home *** CD-ROM | disk | FTP | other *** search
open in:
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text
This file was processed as: Tape Archive
(archive/tar).
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| dexvert
| Tape Archive (archive/tar)
| magic
| Supported |
100%
| file
| tar archive
| default
| |
99%
| file
| tar archive (V7), file netlog-1.02/, mode 755 , uid 315 , gid 144 , size 0 , seconds 5410434617
| default
| |
98%
| file
| data
| default
| |
100%
| siegfried
| x-fmt/265 Tape Archive Format
| default
| |
100%
| lsar
| Tar
| default
| |
100%
| gt2
| TAR Archiv gefunden (Auflistung ist deaktiviert)
| default
| |
100%
| disktype
| Pre-POSIX tar archive
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 00 00 00 00 |netlog-1|.02/....|
|00000010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 20 20 20 37 | 35 35 20 00 20 20 20 33 |.... 7|55 . 3|
|00000070| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00000080| 20 20 20 20 20 20 30 20 | 20 35 34 31 30 34 33 34 | 0 | 5410434|
|00000090| 36 31 37 20 20 20 35 37 | 31 34 00 20 00 00 00 00 |617 57|14. ....|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 74 63 70 6c |netlog-1|.02/tcpl|
|00000210| 6f 67 67 65 72 2f 00 00 | 00 00 00 00 00 00 00 00 |ogger/..|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 20 20 20 37 | 35 35 20 00 20 20 20 33 |.... 7|55 . 3|
|00000270| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00000280| 20 20 20 20 20 20 30 20 | 20 35 34 31 30 34 33 34 | 0 | 5410434|
|00000290| 36 33 35 20 20 20 37 37 | 30 32 00 20 00 00 00 00 |635 77|02. ....|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 74 63 70 6c |netlog-1|.02/tcpl|
|00000410| 6f 67 67 65 72 2f 74 63 | 70 73 79 6e 2e 63 00 00 |ogger/tc|psyn.c..|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00000470| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00000480| 20 20 20 37 36 36 31 20 | 20 35 34 31 30 33 35 31 | 7661 | 5410351|
|00000490| 36 34 33 20 20 31 31 34 | 36 32 00 20 00 00 00 00 |643 114|62. ....|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 2f 2a 0a 20 20 20 20 20 | 74 63 70 6c 6f 67 67 65 |/*. |tcplogge|
|00000610| 72 20 2d 20 41 20 54 43 | 50 20 74 72 61 66 66 69 |r - A TC|P traffi|
|00000620| 63 20 6c 6f 67 67 65 72 | 0a 20 20 20 20 20 43 6f |c logger|. Co|
|00000630| 70 79 72 69 67 68 74 20 | 28 43 29 20 31 39 39 33 |pyright |(C) 1993|
|00000640| 20 44 6f 75 67 6c 61 73 | 20 4c 65 65 20 53 63 68 | Douglas| Lee Sch|
|00000650| 61 6c 65 73 2c 20 44 61 | 76 69 64 20 4b 2e 20 48 |ales, Da|vid K. H|
|00000660| 65 73 73 2c 20 44 61 76 | 69 64 20 52 2e 20 53 61 |ess, Dav|id R. Sa|
|00000670| 66 66 6f 72 64 0a 0a 20 | 20 20 20 20 50 6c 65 61 |fford.. | Plea|
|00000680| 73 65 20 73 65 65 20 74 | 68 65 20 66 69 6c 65 20 |se see t|he file |
|00000690| 60 43 4f 50 59 49 4e 47 | 27 20 66 6f 72 20 74 68 |`COPYING|' for th|
|000006a0| 65 20 63 6f 6d 70 6c 65 | 74 65 20 63 6f 70 79 72 |e comple|te copyr|
|000006b0| 69 67 68 74 20 6e 6f 74 | 69 63 65 2e 0a 0a 74 63 |ight not|ice...tc|
|000006c0| 70 73 79 6e 2e 63 20 2d | 20 30 33 2f 32 30 2f 39 |psyn.c -| 03/20/9|
|000006d0| 33 0a 0a 2a 2f 0a 23 69 | 6e 63 6c 75 64 65 20 3c |3..*/.#i|nclude <|
|000006e0| 73 74 64 69 6f 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |stdio.h>|.#includ|
|000006f0| 65 20 3c 73 79 73 2f 74 | 79 70 65 73 2e 68 3e 0a |e <sys/t|ypes.h>.|
|00000700| 23 69 6e 63 6c 75 64 65 | 20 3c 73 79 73 2f 73 6f |#include| <sys/so|
|00000710| 63 6b 65 74 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |cket.h>.|#include|
|00000720| 20 3c 6e 65 74 69 6e 65 | 74 2f 69 6e 2e 68 3e 0a | <netine|t/in.h>.|
|00000730| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 64 62 2e |#include| <netdb.|
|00000740| 68 3e 0a 23 69 6e 63 6c | 75 64 65 20 3c 6e 65 74 |h>.#incl|ude <net|
|00000750| 69 6e 65 74 2f 69 6e 5f | 73 79 73 74 6d 2e 68 3e |inet/in_|systm.h>|
|00000760| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 6e 65 74 69 6e |.#includ|e <netin|
|00000770| 65 74 2f 69 70 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |et/ip.h>|.#includ|
|00000780| 65 20 3c 6e 65 74 69 6e | 65 74 2f 74 63 70 2e 68 |e <netin|et/tcp.h|
|00000790| 3e 0a 23 69 6e 63 6c 75 | 64 65 20 3c 73 79 73 2f |>.#inclu|de <sys/|
|000007a0| 74 69 6d 65 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |time.h>.|#include|
|000007b0| 20 3c 6e 65 74 64 62 2e | 68 3e 0a 23 69 6e 63 6c | <netdb.|h>.#incl|
|000007c0| 75 64 65 20 3c 6d 65 6d | 6f 72 79 2e 68 3e 0a 0a |ude <mem|ory.h>..|
|000007d0| 65 78 74 65 72 6e 20 63 | 68 61 72 20 2a 6f 70 74 |extern c|har *opt|
|000007e0| 61 72 67 3b 0a 65 78 74 | 65 72 6e 20 69 6e 74 20 |arg;.ext|ern int |
|000007f0| 6f 70 74 69 6e 64 2c 20 | 6f 70 74 65 72 72 3b 0a |optind, |opterr;.|
|00000800| 0a 23 69 6e 63 6c 75 64 | 65 20 22 64 65 66 73 2e |.#includ|e "defs.|
|00000810| 68 22 0a 0a 73 74 72 75 | 63 74 20 69 70 61 64 64 |h"..stru|ct ipadd|
|00000820| 72 20 7b 0a 20 20 20 20 | 20 75 6e 73 69 67 6e 65 |r {. | unsigne|
|00000830| 64 20 69 6e 74 20 61 64 | 64 72 3a 33 32 3b 0a 7d |d int ad|dr:32;.}|
|00000840| 3b 0a 0a 73 74 72 75 63 | 74 20 74 63 70 73 79 6e |;..struc|t tcpsyn|
|00000850| 6f 75 74 20 7b 0a 20 20 | 20 20 20 73 74 72 75 63 |out {. | struc|
|00000860| 74 20 74 69 6d 65 76 61 | 6c 20 74 70 3b 0a 20 20 |t timeva|l tp;. |
|00000870| 20 20 20 75 6e 73 69 67 | 6e 65 64 20 6c 6f 6e 67 | unsig|ned long|
