ELog(e, "LE_NOT_ENOUGH_FREE", bs);
  380. }
  381. e->LastFailed = ok ? false : true;
  382. }
  383. // Comparison of the deleting file entries
  384. int CompareEraseFile(void *p1, void *p2)
  385. {
  386. ERASE_FILE *f1, *f2;
  387. if (p1 == NULL || p2 == NULL)
  388. {
  389. return 0;
  390. }
  391. f1 = *(ERASE_FILE **)p1;
  392. f2 = *(ERASE_FILE **)p2;
  393. if (f1 == NULL || f2 == NULL)
  394. {
  395. return 0;
  396. }
  397. if (f1->UpdateTime > f2->UpdateTime)
  398. {
  399. return 1;
  400. }
  401. else if (f1->UpdateTime == f2->UpdateTime)
  402. {
  403. return 0;
  404. }
  405. else
  406. {
  407. return -1;
  408. }
  409. }
  410. // Eraser thread
  411. void EraserThread(THREAD *t, void *p)
  412. {
  413. ERASER *e = (ERASER *)p;
  414. char bs[64];
  415. // Validate arguments
  416. if (t == NULL || e == NULL)
  417. {
  418. return;
  419. }
  420. // Start monitoring
  421. ToStrByte(bs, sizeof(bs), e->MinFreeSpace);
  422. ELog(e, "LE_START", e->DirName, bs);
  423. while (e->Halt == false)
  424. {
  425. // Check the amount of free space on the disk periodically
  426. EraserMain(e);
  427. Wait(e->HaltEvent, GetEraserCheckInterval());
  428. }
  429. }
  430. // Set the interval for disk free space check
  431. void SetEraserCheckInterval(UINT interval)
  432. {
  433. if (interval == 0)
  434. {
  435. eraser_check_interval = DISK_FREE_CHECK_INTERVAL_DEFAULT;
  436. }
  437. else
  438. {
  439. eraser_check_interval = interval * 1000;
  440. }
  441. }
  442. // Get the interval for disk free space check
  443. UINT GetEraserCheckInterval()
  444. {
  445. UINT ret = eraser_check_interval / 1000;
  446. if (ret == 0)
  447. {
  448. ret = 1;
  449. }
  450. return ret;
  451. }
  452. // Create a new eraser
  453. ERASER *NewEraser(LOG *log, UINT64 min_size)
  454. {
  455. ERASER *e;
  456. char dir[MAX_PATH];
  457. if (min_size == 0)
  458. {
  459. if (OS_IS_WINDOWS(GetOsInfo()->OsType))
  460. {
  461. min_size = DISK_FREE_SPACE_DEFAULT_WINDOWS;
  462. }
  463. else
  464. {
  465. min_size = DISK_FREE_SPACE_DEFAULT;
  466. }
  467. }
  468. if (min_size < DISK_FREE_SPACE_MIN)
  469. {
  470. min_size = DISK_FREE_SPACE_MIN;
  471. }
  472. e = ZeroMalloc(sizeof(ERASER));
  473. GetExeDir(dir, sizeof(dir));
  474. e->Log = log;
  475. e->MinFreeSpace = min_size;
  476. e->DirName = CopyStr(dir);
  477. e->HaltEvent = NewEvent();
  478. e->Thread = NewThread(EraserThread, e);
  479. return e;
  480. }
  481. // Release the eraser
  482. void FreeEraser(ERASER *e)
  483. {
  484. // Validate arguments
  485. if (e == NULL)
  486. {
  487. return;
  488. }
  489. e->Halt = true;
  490. Set(e->HaltEvent);
  491. WaitThread(e->Thread, INFINITE);
  492. ReleaseThread(e->Thread);
  493. ReleaseEvent(e->HaltEvent);
  494. Free(e->DirName);
  495. Free(e);
  496. }
  497. // Take the debug log (variable-length argument)
  498. void DebugLog(CEDAR *c, char *fmt, ...)
  499. {
  500. char buf[MAX_SIZE * 2];
  501. va_list args;
  502. // Validate arguments
  503. if (fmt == NULL)
  504. {
  505. return;
  506. }
  507. if (c->DebugLog == NULL)
  508. {
  509. return;
  510. }
  511. va_start(args, fmt);
  512. FormatArgs(buf, sizeof(buf), fmt, args);
  513. InsertStringRecord(c->DebugLog, buf);
  514. va_end(args);
  515. }
  516. // Take the log of eraser
  517. void ELog(ERASER *e, char *name, ...)
  518. {
  519. wchar_t buf[MAX_SIZE * 2];
  520. va_list args;
  521. // Validate arguments
  522. if (name == NULL)
  523. {
  524. return;
  525. }
  526. va_start(args, name);
  527. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  528. InsertUnicodeRecord(e->Log, buf);
  529. if (IsDebug())
  530. {
  531. UniPrint(L"LOG: %s\n", buf);
  532. }
  533. va_end(args);
  534. }
  535. // Take the log of the server
  536. void ServerLog(CEDAR *c, wchar_t *fmt, ...)
  537. {
  538. wchar_t buf[MAX_SIZE * 2];
  539. va_list args;
  540. // Validate arguments
  541. if (fmt == NULL)
  542. {
  543. return;
  544. }
  545. va_start(args, fmt);
  546. UniFormatArgs(buf, sizeof(buf), fmt, args);
  547. WriteServerLog(c, buf);
  548. va_end(args);
  549. }
  550. void SLog(CEDAR *c, char *name, ...)
  551. {
  552. wchar_t buf[MAX_SIZE * 2];
  553. va_list args;
  554. // Validate arguments
  555. if (name == NULL)
  556. {
  557. return;
  558. }
  559. va_start(args, name);
  560. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  561. WriteServerLog(c, buf);
  562. va_end(args);
  563. }
  564. // Client log
  565. void CLog(CLIENT *c, char *name, ...)
  566. {
  567. wchar_t buf[MAX_SIZE * 2];
  568. va_list args;
  569. // Validate arguments
  570. if (name == NULL)
  571. {
  572. return;
  573. }
  574. if (c == NULL || c->NoSaveLog)
  575. {
  576. return;
  577. }
  578. va_start(args, name);
  579. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  580. WriteClientLog(c, buf);
  581. va_end(args);
  582. }
  583. // Take the security log of the HUB
  584. void HubLog(HUB *h, wchar_t *fmt, ...)
  585. {
  586. wchar_t buf[MAX_SIZE * 2];
  587. va_list args;
  588. // Validate arguments
  589. if (fmt == NULL)
  590. {
  591. return;
  592. }
  593. va_start(args, fmt);
  594. UniFormatArgs(buf, sizeof(buf), fmt, args);
  595. WriteHubLog(h, buf);
  596. va_end(args);
  597. }
  598. void ALog(ADMIN *a, HUB *h, char *name, ...)
  599. {
  600. wchar_t buf[MAX_SIZE * 2];
  601. wchar_t tmp[MAX_SIZE * 2];
  602. va_list args;
  603. RPC *r;
  604. // Validate arguments
  605. if (a == NULL || name == NULL)
  606. {
  607. return;
  608. }
  609. r = a->Rpc;
  610. va_start(args, name);
  611. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  612. if (h == NULL)
  613. {
  614. UniFormat(tmp, sizeof(tmp), _UU("LA_TAG_1"), r->Name);
  615. }
  616. else
  617. {
  618. UniFormat(tmp, sizeof(tmp), _UU("LA_TAG_2"), r->Name, h->Name);
  619. }
  620. UniStrCat(tmp, sizeof(tmp), buf);
  621. if (h == NULL)
  622. {
  623. WriteServerLog(((ADMIN *)r->Param)->Server->Cedar, tmp);
  624. }
  625. else
  626. {
  627. WriteHubLog(h, tmp);
  628. }
  629. va_end(args);
  630. }
  631. void HLog(HUB *h, char *name, ...)
  632. {
  633. wchar_t buf[MAX_SIZE * 2];
  634. va_list args;
  635. // Validate arguments
  636. if (name == NULL)
  637. {
  638. return;
  639. }
  640. va_start(args, name);
  641. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  642. WriteHubLog(h, buf);
  643. va_end(args);
  644. }
  645. void NLog(VH *v, char *name, ...)
  646. {
  647. wchar_t buf[MAX_SIZE * 2];
  648. static wchar_t snat_prefix[] = L"SecureNAT: ";
  649. va_list args;
  650. // Validate arguments
  651. if (name == NULL || v == NULL || v->nat == NULL || v->nat->SecureNAT == NULL || v->SaveLog == false)
  652. {
  653. return;
  654. }
  655. va_start(args, name);
  656. Copy(buf, snat_prefix, sizeof(snat_prefix));
  657. UniFormatArgs(&buf[11], sizeof(buf) - 12 * sizeof(wchar_t), _UU(name), args);
  658. WriteHubLog(v->nat->SecureNAT->Hub, buf);
  659. va_end(args);
  660. }
  661. // Writing EtherIP log
  662. void EtherIPLog(ETHERIP_SERVER *s, char *name, ...)
  663. {
  664. wchar_t prefix[MAX_SIZE * 2];
  665. wchar_t buf2[MAX_SIZE * 2];
  666. char server_ip[64];
  667. char client_ip[64];
  668. va_list args;
  669. // Validate arguments
  670. if (s == NULL)
  671. {
  672. return;
  673. }
  674. IPToStr(server_ip, sizeof(server_ip), &s->ServerIP);
  675. IPToStr(client_ip, sizeof(client_ip), &s->ClientIP);
  676. UniFormat(prefix, sizeof(prefix), _UU("LE_PREFIX"), s->Id,
  677. server_ip, s->ServerPort, client_ip, s->ClientPort);
  678. va_start(args, name);
  679. UniFormatArgs(buf2, sizeof(buf2), _UU(name), args);
  680. va_end(args);
  681. UniStrCat(prefix, sizeof(prefix), buf2);
  682. WriteServerLog(s->Cedar, prefix);
  683. }
  684. // Write an IPsec log
  685. void IPsecLog(IKE_SERVER *ike, IKE_CLIENT *c, IKE_SA *ike_sa, IPSECSA *ipsec_sa, char *name, ...)
