/*
* ngfunc.c
*
* Written by Archie Cobbs <archie@freebsd.org>
* Copyright (c) 1995-1999 Whistle Communications, Inc. All rights reserved.
* See ``COPYRIGHT.whistle''
*
* TCP MSSFIX contributed by Sergey Korolew <dsATbittu.org.ru>
*
* Routines for doing netgraph stuff
*
*/
#include "defs.h"
#include "ppp.h"
#include "bund.h"
#include "ngfunc.h"
#include "input.h"
#include "ccp.h"
#include "netgraph.h"
#include "command.h"
#include "util.h"
#include <net/bpf.h>
#include <arpa/inet.h>
#include <netgraph/ng_message.h>
#ifdef __DragonFly__
#include <netgraph/socket/ng_socket.h>
#include <netgraph/ksocket/ng_ksocket.h>
#include <netgraph/iface/ng_iface.h>
#include <netgraph/vjc/ng_vjc.h>
#include <netgraph/bpf/ng_bpf.h>
#include <netgraph/tee/ng_tee.h>
#else
#include <netgraph/ng_socket.h>
#include <netgraph/ng_ksocket.h>
#include <netgraph/ng_iface.h>
#include <netgraph/ng_vjc.h>
#include <netgraph/ng_bpf.h>
#include <netgraph/ng_tee.h>
#endif
#ifdef USE_NG_TCPMSS
#include <netgraph/ng_tcpmss.h>
#endif
#ifdef USE_NG_NETFLOW
#include <netgraph/netflow/ng_netflow.h>
#endif
#ifdef USE_NG_NAT
#include <netgraph/ng_nat.h>
#endif
#ifdef USE_NG_PRED1
#include <netgraph/ng_pred1.h>
#endif
#include <netinet/ip_icmp.h>
#include <netinet/tcp.h>
/*
* DEFINITIONS
*/
#define TEMPHOOK "temphook"
#define MAX_IFACE_CREATE 128
/* Set menu options */
enum {
SET_EXPORT,
SET_SOURCE,
SET_TIMEOUTS,
SET_NODE,
SET_HOOK,
};
/*
* INTERNAL FUNCTIONS
*/
#ifdef USE_NG_NETFLOW
static int NetflowSetCommand(Context ctx, int ac, char *av[], void *arg);
#endif
/*
* GLOBAL VARIABLES
*/
#ifdef USE_NG_NETFLOW
const struct cmdtab NetflowSetCmds[] = {
{ "export <ip> <port>", "Set export destination" ,
NetflowSetCommand, NULL, (void *) SET_EXPORT },
{ "source <ip> <port>", "Set local binding" ,
NetflowSetCommand, NULL, (void *) SET_SOURCE },
{ "timeouts <inactive> <active>", "Set NetFlow timeouts" ,
NetflowSetCommand, NULL, (void *) SET_TIMEOUTS },
{ "node <name>", "Set node name to use" ,
NetflowSetCommand, NULL, (void *) SET_NODE },
{ "hook <number>", "Set initial hook number" ,
NetflowSetCommand, NULL, (void *) SET_HOOK },
{ NULL },
};
#endif
/*
* INTERNAL VARIABLES
*/
#ifdef USE_NG_TCPMSS
u_char gTcpMSSNode = FALSE;
#endif
#ifdef USE_NG_NETFLOW
u_char gNetflowNode = FALSE;
u_char gNetflowNodeShutdown = TRUE;
char gNetflowNodeName[64] = "mpd-nf";
u_int gNetflowIface = 0;
struct sockaddr_storage gNetflowExport;
struct sockaddr_storage gNetflowSource;
uint32_t gNetflowInactive = 0;
uint32_t gNetflowActive = 0;
#endif
static int gNgStatSock=0;
#ifdef USE_NG_NETFLOW
int
NgFuncInitGlobalNetflow(Bund b)
{
char path[NG_PATHLEN + 1];
snprintf(gNetflowNodeName, sizeof(gNetflowNodeName), "mpd%d-nf", gPid);
struct ngm_mkpeer mp;
struct ngm_rmhook rm;
struct ngm_name nm;
/* Create a global netflow node. */
snprintf(mp.type, sizeof(mp.type), "%s", NG_NETFLOW_NODE_TYPE);
snprintf(mp.ourhook, sizeof(mp.ourhook), "%s", TEMPHOOK);
snprintf(mp.peerhook, sizeof(mp.peerhook), "%s0", NG_NETFLOW_HOOK_DATA);
if (NgSendMsg(b->csock, ".",
NGM_GENERIC_COOKIE, NGM_MKPEER, &mp, sizeof(mp)) < 0) {
Log(LG_ERR, ("can't create %s node at \"%s\"->\"%s\": %s",