|00000880| 20 69 70 73 72 63 61 64 | 64 72 3b 0a 20 20 20 20 | ipsrcad|dr;. |
|00000890| 20 75 6e 73 69 67 6e 65 | 64 20 6c 6f 6e 67 20 69 | unsigne|d long i|
|000008a0| 70 64 73 74 61 64 64 72 | 3b 0a 20 20 20 20 20 75 |pdstaddr|;. u|
|000008b0| 6e 73 69 67 6e 65 64 20 | 6c 6f 6e 67 20 74 63 70 |nsigned |long tcp|
|000008c0| 73 65 71 3b 0a 20 20 20 | 20 20 75 6e 73 69 67 6e |seq;. | unsign|
|000008d0| 65 64 20 73 68 6f 72 74 | 20 74 63 70 73 72 63 70 |ed short| tcpsrcp|
|000008e0| 6f 72 74 3b 0a 20 20 20 | 20 20 75 6e 73 69 67 6e |ort;. | unsign|
|000008f0| 65 64 20 73 68 6f 72 74 | 20 74 63 70 64 73 74 70 |ed short| tcpdstp|
|00000900| 6f 72 74 3b 0a 7d 3b 0a | 0a 73 74 61 74 69 63 20 |ort;.};.|.static |
|00000910| 76 6f 69 64 20 65 74 68 | 65 72 68 61 6e 64 6c 65 |void eth|erhandle|
|00000920| 72 28 63 68 61 72 20 2a | 2c 20 69 6e 74 2c 20 73 |r(char *|, int, s|
|00000930| 74 72 75 63 74 20 74 69 | 6d 65 76 61 6c 29 3b 0a |truct ti|meval);.|
|00000940| 73 74 61 74 69 63 20 76 | 6f 69 64 20 74 63 70 73 |static v|oid tcps|
|00000950| 79 6e 28 73 74 72 75 63 | 74 20 69 70 20 2a 2c 20 |yn(struc|t ip *, |
|00000960| 73 74 72 75 63 74 20 74 | 69 6d 65 76 61 6c 29 3b |struct t|imeval);|
|00000970| 0a 73 74 61 74 69 63 20 | 76 6f 69 64 20 74 63 70 |.static |void tcp|
|00000980| 6c 6f 67 62 69 6e 28 73 | 74 72 75 63 74 20 74 63 |logbin(s|truct tc|
|00000990| 70 73 79 6e 6f 75 74 20 | 2a 29 3b 0a 73 74 61 74 |psynout |*);.stat|
|000009a0| 69 63 20 76 6f 69 64 20 | 74 63 70 6c 6f 67 61 73 |ic void |tcplogas|
|000009b0| 63 69 69 28 73 74 72 75 | 63 74 20 74 63 70 73 79 |cii(stru|ct tcpsy|
|000009c0| 6e 6f 75 74 20 2a 29 3b | 0a 73 74 61 74 69 63 20 |nout *);|.static |
|000009d0| 63 68 61 72 20 2a 67 65 | 74 74 63 70 70 6f 72 74 |char *ge|ttcpport|
|000009e0| 6e 61 6d 65 28 75 6e 73 | 69 67 6e 65 64 20 73 68 |name(uns|igned sh|
|000009f0| 6f 72 74 29 3b 0a 65 78 | 74 65 72 6e 20 63 68 61 |ort);.ex|tern cha|
|00000a00| 72 20 2a 67 65 74 74 69 | 6d 65 73 74 72 28 73 74 |r *getti|mestr(st|
|00000a10| 72 75 63 74 20 74 69 6d | 65 76 61 6c 29 3b 0a 0a |ruct tim|eval);..|
|00000a20| 65 78 74 65 72 6e 20 76 | 6f 69 64 20 70 75 73 68 |extern v|oid push|
|00000a30| 66 69 6c 74 65 72 28 69 | 6e 74 29 3b 0a 0a 73 74 |filter(i|nt);..st|
|00000a40| 72 75 63 74 20 76 61 6c | 5f 73 74 72 5f 68 6e 64 |ruct val|_str_hnd|
|00000a50| 6c 20 65 74 68 65 72 5f | 74 79 70 65 73 5b 5d 20 |l ether_|types[] |
|00000a60| 3d 20 7b 0a 20 20 20 20 | 20 30 78 30 38 30 30 2c |= {. | 0x0800,|
|00000a70| 20 22 44 4f 44 20 49 6e | 74 65 72 6e 65 74 20 50 | "DOD In|ternet P|
|00000a80| 72 6f 74 6f 63 6f 6c 22 | 2c 20 74 63 70 73 79 6e |rotocol"|, tcpsyn|
|00000a90| 2c 0a 20 20 20 20 20 30 | 2c 20 28 63 68 61 72 20 |,. 0|, (char |
|00000aa0| 2a 29 30 2c 20 30 0a 20 | 20 20 20 20 7d 3b 0a 0a |*)0, 0. | };..|
|00000ab0| 23 64 65 66 69 6e 65 20 | 4c 4f 47 42 49 4e 41 52 |#define |LOGBINAR|
|00000ac0| 59 20 30 0a 23 64 65 66 | 69 6e 65 20 4c 4f 47 41 |Y 0.#def|ine LOGA|
|00000ad0| 53 43 49 49 20 31 0a 73 | 74 61 74 69 63 20 69 6e |SCII 1.s|tatic in|
|00000ae0| 74 20 6c 6f 67 74 79 70 | 65 20 3d 20 4c 4f 47 42 |t logtyp|e = LOGB|
|00000af0| 49 4e 41 52 59 3b 0a 73 | 74 61 74 69 63 20 46 49 |INARY;.s|tatic FI|
|00000b00| 4c 45 20 2a 6c 6f 67 66 | 69 6c 65 20 3d 20 73 74 |LE *logf|ile = st|
|00000b10| 64 6f 75 74 3b 0a 0a 69 | 6e 74 20 72 65 73 6f 6c |dout;..i|nt resol|
|00000b20| 76 65 20 3d 20 31 3b 0a | 0a 65 78 74 65 72 6e 20 |ve = 1;.|.extern |
|00000b30| 63 68 61 72 20 2a 67 65 | 74 64 65 66 61 75 6c 74 |char *ge|tdefault|
|00000b40| 69 66 28 63 68 61 72 20 | 2a 29 3b 0a 0a 6d 61 69 |if(char |*);..mai|
|00000b50| 6e 28 69 6e 74 20 61 72 | 67 63 2c 20 63 68 61 72 |n(int ar|gc, char|
|00000b60| 20 2a 2a 61 72 67 76 29 | 0a 7b 0a 20 20 20 20 20 | **argv)|.{. |
|00000b70| 63 68 61 72 20 2a 65 69 | 66 20 3d 20 67 65 74 64 |char *ei|f = getd|
|00000b80| 65 66 61 75 6c 74 69 66 | 28 28 63 68 61 72 20 2a |efaultif|((char *|
|00000b90| 29 30 29 3b 0a 20 20 20 | 20 20 69 6e 74 20 66 64 |)0);. | int fd|
|00000ba0| 3b 0a 20 20 20 20 20 69 | 6e 74 20 63 3b 0a 20 20 |;. i|nt c;. |
|00000bb0| 20 20 20 0a 20 20 20 20 | 20 77 68 69 6c 65 28 28 | . | while((|
|00000bc0| 63 3d 67 65 74 6f 70 74 | 28 61 72 67 63 2c 20 61 |c=getopt|(argc, a|
|00000bd0| 72 67 76 2c 20 22 6e 69 | 3a 61 62 66 3a 22 29 29 |rgv, "ni|:abf:"))|
|00000be0| 20 21 3d 20 2d 31 29 7b | 0a 09 20 20 73 77 69 74 | != -1){|.. swit|
|00000bf0| 63 68 28 63 29 7b 0a 09 | 20 20 63 61 73 65 20 27 |ch(c){..| case '|
|00000c00| 61 27 3a 0a 09 20 20 20 | 20 20 20 20 6c 6f 67 74 |a':.. | logt|
|00000c10| 79 70 65 20 3d 20 4c 4f | 47 41 53 43 49 49 3b 0a |ype = LO|GASCII;.|
|00000c20| 09 20 20 20 20 20 20 20 | 62 72 65 61 6b 3b 0a 09 |. |break;..|
|00000c30| 20 20 63 61 73 65 20 27 | 62 27 3a 0a 09 20 20 20 | case '|b':.. |
|00000c40| 20 20 20 20 6c 6f 67 74 | 79 70 65 20 3d 20 4c 4f | logt|ype = LO|
|00000c50| 47 42 49 4e 41 52 59 3b | 0a 09 20 20 20 20 20 20 |GBINARY;|.. |
|00000c60| 20 62 72 65 61 6b 3b 0a | 09 20 20 63 61 73 65 20 | break;.|. case |
|00000c70| 27 6e 27 3a 0a 09 20 20 | 20 20 20 20 20 72 65 73 |'n':.. | res|
|00000c80| 6f 6c 76 65 20 3d 20 30 | 3b 0a 09 20 20 20 20 20 |olve = 0|;.. |
|00000c90| 20 20 62 72 65 61 6b 3b | 0a 09 20 20 63 61 73 65 | break;|.. case|
|00000ca0| 20 27 69 27 3a 0a 09 20 | 20 20 20 20 20 20 65 69 | 'i':.. | ei|