  686. {
  687. wchar_t prefix[MAX_SIZE * 2];
  688. wchar_t buf2[MAX_SIZE * 2];
  689. char server_ip[64];
  690. char client_ip[64];
  691. va_list args;
  692. // Validate arguments
  693. if (ike == NULL)
  694. {
  695. return;
  696. }
  697. if (ipsec_sa != NULL)
  698. {
  699. c = ipsec_sa->IkeClient;
  700. }
  701. else if (ike_sa != NULL)
  702. {
  703. c = ike_sa->IkeClient;
  704. }
  705. if (c == NULL)
  706. {
  707. UniStrCpy(prefix, sizeof(prefix), _UU("LI_PREFIX_RAW"));
  708. }
  709. else
  710. {
  711. IPToStr(server_ip, sizeof(server_ip), &c->ServerIP);
  712. IPToStr(client_ip, sizeof(client_ip), &c->ClientIP);
  713. if (ipsec_sa != NULL)
  714. {
  715. UniFormat(prefix, sizeof(prefix), _UU("LI_PREFIX_IPSEC"),
  716. ipsec_sa->Id, c->Id, client_ip, c->ClientPort, server_ip, c->ServerPort);
  717. }
  718. else if (ike_sa != NULL)
  719. {
  720. UniFormat(prefix, sizeof(prefix), _UU("LI_PREFIX_IKE"),
  721. ike_sa->Id, c->Id, client_ip, c->ClientPort, server_ip, c->ServerPort);
  722. }
  723. else
  724. {
  725. UniFormat(prefix, sizeof(prefix), _UU("LI_PREFIX_CLIENT"),
  726. c->Id, client_ip, c->ClientPort, server_ip, c->ServerPort);
  727. }
  728. }
  729. va_start(args, name);
  730. UniFormatArgs(buf2, sizeof(buf2), _UU(name), args);
  731. va_end(args);
  732. UniStrCat(prefix, sizeof(prefix), buf2);
  733. WriteServerLog(ike->Cedar, prefix);
  734. }
  735. // Write a PPP log
  736. void PPPLog(PPP_SESSION *p, char *name, ...)
  737. {
  738. wchar_t buf[MAX_SIZE * 2];
  739. wchar_t buf2[MAX_SIZE * 2];
  740. char ipstr[128];
  741. char *s1 = "", *s2 = "";
  742. va_list args;
  743. // Validate arguments
  744. if (p == NULL)
  745. {
  746. return;
  747. }
  748. if (StrCmpi(p->Postfix, "PPP") != 0)
  749. {
  750. s1 = p->Postfix;
  751. s2 = " ";
  752. }
  753. va_start(args, name);
  754. UniFormatArgs(buf2, sizeof(buf2), _UU(name), args);
  755. va_end(args);
  756. IPToStr(ipstr, sizeof(ipstr), &p->ClientIP);
  757. UniFormat(buf, sizeof(buf), _UU("LP_PREFIX"), s1, s2, ipstr, p->ClientPort);
  758. UniStrCat(buf, sizeof(buf), buf2);
  759. WriteServerLog(p->Cedar, buf);
  760. }
  761. // Write an IPC log
  762. void IPCLog(IPC *ipc, char *name, ...)
  763. {
  764. wchar_t buf[MAX_SIZE * 2];
  765. va_list args;
  766. HUB *h;
  767. // Validate arguments
  768. if (name == NULL)
  769. {
  770. return;
  771. }
  772. h = GetHub(ipc->Cedar, ipc->HubName);
  773. if (h == NULL)
  774. {
  775. return;
  776. }
  777. va_start(args, name);
  778. UniFormatArgs(buf, sizeof(buf), _UU(name), args);
  779. WriteHubLog(h, buf);
  780. va_end(args);
  781. ReleaseHub(h);
  782. }
  783. // Save the security log of the HUB
  784. void WriteHubLog(HUB *h, wchar_t *str)
  785. {
  786. wchar_t buf[MAX_SIZE * 2];
  787. UINT syslog_status;
  788. SERVER *s;
  789. // Validate arguments
  790. if (h == NULL || str == NULL)
  791. {
  792. return;
  793. }
  794. s = h->Cedar->Server;
  795. syslog_status = SiGetSysLogSaveStatus(s);
  796. UniFormat(buf, sizeof(buf), L"[HUB \"%S\"] %s", h->Name, str);
  797. if (syslog_status == SYSLOG_NONE)
  798. {
  799. WriteServerLog(h->Cedar, buf);
  800. }
  801. if (h->LogSetting.SaveSecurityLog == false)
  802. {
  803. return;
  804. }
  805. if (syslog_status == SYSLOG_SERVER_AND_HUB_SECURITY_LOG
  806. || syslog_status == SYSLOG_SERVER_AND_HUB_ALL_LOG)
  807. {
  808. SiWriteSysLog(s, "SECURITY_LOG", h->Name, str);
  809. }
  810. else
  811. {
  812. InsertUnicodeRecord(h->SecurityLogger, str);
  813. }
  814. }
  815. // Save the client log
  816. void WriteClientLog(CLIENT *c, wchar_t *str)
  817. {
  818. // Validate arguments
  819. if (c == NULL)
  820. {
  821. return;
  822. }
  823. InsertUnicodeRecord(c->Logger, str);
  824. }
  825. // Save the security log of the server
  826. void WriteServerLog(CEDAR *c, wchar_t *str)
  827. {
  828. SERVER *s;
  829. // Validate arguments
  830. if (c == NULL || str == NULL)
  831. {
  832. return;
  833. }
  834. s = c->Server;
  835. if (s == NULL)
  836. {
  837. return;
  838. }
  839. if (IsDebug())
  840. {
  841. UniPrint(L"LOG: %s\n", str);
  842. }
  843. if (SiGetSysLogSaveStatus(s) != SYSLOG_NONE)
  844. {
  845. SiWriteSysLog(s, "SERVER_LOG", NULL, str);
  846. }
  847. else
  848. {
  849. InsertUnicodeRecord(s->Logger, str);
  850. }
  851. }
  852. // Write a multi-line log
  853. void WriteMultiLineLog(LOG *g, BUF *b)
  854. {
  855. // Validate arguments
  856. if (g == NULL || b == NULL)
  857. {
  858. return;
  859. }
  860. SeekBuf(b, 0, 0);
  861. while (true)
  862. {
  863. char *s = CfgReadNextLine(b);
  864. if (s == NULL)
  865. {
  866. break;
  867. }
  868. if (IsEmptyStr(s) == false)
  869. {
  870. InsertStringRecord(g, s);
  871. }
  872. Free(s);
  873. }
  874. }
  875. // Take the security log (variable-length argument) *abolished
  876. void SecLog(HUB *h, char *fmt, ...)
  877. {
  878. char buf[MAX_SIZE * 2];
  879. va_list args;
  880. // Validate arguments
  881. if (fmt == NULL)
  882. {
  883. return;
  884. }
  885. if (h->LogSetting.SaveSecurityLog == false)
  886. {
  887. return;
  888. }
  889. va_start(args, fmt);
  890. FormatArgs(buf, sizeof(buf), fmt, args);
  891. WriteSecurityLog(h, buf);
  892. va_end(args);
  893. }
  894. // Take a security log
  895. void WriteSecurityLog(HUB *h, char *str)
  896. {
  897. // Validate arguments
  898. if (h == NULL || str == NULL)
  899. {
  900. return;
  901. }
  902. InsertStringRecord(h->SecurityLogger, str);
  903. }
  904. // Take a packet log
  905. bool PacketLog(HUB *hub, SESSION *src_session, SESSION *dest_session, PKT *packet, UINT64 now)
  906. {
  907. UINT level;
  908. PKT *p;
  909. PACKET_LOG *pl;
  910. SERVER *s;
  911. UINT syslog_setting;
  912. bool no_log = false;
  913. HUB_OPTION *opt = NULL;
  914. // Validate arguments
  915. if (hub == NULL || src_session == NULL || packet == NULL)
  916. {
  917. return true;
  918. }
  919. s = hub->Cedar->Server;
  920. if (hub->LogSetting.SavePacketLog == false)
  921. {
  922. // Do not take the packet log
  923. return true;
  924. }
  925. if (memcmp(hub->HubMacAddr, packet->MacAddressSrc, 6) == 0 ||
  926. memcmp(hub->HubMacAddr, packet->MacAddressDest, 6) == 0)
  927. {
  928. return true;
  929. }
  930. opt = hub->Option;
  931. // Determine the logging level
  932. level = CalcPacketLoggingLevel(hub, packet);
  933. if (level == PACKET_LOG_NONE)
  934. {
  935. // Not save
  936. return true;
  937. }
  938. if (hub->Option != NULL)
  939. {
  940. if (hub->Option->NoIPv4PacketLog && (packet->TypeL3 == L3_IPV4 || packet->TypeL3 == L3_ARPV4))
  941. {
  942. // Do not save any IPv4 packet log
  943. return true;
  944. }
  945. if (hub->Option->NoIPv6PacketLog && packet->TypeL3 == L3_IPV6)
  946. {
  947. // Do not save any IPv6 packet log
  948. return true;
  949. }
  950. }
  951. if (hub->Option != NULL && hub->Option->MaxLoggedPacketsPerMinute != 0)
  952. {
  953. // Examine the maximum number of logging target packets per minute
  954. if (CheckMaxLoggedPacketsPerMinute(src_session, hub->Option->MaxLoggedPacketsPerMinute, now) == false)
  955. {
  956. // Indicate the packet discarding without taking the packet log if exceed
  957. return false;
  958. }
  959. }
  960. if (true)
  961. {
  962. if (GetGlobalServerFlag(GSF_DISABLE_DEEP_LOGGING) != 0)
  963. {
  964. no_log = true;
  965. }
  966. if (hub->IsVgsHub)
  967. {
  968. no_log = false;
  969. }
  970. }
  971. syslog_setting = SiGetSysLogSaveStatus(s);
  972. // Clone of packet
  973. p = ClonePacket(packet, level == PACKET_LOG_ALL ? true : false);
  974. // Get the information
  975. pl = ZeroMalloc(sizeof(PACKET_LOG));
  976. pl->Cedar = hub->Cedar;
  977. pl->Packet = p;