NG_NETFLOW_NODE_TYPE, ".", mp.ourhook, strerror(errno)));
goto fail;
}
/* Set the new node's name. */
strcpy(nm.name, gNetflowNodeName);
if (NgSendMsg(b->csock, TEMPHOOK,
NGM_GENERIC_COOKIE, NGM_NAME, &nm, sizeof(nm)) < 0) {
Log(LG_ERR, ("can't name %s node: %s", NG_NETFLOW_NODE_TYPE,
strerror(errno)));
goto fail;
}
// Log(LG_ALWAYS, ("%s node is \"%s\"", NG_NETFLOW_NODE_TYPE, nm.name));
/* Connect ng_ksocket(4) node for export. */
snprintf(mp.type, sizeof(mp.type), "%s", NG_KSOCKET_NODE_TYPE);
snprintf(mp.ourhook, sizeof(mp.ourhook), "%s", NG_NETFLOW_HOOK_EXPORT);
if (gNetflowExport.ss_family==AF_INET6) {
snprintf(mp.peerhook, sizeof(mp.peerhook), "%d/%d/%d", PF_INET6, SOCK_DGRAM, IPPROTO_UDP);
} else {
snprintf(mp.peerhook, sizeof(mp.peerhook), "inet/dgram/udp");
}
snprintf(path, sizeof(path), "%s:", nm.name);
if (NgSendMsg(b->csock, path,
NGM_GENERIC_COOKIE, NGM_MKPEER, &mp, sizeof(mp)) < 0) {
Log(LG_ERR, ("can't create %s node at \"%s\"->\"%s\": %s",
NG_KSOCKET_NODE_TYPE, path, mp.ourhook, strerror(errno)));
goto fail;
}
/* Configure timeouts for ng_netflow(4). */
if (gNetflowInactive != 0 && gNetflowActive != 0) {
struct ng_netflow_settimeouts nf_settime;
nf_settime.inactive_timeout = gNetflowInactive;
nf_settime.active_timeout = gNetflowActive;
if (NgSendMsg(b->csock, path, NGM_NETFLOW_COOKIE,
NGM_NETFLOW_SETTIMEOUTS, &nf_settime, sizeof(nf_settime)) < 0) {
Log(LG_ERR, ("[%s] can't set timeouts on netflow %s node: %s",
b->name, NG_NETFLOW_NODE_TYPE, strerror(errno)));
goto fail;
}
}
/* Configure export destination and source on ng_ksocket(4). */
snprintf(path, sizeof(path), "%s:%s", gNetflowNodeName,
NG_NETFLOW_HOOK_EXPORT);
if (gNetflowSource.ss_len != 0) {
if (NgSendMsg(b->csock, path, NGM_KSOCKET_COOKIE,
NGM_KSOCKET_BIND, &gNetflowSource, sizeof(gNetflowSource)) < 0) {
Log(LG_ERR, ("[%s] can't bind export %s node: %s",
b->name, NG_KSOCKET_NODE_TYPE, strerror(errno)));
goto fail;
}
}
if (gNetflowExport.ss_len != 0) {
if (NgSendMsg(b->csock, path, NGM_KSOCKET_COOKIE,
NGM_KSOCKET_CONNECT, &gNetflowExport, sizeof(gNetflowExport)) < 0) {
Log(LG_ERR, ("[%s] can't connect export %s node: %s",
b->name, NG_KSOCKET_NODE_TYPE, strerror(errno)));
goto fail;
}
}
/* Set the new node's name. */
snprintf(nm.name, sizeof(nm.name), "mpd%d-nfso", gPid);
if (NgSendMsg(b->csock, path,
NGM_GENERIC_COOKIE, NGM_NAME, &nm, sizeof(nm)) < 0) {
Log(LG_ERR, ("can't name %s node: %s", NG_KSOCKET_NODE_TYPE,
strerror(errno)));
goto fail;
}
/* Disconnect temporary hook. */
snprintf(rm.ourhook, sizeof(rm.ourhook), "%s", TEMPHOOK);
if (NgSendMsg(b->csock, ".",
NGM_GENERIC_COOKIE, NGM_RMHOOK, &rm, sizeof(rm)) < 0) {
Log(LG_ERR, ("can't remove hook %s: %s", TEMPHOOK, strerror(errno)));
goto fail;
}
gNetflowNode = TRUE;
return 0;
fail:
return -1;
}
#endif
/*
* NgFuncIfaceExists()
*
* Test if a netgraph interface exists. Returns:
*
* 0 Netgraph interface does not exist
* 1 Netgraph interface exists
* -1 Interface is not a netgraph interface
*/
int
NgFuncIfaceExists(Bund b, const char *ifname, char *buf, int max)
{
union {
u_char buf[sizeof(struct ng_mesg) + sizeof(struct nodeinfo)];
struct ng_mesg reply;
} u;