|00000cb0| 66 20 3d 20 6f 70 74 61 | 72 67 3b 0a 09 20 20 20 |f = opta|rg;.. |
|00000cc0| 20 20 20 20 62 72 65 61 | 6b 3b 0a 09 20 20 63 61 | brea|k;.. ca|
|00000cd0| 73 65 20 27 66 27 3a 0a | 09 20 20 20 20 20 20 20 |se 'f':.|. |
|00000ce0| 69 66 28 21 28 6c 6f 67 | 66 69 6c 65 20 3d 20 66 |if(!(log|file = f|
|00000cf0| 6f 70 65 6e 28 6f 70 74 | 61 72 67 2c 20 22 61 22 |open(opt|arg, "a"|
|00000d00| 29 29 29 7b 0a 09 09 20 | 20 20 20 70 65 72 72 6f |))){... | perro|
|00000d10| 72 28 6f 70 74 61 72 67 | 29 3b 0a 09 09 20 20 20 |r(optarg|);... |
|00000d20| 20 65 78 69 74 28 31 29 | 3b 0a 09 20 20 20 20 20 | exit(1)|;.. |
|00000d30| 20 20 7d 0a 09 20 20 20 | 20 20 20 20 62 72 65 61 | }.. | brea|
|00000d40| 6b 3b 0a 09 20 20 64 65 | 66 61 75 6c 74 3a 0a 09 |k;.. de|fault:..|
|00000d50| 20 20 20 20 20 20 20 66 | 70 72 69 6e 74 66 28 73 | f|printf(s|
|00000d60| 74 64 65 72 72 2c 20 22 | 55 6e 6b 6e 6f 77 6e 20 |tderr, "|Unknown |
|00000d70| 6f 70 74 69 6f 6e 3a 20 | 25 63 5c 6e 22 2c 20 63 |option: |%c\n", c|
|00000d80| 29 3b 0a 09 20 20 20 20 | 20 20 20 65 78 69 74 28 |);.. | exit(|
|00000d90| 31 29 3b 0a 09 20 20 7d | 0a 20 20 20 20 20 7d 0a |1);.. }|. }.|
|00000da0| 0a 20 20 20 20 20 66 64 | 20 3d 20 6f 70 65 6e 6e |. fd| = openn|
|00000db0| 69 74 28 65 69 66 2c 20 | 70 75 73 68 66 69 6c 74 |it(eif, |pushfilt|
|00000dc0| 65 72 29 3b 0a 20 20 20 | 20 20 70 72 6f 63 70 6b |er);. | procpk|
|00000dd0| 74 73 28 66 64 2c 20 65 | 74 68 65 72 68 61 6e 64 |ts(fd, e|therhand|
|00000de0| 6c 65 72 29 3b 0a 7d 0a | 0a 76 6f 69 64 0a 65 74 |ler);.}.|.void.et|
|00000df0| 68 65 72 68 61 6e 64 6c | 65 72 28 63 68 61 72 20 |herhandl|er(char |
|00000e00| 2a 70 6b 74 2c 20 69 6e | 74 20 73 69 7a 65 2c 20 |*pkt, in|t size, |
|00000e10| 73 74 72 75 63 74 20 74 | 69 6d 65 76 61 6c 20 74 |struct t|imeval t|
|00000e20| 70 29 0a 7b 0a 20 20 20 | 20 20 74 63 70 73 79 6e |p).{. | tcpsyn|
|00000e30| 28 28 73 74 72 75 63 74 | 20 69 70 20 2a 29 28 70 |((struct| ip *)(p|
|00000e40| 6b 74 20 2b 20 31 34 29 | 2c 20 74 70 29 3b 0a 7d |kt + 14)|, tp);.}|
|00000e50| 0a 0a 0a 76 6f 69 64 0a | 74 63 70 73 79 6e 28 73 |...void.|tcpsyn(s|
|00000e60| 74 72 75 63 74 20 69 70 | 20 2a 69 70 2c 20 73 74 |truct ip| *ip, st|
|00000e70| 72 75 63 74 20 74 69 6d | 65 76 61 6c 20 74 70 29 |ruct tim|eval tp)|
|00000e80| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 74 |.{. |struct t|
|00000e90| 63 70 68 64 72 20 2a 74 | 63 70 3b 0a 20 20 20 20 |cphdr *t|cp;. |
|00000ea0| 20 73 74 72 75 63 74 20 | 74 63 70 73 79 6e 6f 75 | struct |tcpsynou|
|00000eb0| 74 20 6f 75 74 62 75 66 | 3b 0a 0a 20 20 20 20 20 |t outbuf|;.. |
|00000ec0| 74 63 70 20 3d 20 28 73 | 74 72 75 63 74 20 74 63 |tcp = (s|truct tc|
|00000ed0| 70 68 64 72 20 2a 29 28 | 28 28 63 68 61 72 20 2a |phdr *)(|((char *|
|00000ee0| 29 69 70 29 20 2b 20 73 | 69 7a 65 6f 66 28 73 74 |)ip) + s|izeof(st|
|00000ef0| 72 75 63 74 20 69 70 29 | 29 3b 0a 0a 20 20 20 20 |ruct ip)|);.. |
|00000f00| 20 6d 65 6d 63 70 79 28 | 28 63 68 61 72 20 2a 29 | memcpy(|(char *)|
|00000f10| 26 6f 75 74 62 75 66 2e | 74 63 70 73 65 71 2c 20 |&outbuf.|tcpseq, |
|00000f20| 28 63 68 61 72 20 2a 29 | 26 74 63 70 2d 3e 74 68 |(char *)|&tcp->th|
|00000f30| 5f 73 65 71 2c 20 73 69 | 7a 65 6f 66 28 6c 6f 6e |_seq, si|zeof(lon|
|00000f40| 67 29 29 3b 0a 20 20 20 | 20 20 6d 65 6d 63 70 79 |g));. | memcpy|
|00000f50| 28 28 63 68 61 72 20 2a | 29 26 6f 75 74 62 75 66 |((char *|)&outbuf|
|00000f60| 2e 74 70 2c 20 28 63 68 | 61 72 20 2a 29 26 74 70 |.tp, (ch|ar *)&tp|
|00000f70| 2c 20 73 69 7a 65 6f 66 | 28 73 74 72 75 63 74 20 |, sizeof|(struct |
|00000f80| 74 69 6d 65 76 61 6c 29 | 29 3b 0a 20 20 20 20 20 |timeval)|);. |
|00000f90| 6d 65 6d 63 70 79 28 28 | 63 68 61 72 20 2a 29 26 |memcpy((|char *)&|
|00000fa0| 6f 75 74 62 75 66 2e 69 | 70 73 72 63 61 64 64 72 |outbuf.i|psrcaddr|
|00000fb0| 2c 20 28 63 68 61 72 20 | 2a 29 26 69 70 2d 3e 69 |, (char |*)&ip->i|
|00000fc0| 70 5f 73 72 63 2c 20 34 | 29 3b 0a 20 20 20 20 20 |p_src, 4|);. |
|00000fd0| 6d 65 6d 63 70 79 28 28 | 63 68 61 72 20 2a 29 26 |memcpy((|char *)&|
|00000fe0| 6f 75 74 62 75 66 2e 69 | 70 64 73 74 61 64 64 72 |outbuf.i|pdstaddr|
|00000ff0| 2c 20 28 63 68 61 72 20 | 2a 29 26 69 70 2d 3e 69 |, (char |*)&ip->i|
|00001000| 70 5f 64 73 74 2c 20 34 | 29 3b 0a 20 20 20 20 20 |p_dst, 4|);. |
|00001010| 6d 65 6d 63 70 79 28 28 | 63 68 61 72 20 2a 29 26 |memcpy((|char *)&|
|00001020| 6f 75 74 62 75 66 2e 74 | 63 70 73 72 63 70 6f 72 |outbuf.t|cpsrcpor|
|00001030| 74 2c 20 28 63 68 61 72 | 20 2a 29 26 74 63 70 2d |t, (char| *)&tcp-|
|00001040| 3e 74 68 5f 73 70 6f 72 | 74 2c 20 32 29 3b 0a 20 |>th_spor|t, 2);. |
|00001050| 20 20 20 20 6d 65 6d 63 | 70 79 28 28 63 68 61 72 | memc|py((char|
|00001060| 20 2a 29 26 6f 75 74 62 | 75 66 2e 74 63 70 64 73 | *)&outb|uf.tcpds|
|00001070| 74 70 6f 72 74 2c 20 28 | 63 68 61 72 20 2a 29 26 |tport, (|char *)&|
|00001080| 74 63 70 2d 3e 74 68 5f | 64 70 6f 72 74 2c 20 32 |tcp->th_|dport, 2|
|00001090| 29 3b 0a 0a 20 20 20 20 | 20 73 77 69 74 63 68 28 |);.. | switch(|
|000010a0| 6c 6f 67 74 79 70 65 29 | 7b 0a 20 20 20 20 20 63 |logtype)|{. c|
|000010b0| 61 73 65 20 4c 4f 47 42 | 49 4e 41 52 59 3a 0a 09 |ase LOGB|INARY:..|
|000010c0| 20 20 74 63 70 6c 6f 67 | 62 69 6e 28 26 6f 75 74 | tcplog|bin(&out|
|000010d0| 62 75 66 29 3b 0a 09 20 | 20 62 72 65 61 6b 3b 0a |buf);.. | break;.|
|000010e0| 20 20 20 20 20 63 61 73 | 65 20 4c 4f 47 41 53 43 | cas|e LOGASC|