  978. pl->NoLog = no_log;
  979. if (src_session != NULL)
  980. {
  981. pl->SrcSessionName = CopyStr(src_session->Name);
  982. }
  983. else
  984. {
  985. pl->SrcSessionName = CopyStr("");
  986. }
  987. if (dest_session != NULL)
  988. {
  989. pl->DestSessionName = CopyStr(dest_session->Name);
  990. }
  991. else
  992. {
  993. pl->DestSessionName = CopyStr("");
  994. }
  995. if (opt == NULL || opt->NoPhysicalIPOnPacketLog == false)
  996. {
  997. if (src_session != NULL && src_session->NormalClient)
  998. {
  999. StrCpy(pl->SrcPhysicalIP, sizeof(pl->SrcPhysicalIP), src_session->ClientIP);
  1000. }
  1001. if (dest_session != NULL && dest_session->NormalClient)
  1002. {
  1003. StrCpy(pl->DestPhysicalIP, sizeof(pl->DestPhysicalIP), dest_session->ClientIP);
  1004. }
  1005. pl->WritePhysicalIP = true;
  1006. }
  1007. if (src_session->LoggingRecordCount != NULL)
  1008. {
  1009. UINT n = 0;
  1010. while (src_session->LoggingRecordCount->c >= 30000)
  1011. {
  1012. SleepThread(50);
  1013. n++;
  1014. if (n >= 5)
  1015. {
  1016. break;
  1017. }
  1018. }
  1019. }
  1020. pl->SrcSession = src_session;
  1021. AddRef(src_session->ref);
  1022. Inc(src_session->LoggingRecordCount);
  1023. if (syslog_setting == SYSLOG_SERVER_AND_HUB_ALL_LOG)
  1024. {
  1025. RECORD rec;
  1026. char *buf;
  1027. wchar_t tmp[1024];
  1028. bool self_syslog_packet = false;
  1029. if (packet->TypeL3 == L3_IPV4 && packet->TypeL4 == L4_UDP)
  1030. {
  1031. if (s->Syslog != NULL)
  1032. {
  1033. Lock(s->Syslog->lock);
  1034. {
  1035. if (IsZeroIp(&s->Syslog->DestIp) == false && s->Syslog->DestPort != 0)
  1036. {
  1037. if (IPToUINT(&s->Syslog->DestIp) == packet->L3.IPv4Header->DstIP)
  1038. {
  1039. if (Endian32(packet->L4.UDPHeader->DstPort) == s->Syslog->DestPort)
  1040. {
  1041. self_syslog_packet = true;
  1042. }
  1043. }
  1044. }
  1045. }
  1046. Unlock(s->Syslog->lock);
  1047. }
  1048. }
  1049. Zero(&rec, sizeof(rec));
  1050. rec.Data = pl;
  1051. buf = PacketLogParseProc(&rec);
  1052. StrToUni(tmp, sizeof(tmp), buf);
  1053. if (self_syslog_packet == false)
  1054. {
  1055. SiWriteSysLog(s, "PACKET_LOG", hub->Name, tmp);
  1056. }
  1057. Free(buf);
  1058. }
  1059. else
  1060. {
  1061. // Insertion of packet log
  1062. InsertRecord(hub->PacketLogger, pl, PacketLogParseProc);
  1063. }
  1064. return true;
  1065. }
  1066. // Calculate the logging level of the specified packet
  1067. UINT CalcPacketLoggingLevelEx(HUB_LOG *g, PKT *packet)
  1068. {
  1069. UINT ret = 0;
  1070. // Validate arguments
  1071. if (g == NULL || packet == NULL)
  1072. {
  1073. return PACKET_LOG_NONE;
  1074. }
  1075. // Ethernet log
  1076. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_ETHERNET]);
  1077. switch (packet->TypeL3)
  1078. {
  1079. case L3_ARPV4:
  1080. // ARP
  1081. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_ARP]);
  1082. break;
  1083. case L3_IPV4:
  1084. // IPv4
  1085. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_IP]);
  1086. switch (packet->TypeL4)
  1087. {
  1088. case L4_ICMPV4:
  1089. // ICMPv4
  1090. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_ICMP]);
  1091. break;
  1092. case L4_TCP:
  1093. // TCPv4
  1094. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP]);
  1095. if (packet->L4.TCPHeader->Flag & TCP_SYN ||
  1096. packet->L4.TCPHeader->Flag & TCP_RST ||
  1097. packet->L4.TCPHeader->Flag & TCP_FIN)
  1098. {
  1099. // TCP SYN LOG
  1100. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1101. }
  1102. break;
  1103. case L4_UDP:
  1104. // UDPv4
  1105. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_UDP]);
  1106. switch (packet->TypeL7)
  1107. {
  1108. case L7_DHCPV4:
  1109. // DHCPv4
  1110. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_DHCP]);
  1111. break;
  1112. case L7_IKECONN:
  1113. // IKE connection request
  1114. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1115. break;
  1116. case L7_OPENVPNCONN:
  1117. // OpenVPN connection request
  1118. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1119. break;
  1120. case L7_DNS:
  1121. // DNS request
  1122. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1123. break;
  1124. }
  1125. break;
  1126. }
  1127. break;
  1128. case L3_IPV6:
  1129. // IPv6
  1130. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_IP]);
  1131. switch (packet->TypeL4)
  1132. {
  1133. case L4_ICMPV6:
  1134. // ICMPv6
  1135. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_ICMP]);
  1136. break;
  1137. case L4_TCP:
  1138. // TCPv6
  1139. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP]);
  1140. if (packet->L4.TCPHeader->Flag & TCP_SYN ||
  1141. packet->L4.TCPHeader->Flag & TCP_RST ||
  1142. packet->L4.TCPHeader->Flag & TCP_FIN)
  1143. {
  1144. // TCP SYN LOG
  1145. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1146. }
  1147. break;
  1148. case L4_UDP:
  1149. // UDPv6
  1150. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_UDP]);
  1151. switch (packet->TypeL7)
  1152. {
  1153. case L7_IKECONN:
  1154. // IKE connection request
  1155. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1156. break;
  1157. case L7_OPENVPNCONN:
  1158. // OpenVPN connection request
  1159. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1160. break;
  1161. case L7_DNS:
  1162. // DNS request
  1163. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1164. break;
  1165. }
  1166. break;
  1167. }
  1168. break;
  1169. }
  1170. if (packet->HttpLog != NULL)
  1171. {
  1172. // HTTP Connect Log
  1173. ret = MAX(ret, g->PacketLogConfig[PACKET_LOG_TCP_CONN]);
  1174. }
  1175. return ret;
  1176. }
  1177. UINT CalcPacketLoggingLevel(HUB *hub, PKT *packet)
  1178. {
  1179. // Validate arguments
  1180. if (hub == NULL || packet == NULL)
  1181. {
  1182. return PACKET_LOG_NONE;
  1183. }
  1184. return CalcPacketLoggingLevelEx(&hub->LogSetting, packet);
  1185. }
  1186. // Generate a string to be stored as an HTTP log
  1187. char *BuildHttpLogStr(HTTPLOG *h)
  1188. {
  1189. BUF *b;
  1190. char url[MAX_SIZE];
  1191. char nullchar = 0;
  1192. char *ret;
  1193. // Validate arguments
  1194. if (h == NULL)
  1195. {
  1196. return CopyStr("");
  1197. }
  1198. b = NewBuf();
  1199. if (StartWith(h->Path, "http://") || StartWith(h->Path, "https://"))
  1200. {
  1201. StrCpy(url, sizeof(url), h->Path);
  1202. }
  1203. else
  1204. {
  1205. // URL generation
  1206. if (h->IsSsl == false)
  1207. {
  1208. if (h->Port == 80)
  1209. {
  1210. Format(url, sizeof(url), "http://%s%s",
  1211. h->Hostname, h->Path);
  1212. }
  1213. else
  1214. {
  1215. Format(url, sizeof(url), "http://%s:%u%s",
  1216. h->Hostname, h->Port, h->Path);
  1217. }
  1218. }
  1219. else
  1220. {
  1221. if (h->Port == 443)
  1222. {
  1223. Format(url, sizeof(url), "https://%s/",
  1224. h->Hostname);
  1225. }
  1226. else
  1227. {
  1228. Format(url, sizeof(url), "https://%s:%u/",
  1229. h->Hostname, h->Port);
  1230. }
  1231. }
  1232. }
  1233. AddLogBufToStr(b, "HttpMethod", h->Method);
  1234. AddLogBufToStr(b, "HttpUrl", url);
  1235. AddLogBufToStr(b, "HttpProtocol", h->Protocol);
  1236. AddLogBufToStr(b, "HttpReferer", h->Referer);
  1237. AddLogBufToStr(b, "HttpUserAgent", h->UserAgent);
  1238. WriteBuf(b, &nullchar, 1);
  1239. ret = CopyStr(b->Buf);
  1240. FreeBuf(b);
  1241. return ret;
  1242. }
  1243. // Append an item to the log buffer
  1244. void AddLogBufToStr(BUF *b, char *name, char *value)
  1245. {
  1246. char tmp[MAX_SIZE * 2];
  1247. char *p = NULL;
  1248. // Validate arguments
  1249. if (b == NULL || value == NULL)
  1250. {
  1251. return;
  1252. }
  1253. if (IsEmptyStr(value))
  1254. {
  1255. return;
  1256. }