char path[NG_PATHLEN + 1];
char *eptr;
int ifnum;
/* Check interface name */
if (strncmp(ifname, NG_IFACE_IFACE_NAME, strlen(NG_IFACE_IFACE_NAME)) != 0)
return(-1);
ifnum = (int)strtoul(ifname + strlen(NG_IFACE_IFACE_NAME), &eptr, 10);
if (ifnum < 0 || *eptr != '\0')
return(-1);
/* See if interface exists */
snprintf(path, sizeof(path), "%s%d:", NG_IFACE_IFACE_NAME, ifnum);
if (NgSendMsg(b->csock, path, NGM_GENERIC_COOKIE, NGM_NODEINFO, NULL, 0) < 0)
return(0);
if (NgRecvMsg(b->csock, &u.reply, sizeof(u), NULL) < 0) {
Log(LG_ERR, ("[%s] node \"%s\" reply: %s", b->name, path, strerror(errno)));
return(-1);
}
/* It exists */
if (buf != NULL)
snprintf(buf, max, "%s%d", NG_IFACE_IFACE_NAME, ifnum);
return(1);
}
/*
* NgFuncCreateIface()
*
* Create a new netgraph interface, optionally with a specific name.
* If "ifname" is not NULL, then create interfaces until "ifname" is
* created. Interfaces are consecutively numbered when created, so
* we have no other choice but to create all lower numbered interfaces
* in order to create one with a given index.
*/
int
NgFuncCreateIface(Bund b, const char *ifname, char *buf, int max)
{
union {
u_char buf[sizeof(struct ng_mesg) + sizeof(struct nodeinfo)];
struct ng_mesg reply;
} u;
struct nodeinfo *const ni = (struct nodeinfo *)(void *)u.reply.data;
struct ngm_rmhook rm;
struct ngm_mkpeer mp;
int rtn = 0;
/* If ifname is not null, create interfaces until it gets created */
if (ifname != NULL) {
int count;
for (count = 0; count < MAX_IFACE_CREATE; count++) {
switch (NgFuncIfaceExists(b, ifname, buf, max)) {
case 1: /* ok now it exists */
return(0);
case 0: /* nope, create another one */
NgFuncCreateIface(b, NULL, NULL, 0);
break;
case -1: /* something weird happened */
return(-1);
default:
assert(0);
}
}
Log(LG_ERR, ("[%s] created %d interfaces, that's too many!",
b->name, count));
return(-1);
}
/* Create iface node (as a temporary peer of the socket node) */
snprintf(mp.type, sizeof(mp.type), "%s", NG_IFACE_NODE_TYPE);
snprintf(mp.ourhook, sizeof(mp.ourhook), "%s", TEMPHOOK);
snprintf(mp.peerhook, sizeof(mp.peerhook), "%s", NG_IFACE_HOOK_INET);
if (NgSendMsg(b->csock, ".",
NGM_GENERIC_COOKIE, NGM_MKPEER, &mp, sizeof(mp)) < 0) {
Log(LG_ERR, ("[%s] can't create %s node at \"%s\"->\"%s\": %s",
b->name, NG_IFACE_NODE_TYPE, ".", mp.ourhook, strerror(errno)));
return(-1);
}
/* Get the new node's name */
if (NgSendMsg(b->csock, TEMPHOOK,
NGM_GENERIC_COOKIE, NGM_NODEINFO, NULL, 0) < 0) {
Log(LG_ERR, ("[%s] %s: %s", b->name, "NGM_NODEINFO", strerror(errno)));
rtn = -1;
goto done;
}
if (NgRecvMsg(b->csock, &u.reply, sizeof(u), NULL) < 0) {
Log(LG_ERR, ("[%s] reply from %s: %s",
b->name, NG_IFACE_NODE_TYPE, strerror(errno)));
rtn = -1;
goto done;
}
snprintf(buf, max, "%s", ni->name);
done:
/* Disconnect temporary hook */
snprintf(rm.ourhook, sizeof(rm.ourhook), "%s", TEMPHOOK);
if (NgSendMsg(b->csock, ".",
NGM_GENERIC_COOKIE, NGM_RMHOOK, &rm, sizeof(rm)) < 0) {
Log(LG_ERR, ("[%s] can't remove hook %s: %s",
b->name, TEMPHOOK, strerror(errno)));
rtn = -1;
}
/* Done */
return(rtn);
}
/*
* NgFuncShutdownGlobal()
*
* Shutdown nodes, that are shared between bundles.