|000010f0| 49 49 3a 0a 09 20 20 74 | 63 70 6c 6f 67 61 73 63 |II:.. t|cplogasc|
|00001100| 69 69 28 26 6f 75 74 62 | 75 66 29 3b 0a 09 20 20 |ii(&outb|uf);.. |
|00001110| 62 72 65 61 6b 3b 0a 20 | 20 20 20 20 64 65 66 61 |break;. | defa|
|00001120| 75 6c 74 3a 0a 09 20 20 | 66 70 72 69 6e 74 66 28 |ult:.. |fprintf(|
|00001130| 73 74 64 65 72 72 2c 20 | 22 4c 6f 67 20 74 79 70 |stderr, |"Log typ|
|00001140| 65 20 75 6e 6b 6e 6f 77 | 6e 3a 20 25 64 5c 6e 22 |e unknow|n: %d\n"|
|00001150| 2c 20 6c 6f 67 74 79 70 | 65 29 3b 0a 09 20 20 62 |, logtyp|e);.. b|
|00001160| 72 65 61 6b 3b 0a 20 20 | 20 20 20 7d 0a 7d 0a 0a |reak;. | }.}..|
|00001170| 76 6f 69 64 0a 74 63 70 | 6c 6f 67 62 69 6e 28 73 |void.tcp|logbin(s|
|00001180| 74 72 75 63 74 20 74 63 | 70 73 79 6e 6f 75 74 20 |truct tc|psynout |
|00001190| 2a 6f 75 74 62 75 66 29 | 0a 7b 0a 20 20 20 20 20 |*outbuf)|.{. |
|000011a0| 77 72 69 74 65 28 66 69 | 6c 65 6e 6f 28 6c 6f 67 |write(fi|leno(log|
|000011b0| 66 69 6c 65 29 2c 20 28 | 63 68 61 72 20 2a 29 6f |file), (|char *)o|
|000011c0| 75 74 62 75 66 2c 20 73 | 69 7a 65 6f 66 28 73 74 |utbuf, s|izeof(st|
|000011d0| 72 75 63 74 20 74 63 70 | 73 79 6e 6f 75 74 29 29 |ruct tcp|synout))|
|000011e0| 3b 0a 7d 0a 0a 76 6f 69 | 64 0a 74 63 70 6c 6f 67 |;.}..voi|d.tcplog|
|000011f0| 61 73 63 69 69 28 73 74 | 72 75 63 74 20 74 63 70 |ascii(st|ruct tcp|
|00001200| 73 79 6e 6f 75 74 20 2a | 6f 75 74 62 75 66 29 0a |synout *|outbuf).|
|00001210| 7b 0a 20 20 20 20 20 73 | 74 72 75 63 74 20 69 6e |{. s|truct in|
|00001220| 5f 61 64 64 72 20 68 61 | 64 64 72 3b 0a 0a 20 20 |_addr ha|ddr;.. |
|00001230| 20 20 20 66 70 75 74 73 | 28 67 65 74 74 69 6d 65 | fputs|(gettime|
|00001240| 73 74 72 28 6f 75 74 62 | 75 66 2d 3e 74 70 29 2c |str(outb|uf->tp),|
|00001250| 20 6c 6f 67 66 69 6c 65 | 29 3b 0a 20 20 20 20 20 | logfile|);. |
|00001260| 66 70 72 69 6e 74 66 28 | 6c 6f 67 66 69 6c 65 2c |fprintf(|logfile,|
|00001270| 20 22 20 25 38 58 20 22 | 2c 20 6f 75 74 62 75 66 | " %8X "|, outbuf|
|00001280| 2d 3e 74 63 70 73 65 71 | 29 3b 0a 20 20 20 20 20 |->tcpseq|);. |
|00001290| 6d 65 6d 63 70 79 28 26 | 68 61 64 64 72 2e 73 5f |memcpy(&|haddr.s_|
|000012a0| 61 64 64 72 2c 20 26 6f | 75 74 62 75 66 2d 3e 69 |addr, &o|utbuf->i|
|000012b0| 70 73 72 63 61 64 64 72 | 2c 20 34 29 3b 0a 20 20 |psrcaddr|, 4);. |
|000012c0| 20 20 20 66 70 72 69 6e | 74 66 28 6c 6f 67 66 69 | fprin|tf(logfi|
|000012d0| 6c 65 2c 20 22 25 2d 32 | 31 73 22 2c 20 72 65 73 |le, "%-2|1s", res|
|000012e0| 6f 6c 76 65 20 3f 20 63 | 67 65 74 68 6f 73 74 62 |olve ? c|gethostb|
|000012f0| 79 61 64 64 72 28 68 61 | 64 64 72 29 20 3a 20 69 |yaddr(ha|ddr) : i|
|00001300| 6e 65 74 5f 6e 74 6f 61 | 28 68 61 64 64 72 29 29 |net_ntoa|(haddr))|
|00001310| 3b 0a 20 20 20 20 20 66 | 70 75 74 63 28 27 20 27 |;. f|putc(' '|
|00001320| 2c 20 6c 6f 67 66 69 6c | 65 29 3b 0a 20 20 20 20 |, logfil|e);. |
|00001330| 20 66 70 75 74 73 28 67 | 65 74 74 63 70 70 6f 72 | fputs(g|ettcppor|
|00001340| 74 6e 61 6d 65 28 6f 75 | 74 62 75 66 2d 3e 74 63 |tname(ou|tbuf->tc|
|00001350| 70 73 72 63 70 6f 72 74 | 29 2c 20 6c 6f 67 66 69 |psrcport|), logfi|
|00001360| 6c 65 29 3b 0a 20 20 20 | 20 20 66 70 75 74 73 28 |le);. | fputs(|
|00001370| 22 20 2d 3e 20 22 2c 20 | 6c 6f 67 66 69 6c 65 29 |" -> ", |logfile)|
|00001380| 3b 0a 20 20 20 20 20 6d | 65 6d 63 70 79 28 26 68 |;. m|emcpy(&h|
|00001390| 61 64 64 72 2e 73 5f 61 | 64 64 72 2c 20 26 6f 75 |addr.s_a|ddr, &ou|
|000013a0| 74 62 75 66 2d 3e 69 70 | 64 73 74 61 64 64 72 2c |tbuf->ip|dstaddr,|
|000013b0| 20 34 29 3b 0a 20 20 20 | 20 20 66 70 72 69 6e 74 | 4);. | fprint|
|000013c0| 66 28 6c 6f 67 66 69 6c | 65 2c 20 22 25 2d 32 31 |f(logfil|e, "%-21|
|000013d0| 73 22 2c 20 72 65 73 6f | 6c 76 65 20 3f 20 63 67 |s", reso|lve ? cg|
|000013e0| 65 74 68 6f 73 74 62 79 | 61 64 64 72 28 68 61 64 |ethostby|addr(had|
|000013f0| 64 72 29 20 3a 20 69 6e | 65 74 5f 6e 74 6f 61 28 |dr) : in|et_ntoa(|
|00001400| 68 61 64 64 72 29 29 3b | 0a 20 20 20 20 20 66 70 |haddr));|. fp|
|00001410| 75 74 63 28 27 20 27 2c | 20 6c 6f 67 66 69 6c 65 |utc(' ',| logfile|
|00001420| 29 3b 0a 20 20 20 20 20 | 66 70 75 74 73 28 67 65 |);. |fputs(ge|
|00001430| 74 74 63 70 70 6f 72 74 | 6e 61 6d 65 28 6f 75 74 |ttcpport|name(out|
|00001440| 62 75 66 2d 3e 74 63 70 | 64 73 74 70 6f 72 74 29 |buf->tcp|dstport)|
|00001450| 2c 20 6c 6f 67 66 69 6c | 65 29 3b 3b 0a 20 20 20 |, logfil|e);;. |
|00001460| 20 20 66 70 75 74 63 28 | 27 5c 6e 27 2c 20 6c 6f | fputc(|'\n', lo|
|00001470| 67 66 69 6c 65 29 3b 0a | 20 20 20 20 20 66 66 6c |gfile);.| ffl|
|00001480| 75 73 68 28 6c 6f 67 66 | 69 6c 65 29 3b 0a 7d 0a |ush(logf|ile);.}.|
|00001490| 0a 63 68 61 72 20 2a 0a | 67 65 74 74 63 70 70 6f |.char *.|gettcppo|
|000014a0| 72 74 6e 61 6d 65 28 75 | 6e 73 69 67 6e 65 64 20 |rtname(u|nsigned |
|000014b0| 73 68 6f 72 74 20 70 29 | 0a 7b 0a 20 20 20 20 20 |short p)|.{. |
|000014c0| 73 74 72 75 63 74 20 73 | 65 72 76 65 6e 74 20 2a |struct s|ervent *|
|000014d0| 73 65 3b 0a 20 20 20 20 | 20 73 74 61 74 69 63 20 |se;. | static |
|000014e0| 63 68 61 72 20 72 65 73 | 75 6c 74 5b 38 30 5d 3b |char res|ult[80];|
|000014f0| 0a 0a 20 20 20 20 20 69 | 66 28 72 65 73 6f 6c 76 |.. i|f(resolv|
|00001500| 65 20 26 26 20 28 73 65 | 20 3d 20 67 65 74 73 65 |e && (se| = getse|
|00001510| 72 76 62 79 70 6f 72 74 | 28 28 75 6e 73 69 67 6e |rvbyport|((unsign|
