From b90f8af4fb0b2a8ce60014144e47fdbb0922e34d Mon Sep 17 00:00:00 2001
From: Deepti Kulkarni <deepti@vyatta.com>
Date: Tue, 13 Dec 2011 02:49:29 -0800
Subject: Bug fix 7397 - Conntrack log creation and deletion.

---
 src/vyatta-conntrack-logging.c | 254 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 254 insertions(+)
 create mode 100644 src/vyatta-conntrack-logging.c

(limited to 'src')

diff --git a/src/vyatta-conntrack-logging.c b/src/vyatta-conntrack-logging.c
new file mode 100644
index 0000000..27f426b
--- /dev/null
+++ b/src/vyatta-conntrack-logging.c
@@ -0,0 +1,254 @@
+/*
+UNIX Daemon Server program for monitoring conntrack logging 
+processes. 
+Usage:		./vyatta-conntrack-logging 
+                  -p <proto-name> -e <events> [-s <proto-state>]
+*/
+
+#include <stdio.h>
+#include <fcntl.h>
+#include <signal.h>
+#include <unistd.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+#include <error.h>
+#include <syslog.h>
+
+
+#define RUNNING_DIR	"/var/run/vyatta"
+#define LOCK_FILE	"connlogd.lock"
+#define MAX_PROCESS 17
+ 
+// Global variables
+pid_t pids[MAX_PROCESS];
+char *cmds[MAX_PROCESS];
+long int nbuffer[MAX_PROCESS];
+int pcounter=0;
+long int netlink_buffer_size = 2097152;
+long int netlink_buffer_maxsize= 8388608;
+
+// Initialise the nbuffer to 2MB
+void init_nbuffer() 
+{
+  int i;  
+  for (i=0;i<MAX_PROCESS;i++) {
+    nbuffer[i]=netlink_buffer_size;
+  }
+  return;
+}
+
+// Function to write to syslog
+
+void sys_logger(char *message)
+{
+  openlog("log-conntrack", "LOG_PID", LOG_USER);
+  syslog(LOG_INFO, message);
+  closelog();
+}
+
+//Signal handler for SIGHUP and SIGTERM
+void signal_handler(sig)
+{
+  switch(sig) {
+    case SIGHUP:
+      sys_logger("Stopping conntrack logging daemon"); 
+      int i;
+      for(i=0;i<pcounter;i++) {
+        kill(pids[i], SIGKILL); 
+      }
+      exit(0);
+      break;
+    case SIGTERM:
+      exit(0);
+      break;
+  }
+}
+
+//Create child process to start conntrack logger
+void start_child(char *cmd, int index) 
+{
+  pid_t pid;
+  int west;
+  int ret;
+  
+  pid=fork();
+  if (pid<0) { 
+    perror("Conntrack logging error:");   
+    exit(1); /* fork error */
+  }
+  if (pid==0) {
+    pids[index]=getpid();
+    ret=system(cmd);
+    if (WIFSIGNALED(ret) &&
+    (WTERMSIG(ret) == SIGINT || WTERMSIG(ret) == SIGQUIT)) {
+      exit(0);
+    }
+    else {
+      exit(0);
+    }   
+  }
+  else {
+    pids[index]=pid;
+  } 
+}
+
+//Daemonize the process to run in the background
+void daemonize()
+{
+  int p,i,fptr;
+  char str[10];
+ 
+  p=fork();
+  if (p<0) {
+    perror("Conntrack logging error:"); 
+    exit(1);
+  }
+  if (p>0) {
+    exit(0);
+  }
+  /* child (daemon) continues */
+  setsid();
+  for (i=getdtablesize();i>=0;--i) 
+    close(i); 
+  i=open("/dev/null",O_RDWR); dup(i); dup(i);
+  umask(027);
+  chdir(RUNNING_DIR);
+  fptr=open(LOCK_FILE,O_RDWR|O_CREAT,0640);
+  if (fptr<0) 
+    exit(1);
+  if (lockf(fptr,F_TLOCK,0)<0)
+    exit(0);
+  sprintf(str,"%d\n",getpid());
+  write(fptr,str,strlen(str));
+
+  signal(SIGHUP,signal_handler);
+  signal(SIGTERM,signal_handler);
+}
+
+int main(int argc, char *argv[])
+{
+  FILE *logfile;
+  int other=0;
+  int i, pid;
+  char *conn="conntrack -E";
+  char *logger="logger -t log-conntrack -p daemon.notice";
+  char *fother="grep -vE 'tcp|udp|icmp'"; 
+  char cmd[1024];
+  char cmd_to_run[1024]; 
+  int length = 0;
+  char * temp_cmd = cmd;
+       
+  for (i=1; i<argc; i++) {
+    switch(argv[i][1]) {
+      case 'p':
+        if (i+1 < argc && argv[i+1][0] != '-') {
+          if (strncmp(argv[i+1], "other",
+          strlen(argv[i+1])) == 0) {
+            other=1;
+            snprintf(cmd, sizeof (cmd), "%s", conn);