*
*/
void
NgFuncShutdownGlobal(Bund b)
{
#ifdef USE_NG_NETFLOW
char path[NG_PATHLEN + 1];
if (gNetflowNode == FALSE || gNetflowNodeShutdown==FALSE)
return;
snprintf(path, sizeof(path), "%s:", gNetflowNodeName);
NgFuncShutdownNode(b->csock, "netflow", path);
#endif
}
/*
* NgFuncShutdownNode()
*/
int
NgFuncShutdownNode(int csock, const char *label, const char *path)
{
int rtn, retry = 10, delay = 1000;
retry:
if ((rtn = NgSendMsg(csock, path,
NGM_GENERIC_COOKIE, NGM_SHUTDOWN, NULL, 0)) < 0) {
if (errno == ENOBUFS && retry > 0) {
Log(LG_ERR, ("[%s] shutdown \"%s\": %s, retrying...",
label, path, strerror(errno)));
usleep(delay);
retry--;
delay *= 2;
goto retry;
}
if (errno != ENOENT) {
Log(LG_ERR, ("[%s] can't shutdown \"%s\": %s",
label, path, strerror(errno)));
}
}
return(rtn);
}
/*
* NgFuncSetConfig()
*/
void
NgFuncSetConfig(Bund b)
{
if (NgSendMsg(b->csock, MPD_HOOK_PPP, NGM_PPP_COOKIE,
NGM_PPP_SET_CONFIG, &b->pppConfig, sizeof(b->pppConfig)) < 0) {
Log(LG_ERR, ("[%s] can't config %s: %s",
b->name, MPD_HOOK_PPP, strerror(errno)));
DoExit(EX_ERRDEAD);
}
}
/*
* NgFuncSendQuery()
*/
int
NgFuncSendQuery(const char *path, int cookie, int cmd, const void *args,
size_t arglen, struct ng_mesg *rbuf, size_t replen, char *raddr)
{
int token, len;
int ret = 0;
if (!gNgStatSock) {
struct ngm_name nm;
/* Create a netgraph socket node */
if (NgMkSockNode(NULL, &gNgStatSock, NULL) < 0) {
Log(LG_ERR, ("NgFuncSendQuery: can't create %s node: %s",
NG_SOCKET_NODE_TYPE, strerror(errno)));
return(0);
}
(void) fcntl(gNgStatSock, F_SETFD, 1);
/* Give it a name */
snprintf(nm.name, sizeof(nm.name), "mpd%d-stats", gPid);
if (NgSendMsg(gNgStatSock, ".:",
NGM_GENERIC_COOKIE, NGM_NAME, &nm, sizeof(nm)) < 0) {
Log(LG_ERR, ("NgFuncSendQuery: can't name %s node: %s",
NG_PPP_NODE_TYPE, strerror(errno)));
}
}
/* Send message */
if ((token = NgSendMsg(gNgStatSock, path, cookie, cmd, args, arglen)) < 0)
goto fail;
/* Read message */
if ((len = NgRecvMsg(gNgStatSock, rbuf, replen, raddr)) < 0) {
Log(LG_ERR, ("NgFuncSendQuery: can't read unexpected message: %s",
strerror(errno)));
goto fail;
}
goto done;
fail:
ret = -1;
done:
return ret;
}
/*
* NgFuncConnect()
*/
int
NgFuncConnect(int csock, char *label, const char *path, const char *hook,
const char *path2, const char *hook2)
{
struct ngm_connect cn;
snprintf(cn.path, sizeof(cn.path), "%s", path2);
snprintf(cn.ourhook, sizeof(cn.ourhook), "%s", hook);
snprintf(cn.peerhook, sizeof(cn.peerhook), "%s", hook2);
if (NgSendMsg(csock, path,
NGM_GENERIC_COOKIE, NGM_CONNECT, &cn, sizeof(cn)) < 0) {
Log(LG_ERR, ("[%s] can't connect \"%s\"->\"%s\" and \"%s\"->\"%s\": %s",
label, path, hook, path2, hook2, strerror(errno)));
return(-1);
}
return(0);
}
/*
* NgFuncDisconnect()
*/
int