|00001520| 65 64 20 69 6e 74 29 6e | 74 6f 68 73 28 70 29 2c |ed int)n|tohs(p),|
|00001530| 20 22 74 63 70 22 29 29 | 29 0a 09 20 20 73 74 72 | "tcp"))|).. str|
|00001540| 63 70 79 28 72 65 73 75 | 6c 74 2c 20 73 65 2d 3e |cpy(resu|lt, se->|
|00001550| 73 5f 6e 61 6d 65 29 3b | 0a 20 20 20 20 20 65 6c |s_name);|. el|
|00001560| 73 65 0a 09 20 20 73 70 | 72 69 6e 74 66 28 72 65 |se.. sp|rintf(re|
|00001570| 73 75 6c 74 2c 20 22 25 | 75 22 2c 20 28 75 6e 73 |sult, "%|u", (uns|
|00001580| 69 67 6e 65 64 20 69 6e | 74 29 6e 74 6f 68 73 28 |igned in|t)ntohs(|
|00001590| 70 29 29 3b 0a 20 20 20 | 20 20 0a 20 20 20 20 20 |p));. | . |
|000015a0| 72 65 74 75 72 6e 20 72 | 65 73 75 6c 74 3b 0a 7d |return r|esult;.}|
|000015b0| 0a 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001600| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 74 63 70 6c |netlog-1|.02/tcpl|
|00001610| 6f 67 67 65 72 2f 4d 61 | 6b 65 66 69 6c 65 00 00 |ogger/Ma|kefile..|
|00001620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001660| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00001670| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00001680| 20 20 20 20 33 30 31 20 | 20 35 34 31 30 33 35 31 | 301 | 5410351|
|00001690| 33 32 30 20 20 31 31 33 | 36 36 00 20 00 00 00 00 |320 113|66. ....|
|000016a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001800| 53 52 43 3d 74 63 70 73 | 79 6e 2e 63 20 70 6b 74 |SRC=tcps|yn.c pkt|
|00001810| 66 69 6c 74 2e 63 0a 4f | 42 4a 3d 24 28 53 52 43 |filt.c.O|BJ=$(SRC|
|00001820| 3a 2e 63 3d 2e 6f 29 0a | 0a 4c 49 42 3d 2e 2e 2f |:.c=.o).|.LIB=../|
|00001830| 6c 69 62 2f 6c 69 62 73 | 75 70 70 6f 72 74 2e 61 |lib/libs|upport.a|
|00001840| 0a 0a 49 4e 43 4c 55 44 | 45 3d 2d 49 2e 2e 2f 69 |..INCLUD|E=-I../i|
|00001850| 6e 63 6c 75 64 65 0a 43 | 46 4c 41 47 53 3d 24 28 |nclude.C|FLAGS=$(|
|00001860| 49 4e 43 4c 55 44 45 29 | 0a 0a 74 63 70 6c 6f 67 |INCLUDE)|..tcplog|
|00001870| 67 65 72 3a 20 24 28 4f | 42 4a 29 0a 09 24 28 43 |ger: $(O|BJ)..$(C|
|00001880| 43 29 20 24 28 4f 42 4a | 29 20 24 28 4c 49 42 29 |C) $(OBJ|) $(LIB)|
|00001890| 20 2d 6f 20 74 63 70 6c | 6f 67 67 65 72 0a 0a 63 | -o tcpl|ogger..c|
|000018a0| 6c 65 61 6e 3a 0a 09 24 | 28 52 4d 29 20 2d 66 20 |lean:..$|(RM) -f |
|000018b0| 24 28 4f 42 4a 29 20 74 | 63 70 6c 6f 67 67 65 72 |$(OBJ) t|cplogger|
|000018c0| 0a 73 79 6e 2e 63 20 2d | 20 30 33 2f 32 30 2f 39 |.syn.c -| 03/20/9|
|000018d0| 33 0a 0a 2a 2f 0a 23 69 | 6e 63 6c 75 64 65 20 3c |3..*/.#i|nclude <|
|000018e0| 73 74 64 69 6f 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |stdio.h>|.#includ|
|000018f0| 65 20 3c 73 79 73 2f 74 | 79 70 65 73 2e 68 3e 0a |e <sys/t|ypes.h>.|
|00001900| 23 69 6e 63 6c 75 64 65 | 20 3c 73 79 73 2f 73 6f |#include| <sys/so|
|00001910| 63 6b 65 74 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |cket.h>.|#include|
|00001920| 20 3c 6e 65 74 69 6e 65 | 74 2f 69 6e 2e 68 3e 0a | <netine|t/in.h>.|
|00001930| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 64 62 2e |#include| <netdb.|
|00001940| 68 3e 0a 23 69 6e 63 6c | 75 64 65 20 3c 6e 65 74 |h>.#incl|ude <net|
|00001950| 69 6e 65 74 2f 69 6e 5f | 73 79 73 74 6d 2e 68 3e |inet/in_|systm.h>|
|00001960| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 6e 65 74 69 6e |.#includ|e <netin|
|00001970| 65 74 2f 69 70 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |et/ip.h>|.#includ|
|00001980| 65 20 3c 6e 65 74 69 6e | 65 74 2f 74 63 70 2e 68 |e <netin|et/tcp.h|
|00001990| 3e 0a 23 69 6e 63 6c 75 | 64 65 20 3c 73 79 73 2f |>.#inclu|de <sys/|
|000019a0| 74 69 6d 65 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |time.h>.|#include|
|000019b0| 20 3c 6e 65 74 64 62 2e | 68 3e 0a 23 69 6e 63 6c | <netdb.|h>.#incl|
|000019c0| 75 64 65 20 3c 6d 65 6d | 6f 72 79 2e 68 3e 0a 0a |ude <mem|ory.h>..|
|000019d0| 65 78 74 65 72 6e 20 63 | 68 61 72 20 2a 6f 70 74 |extern c|har *opt|
|000019e0| 61 72 67 3b 0a 65 78 74 | 65 72 6e 20 69 6e 74 20 |arg;.ext|ern int |
|000019f0| 6f 70 74 69 6e 64 2c 20 | 6f 70 74 65 72 72 3b 0a |optind, |opterr;.|
|00001a00| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 74 63 70 6c |netlog-1|.02/tcpl|
|00001a10| 6f 67 67 65 72 2f 70 6b | 74 66 69 6c 74 2e 63 00 |ogger/pk|tfilt.c.|
|00001a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a60| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00001a70| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00001a80| 20 20 20 33 30 35 30 20 | 20 35 33 36 35 31 31 34 | 3050 | 5365114|
|00001a90| 32 37 34 20 20 31 31 36 | 31 31 00 20 00 00 00 00 |274 116|11. ....|
|00001aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c00| 2f 2a 0a 20 20 20 20 20 | 74 63 70 6c 6f 67 67 65 |/*. |tcplogge|
|00001c10| 72 20 2d 20 41 20 54 43 | 50 20 74 72 61 66 66 69 |r - A TC|P traffi|
|00001c20| 63 20 6c 6f 67 67 65 72 | 0a 20 20 20 20 20 43 6f |c logger|. Co|
|00001c30| 70 79 72 69 67 68 74 20 | 28 43 29 20 31 39 39 33 |pyright |(C) 1993|
|00001c40| 20 44 6f 75 67 6c 61 73 | 20 4c 65 65 20 53 63 68 | Douglas| Lee Sch|
|00001c50| 61 6c 65 73 2c 20 44 61 | 76 69 64 20 4b 2e 20 48 |ales, Da|vid K. H|
|00001c60| 65 73 73 2c 20 44 61 76 | 69 64 20 52 2e 20 53 61 |ess, Dav|id R. Sa|
|00001c70| 66 66 6f 72 64 0a 0a 20 | 20 20 20 20 50 6c 65 61 |fford.. | Plea|
|00001c80| 73 65 20 73 65 65 20 74 | 68 65 20 66 69 6c 65 20 |se see t|he file |