+            length = strlen (cmd); 
+            temp_cmd = cmd + length;
+            i++;
+          } else if ((strncmp(argv[i+1], "tcp",
+            strlen(argv[i+1])) == 0) ||
+            (strncmp(argv[i+1], "udp",
+            strlen(argv[i+1])) == 0) ||
+            (strncmp(argv[i+1], "icmp",
+            strlen(argv[i+1])) == 0)) {
+              snprintf(cmd, sizeof (cmd), "%s%s%s", conn, " -p ", argv[i+1]);
+              other=0; 
+              length = strlen (cmd);
+              temp_cmd = cmd + length;
+              i++;
+            }
+        }
+        break;
+      case 'e':  
+        if (i+1 < argc && argv[i+1][0] != '-') {
+          if ((strncmp(argv[i+1], "NEW",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "UPDATES",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "DESTROY",
+          strlen(argv[i+1])) == 0)) {
+            if (other == 1) {
+              snprintf(temp_cmd, sizeof (cmd) - length, "%s%s%s%s%s%s%s%s", " -e ", 
+              argv[i+1], " -o id", " -b %d", " | ", fother, " | ", logger);
+              cmds[pcounter] = malloc(strlen+1);
+              strcpy(cmds[pcounter],cmd); 
+              pcounter++;
+            } else if ((strncmp(argv[i-1], "tcp",strlen(argv[i-1]))==0) &&
+              (strncmp(argv[i+1], "UPDATES",strlen(argv[i+1])) == 0)){
+                snprintf(temp_cmd, sizeof (cmd) - length, "%s%s", " -e ", argv[i+1]);
+            } else {
+                snprintf(temp_cmd, sizeof (cmd) - length, "%s%s%s%s%s%s", " -e ", 
+                argv[i+1], " -o id", " -b %d", " | ", logger);
+                cmds[pcounter] = malloc(strlen+1); 
+                strcpy(cmds[pcounter],cmd);
+                pcounter++;
+            }
+            length = strlen (cmd);
+            temp_cmd = cmd + length;
+            i++;
+          }
+        }
+        break;
+      case 's': 
+        if (i+1 < argc && argv[i+1][0] != '-') {
+          if ((strncmp(argv[i+1], "SYN_RECV",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "ESTABLISHED",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "FIN_WAIT",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "CLOSE_WAIT",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "LAST_ACK",
+          strlen(argv[i+1])) == 0) ||
+          (strncmp(argv[i+1], "TIME_WAIT",
+          strlen(argv[i+1])) == 0)) {
+            snprintf(temp_cmd, sizeof (cmd) - length, "%s%s%s%s%s%s", " --state ",
+            argv[i+1], " -o id", " -b %d", " | ", logger);
+            cmds[pcounter] = malloc(strlen+1); 
+            strcpy(cmds[pcounter],cmd);
+            pcounter++;
+            length = strlen (cmd);
+            temp_cmd = cmd + length;
+            i++;
+          }
+        }
+        break;
+    }
+  }
+    // Daemonize the connlog process. 
+    sys_logger("Starting conntrack logging daemon"); 
+    daemonize();
+        
+    // Call to init_nbuffer  
+    init_nbuffer();
+ 
+    //Start the conntrack logging processes 
+    for(i=0;i<pcounter;i++) {  
+      sprintf(cmd_to_run, cmds[i], nbuffer[i]);
+      start_child(cmd_to_run,i);
+    }
+    pid_t dead_child;
+    int status; 
+    while(dead_child=wait(&status)) {
+      for(i=0;i<pcounter;i++) {
+        if (pids[i]==dead_child) { 
+          nbuffer[i] += netlink_buffer_size;
+          if (nbuffer[i] <= netlink_buffer_maxsize) {
+            sprintf(cmd_to_run, cmds[i], nbuffer[i]);
+          } else { 
+            nbuffer[i] -= netlink_buffer_size; 
+            sprintf(cmd_to_run, cmds[i], nbuffer[i]);
+          }
+          sys_logger("Restarting conntrack logging process"); 
+          start_child(cmd_to_run,i);
+        }
+      }
+    }
+}
+
+/* EOF */
-- 
cgit v1.2.3