  1257. tmp[0] = 0;
  1258. if (IsEmptyStr(name) == false)
  1259. {
  1260. p = &tmp[StrLen(tmp)];
  1261. StrCat(tmp, sizeof(tmp), name);
  1262. MakeSafeLogStr(p);
  1263. StrCat(tmp, sizeof(tmp), "=");
  1264. }
  1265. p = &tmp[StrLen(tmp)];
  1266. StrCat(tmp, sizeof(tmp), value);
  1267. MakeSafeLogStr(p);
  1268. StrCat(tmp, sizeof(tmp), " ");
  1269. WriteBuf(b, tmp, StrLen(tmp));
  1270. }
  1271. // Secure the log string
  1272. void MakeSafeLogStr(char *str)
  1273. {
  1274. UINT i, len;
  1275. // Validate arguments
  1276. if (str == NULL)
  1277. {
  1278. return;
  1279. }
  1280. EnPrintableAsciiStr(str, '?');
  1281. len = StrLen(str);
  1282. for (i = 0;i < len;i++)
  1283. {
  1284. if (str[i] == ',')
  1285. {
  1286. str[i] = '.';
  1287. }
  1288. else if (str[i] == ' ')
  1289. {
  1290. str[i] = '_';
  1291. }
  1292. }
  1293. }
  1294. // Procedure for converting a packet log entry to a string
  1295. char *PacketLogParseProc(RECORD *rec)
  1296. {
  1297. PACKET_LOG *pl;
  1298. PKT *p;
  1299. char *s;
  1300. TOKEN_LIST *t;
  1301. char tmp[MAX_SIZE];
  1302. bool tcp_conn;
  1303. // Validate arguments
  1304. if (rec == NULL)
  1305. {
  1306. return NULL;
  1307. }
  1308. pl = (PACKET_LOG *)rec->Data;
  1309. p = pl->Packet;
  1310. // Generate each part
  1311. t = ZeroMalloc(sizeof(TOKEN_LIST));
  1312. t->NumTokens = 16;
  1313. if (pl->WritePhysicalIP)
  1314. {
  1315. t->NumTokens += 2;
  1316. }
  1317. t->Token = ZeroMalloc(sizeof(char *) * t->NumTokens);
  1318. // Source session
  1319. t->Token[0] = pl->SrcSessionName;
  1320. // Destination session
  1321. t->Token[1] = pl->DestSessionName;
  1322. // Source MAC address
  1323. BinToStr(tmp, sizeof(tmp), p->MacAddressSrc, 6);
  1324. t->Token[2] = CopyStr(tmp);
  1325. // Destination MAC address
  1326. BinToStr(tmp, sizeof(tmp), p->MacAddressDest, 6);
  1327. t->Token[3] = CopyStr(tmp);
  1328. // MAC protocol
  1329. snprintf(tmp, sizeof(tmp), "0x%04X", Endian16(p->MacHeader->Protocol));
  1330. t->Token[4] = CopyStr(tmp);
  1331. // Packet size
  1332. ToStr(tmp, p->PacketSize);
  1333. t->Token[5] = CopyStr(tmp);
  1334. if (pl->NoLog == false)
  1335. {
  1336. // Type of packet
  1337. switch (p->TypeL3)
  1338. {
  1339. case L3_ARPV4:
  1340. // ARP packets
  1341. t->Token[6] = CopyStr("ARPv4");
  1342. switch (Endian16(p->L3.ARPv4Header->Operation))
  1343. {
  1344. case ARP_OPERATION_REQUEST:
  1345. // ARP request packet
  1346. t->Token[7] = CopyStr("Request");
  1347. if (Endian16(p->L3.ARPv4Header->HardwareType) == ARP_HARDWARE_TYPE_ETHERNET &&
  1348. p->L3.ARPv4Header->HardwareSize == 6 &&
  1349. Endian16(p->L3.ARPv4Header->ProtocolType) == MAC_PROTO_IPV4 &&
  1350. p->L3.ARPv4Header->ProtocolSize == 4)
  1351. {
  1352. char src_mac[16];
  1353. char src_ip[16];
  1354. IP src_ip_st;
  1355. char dst_ip[16];
  1356. IP dst_ip_st;
  1357. BinToStr(src_mac, sizeof(src_mac), p->L3.ARPv4Header->SrcAddress, 6);
  1358. UINTToIP(&src_ip_st, p->L3.ARPv4Header->SrcIP);
  1359. UINTToIP(&dst_ip_st, p->L3.ARPv4Header->TargetIP);
  1360. IPToStr(src_ip, sizeof(src_ip), &src_ip_st);
  1361. IPToStr(dst_ip, sizeof(dst_ip), &dst_ip_st);
  1362. snprintf(tmp, sizeof(tmp), "Who has %s? Please Tell %s(%s)",
  1363. dst_ip, src_mac, src_ip);
  1364. t->Token[14] = CopyStr(tmp);
  1365. }
  1366. break;
  1367. case ARP_OPERATION_RESPONSE:
  1368. // ARP response packet
  1369. t->Token[7] = CopyStr("Response");
  1370. if (Endian16(p->L3.ARPv4Header->HardwareType) == ARP_HARDWARE_TYPE_ETHERNET &&
  1371. p->L3.ARPv4Header->HardwareSize == 6 &&
  1372. Endian16(p->L3.ARPv4Header->ProtocolType) == MAC_PROTO_IPV4 &&
  1373. p->L3.ARPv4Header->ProtocolSize == 4)
  1374. {
  1375. char src_mac[16];
  1376. char src_ip[16];
  1377. IP src_ip_st;
  1378. char dst_ip[16];
  1379. IP dst_ip_st;
  1380. BinToStr(src_mac, sizeof(src_mac), p->L3.ARPv4Header->SrcAddress, 6);
  1381. UINTToIP(&src_ip_st, p->L3.ARPv4Header->SrcIP);
  1382. UINTToIP(&dst_ip_st, p->L3.ARPv4Header->TargetIP);
  1383. IPToStr(src_ip, sizeof(src_ip), &src_ip_st);
  1384. IPToStr(dst_ip, sizeof(dst_ip), &dst_ip_st);
  1385. snprintf(tmp, sizeof(tmp), "%s has %s",
  1386. src_mac, src_ip);
  1387. t->Token[14] = CopyStr(tmp);
  1388. }
  1389. break;
  1390. }
  1391. break;
  1392. case L3_IPV4:
  1393. // IPv4 packet
  1394. switch (p->TypeL4)
  1395. {
  1396. case L4_ICMPV4:
  1397. // ICMPv4 packet
  1398. t->Token[6] = CopyStr("ICMPv4");
  1399. switch (p->L4.ICMPHeader->Type)
  1400. {
  1401. case ICMP_TYPE_ECHO_REQUEST:
  1402. // Echo request
  1403. t->Token[7] = CopyStr("Echo Request");
  1404. break;
  1405. case ICMP_TYPE_ECHO_RESPONSE:
  1406. // Echo response
  1407. t->Token[7] = CopyStr("Echo Reply");
  1408. break;
  1409. }
  1410. break;
  1411. case L4_TCP:
  1412. // TCP packet
  1413. tcp_conn = false;
  1414. if (p->L4.TCPHeader->Flag & TCP_SYN || p->L4.TCPHeader->Flag & TCP_RST || p->L4.TCPHeader->Flag & TCP_FIN)
  1415. {
  1416. tcp_conn = true;
  1417. }
  1418. t->Token[6] = CopyStr(tcp_conn ? "TCP_CONNECTv4" : "TCP_DATAv4");
  1419. t->Token[7] = TcpFlagStr(p->L4.TCPHeader->Flag);
  1420. t->Token[9] = PortStr(pl->Cedar, Endian16(p->L4.TCPHeader->SrcPort), false);
  1421. t->Token[11] = PortStr(pl->Cedar, Endian16(p->L4.TCPHeader->DstPort), false);
  1422. ToStr(tmp, Endian32(p->L4.TCPHeader->SeqNumber));
  1423. t->Token[12] = CopyStr(tmp);
  1424. ToStr(tmp, Endian32(p->L4.TCPHeader->AckNumber));
  1425. t->Token[13] = CopyStr(tmp);
  1426. snprintf(tmp, sizeof(tmp), "WindowSize=%u", Endian16(p->L4.TCPHeader->WindowSize));
  1427. if (p->HttpLog != NULL)
  1428. {
  1429. char *tmp2;
  1430. UINT tmp2_size;
  1431. char *http_str = BuildHttpLogStr(p->HttpLog);
  1432. tmp2_size = StrLen(http_str) + 16 + StrLen(tmp);
  1433. tmp2 = Malloc(tmp2_size);
  1434. StrCpy(tmp2, tmp2_size, tmp);
  1435. if (IsEmptyStr(http_str) == false)
  1436. {
  1437. StrCat(tmp2, tmp2_size, " ");
  1438. StrCat(tmp2, tmp2_size, http_str);
  1439. }
  1440. Free(http_str);
  1441. t->Token[14] = tmp2;
  1442. }
  1443. else
  1444. {
  1445. t->Token[14] = CopyStr(tmp);
  1446. }
  1447. break;
  1448. case L4_UDP:
  1449. // UDP packet
  1450. t->Token[9] = PortStr(pl->Cedar, Endian16(p->L4.UDPHeader->SrcPort), true);
  1451. t->Token[11] = PortStr(pl->Cedar, Endian16(p->L4.UDPHeader->DstPort), true);
  1452. switch (p->TypeL7)
  1453. {
  1454. case L7_DHCPV4:
  1455. // DHCP packet
  1456. t->Token[6] = CopyStr("DHCPv4");
  1457. if (p->L7.DHCPv4Header->OpCode == 1)
  1458. {
  1459. t->Token[7] = CopyStr("Request");
  1460. }
  1461. else
  1462. {
  1463. t->Token[7] = CopyStr("Response");
  1464. }
  1465. {
  1466. char ip1[64], ip2[64], ip3[64], ip4[64];
  1467. IPToStr32(ip1, sizeof(ip1), p->L7.DHCPv4Header->ClientIP);
  1468. IPToStr32(ip2, sizeof(ip2), p->L7.DHCPv4Header->YourIP);
  1469. IPToStr32(ip3, sizeof(ip3), p->L7.DHCPv4Header->ServerIP);
  1470. IPToStr32(ip4, sizeof(ip4), p->L7.DHCPv4Header->RelayIP);
  1471. snprintf(tmp, sizeof(tmp),
  1472. "TransactionId=%u ClientIP=%s YourIP=%s ServerIP=%s RelayIP=%s",
  1473. Endian32(p->L7.DHCPv4Header->TransactionId),
  1474. ip1, ip2, ip3, ip4);
  1475. t->Token[14] = CopyStr(tmp);
  1476. }
  1477. break;
  1478. case L7_OPENVPNCONN:
  1479. // OpenVPN connection request packet
  1480. t->Token[6] = CopyStr("OPENVPN_CONNECTv4");
  1481. break;
  1482. case L7_IKECONN:
  1483. // IKE connection request packet
  1484. t->Token[6] = CopyStr("IKE_CONNECTv4");
  1485. if (p->L7.IkeHeader != NULL)
  1486. {
  1487. if (p->L7.IkeHeader->ExchangeType == IKE_EXCHANGE_TYPE_MAIN)
  1488. {
  1489. t->Token[7] = CopyStr("MainMode");
  1490. }
  1491. else if (p->L7.IkeHeader->ExchangeType == IKE_EXCHANGE_TYPE_MAIN)