|00001c90| 60 43 4f 50 59 49 4e 47 | 27 20 66 6f 72 20 74 68 |`COPYING|' for th|
|00001ca0| 65 20 63 6f 6d 70 6c 65 | 74 65 20 63 6f 70 79 72 |e comple|te copyr|
|00001cb0| 69 67 68 74 20 6e 6f 74 | 69 63 65 2e 0a 0a 70 6b |ight not|ice...pk|
|00001cc0| 74 66 69 6c 74 2e 63 20 | 2d 20 30 33 2f 32 30 2f |tfilt.c |- 03/20/|
|00001cd0| 39 33 0a 0a 2a 2f 0a 23 | 69 6e 63 6c 75 64 65 20 |93..*/.#|include |
|00001ce0| 3c 73 74 64 69 6f 2e 68 | 3e 0a 23 69 6e 63 6c 75 |<stdio.h|>.#inclu|
|00001cf0| 64 65 20 3c 73 79 73 2f | 74 79 70 65 73 2e 68 3e |de <sys/|types.h>|
|00001d00| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 73 79 73 2f 69 |.#includ|e <sys/i|
|00001d10| 6f 63 74 6c 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |octl.h>.|#include|
|00001d20| 20 3c 6e 65 74 2f 6e 69 | 74 5f 70 66 2e 68 3e 0a | <net/ni|t_pf.h>.|
|00001d30| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 2f 70 61 |#include| <net/pa|
|00001d40| 63 6b 65 74 66 69 6c 74 | 2e 68 3e 0a 23 69 6e 63 |cketfilt|.h>.#inc|
|00001d50| 6c 75 64 65 20 3c 6e 65 | 74 69 6e 65 74 2f 69 6e |lude <ne|tinet/in|
|00001d60| 2e 68 3e 0a 23 69 6e 63 | 6c 75 64 65 20 3c 73 79 |.h>.#inc|lude <sy|
|00001d70| 73 2f 73 6f 63 6b 65 74 | 2e 68 3e 0a 23 69 6e 63 |s/socket|.h>.#inc|
|00001d80| 6c 75 64 65 20 3c 6e 65 | 74 2f 69 66 2e 68 3e 0a |lude <ne|t/if.h>.|
|00001d90| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 69 6e 65 |#include| <netine|
|00001da0| 74 2f 69 66 5f 65 74 68 | 65 72 2e 68 3e 0a 23 69 |t/if_eth|er.h>.#i|
|00001db0| 6e 63 6c 75 64 65 20 3c | 73 79 73 2f 73 74 72 6f |nclude <|sys/stro|
|00001dc0| 70 74 73 2e 68 3e 0a 23 | 69 6e 63 6c 75 64 65 20 |pts.h>.#|include |
|00001dd0| 3c 6e 65 74 64 62 2e 68 | 3e 0a 0a 23 64 65 66 69 |<netdb.h|>..#defi|
|00001de0| 6e 65 20 6f 66 66 73 65 | 74 6f 66 28 54 2c 20 6d |ne offse|tof(T, m|
|00001df0| 29 20 28 28 73 69 7a 65 | 5f 74 29 26 28 28 28 54 |) ((size|_t)&(((T|
|00001e00| 20 2a 29 30 29 2d 3e 6d | 29 29 0a 0a 2f 2a 0a 20 | *)0)->m|))../*. |
|00001e10| 20 52 65 6e 61 6d 65 20 | 73 6f 6d 65 20 6f 66 20 | Rename |some of |
|00001e20| 74 68 65 20 70 61 63 6b | 65 74 20 66 69 6c 74 65 |the pack|et filte|
|00001e30| 72 20 6f 70 65 72 61 74 | 6f 72 73 20 73 6f 20 74 |r operat|ors so t|
|00001e40| 68 61 74 0a 20 20 20 74 | 68 65 20 6e 61 6d 65 73 |hat. t|he names|
|00001e50| 20 72 65 66 6c 65 63 74 | 20 77 68 61 74 20 74 68 | reflect| what th|
|00001e60| 65 79 20 61 63 74 75 61 | 6c 6c 79 20 64 6f 0a 2a |ey actua|lly do.*|
|00001e70| 2f 0a 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |/../* Sh|ort circ|
|00001e80| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00001e90| 20 6b 65 65 70 20 70 61 | 63 6b 65 74 20 2a 2f 0a | keep pa|cket */.|
|00001ea0| 23 64 65 66 69 6e 65 20 | 45 4e 46 5f 43 45 51 20 |#define |ENF_CEQ |
|00001eb0| 45 4e 46 5f 43 4f 52 0a | 2f 2a 20 53 68 6f 72 74 |ENF_COR.|/* Short|
|00001ec0| 20 63 69 72 63 75 69 74 | 20 69 66 20 6e 6f 74 20 | circuit| if not |
|00001ed0| 65 71 75 61 6c 20 61 6e | 64 20 6b 65 65 70 20 70 |equal an|d keep p|
|00001ee0| 61 63 6b 65 74 20 2a 2f | 0a 23 64 65 66 69 6e 65 |acket */|.#define|
|00001ef0| 20 45 4e 46 5f 43 4e 45 | 20 45 4e 46 5f 43 4e 41 | ENF_CNE| ENF_CNA|
|00001f00| 4e 44 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |ND./* Sh|ort circ|
|00001f10| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00001f20| 20 72 65 6a 65 63 74 20 | 70 61 63 6b 65 74 20 2a | reject |packet *|
|00001f30| 2f 0a 23 64 65 66 69 6e | 65 20 45 4e 46 5f 43 52 |/.#defin|e ENF_CR|
|00001f40| 45 51 20 45 4e 46 5f 4e | 4f 52 0a 2f 2a 20 53 68 |EQ ENF_N|OR./* Sh|
|00001f50| 6f 72 74 20 63 69 72 63 | 75 69 74 20 69 66 20 6e |ort circ|uit if n|
|00001f60| 6f 74 20 65 71 75 61 6c | 20 61 6e 64 20 72 65 6a |ot equal| and rej|
|00001f70| 65 63 74 20 70 61 63 6b | 65 74 20 2a 2f 0a 23 64 |ect pack|et */.#d|
|00001f80| 65 66 69 6e 65 20 45 4e | 46 5f 43 52 4e 45 20 45 |efine EN|F_CRNE E|
|00001f90| 4e 46 5f 43 41 4e 44 0a | 0a 76 6f 69 64 0a 70 75 |NF_CAND.|.void.pu|
|00001fa0| 73 68 66 69 6c 74 65 72 | 28 69 6e 74 20 66 64 29 |shfilter|(int fd)|
|00001fb0| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 70 |.{. |struct p|
|00001fc0| 61 63 6b 65 74 66 69 6c | 74 20 70 66 3b 0a 20 20 |acketfil|t pf;. |
|00001fd0| 20 20 20 75 5f 73 68 6f | 72 74 20 2a 70 74 72 3b | u_sho|rt *ptr;|
|00001fe0| 0a 20 20 20 20 20 73 74 | 72 75 63 74 20 73 65 72 |. st|ruct ser|
|00001ff0| 76 65 6e 74 20 2a 73 65 | 3b 0a 0a 20 20 20 20 20 |vent *se|;.. |
|00002000| 70 66 2e 50 66 5f 50 72 | 69 6f 72 69 74 79 20 3d |pf.Pf_Pr|iority =|
|00002010| 20 30 3b 0a 20 20 20 20 | 20 70 74 72 20 3d 20 70 | 0;. | ptr = p|
|00002020| 66 2e 50 66 5f 46 69 6c | 74 65 72 3b 0a 20 20 20 |f.Pf_Fil|ter;. |
|00002030| 20 20 2a 70 74 72 2b 2b | 20 3d 20 45 4e 46 5f 50 | *ptr++| = ENF_P|
|00002040| 55 53 48 57 4f 52 44 20 | 2b 20 36 3b 0a 20 20 20 |USHWORD |+ 6;. |
|00002050| 20 20 2a 70 74 72 2b 2b | 20 3d 20 45 4e 46 5f 50 | *ptr++| = ENF_P|
|00002060| 55 53 48 4c 49 54 7c 45 | 4e 46 5f 43 52 4e 45 3b |USHLIT|E|NF_CRNE;|
|00002070| 0a 20 20 20 20 20 2a 70 | 74 72 2b 2b 20 3d 20 68 |. *p|tr++ = h|
|00002080| 74 6f 6e 73 28 45 54 48 | 45 52 54 59 50 45 5f 49 |tons(ETH|ERTYPE_I|
|00002090| 50 29 3b 0a 20 20 20 20 | 20 2a 70 74 72 2b 2b 20 |P);. | *ptr++ |
|000020a0| 3d 20 45 4e 46 5f 50 55 | 53 48 57 4f 52 44 20 2b |= ENF_PU|SHWORD +|
|000020b0| 20 31 31 3b 0a 20 20 20 | 20 20 2a 70 74 72 2b 2b | 11;. | *ptr++|