NgFuncDisconnect(int csock, char *label, const char *path, const char *hook)
{
struct ngm_rmhook rm;
int retry = 10, delay = 1000;
/* Disconnect hook */
snprintf(rm.ourhook, sizeof(rm.ourhook), "%s", hook);
retry:
if (NgSendMsg(csock, path,
NGM_GENERIC_COOKIE, NGM_RMHOOK, &rm, sizeof(rm)) < 0) {
if (errno == ENOBUFS && retry > 0) {
Log(LG_ERR, ("[%s] remove hook %s from node \"%s\": %s, retrying...",
label, hook, path, strerror(errno)));
usleep(delay);
retry--;
delay *= 2;
goto retry;
}
Log(LG_ERR, ("[%s] can't remove hook %s from node \"%s\": %s",
label, hook, path, strerror(errno)));
return(-1);
}
return(0);
}
/*
* NgFuncWritePppFrame()
*
* Consumes the mbuf.
*/
int
NgFuncWritePppFrame(Bund b, int linkNum, int proto, Mbuf bp)
{
Mbuf hdr;
u_int16_t temp;
/* Prepend ppp node bypass header */
hdr = mballoc(bp->type, 4);
if (hdr == NULL) {
Log(LG_ERR, ("[%s] NgFuncWritePppFrame: mballoc() error", b->name));
PFREE(bp);
return (-1);
}
temp = htons(linkNum);
memcpy(MBDATAU(hdr), &temp, 2);
temp = htons(proto);
memcpy(MBDATAU(hdr) + 2, &temp, 2);
hdr->next = bp;
bp = hdr;
/* Debugging */
LogDumpBp(LG_FRAME, bp,
"[%s] xmit bypass frame link=%d proto=0x%04x",
b->name, (int16_t)linkNum, proto);
/* Write frame */
return NgFuncWriteFrame(b, MPD_HOOK_PPP, bp);
}
/*
* NgFuncWriteFrame()
*
* Consumes the mbuf.
*/
int
NgFuncWriteFrame(Bund b, const char *hookname, Mbuf bp)
{
u_char buf[sizeof(struct sockaddr_ng) + NG_HOOKLEN];
struct sockaddr_ng *ng = (struct sockaddr_ng *)buf;
int rtn;
/* Set dest address */
memset(&buf, 0, sizeof(buf));
snprintf(ng->sg_data, NG_HOOKLEN + 1, "%s", hookname);
ng->sg_family = AF_NETGRAPH;
ng->sg_len = 3 + strlen(ng->sg_data);
/* Write frame */
bp = mbunify(bp);
if (bp == NULL)
return (-1);
rtn = sendto(b->dsock, MBDATAU(bp), MBLEN(bp),
0, (struct sockaddr *)ng, ng->sg_len);
/* ENOBUFS can be expected on some links, e.g., ng_pptpgre(4) */
if (rtn < 0 && errno != ENOBUFS) {
Log(LG_ERR, ("[%s] error writing len %d frame to %s: %s",
b->name, MBLEN(bp), hookname, strerror(errno)));
}
PFREE(bp);
return (rtn);
}
/*
* NgFuncClrStats()
*
* Clear link or whole bundle statistics
*/
int
NgFuncClrStats(Bund b, u_int16_t linkNum)
{
char path[NG_PATHLEN + 1];
/* Get stats */
snprintf(path, sizeof(path), "mpd%d-%s:", gPid, b->name);
if (NgSendMsg(b->csock, path,
NGM_PPP_COOKIE, NGM_PPP_CLR_LINK_STATS, &linkNum, sizeof(linkNum)) < 0) {
Log(LG_ERR, ("[%s] can't clear stats, link=%d: %s",
b->name, linkNum, strerror(errno)));
return (-1);
}
return(0);
}
/*
* NgFuncGetStats()
*
* Get link or whole bundle statistics
*/
int
NgFuncGetStats(Bund b, u_int16_t linkNum, struct ng_ppp_link_stat *statp)
{
union {
u_char buf[sizeof(struct ng_mesg)
+ sizeof(struct ng_ppp_link_stat)];
struct ng_mesg reply;