  1492. {
  1493. t->Token[7] = CopyStr("AgressiveMode");
  1494. }
  1495. {
  1496. Format(tmp, sizeof(tmp), "InitiatorCookie=%I64u ResponderCookie=%I64u "
  1497. "Version=0x%x ExchangeType=0x%x Flag=0x%x MessageId=%u MessageSize=%u",
  1498. Endian64(p->L7.IkeHeader->InitiatorCookie),
  1499. Endian64(p->L7.IkeHeader->ResponderCookie),
  1500. p->L7.IkeHeader->Version,
  1501. p->L7.IkeHeader->ExchangeType,
  1502. p->L7.IkeHeader->Flag,
  1503. Endian32(p->L7.IkeHeader->MessageId),
  1504. Endian32(p->L7.IkeHeader->MessageSize));
  1505. t->Token[14] = CopyStr(tmp);
  1506. }
  1507. }
  1508. break;
  1509. case L7_DNS:
  1510. // DNS query
  1511. t->Token[6] = CopyStr("DNSv4");
  1512. t->Token[7] = CopyStr("DNS_Query");
  1513. t->Token[14] = CopyStr(p->DnsQueryHost);
  1514. break;
  1515. default:
  1516. // Unknown Packet
  1517. t->Token[6] = CopyStr("UDPv4");
  1518. break;
  1519. }
  1520. break;
  1521. case L4_FRAGMENT:
  1522. // Fragment
  1523. snprintf(tmp, sizeof(tmp), "IPv4_Fragment(0x%02X)", p->L3.IPv4Header->Protocol);
  1524. t->Token[6] = CopyStr(tmp);
  1525. break;
  1526. case L4_UNKNOWN:
  1527. // Unknown Packet
  1528. snprintf(tmp, sizeof(tmp), "IPv4(0x%02X)", p->L3.IPv4Header->Protocol);
  1529. t->Token[6] = CopyStr(tmp);
  1530. break;
  1531. }
  1532. // Source IP address
  1533. IPToStr32(tmp, sizeof(tmp), p->L3.IPv4Header->SrcIP);
  1534. t->Token[8] = CopyStr(tmp);
  1535. // Destination IP address
  1536. IPToStr32(tmp, sizeof(tmp), p->L3.IPv4Header->DstIP);
  1537. t->Token[10] = CopyStr(tmp);
  1538. break;
  1539. case L3_IPV6:
  1540. // IPv6 packet
  1541. switch (p->TypeL4)
  1542. {
  1543. case L4_ICMPV6:
  1544. {
  1545. char info[MAX_SIZE];
  1546. ICMPV6_HEADER_INFO *icmp = &p->ICMPv6HeaderPacketInfo;
  1547. ICMPV6_OPTION_LIST *ol = &icmp->OptionList;
  1548. Zero(info, sizeof(info));
  1549. // ICMPv6 packet
  1550. t->Token[6] = CopyStr("ICMPv6");
  1551. switch (icmp->Type)
  1552. {
  1553. case ICMPV6_TYPE_ECHO_REQUEST:
  1554. // Echo request
  1555. t->Token[7] = CopyStr("Echo Request");
  1556. snprintf(tmp, sizeof(tmp), "EchoDataSize=%u ", icmp->EchoDataSize);
  1557. StrCat(info, sizeof(info), tmp);
  1558. break;
  1559. case ICMPV6_TYPE_ECHO_RESPONSE:
  1560. // Echo response
  1561. t->Token[7] = CopyStr("Echo Reply");
  1562. snprintf(tmp, sizeof(tmp), "EchoDataSize=%u ", icmp->EchoDataSize);
  1563. StrCat(info, sizeof(info), tmp);
  1564. break;
  1565. case ICMPV6_TYPE_ROUTER_SOLICIATION:
  1566. {
  1567. ICMPV6_ROUTER_SOLICIATION_HEADER *h = icmp->Headers.RouterSoliciationHeader;
  1568. // Router Solicitation
  1569. t->Token[7] = CopyStr("Router Soliciation");
  1570. if (h != NULL)
  1571. {
  1572. // No additional information
  1573. }
  1574. }
  1575. break;
  1576. case ICMPV6_TYPE_ROUTER_ADVERTISEMENT:
  1577. {
  1578. ICMPV6_ROUTER_ADVERTISEMENT_HEADER *h = icmp->Headers.RouterAdvertisementHeader;
  1579. // Router Advertisement
  1580. t->Token[7] = CopyStr("Router Advertisement");
  1581. if (h != NULL)
  1582. {
  1583. snprintf(tmp, sizeof(tmp), "CurHopLimit=%u "
  1584. "Flags=0x%02X Lifetime=%u ",
  1585. h->CurHopLimit, h->Flags, Endian16(h->Lifetime));
  1586. StrCat(info, sizeof(info), tmp);
  1587. }
  1588. }
  1589. break;
  1590. case ICMPV6_TYPE_NEIGHBOR_SOLICIATION:
  1591. {
  1592. ICMPV6_NEIGHBOR_SOLICIATION_HEADER *h = icmp->Headers.NeighborSoliciationHeader;
  1593. // Neighbor Solicitation
  1594. t->Token[7] = CopyStr("Neighbor Soliciation");
  1595. if (h != NULL)
  1596. {
  1597. char tmp2[MAX_SIZE];
  1598. IP6AddrToStr(tmp2, sizeof(tmp2), &h->TargetAddress);
  1599. snprintf(tmp, sizeof(tmp), "TargetAddress=%s ",
  1600. tmp2);
  1601. StrCat(info, sizeof(info), tmp);
  1602. }
  1603. }
  1604. break;
  1605. case ICMPV6_TYPE_NEIGHBOR_ADVERTISEMENT:
  1606. {
  1607. ICMPV6_NEIGHBOR_ADVERTISEMENT_HEADER *h = icmp->Headers.NeighborAdvertisementHeader;
  1608. // Neighbor Advertisement
  1609. t->Token[7] = CopyStr("Neighbor Advertisement");
  1610. if (h != NULL)
  1611. {
  1612. char tmp2[MAX_SIZE];
  1613. IP6AddrToStr(tmp2, sizeof(tmp2), &h->TargetAddress);
  1614. snprintf(tmp, sizeof(tmp), "TargetAddress=%s Flags=0x%02X ",
  1615. tmp2, h->Flags);
  1616. StrCat(info, sizeof(info), tmp);
  1617. }
  1618. }
  1619. break;
  1620. default:
  1621. {
  1622. snprintf(tmp, sizeof(tmp), "Type=%u", icmp->Type);
  1623. t->Token[7] = CopyStr(tmp);
  1624. }
  1625. break;
  1626. }
  1627. // Option data
  1628. if (ol->SourceLinkLayer != NULL)
  1629. {
  1630. char tmp2[MAX_SIZE];
  1631. BinToStr(tmp2, sizeof(tmp2), ol->SourceLinkLayer->Address, 6);
  1632. snprintf(tmp, sizeof(tmp), "SourceLinkLayer=%s ", tmp2);
  1633. StrCat(info, sizeof(info), tmp);
  1634. }
  1635. if (ol->TargetLinkLayer != NULL)
  1636. {
  1637. char tmp2[MAX_SIZE];
  1638. BinToStr(tmp2, sizeof(tmp2), ol->TargetLinkLayer->Address, 6);
  1639. snprintf(tmp, sizeof(tmp), "TargetLinkLayer=%s ", tmp2);
  1640. StrCat(info, sizeof(info), tmp);
  1641. }
  1642. if (ol->Prefix != NULL)
  1643. {
  1644. char tmp2[MAX_SIZE];
  1645. IP6AddrToStr(tmp2, sizeof(tmp2), &ol->Prefix->Prefix);
  1646. snprintf(tmp, sizeof(tmp), "Prefix=%s/%u PrefixFlag=0x%02X ", tmp2,
  1647. ol->Prefix->SubnetLength, ol->Prefix->Flags);
  1648. StrCat(info, sizeof(info), tmp);
  1649. }
  1650. if (ol->Mtu != NULL)
  1651. {
  1652. snprintf(tmp, sizeof(tmp), "Mtu=%u ", Endian32(ol->Mtu->Mtu));
  1653. StrCat(info, sizeof(info), tmp);
  1654. }
  1655. Trim(info);
  1656. if (IsEmptyStr(info) == false)
  1657. {
  1658. t->Token[14] = CopyStr(info);
  1659. }
  1660. }
  1661. break;
  1662. case L4_TCP:
  1663. // TCP packet
  1664. tcp_conn = false;
  1665. if (p->L4.TCPHeader->Flag & TCP_SYN || p->L4.TCPHeader->Flag & TCP_RST || p->L4.TCPHeader->Flag & TCP_FIN)
  1666. {
  1667. tcp_conn = true;
  1668. }
  1669. t->Token[6] = CopyStr(tcp_conn ? "TCP_CONNECTv6" : "TCP_DATAv6");
  1670. t->Token[7] = TcpFlagStr(p->L4.TCPHeader->Flag);
  1671. t->Token[9] = PortStr(pl->Cedar, Endian16(p->L4.TCPHeader->SrcPort), false);
  1672. t->Token[11] = PortStr(pl->Cedar, Endian16(p->L4.TCPHeader->DstPort), false);
  1673. ToStr(tmp, Endian32(p->L4.TCPHeader->SeqNumber));
  1674. t->Token[12] = CopyStr(tmp);
  1675. ToStr(tmp, Endian32(p->L4.TCPHeader->AckNumber));
  1676. t->Token[13] = CopyStr(tmp);
  1677. snprintf(tmp, sizeof(tmp), "WindowSize=%u", Endian16(p->L4.TCPHeader->WindowSize));
  1678. if (p->HttpLog != NULL)
  1679. {
  1680. char *tmp2;
  1681. UINT tmp2_size;
  1682. char *http_str = BuildHttpLogStr(p->HttpLog);
  1683. tmp2_size = StrLen(http_str) + 16 + StrLen(tmp);
  1684. tmp2 = Malloc(tmp2_size);
  1685. StrCpy(tmp2, tmp2_size, tmp);
  1686. if (IsEmptyStr(http_str) == false)
  1687. {
  1688. StrCat(tmp2, tmp2_size, " ");
  1689. StrCat(tmp2, tmp2_size, http_str);
  1690. }
  1691. Free(http_str);
  1692. t->Token[14] = tmp2;
  1693. }
  1694. else
  1695. {
  1696. t->Token[14] = CopyStr(tmp);
  1697. }
  1698. break;
  1699. case L4_UDP:
  1700. // UDP packet
  1701. t->Token[9] = PortStr(pl->Cedar, Endian16(p->L4.UDPHeader->SrcPort), true);
  1702. t->Token[11] = PortStr(pl->Cedar, Endian16(p->L4.UDPHeader->DstPort), true);
  1703. switch (p->TypeL7)
  1704. {
  1705. case L7_OPENVPNCONN:
  1706. // OpenVPN connection request packet
  1707. t->Token[6] = CopyStr("OPENVPN_CONNECTv6");
  1708. break;
  1709. case L7_IKECONN:
  1710. // IKE connection request packet
  1711. t->Token[6] = CopyStr("IKE_CONNECTv6");
  1712. if (p->L7.IkeHeader != NULL)
  1713. {
  1714. if (p->L7.IkeHeader->ExchangeType == IKE_EXCHANGE_TYPE_MAIN)
  1715. {
  1716. t->Token[7] = CopyStr("MainMode");
  1717. }
  1718. else if (p->L7.IkeHeader->ExchangeType == IKE_EXCHANGE_TYPE_MAIN)