|000020c0| 20 3d 20 45 4e 46 5f 50 | 55 53 48 4c 49 54 7c 45 | = ENF_P|USHLIT|E|
|000020d0| 4e 46 5f 41 4e 44 3b 0a | 20 20 20 20 20 2a 70 74 |NF_AND;.| *pt|
|000020e0| 72 2b 2b 20 3d 20 30 78 | 66 66 3b 0a 20 20 20 20 |r++ = 0x|ff;. |
|000020f0| 20 2a 70 74 72 2b 2b 20 | 3d 20 45 4e 46 5f 50 55 | *ptr++ |= ENF_PU|
|00002100| 53 48 4c 49 54 7c 45 4e | 46 5f 43 52 4e 45 3b 0a |SHLIT|EN|F_CRNE;.|
|00002110| 20 20 20 20 20 2a 70 74 | 72 2b 2b 20 3d 20 36 3b | *pt|r++ = 6;|
|00002120| 0a 20 20 20 20 20 2a 70 | 74 72 2b 2b 20 3d 20 45 |. *p|tr++ = E|
|00002130| 4e 46 5f 50 55 53 48 57 | 4f 52 44 20 2b 20 32 33 |NF_PUSHW|ORD + 23|
|00002140| 3b 0a 20 20 20 20 20 2a | 70 74 72 2b 2b 20 3d 20 |;. *|ptr++ = |
|00002150| 45 4e 46 5f 50 55 53 48 | 4c 49 54 7c 45 4e 46 5f |ENF_PUSH|LIT|ENF_|
|00002160| 41 4e 44 3b 0a 20 20 20 | 20 20 2a 70 74 72 2b 2b |AND;. | *ptr++|
|00002170| 20 3d 20 30 78 30 30 66 | 66 3b 0a 20 20 20 20 20 | = 0x00f|f;. |
|00002180| 2a 70 74 72 2b 2b 20 3d | 20 45 4e 46 5f 50 55 53 |*ptr++ =| ENF_PUS|
|00002190| 48 4c 49 54 7c 45 4e 46 | 5f 43 52 4e 45 3b 0a 20 |HLIT|ENF|_CRNE;. |
|000021a0| 20 20 20 20 2a 70 74 72 | 2b 2b 20 3d 20 32 3b 0a | *ptr|++ = 2;.|
|000021b0| 0a 20 20 20 20 20 70 66 | 2e 50 66 5f 46 69 6c 74 |. pf|.Pf_Filt|
|000021c0| 65 72 4c 65 6e 20 3d 20 | 70 74 72 20 2d 20 26 70 |erLen = |ptr - &p|
|000021d0| 66 2e 50 66 5f 46 69 6c | 74 65 72 5b 30 5d 3b 0a |f.Pf_Fil|ter[0];.|
|000021e0| 0a 20 20 20 20 20 69 66 | 28 69 6f 63 74 6c 28 66 |. if|(ioctl(f|
|000021f0| 64 2c 20 4e 49 4f 43 53 | 45 54 46 2c 20 26 70 66 |d, NIOCS|ETF, &pf|
|00002200| 29 20 3d 3d 20 2d 31 29 | 0a 09 20 20 70 65 72 72 |) == -1)|.. perr|
|00002210| 6f 72 28 22 70 66 20 73 | 65 74 66 22 29 3b 0a 7d |or("pf s|etf");.}|
|00002220| 0a 0a 20 20 20 20 20 0a | 65 74 20 66 69 6c 74 65 |.. .|et filte|
|00002230| 72 20 6f 70 65 72 61 74 | 6f 72 73 20 73 6f 20 74 |r operat|ors so t|
|00002240| 68 61 74 0a 20 20 20 74 | 68 65 20 6e 61 6d 65 73 |hat. t|he names|
|00002250| 20 72 65 66 6c 65 63 74 | 20 77 68 61 74 20 74 68 | reflect| what th|
|00002260| 65 79 20 61 63 74 75 61 | 6c 6c 79 20 64 6f 0a 2a |ey actua|lly do.*|
|00002270| 2f 0a 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |/../* Sh|ort circ|
|00002280| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00002290| 20 6b 65 65 70 20 70 61 | 63 6b 65 74 20 2a 2f 0a | keep pa|cket */.|
|000022a0| 23 64 65 66 69 6e 65 20 | 45 4e 46 5f 43 45 51 20 |#define |ENF_CEQ |
|000022b0| 45 4e 46 5f 43 4f 52 0a | 2f 2a 20 53 68 6f 72 74 |ENF_COR.|/* Short|
|000022c0| 20 63 69 72 63 75 69 74 | 20 69 66 20 6e 6f 74 20 | circuit| if not |
|000022d0| 65 71 75 61 6c 20 61 6e | 64 20 6b 65 65 70 20 70 |equal an|d keep p|
|000022e0| 61 63 6b 65 74 20 2a 2f | 0a 23 64 65 66 69 6e 65 |acket */|.#define|
|000022f0| 20 45 4e 46 5f 43 4e 45 | 20 45 4e 46 5f 43 4e 41 | ENF_CNE| ENF_CNA|
|00002300| 4e 44 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |ND./* Sh|ort circ|
|00002310| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00002320| 20 72 65 6a 65 63 74 20 | 70 61 63 6b 65 74 20 2a | reject |packet *|
|00002330| 2f 0a 23 64 65 66 69 6e | 65 20 45 4e 46 5f 43 52 |/.#defin|e ENF_CR|
|00002340| 45 51 20 45 4e 46 5f 4e | 4f 52 0a 2f 2a 20 53 68 |EQ ENF_N|OR./* Sh|
|00002350| 6f 72 74 20 63 69 72 63 | 75 69 74 20 69 66 20 6e |ort circ|uit if n|
|00002360| 6f 74 20 65 71 75 61 6c | 20 61 6e 64 20 72 65 6a |ot equal| and rej|
|00002370| 65 63 74 20 70 61 63 6b | 65 74 20 2a 2f 0a 23 64 |ect pack|et */.#d|
|00002380| 65 66 69 6e 65 20 45 4e | 46 5f 43 52 4e 45 20 45 |efine EN|F_CRNE E|
|00002390| 4e 46 5f 43 41 4e 44 0a | 0a 76 6f 69 64 0a 70 75 |NF_CAND.|.void.pu|
|000023a0| 73 68 66 69 6c 74 65 72 | 28 69 6e 74 20 66 64 29 |shfilter|(int fd)|
|000023b0| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 70 |.{. |struct p|
|000023c0| 61 63 6b 65 74 66 69 6c | 74 20 70 66 3b 0a 20 20 |acketfil|t pf;. |
|000023d0| 20 20 20 75 5f 73 68 6f | 72 74 20 2a 70 74 72 3b | u_sho|rt *ptr;|
|000023e0| 0a 20 20 20 20 20 73 74 | 72 75 63 74 20 73 65 72 |. st|ruct ser|
|000023f0| 76 65 6e 74 20 2a 73 65 | 3b 0a 0a 20 20 20 20 20 |vent *se|;.. |
|00002400| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 75 64 70 6c |netlog-1|.02/udpl|
|00002410| 6f 67 67 65 72 2f 00 00 | 00 00 00 00 00 00 00 00 |ogger/..|........|
|00002420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002460| 00 00 00 00 20 20 20 37 | 35 35 20 00 20 20 20 33 |.... 7|55 . 3|
|00002470| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00002480| 20 20 20 20 20 20 30 20 | 20 35 34 31 30 34 33 34 | 0 | 5410434|
|00002490| 36 33 36 20 20 20 37 37 | 30 35 00 20 00 00 00 00 |636 77|05. ....|
|000024a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000024b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000024c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000024d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000024e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000024f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002600| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 75 64 70 6c |netlog-1|.02/udpl|
|00002610| 6f 67 67 65 72 2f 4d 61 | 6b 65 66 69 6c 65 00 00 |ogger/Ma|kefile..|
|00002620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002660| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00002670| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00002680| 20 20 20 20 33 30 31 20 | 20 35 34 31 30 33 35 31 | 301 | 5410351|