} u;
char path[NG_PATHLEN + 1];
/* Get stats */
snprintf(path, sizeof(path), "mpd%d-%s:", gPid, b->name);
if (NgFuncSendQuery(path, NGM_PPP_COOKIE, NGM_PPP_GET_LINK_STATS,
&linkNum, sizeof(linkNum), &u.reply, sizeof(u), NULL) < 0) {
Log(LG_ERR, ("[%s] can't get stats, link=%d: %s",
b->name, linkNum, strerror(errno)));
return -1;
}
if (statp != NULL)
memcpy(statp, u.reply.data, sizeof(*statp));
return(0);
}
#ifdef NG_PPP_STATS64
/*
* NgFuncGetStats64()
*
* Get 64bit link or whole bundle statistics
*/
int
NgFuncGetStats64(Bund b, u_int16_t linkNum, struct ng_ppp_link_stat64 *statp)
{
union {
u_char buf[sizeof(struct ng_mesg)
+ sizeof(struct ng_ppp_link_stat64)];
struct ng_mesg reply;
} u;
char path[NG_PATHLEN + 1];
/* Get stats */
snprintf(path, sizeof(path), "mpd%d-%s:", gPid, b->name);
if (NgFuncSendQuery(path, NGM_PPP_COOKIE, NGM_PPP_GET_LINK_STATS64,
&linkNum, sizeof(linkNum), &u.reply, sizeof(u), NULL) < 0) {
Log(LG_ERR, ("[%s] can't get stats, link=%d: %s",
b->name, linkNum, strerror(errno)));
return -1;
}
if (statp != NULL)
memcpy(statp, u.reply.data, sizeof(*statp));
return(0);
}
#endif
/*
* NgFuncErrx()
*/
void
NgFuncErrx(const char *fmt, ...)
{
char buf[1024];
va_list args;
va_start(args, fmt);
vsnprintf(buf, sizeof(buf), fmt, args);
va_end(args);
Log(LG_ERR, ("netgraph: %s", buf));
}
/*
* NgFuncErr()
*/
void
NgFuncErr(const char *fmt, ...)
{
char buf[100];
va_list args;
va_start(args, fmt);
vsnprintf(buf, sizeof(buf), fmt, args);
va_end(args);
Log(LG_ERR, ("netgraph: %s: %s", buf, strerror(errno)));
}
#ifdef USE_NG_NETFLOW
/*
* NetflowSetCommand()
*/
static int
NetflowSetCommand(Context ctx, int ac, char *av[], void *arg)
{
struct sockaddr_storage *sin;
switch ((intptr_t)arg) {
case SET_EXPORT:
if ((sin = ParseAddrPort(ac, av, ALLOW_IPV4|ALLOW_IPV6)) == NULL)
return (-1);
gNetflowExport = *sin;
break;
case SET_SOURCE:
if ((sin = ParseAddrPort(ac, av, ALLOW_IPV4|ALLOW_IPV6)) == NULL)
return (-1);
gNetflowSource = *sin;
break;
case SET_TIMEOUTS:
if (ac != 2)
return (-1);
if (atoi(av[0]) <= 0 || atoi(av[1]) <= 0) {
Log(LG_ERR, ("Bad netflow timeouts \"%s %s\"", av[0], av[1]));
return (-1);
}
gNetflowInactive = atoi(av[0]);
gNetflowActive = atoi(av[1]);
break;
case SET_NODE:
if (ac != 1)
return (-1);
if (strlen(av[0]) == 0 || strlen(av[0]) > 63) {
Log(LG_ERR, ("Bad netflow node name \"%s\"", av[0]));
return (-1);
}
strncpy(gNetflowNodeName,av[0],63);
gNetflowNode=TRUE;
gNetflowNodeShutdown=FALSE;
break;
case SET_HOOK:
if (ac != 1)
return (-1);
if (atoi(av[0]) <= 0) {
Log(LG_ERR, ("Bad netflow hook number \"%s\"", av[0]));
return (-1);
}
gNetflowIface = atoi(av[0])-1;
break;
default:
return (-1);
}
return (0);
}
#endif /* USE_NG_NETFLOW */
syntax highlighted by Code2HTML, v. 0.9.1