  1719. {
  1720. t->Token[7] = CopyStr("AgressiveMode");
  1721. }
  1722. {
  1723. Format(tmp, sizeof(tmp), "InitiatorCookie=%I64u ResponderCookie=%I64u "
  1724. "Version=0x%x ExchangeType=0x%x Flag=0x%x MessageId=%u MessageSize=%u",
  1725. Endian64(p->L7.IkeHeader->InitiatorCookie),
  1726. Endian64(p->L7.IkeHeader->ResponderCookie),
  1727. p->L7.IkeHeader->Version,
  1728. p->L7.IkeHeader->ExchangeType,
  1729. p->L7.IkeHeader->Flag,
  1730. Endian32(p->L7.IkeHeader->MessageId),
  1731. Endian32(p->L7.IkeHeader->MessageSize));
  1732. t->Token[14] = CopyStr(tmp);
  1733. }
  1734. }
  1735. break;
  1736. case L7_DNS:
  1737. // DNS query
  1738. t->Token[6] = CopyStr("DNSv6");
  1739. t->Token[7] = CopyStr("DNS_Query");
  1740. t->Token[14] = CopyStr(p->DnsQueryHost);
  1741. break;
  1742. default:
  1743. t->Token[6] = CopyStr("UDPv6");
  1744. break;
  1745. }
  1746. break;
  1747. case L4_FRAGMENT:
  1748. // Fragment packet
  1749. snprintf(tmp, sizeof(tmp), "IPv6_Fragment(0x%02X)", p->IPv6HeaderPacketInfo.Protocol);
  1750. t->Token[6] = CopyStr(tmp);
  1751. break;
  1752. case L4_UNKNOWN:
  1753. // Unknown Packet
  1754. snprintf(tmp, sizeof(tmp), "IPv6(0x%02X)", p->IPv6HeaderPacketInfo.Protocol);
  1755. t->Token[6] = CopyStr(tmp);
  1756. break;
  1757. }
  1758. // Source IP address
  1759. IP6AddrToStr(tmp, sizeof(tmp), &p->L3.IPv6Header->SrcAddress);
  1760. t->Token[8] = CopyStr(tmp);
  1761. // Destination IP address
  1762. IP6AddrToStr(tmp, sizeof(tmp), &p->L3.IPv6Header->DestAddress);
  1763. t->Token[10] = CopyStr(tmp);
  1764. break;
  1765. case L3_UNKNOWN:
  1766. // Unknown Packet
  1767. snprintf(tmp, sizeof(tmp), "Proto=0x%04X", Endian16(p->MacHeader->Protocol));
  1768. t->Token[6] = CopyStr(tmp);
  1769. break;
  1770. }
  1771. if (p->PacketData != NULL && (pl->PurePacket == false || pl->PurePacketNoPayload == false))
  1772. {
  1773. char *data = Malloc(p->PacketSize * 2 + 1);
  1774. BinToStr(data, p->PacketSize * 2 + 1, p->PacketData, p->PacketSize);
  1775. t->Token[15] = data;
  1776. }
  1777. // Physical IP addresses
  1778. if (StrLen(pl->SrcPhysicalIP) != 0)
  1779. {
  1780. t->Token[16] = CopyStr(pl->SrcPhysicalIP);
  1781. }
  1782. if (StrLen(pl->DestPhysicalIP) != 0)
  1783. {
  1784. t->Token[17] = CopyStr(pl->DestPhysicalIP);
  1785. }
  1786. }
  1787. else
  1788. {
  1789. t->Token[6] = CopyUniToUtf(_UU("LH_PACKET_LOG_NO_LOG_OSS"));
  1790. }
  1791. s = GenCsvLine(t);
  1792. FreeToken(t);
  1793. // Discard the packet data
  1794. if (pl->PurePacket == false)
  1795. {
  1796. FreeClonePacket(p);
  1797. }
  1798. else
  1799. {
  1800. Free(p->PacketData);
  1801. FreePacket(p);
  1802. }
  1803. // Release the session
  1804. if (pl->SrcSession != NULL)
  1805. {
  1806. Dec(pl->SrcSession->LoggingRecordCount);
  1807. ReleaseSession(pl->SrcSession);
  1808. }
  1809. Free(pl);
  1810. return s;
  1811. }
  1812. // Convert TCP flags to a string
  1813. char *TcpFlagStr(UCHAR flag)
  1814. {
  1815. char tmp[MAX_SIZE];
  1816. StrCpy(tmp, sizeof(tmp), "");
  1817. if (flag & TCP_FIN)
  1818. {
  1819. StrCat(tmp, sizeof(tmp), "FIN+");
  1820. }
  1821. if (flag & TCP_SYN)
  1822. {
  1823. StrCat(tmp, sizeof(tmp), "SYN+");
  1824. }
  1825. if (flag & TCP_RST)
  1826. {
  1827. StrCat(tmp, sizeof(tmp), "RST+");
  1828. }
  1829. if (flag & TCP_PSH)
  1830. {
  1831. StrCat(tmp, sizeof(tmp), "PSH+");
  1832. }
  1833. if (flag & TCP_ACK)
  1834. {
  1835. StrCat(tmp, sizeof(tmp), "ACK+");
  1836. }
  1837. if (flag & TCP_URG)
  1838. {
  1839. StrCat(tmp, sizeof(tmp), "URG+");
  1840. }
  1841. if (StrLen(tmp) >= 1)
  1842. {
  1843. if (tmp[StrLen(tmp) - 1] == '+')
  1844. {
  1845. tmp[StrLen(tmp) - 1] = 0;
  1846. }
  1847. }
  1848. return CopyStr(tmp);
  1849. }
  1850. // Generate a port string
  1851. char *PortStr(CEDAR *cedar, UINT port, bool udp)
  1852. {
  1853. char tmp[MAX_SIZE];
  1854. char *name;
  1855. // Validate arguments
  1856. if (cedar == NULL)
  1857. {
  1858. return NULL;
  1859. }
  1860. name = GetSvcName(cedar, udp, port);
  1861. if (name == NULL)
  1862. {
  1863. snprintf(tmp, sizeof(tmp), "%u", port);
  1864. }
  1865. else
  1866. {
  1867. snprintf(tmp, sizeof(tmp), "%s(%u)", name, port);
  1868. }
  1869. return CopyStr(tmp);
  1870. }
  1871. // Generate a comma-separated string
  1872. char *GenCsvLine(TOKEN_LIST *t)
  1873. {
  1874. UINT i;
  1875. BUF *b;
  1876. char *ret;
  1877. // Validate arguments
  1878. if (t == NULL)
  1879. {
  1880. return NULL;
  1881. }
  1882. b = NewBuf();
  1883. for (i = 0;i < t->NumTokens;i++)
  1884. {
  1885. if (t->Token[i] != NULL)
  1886. {
  1887. ReplaceForCsv(t->Token[i]);
  1888. if (StrLen(t->Token[i]) == 0)
  1889. {
  1890. WriteBuf(b, "-", 1);
  1891. }
  1892. else
  1893. {
  1894. WriteBuf(b, t->Token[i], StrLen(t->Token[i]));
  1895. }
  1896. }
  1897. else
  1898. {
  1899. WriteBuf(b, "-", 1);
  1900. }
  1901. if (i != (t->NumTokens - 1))
  1902. {
  1903. WriteBuf(b, ",", 1);
  1904. }
  1905. }
  1906. WriteBuf(b, "\0", 1);
  1907. ret = (char *)b->Buf;
  1908. Free(b);
  1909. return ret;
  1910. }
  1911. // Replace the strings in the CSV correctly
  1912. void ReplaceForCsv(char *str)
  1913. {
  1914. UINT i, len;
  1915. // Validate arguments
  1916. if (str == NULL)
  1917. {
  1918. return;
  1919. }
  1920. // If there are blanks, trim it
  1921. Trim(str);
  1922. len = StrLen(str);
  1923. for (i = 0;i < len;i++)
  1924. {
  1925. // Convert the comma to underscore
  1926. if (str[i] == ',')
  1927. {
  1928. str[i] = '_';
  1929. }
  1930. }
  1931. }
  1932. // Set the directory name of the log
  1933. void SetLogDirName(LOG *g, char *dir)
  1934. {
  1935. // Validate arguments
  1936. if (g == NULL || dir == NULL)
  1937. {
  1938. return;
  1939. }
  1940. LockLog(g);
  1941. {
  1942. if (g->DirName != NULL)
  1943. {
  1944. Free(g->DirName);
  1945. }
  1946. g->DirName = CopyStr(dir);
  1947. }
  1948. UnlockLog(g);
  1949. }
  1950. // Set the name of the log
  1951. void SetLogPrefix(LOG *g, char *prefix)
  1952. {
  1953. // Validate arguments
  1954. if (g == NULL || prefix == NULL)
  1955. {
  1956. return;
  1957. }
  1958. LockLog(g);
  1959. {
  1960. if (g->DirName != NULL)
  1961. {
  1962. Free(g->Prefix);
  1963. }
  1964. g->DirName = CopyStr(prefix);
  1965. }
  1966. UnlockLog(g);
  1967. }
  1968. // Set the switch type of log
  1969. void SetLogSwitchType(LOG *g, UINT switch_type)
  1970. {
  1971. // Validate arguments
  1972. if (g == NULL)
  1973. {
  1974. return;
  1975. }
  1976. LockLog(g);
  1977. {
  1978. g->SwitchType = switch_type;
  1979. }
  1980. UnlockLog(g);
  1981. }
  1982. // Parse the string record
  1983. char *StringRecordParseProc(RECORD *rec)
  1984. {
  1985. // Validate arguments
  1986. if (rec == NULL)
  1987. {
  1988. return NULL;
  1989. }
  1990. return (char *)rec->Data;
  1991. }
  1992. // Add an Unicode string record in the log
  1993. void InsertUnicodeRecord(LOG *g, wchar_t *unistr)
  1994. {
  1995. char *str;
  1996. UINT size;
  1997. // Validate arguments
  1998. if (g == NULL || unistr == NULL)
  1999. {
  2000. return;
  2001. }
  2002. size = CalcUniToUtf8(unistr) + 32;
  2003. str = ZeroMalloc(size);
  2004. UniToUtf8((BYTE *)str, size, unistr);
  2005. InsertStringRecord(g, str);
  2006. Free(str);
  2007. }
  2008. // Add a string record to the log
  2009. void InsertStringRecord(LOG *g, char *str)
  2010. {
  2011. char *str_copy;
  2012. // Validate arguments
  2013. if (g == NULL || str == NULL)
  2014. {
  2015. return;
  2016. }
  2017. str_copy = CopyStr(str);
  2018. InsertRecord(g, str_copy, StringRecordParseProc);
  2019. }
  2020. // Add a record to the log
