mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
f5a76c1aed
This largely copies over Spicy's `.clang-format` configuration file. The one place where we deviate is header include order since Zeek depends on headers being included in a certain order.
106 lines
2.7 KiB
C++
106 lines
2.7 KiB
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#pragma once
|
|
|
|
#include <sys/types.h> // for u_char
|
|
#include <unordered_map>
|
|
#include <utility>
|
|
|
|
#include "zeek/Frag.h"
|
|
#include "zeek/Hash.h"
|
|
#include "zeek/NetVar.h"
|
|
#include "zeek/session/Session.h"
|
|
|
|
namespace zeek {
|
|
|
|
namespace detail {
|
|
class PacketFilter;
|
|
}
|
|
|
|
class EncapsulationStack;
|
|
class Packet;
|
|
class Connection;
|
|
struct ConnTuple;
|
|
class StatBlocks;
|
|
|
|
namespace session {
|
|
|
|
namespace detail {
|
|
class ProtocolStats;
|
|
}
|
|
|
|
struct Stats {
|
|
size_t num_TCP_conns;
|
|
size_t max_TCP_conns;
|
|
uint64_t cumulative_TCP_conns;
|
|
|
|
size_t num_UDP_conns;
|
|
size_t max_UDP_conns;
|
|
uint64_t cumulative_UDP_conns;
|
|
|
|
size_t num_ICMP_conns;
|
|
size_t max_ICMP_conns;
|
|
uint64_t cumulative_ICMP_conns;
|
|
|
|
size_t num_fragments;
|
|
size_t max_fragments;
|
|
uint64_t num_packets;
|
|
};
|
|
|
|
class Manager final {
|
|
public:
|
|
Manager();
|
|
~Manager();
|
|
|
|
void Done(); // call to drain events before destructing
|
|
|
|
// Looks up the connection referred to by the given Val,
|
|
// which should be a conn_id record. Returns nil if there's
|
|
// no such connection or the Val is ill-formed.
|
|
Connection* FindConnection(Val* v);
|
|
|
|
/**
|
|
* Looks up the connection referred to by a given key.
|
|
*
|
|
* @param conn_key The key for the connection to search for.
|
|
* @return The connection, or nullptr if one doesn't exist.
|
|
*/
|
|
Connection* FindConnection(const zeek::detail::ConnKey& conn_key);
|
|
|
|
void Remove(Session* s);
|
|
void Insert(Session* c, bool remove_existing = true);
|
|
|
|
// Generating connection_pending events for all connections
|
|
// that are still active.
|
|
void Drain();
|
|
|
|
// Clears the session maps.
|
|
void Clear();
|
|
|
|
void GetStats(Stats& s);
|
|
|
|
void Weird(const char* name, const Packet* pkt, const char* addl = "", const char* source = "");
|
|
void Weird(const char* name, const IP_Hdr* ip, const char* addl = "");
|
|
|
|
unsigned int CurrentSessions() { return session_map.size(); }
|
|
|
|
private:
|
|
using SessionMap = std::unordered_map<detail::Key, Session*, detail::KeyHash>;
|
|
|
|
// Inserts a new connection into the sessions map. If a connection with
|
|
// the same key already exists in the map, it will be overwritten by
|
|
// the new one. Connection count stats get updated either way (so most
|
|
// cases should likely check that the key is not already in the map to
|
|
// avoid unnecessary incrementing of connecting counts).
|
|
void InsertSession(detail::Key key, Session* session);
|
|
|
|
SessionMap session_map;
|
|
detail::ProtocolStats* stats;
|
|
};
|
|
|
|
} // namespace session
|
|
|
|
// Manager for the currently active sessions.
|
|
extern session::Manager* session_mgr;
|
|
|
|
} // namespace zeek
|