Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 03:28:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Reformat the world

Browse source
This commit is contained in:
Tim Wojtulewicz 2021-09-16 15:35:39 -07:00
parent 194cb24547
commit b2f171ec69
714 changed files with 35149 additions and 35203 deletions
Download patch file Download diff file Expand all files Collapse all files

85
src/analyzer/protocol/smtp/SMTP.h
View file

@ -4,40 +4,45 @@
#include <list>
#include "zeek/analyzer/protocol/tcp/TCP.h"
#include "zeek/analyzer/protocol/tcp/ContentLine.h"
#include "zeek/analyzer/protocol/mime/MIME.h"
#include "zeek/analyzer/protocol/tcp/ContentLine.h"
#include "zeek/analyzer/protocol/tcp/TCP.h"
#undef SMTP_CMD_DEF
#define SMTP_CMD_DEF(cmd) SMTP_CMD_##cmd,
#define SMTP_CMD_DEF(cmd) SMTP_CMD_##cmd,
namespace zeek::analyzer::smtp {
namespace detail {
namespace zeek::analyzer::smtp
{
namespace detail
{
enum SMTP_Cmd {
enum SMTP_Cmd
{
#include "SMTP_cmd.def"
};
};
// State is updated on every SMTP reply.
enum SMTP_State {
SMTP_CONNECTED, // 0: before the opening message
SMTP_INITIATED, // 1: after opening message 220, EHLO/HELO expected
SMTP_NOT_AVAILABLE, // 2: after opening message 554, etc.
SMTP_READY, // 3: after EHLO/HELO and reply 250
SMTP_MAIL_OK, // 4: after MAIL/SEND/SOML/SAML and 250, RCPT expected
SMTP_RCPT_OK, // 5: after one successful RCPT, DATA or more RCPT expected
SMTP_IN_DATA, // 6: after DATA
SMTP_AFTER_DATA, // 7: after . and before reply
SMTP_IN_AUTH, // 8: after AUTH and 334
SMTP_IN_TLS, // 9: after STARTTLS/X-ANONYMOUSTLS and 220
SMTP_QUIT, // 10: after QUIT
SMTP_AFTER_GAP, // 11: after a gap is detected
SMTP_GAP_RECOVERY, // 12: after the first reply after a gap
};
enum SMTP_State
{
SMTP_CONNECTED, // 0: before the opening message
SMTP_INITIATED, // 1: after opening message 220, EHLO/HELO expected
SMTP_NOT_AVAILABLE, // 2: after opening message 554, etc.
SMTP_READY, // 3: after EHLO/HELO and reply 250
SMTP_MAIL_OK, // 4: after MAIL/SEND/SOML/SAML and 250, RCPT expected
SMTP_RCPT_OK, // 5: after one successful RCPT, DATA or more RCPT expected
SMTP_IN_DATA, // 6: after DATA
SMTP_AFTER_DATA, // 7: after . and before reply
SMTP_IN_AUTH, // 8: after AUTH and 334
SMTP_IN_TLS, // 9: after STARTTLS/X-ANONYMOUSTLS and 220
SMTP_QUIT, // 10: after QUIT
SMTP_AFTER_GAP, // 11: after a gap is detected
SMTP_GAP_RECOVERY, // 12: after the first reply after a gap
};
} // namespace detail
} // namespace detail
class SMTP_Analyzer final : public analyzer::tcp::TCP_ApplicationAnalyzer {
class SMTP_Analyzer final : public analyzer::tcp::TCP_ApplicationAnalyzer
{
public:
explicit SMTP_Analyzer(Connection* conn);
~SMTP_Analyzer() override;
@ -47,15 +52,11 @@ public:
void ConnectionFinished(bool half_finished) override;
void Undelivered(uint64_t seq, int len, bool orig) override;
void SkipData() { skip_data = 1; } // skip delivery of data lines
void SkipData() { skip_data = 1; } // skip delivery of data lines
static analyzer::Analyzer* Instantiate(Connection* conn)
{
return new SMTP_Analyzer(conn);
}
static analyzer::Analyzer* Instantiate(Connection* conn) { return new SMTP_Analyzer(conn); }
protected:
void ProcessLine(int length, const char* line, bool orig);
void NewCmd(int cmd_code);
void NewReply(int reply_code, bool orig);
@ -69,31 +70,29 @@ protected:
int ParseCmd(int cmd_len, const char* cmd);
void RequestEvent(int cmd_len, const char* cmd,
int arg_len, const char* arg);
void Unexpected(bool is_sender, const char* msg,
int detail_len, const char* detail);
void RequestEvent(int cmd_len, const char* cmd, int arg_len, const char* arg);
void Unexpected(bool is_sender, const char* msg, int detail_len, const char* detail);
void UnexpectedCommand(int cmd_code, int reply_code);
void UnexpectedReply(int cmd_code, int reply_code);
void StartTLS();
bool orig_is_sender;
bool expect_sender, expect_recver;
bool pipelining; // whether pipelining is supported
bool pipelining; // whether pipelining is supported
int state;
int last_replied_cmd;
int first_cmd; // first un-replied SMTP cmd, or -1
int pending_reply; // code assoc. w/ multi-line reply, or 0
std::list<int> pending_cmd_q; // to support pipelining
bool skip_data; // whether to skip message body
String* line_after_gap; // last line before the first reply
// after a gap
int first_cmd; // first un-replied SMTP cmd, or -1
int pending_reply; // code assoc. w/ multi-line reply, or 0
std::list<int> pending_cmd_q; // to support pipelining
bool skip_data; // whether to skip message body
String* line_after_gap; // last line before the first reply
// after a gap
analyzer::mime::MIME_Mail* mail;
private:
analyzer::tcp::ContentLine_Analyzer* cl_orig;
analyzer::tcp::ContentLine_Analyzer* cl_resp;
};
};
} // namespace zeek::analyzer::smtp
} // namespace zeek::analyzer::smtp