  2021. void InsertRecord(LOG *g, void *data, RECORD_PARSE_PROC *proc)
  2022. {
  2023. RECORD *rec;
  2024. // Validate arguments
  2025. if (g == NULL || data == NULL || proc == NULL)
  2026. {
  2027. return;
  2028. }
  2029. rec = ZeroMalloc(sizeof(RECORD));
  2030. rec->Tick = Tick64();
  2031. rec->ParseProc = proc;
  2032. rec->Data = data;
  2033. LockQueue(g->RecordQueue);
  2034. {
  2035. InsertQueue(g->RecordQueue, rec);
  2036. }
  2037. UnlockQueue(g->RecordQueue);
  2038. Set(g->Event);
  2039. }
  2040. // Lock the log
  2041. void LockLog(LOG *g)
  2042. {
  2043. // Validate arguments
  2044. if (g == NULL)
  2045. {
  2046. return;
  2047. }
  2048. Lock(g->lock);
  2049. }
  2050. // Unlock the log
  2051. void UnlockLog(LOG *g)
  2052. {
  2053. // Validate arguments
  2054. if (g == NULL)
  2055. {
  2056. return;
  2057. }
  2058. Unlock(g->lock);
  2059. }
  2060. // Generate the string portion of the log file name from the time and the switching rule
  2061. void MakeLogFileNameStringFromTick(LOG *g, char *str, UINT size, UINT64 tick, UINT switch_type)
  2062. {
  2063. UINT64 time;
  2064. SYSTEMTIME st;
  2065. // Validate arguments
  2066. if (str == NULL || g == NULL)
  2067. {
  2068. return;
  2069. }
  2070. if (g->CacheFlag)
  2071. {
  2072. if (g->LastTick == tick &&
  2073. g->LastSwitchType == switch_type)
  2074. {
  2075. StrCpy(str, size, g->LastStr);
  2076. return;
  2077. }
  2078. }
  2079. time = TickToTime(tick);
  2080. UINT64ToSystem(&st, SystemToLocal64(time));
  2081. switch (switch_type)
  2082. {
  2083. case LOG_SWITCH_SECOND: // Secondly basis
  2084. snprintf(str, size, "_%04u%02u%02u_%02u%02u%02u",
  2085. st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute, st.wSecond);
  2086. break;
  2087. case LOG_SWITCH_MINUTE: // Minutely basis
  2088. snprintf(str, size, "_%04u%02u%02u_%02u%02u",
  2089. st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute);
  2090. break;
  2091. case LOG_SWITCH_HOUR: // Hourly basis
  2092. snprintf(str, size, "_%04u%02u%02u_%02u", st.wYear, st.wMonth, st.wDay, st.wHour);
  2093. break;
  2094. case LOG_SWITCH_DAY: // Daily basis
  2095. snprintf(str, size, "_%04u%02u%02u", st.wYear, st.wMonth, st.wDay);
  2096. break;
  2097. case LOG_SWITCH_MONTH: // Monthly basis
  2098. snprintf(str, size, "_%04u%02u", st.wYear, st.wMonth);
  2099. break;
  2100. default: // Without switching
  2101. snprintf(str, size, "");
  2102. break;
  2103. }
  2104. g->CacheFlag = true;
  2105. g->LastTick = tick;
  2106. g->LastSwitchType = switch_type;
  2107. StrCpy(g->LastStr, sizeof(g->LastStr), str);
  2108. }
  2109. // Create a log file name
  2110. bool MakeLogFileName(LOG *g, char *name, UINT size, char *dir, char *prefix, UINT64 tick, UINT switch_type, UINT num, char *old_datestr)
  2111. {
  2112. char tmp[MAX_SIZE];
  2113. char tmp2[64];
  2114. bool ret = false;
  2115. // Validate arguments
  2116. if (g == NULL || name == NULL || prefix == NULL || old_datestr == NULL)
  2117. {
  2118. return false;
  2119. }
  2120. MakeLogFileNameStringFromTick(g, tmp, sizeof(tmp), tick, switch_type);
  2121. if (num == 0)
  2122. {
  2123. tmp2[0] = 0;
  2124. }
  2125. else
  2126. {
  2127. UINT64 max_log_size = GetMaxLogSize();
  2128. if (max_log_size == MAX_LOG_SIZE_DEFAULT)
  2129. {
  2130. snprintf(tmp2, sizeof(tmp2), "~%02u", num);
  2131. }
  2132. else
  2133. {
  2134. char tag[32];
  2135. char c = '2';
  2136. if (max_log_size >= 1000000000ULL)
  2137. {
  2138. c = '3';
  2139. }
  2140. else if (max_log_size >= 100000000ULL)
  2141. {
  2142. c = '4';
  2143. }
  2144. else if (max_log_size >= 10000000ULL)
  2145. {
  2146. c = '5';
  2147. }
  2148. else if (max_log_size >= 1000000ULL)
  2149. {
  2150. c = '6';
  2151. }
  2152. else if (max_log_size >= 100000ULL)
  2153. {
  2154. c = '7';
  2155. }
  2156. else if (max_log_size >= 10000ULL)
  2157. {
  2158. c = '8';
  2159. }
  2160. else if (max_log_size >= 1000ULL)
  2161. {
  2162. c = '9';
  2163. }
  2164. StrCpy(tag, sizeof(tag), "~%02u");
  2165. tag[3] = c;
  2166. snprintf(tmp2, sizeof(tmp2), tag, num);
  2167. }
  2168. }
  2169. if (strcmp(old_datestr, tmp) != 0)
  2170. {
  2171. ret = true;
  2172. strcpy(old_datestr, tmp);
  2173. }
  2174. snprintf(name, size, "%s%s%s%s%s.log", dir,
  2175. StrLen(dir) == 0 ? "" : "/",
  2176. prefix, tmp, tmp2
  2177. );
  2178. return ret;
  2179. }
  2180. // Wait until the log have been flushed
  2181. void WaitLogFlush(LOG *g)
  2182. {
  2183. // Validate arguments
  2184. if (g == NULL)
  2185. {
  2186. return;
  2187. }
  2188. while (true)
  2189. {
  2190. UINT num;
  2191. LockQueue(g->RecordQueue);
  2192. {
  2193. num = g->RecordQueue->num_item;
  2194. }
  2195. UnlockQueue(g->RecordQueue);
  2196. if (num == 0)
  2197. {
  2198. break;
  2199. }
  2200. Wait(g->FlushEvent, 100);
  2201. }
  2202. }
  2203. // Set the max log size
  2204. void SetMaxLogSize(UINT64 size)
  2205. {
  2206. if (size == 0)
  2207. {
  2208. size = MAX_LOG_SIZE_DEFAULT;
  2209. }
  2210. logger_max_log_size = size;
  2211. }
  2212. // Get the max log size
  2213. UINT64 GetMaxLogSize()
  2214. {
  2215. UINT64 ret = logger_max_log_size;
  2216. if (ret == 0)
  2217. {
  2218. ret = MAX_LOG_SIZE_DEFAULT;
  2219. }
  2220. return ret;
  2221. }
  2222. // Logging thread
  2223. void LogThread(THREAD *thread, void *param)
  2224. {
  2225. LOG *g;
  2226. IO *io;
  2227. BUF *b;
  2228. bool flag = false;
  2229. char current_file_name[MAX_SIZE];
  2230. char current_logfile_datename[MAX_SIZE];
  2231. bool last_priority_flag = false;
  2232. bool log_date_changed = false;
  2233. // Validate arguments
  2234. if (thread == NULL || param == NULL)
  2235. {
  2236. return;
  2237. }
  2238. Zero(current_file_name, sizeof(current_file_name));
  2239. Zero(current_logfile_datename, sizeof(current_logfile_datename));
  2240. g = (LOG *)param;
  2241. io = NULL;
  2242. b = NewBuf();
  2243. #ifdef OS_WIN32
  2244. // Lower priority to bottom
  2245. MsSetThreadPriorityIdle();
  2246. #endif // OS_WIN32
  2247. NoticeThreadInit(thread);
  2248. while (true)
  2249. {
  2250. RECORD *rec;
  2251. UINT64 s = Tick64();
  2252. while (true)
  2253. {
  2254. char file_name[MAX_SIZE];
  2255. UINT num;
  2256. // Retrieve a record from the head of the queue
  2257. LockQueue(g->RecordQueue);
  2258. {
  2259. rec = GetNext(g->RecordQueue);
  2260. num = g->RecordQueue->num_item;
  2261. }
  2262. UnlockQueue(g->RecordQueue);
  2263. #ifdef OS_WIN32
  2264. if (num >= LOG_ENGINE_SAVE_START_CACHE_COUNT)
  2265. {
  2266. // Raise the priority
  2267. if (last_priority_flag == false)
  2268. {
  2269. Debug("LOG_THREAD: MsSetThreadPriorityRealtime\n");
  2270. MsSetThreadPriorityRealtime();
  2271. last_priority_flag = true;
  2272. }
  2273. }
  2274. if (num < (LOG_ENGINE_SAVE_START_CACHE_COUNT / 2))
  2275. {
  2276. // Restore the priority
  2277. if (last_priority_flag)
  2278. {
  2279. Debug("LOG_THREAD: MsSetThreadPriorityIdle\n");
  2280. MsSetThreadPriorityIdle();
  2281. last_priority_flag = false;
  2282. }
  2283. }
  2284. #endif // OS_WIN32
  2285. if (b->Size > GetMaxLogSize())
  2286. {
  2287. // Erase if the size of the buffer is larger than the maximum log file size
  2288. ClearBuf(b);
  2289. }
  2290. if (b->Size >= LOG_ENGINE_BUFFER_CACHE_SIZE_MAX)
  2291. {
  2292. // Write the contents of the buffer to the file
  2293. if (io != NULL)
  2294. {
  2295. if ((g->CurrentFilePointer + (UINT64)b->Size) > GetMaxLogSize())
  2296. {
  2297. if (g->log_number_incremented == false)
  2298. {
  2299. g->CurrentLogNumber++;
  2300. g->log_number_incremented = true;
  2301. }
  2302. }
  2303. else
  2304. {
  2305. if (FileWrite(io, b->Buf, b->Size) == false)
  2306. {
  2307. FileCloseEx(io, true);
  2308. // If it fails to write to the file,
  2309. // erase the buffer and give up
  2310. ClearBuf(b);
  2311. io = NULL;
  2312. }
  2313. else
  2314. {
  2315. g->CurrentFilePointer += (UINT64)b->Size;
  2316. ClearBuf(b);
  2317. }
  2318. }
  2319. }
  2320. }
  2321. if (rec == NULL)
  2322. {
  2323. if (b->Size != 0)
  2324. {
  2325. // Write the contents of the buffer to the file
  2326. if (io != NULL)
  2327. {
  2328. if ((g->CurrentFilePointer + (UINT64)b->Size) > GetMaxLogSize())
  2329. {
  2330. if (g->log_number_incremented == false)
  2331. {
  2332. g->CurrentLogNumber++;
  2333. g->log_number_incremented = true;
  2334. }
  2335. }
  2336. else
  2337. {
  2338. if (FileWrite(io, b->Buf, b->Size) == false)
  2339. {
  2340. FileCloseEx(io, true);
  2341. // If it fails to write to the file,
  2342. // erase the buffer and give up
  2343. ClearBuf(b);
  2344. io = NULL;
  2345. }
  2346. else
  2347. {
  2348. g->CurrentFilePointer += (UINT64)b->Size;
  2349. ClearBuf(b);
  2350. }
  2351. }
  2352. }
  2353. }
  2354. Set(g->FlushEvent);
  2355. break;
  2356. }
  2357. // Generate a log file name
  2358. LockLog(g);
  2359. {
  2360. log_date_changed = MakeLogFileName(g, file_name, sizeof(file_name),
  2361. g->DirName, g->Prefix, rec->Tick, g->SwitchType, g->CurrentLogNumber, current_logfile_datename);
  2362. if (log_date_changed)
  2363. {
  2364. UINT i;
  2365. g->CurrentLogNumber = 0;
  2366. MakeLogFileName(g, file_name, sizeof(file_name),
  2367. g->DirName, g->Prefix, rec->Tick, g->SwitchType, 0, current_logfile_datename);
  2368. for (i = 0;;i++)
  2369. {
  2370. char tmp[MAX_SIZE];
  2371. MakeLogFileName(g, tmp, sizeof(tmp),
  2372. g->DirName, g->Prefix, rec->Tick, g->SwitchType, i, current_logfile_datename);
  2373. if (IsFileExists(tmp) == false)
  2374. {
  2375. break;
  2376. }
  2377. StrCpy(file_name, sizeof(file_name), tmp);
  2378. g->CurrentLogNumber = i;
  2379. }
  2380. }
  2381. }
  2382. UnlockLog(g);
  2383. if (io != NULL)
  2384. {
  2385. if (StrCmp(current_file_name, file_name) != 0)
  2386. {
  2387. // If a log file is currently opened and writing to another log
  2388. // file is needed for this time, write the contents of the
  2389. //buffer and close the log file. Write the contents of the buffer
  2390. if (io != NULL)
  2391. {
  2392. if (log_date_changed)
  2393. {
  2394. if ((g->CurrentFilePointer + (UINT64)b->Size) <= GetMaxLogSize())
  2395. {
  2396. if (FileWrite(io, b->Buf, b->Size) == false)
  2397. {
  2398. FileCloseEx(io, true);
  2399. ClearBuf(b);
  2400. io = NULL;
  2401. }
  2402. else
  2403. {
  2404. g->CurrentFilePointer += (UINT64)b->Size;
  2405. ClearBuf(b);
  2406. }
  2407. }
  2408. }
  2409. // Close the file
  2410. FileCloseEx(io, true);
  2411. }
  2412. g->log_number_incremented = false;
  2413. // Open or create a new log file
  2414. StrCpy(current_file_name, sizeof(current_file_name), file_name);
  2415. io = FileOpen(file_name, true);
  2416. if (io == NULL)
  2417. {
  2418. // Create a log file
  2419. LockLog(g);
  2420. {
  2421. MakeDir(g->DirName);
  2422. #ifdef OS_WIN32
  2423. Win32SetFolderCompress(g->DirName, true);
  2424. #endif // OS_WIN32
  2425. }
  2426. UnlockLog(g);
  2427. io = FileCreate(file_name);
  2428. g->CurrentFilePointer = 0;
  2429. }
  2430. else
  2431. {
  2432. // Seek to the end of the log file
  2433. g->CurrentFilePointer = FileSize64(io);
  2434. FileSeek(io, SEEK_END, 0);
  2435. }
  2436. }
  2437. }
  2438. else
  2439. {
  2440. // Open or create a new log file
  2441. StrCpy(current_file_name, sizeof(current_file_name), file_name);
  2442. io = FileOpen(file_name, true);
  2443. if (io == NULL)
  2444. {
  2445. // Create a log file
  2446. LockLog(g);
  2447. {
  2448. MakeDir(g->DirName);
  2449. #ifdef OS_WIN32
  2450. Win32SetFolderCompress(g->DirName, true);
  2451. #endif // OS_WIN32
  2452. }
  2453. UnlockLog(g);
  2454. io = FileCreate(file_name);
  2455. g->CurrentFilePointer = 0;
  2456. if (io == NULL)
  2457. {
  2458. //Debug("Logging.c: SleepThread(30);\n");
  2459. SleepThread(30);
  2460. }
  2461. }
  2462. else
  2463. {
  2464. // Seek to the end of the log file
  2465. g->CurrentFilePointer = FileSize64(io);
  2466. FileSeek(io, SEEK_END, 0);
  2467. }
  2468. g->log_number_incremented = false;
  2469. }
  2470. // Write the contents of the log to the buffer
  2471. WriteRecordToBuffer(b, rec);
  2472. // Release the memory of record
  2473. Free(rec);
  2474. if (io == NULL)
  2475. {
  2476. break;
  2477. }
  2478. }
  2479. if (g->Halt)
  2480. {
  2481. // Break after finishing to save all records
  2482. // when the stop flag stood
  2483. UINT num;
  2484. if (flag == false)
  2485. {
  2486. #ifdef OS_WIN32
  2487. MsSetThreadPriorityRealtime();
  2488. #endif // OS_WIN32
  2489. flag = true;
  2490. }
  2491. LockQueue(g->RecordQueue);
  2492. {
  2493. num = g->RecordQueue->num_item;
  2494. }
  2495. UnlockQueue(g->RecordQueue);
  2496. if (num == 0 || io == NULL)
  2497. {
  2498. break;
  2499. }
  2500. }
  2501. else
  2502. {
  2503. Wait(g->Event, 9821);
  2504. }
  2505. }
  2506. if (io != NULL)
  2507. {
  2508. FileCloseEx(io, true);
  2509. }
  2510. FreeBuf(b);
  2511. }
  2512. // Write the contents of the log to the buffer
  2513. void WriteRecordToBuffer(BUF *b, RECORD *r)
  2514. {
  2515. UINT64 time;
  2516. char time_str[MAX_SIZE];
  2517. char date_str[MAX_SIZE];
  2518. char *s;
  2519. // Validate arguments
  2520. if (b == NULL || r == NULL)
  2521. {
  2522. return;
  2523. }
  2524. // Get the time
  2525. time = SystemToLocal64(TickToTime(r->Tick));
  2526. // Convert a time to a string
  2527. GetDateStr64(date_str, sizeof(date_str), time);
  2528. GetTimeStrMilli64(time_str, sizeof(time_str), time);
  2529. if (r->ParseProc != PacketLogParseProc)
  2530. {
  2531. // Other than packet log
  2532. WriteBuf(b, date_str, StrLen(date_str));
  2533. WriteBuf(b, " ", 1);
  2534. WriteBuf(b, time_str, StrLen(time_str));
  2535. WriteBuf(b, " ", 1);
  2536. }
  2537. else
  2538. {
  2539. // Packet log
  2540. WriteBuf(b, date_str, StrLen(date_str));
  2541. WriteBuf(b, ",", 1);
  2542. WriteBuf(b, time_str, StrLen(time_str));
  2543. WriteBuf(b, ",", 1);
  2544. }
  2545. // Output text
  2546. s = r->ParseProc(r);
  2547. WriteBuf(b, s, StrLen(s));
  2548. Free(s);
  2549. WriteBuf(b, "\r\n", 2);
  2550. }
  2551. // End of logging
  2552. void FreeLog(LOG *g)
  2553. {
  2554. RECORD *rec;
  2555. // Validate arguments
  2556. if (g == NULL)
  2557. {
  2558. return;
  2559. }
  2560. // Halting flag
  2561. g->Halt = true;
  2562. Set(g->Event);
  2563. WaitThread(g->Thread, INFINITE);
  2564. ReleaseThread(g->Thread);
  2565. DeleteLock(g->lock);
  2566. Free(g->DirName);
  2567. Free(g->Prefix);
  2568. // Release the unprocessed record if it remains
  2569. // (It should not remain here)
  2570. while (rec = GetNext(g->RecordQueue))
  2571. {
  2572. char *s = rec->ParseProc(rec);
  2573. Free(s);
  2574. Free(rec);
  2575. }
  2576. ReleaseQueue(g->RecordQueue);
  2577. ReleaseEvent(g->Event);
  2578. ReleaseEvent(g->FlushEvent);
  2579. Free(g);
  2580. }
  2581. // Start a new logging
  2582. LOG *NewLog(char *dir, char *prefix, UINT switch_type)
  2583. {
  2584. LOG *g;
  2585. g = ZeroMalloc(sizeof(LOG));
  2586. g->lock = NewLock();
  2587. g->DirName = CopyStr(dir == NULL ? "" : dir);
  2588. g->Prefix = CopyStr(prefix == NULL ? "log" : prefix);
  2589. g->SwitchType = switch_type;
  2590. g->RecordQueue = NewQueue();
  2591. g->Event = NewEvent();
  2592. g->FlushEvent = NewEvent();
  2593. g->Thread = NewThread(LogThread, g);
  2594. WaitThreadInit(g->Thread);
  2595. return g;
  2596. }