|00002690| 33 35 31 20 20 31 31 33 | 37 34 00 20 00 00 00 00 |351 113|74. ....|
|000026a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002800| 53 52 43 3d 75 64 70 6c | 6f 67 2e 63 20 70 6b 74 |SRC=udpl|og.c pkt|
|00002810| 66 69 6c 74 2e 63 0a 4f | 42 4a 3d 24 28 53 52 43 |filt.c.O|BJ=$(SRC|
|00002820| 3a 2e 63 3d 2e 6f 29 0a | 0a 4c 49 42 3d 2e 2e 2f |:.c=.o).|.LIB=../|
|00002830| 6c 69 62 2f 6c 69 62 73 | 75 70 70 6f 72 74 2e 61 |lib/libs|upport.a|
|00002840| 0a 0a 49 4e 43 4c 55 44 | 45 3d 2d 49 2e 2e 2f 69 |..INCLUD|E=-I../i|
|00002850| 6e 63 6c 75 64 65 0a 43 | 46 4c 41 47 53 3d 24 28 |nclude.C|FLAGS=$(|
|00002860| 49 4e 43 4c 55 44 45 29 | 0a 0a 75 64 70 6c 6f 67 |INCLUDE)|..udplog|
|00002870| 67 65 72 3a 20 24 28 4f | 42 4a 29 0a 09 24 28 43 |ger: $(O|BJ)..$(C|
|00002880| 43 29 20 24 28 4f 42 4a | 29 20 24 28 4c 49 42 29 |C) $(OBJ|) $(LIB)|
|00002890| 20 2d 6f 20 75 64 70 6c | 6f 67 67 65 72 0a 0a 63 | -o udpl|ogger..c|
|000028a0| 6c 65 61 6e 3a 0a 09 24 | 28 52 4d 29 20 2d 66 20 |lean:..$|(RM) -f |
|000028b0| 24 28 4f 42 4a 29 20 75 | 64 70 6c 6f 67 67 65 72 |$(OBJ) u|dplogger|
|000028c0| 0a 00 50 59 4e 46 5f 50 | 55 53 48 4c 49 54 7c 45 |..PYNF_P|USHLIT|E|
|000028d0| 4e 46 5f 41 4e 44 3b 0a | 20 20 20 20 20 2a 70 74 |NF_AND;.| *pt|
|000028e0| 72 2b 2b 20 3d 20 30 78 | 66 66 3b 0a 20 20 20 20 |r++ = 0x|ff;. |
|000028f0| 20 2a 70 74 72 2b 2b 20 | 3d 20 45 4e 46 5f 50 55 | *ptr++ |= ENF_PU|
|00002900| 53 48 4c 49 54 7c 45 4e | 46 5f 43 52 4e 45 3b 0a |SHLIT|EN|F_CRNE;.|
|00002910| 20 20 20 20 20 2a 70 74 | 72 2b 2b 20 3d 20 36 3b | *pt|r++ = 6;|
|00002920| 0a 20 20 20 20 20 2a 70 | 74 72 2b 2b 20 3d 20 45 |. *p|tr++ = E|
|00002930| 4e 46 5f 50 55 53 48 57 | 4f 52 44 20 2b 20 32 33 |NF_PUSHW|ORD + 23|
|00002940| 3b 0a 20 20 20 20 20 2a | 70 74 72 2b 2b 20 3d 20 |;. *|ptr++ = |
|00002950| 45 4e 46 5f 50 55 53 48 | 4c 49 54 7c 45 4e 46 5f |ENF_PUSH|LIT|ENF_|
|00002960| 41 4e 44 3b 0a 20 20 20 | 20 20 2a 70 74 72 2b 2b |AND;. | *ptr++|
|00002970| 20 3d 20 30 78 30 30 66 | 66 3b 0a 20 20 20 20 20 | = 0x00f|f;. |
|00002980| 2a 70 74 72 2b 2b 20 3d | 20 45 4e 46 5f 50 55 53 |*ptr++ =| ENF_PUS|
|00002990| 48 4c 49 54 7c 45 4e 46 | 5f 43 52 4e 45 3b 0a 20 |HLIT|ENF|_CRNE;. |
|000029a0| 20 20 20 20 2a 70 74 72 | 2b 2b 20 3d 20 32 3b 0a | *ptr|++ = 2;.|
|000029b0| 0a 20 20 20 20 20 70 66 | 2e 50 66 5f 46 69 6c 74 |. pf|.Pf_Filt|
|000029c0| 65 72 4c 65 6e 20 3d 20 | 70 74 72 20 2d 20 26 70 |erLen = |ptr - &p|
|000029d0| 66 2e 50 66 5f 46 69 6c | 74 65 72 5b 30 5d 3b 0a |f.Pf_Fil|ter[0];.|
|000029e0| 0a 20 20 20 20 20 69 66 | 28 69 6f 63 74 6c 28 66 |. if|(ioctl(f|
|000029f0| 64 2c 20 4e 49 4f 43 53 | 45 54 46 2c 20 26 70 66 |d, NIOCS|ETF, &pf|
|00002a00| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 75 64 70 6c |netlog-1|.02/udpl|
|00002a10| 6f 67 67 65 72 2f 70 6b | 74 66 69 6c 74 2e 63 00 |ogger/pk|tfilt.c.|
|00002a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a60| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00002a70| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00002a80| 20 20 20 32 36 34 34 20 | 20 35 33 36 35 31 31 34 | 2644 | 5365114|
|00002a90| 33 37 31 20 20 31 31 36 | 32 31 00 20 00 00 00 00 |371 116|21. ....|
|00002aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002c00| 2f 2a 0a 20 20 20 20 20 | 75 64 70 6c 6f 67 67 65 |/*. |udplogge|
|00002c10| 72 20 2d 20 41 20 55 44 | 50 20 74 72 61 66 66 69 |r - A UD|P traffi|
|00002c20| 63 20 6c 6f 67 67 65 72 | 0a 20 20 20 20 20 43 6f |c logger|. Co|
|00002c30| 70 79 72 69 67 68 74 20 | 28 43 29 20 31 39 39 33 |pyright |(C) 1993|
|00002c40| 20 44 6f 75 67 6c 61 73 | 20 4c 65 65 20 53 63 68 | Douglas| Lee Sch|
|00002c50| 61 6c 65 73 2c 20 44 61 | 76 69 64 20 4b 2e 20 48 |ales, Da|vid K. H|
|00002c60| 65 73 73 2c 20 44 61 76 | 69 64 20 52 2e 20 53 61 |ess, Dav|id R. Sa|
|00002c70| 66 66 6f 72 64 0a 0a 20 | 20 20 20 20 50 6c 65 61 |fford.. | Plea|
|00002c80| 73 65 20 73 65 65 20 74 | 68 65 20 66 69 6c 65 20 |se see t|he file |
|00002c90| 60 43 4f 50 59 49 4e 47 | 27 20 66 6f 72 20 74 68 |`COPYING|' for th|
|00002ca0| 65 20 63 6f 6d 70 6c 65 | 74 65 20 63 6f 70 79 72 |e comple|te copyr|
|00002cb0| 69 67 68 74 20 6e 6f 74 | 69 63 65 2e 0a 0a 70 6b |ight not|ice...pk|
|00002cc0| 74 66 69 6c 74 2e 63 20 | 2d 20 30 33 2f 32 30 2f |tfilt.c |- 03/20/|
|00002cd0| 39 33 0a 0a 2a 2f 0a 23 | 69 6e 63 6c 75 64 65 20 |93..*/.#|include |
|00002ce0| 3c 73 74 64 69 6f 2e 68 | 3e 0a 23 69 6e 63 6c 75 |<stdio.h|>.#inclu|
|00002cf0| 64 65 20 3c 73 79 73 2f | 74 79 70 65 73 2e 68 3e |de <sys/|types.h>|
|00002d00| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 73 79 73 2f 69 |.#includ|e <sys/i|
|00002d10| 6f 63 74 6c 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |octl.h>.|#include|
|00002d20| 20 3c 6e 65 74 2f 6e 69 | 74 5f 70 66 2e 68 3e 0a | <net/ni|t_pf.h>.|
|00002d30| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 2f 70 61 |#include| <net/pa|
|00002d40| 63 6b 65 74 66 69 6c 74 | 2e 68 3e 0a 23 69 6e 63 |cketfilt|.h>.#inc|
|00002d50| 6c 75 64 65 20 3c 6e 65 | 74 69 6e 65 74 2f 69 6e |lude <ne|tinet/in|
|00002d60| 2e 68 3e 0a 23 69 6e 63 | 6c 75 64 65 20 3c 73 79 |.h>.#inc|lude <sy|
|00002d70| 73 2f 73 6f 63 6b 65 74 | 2e 68 3e 0a 23 69 6e 63 |s/socket|.h>.#inc|
|00002d80| 6c 75 64 65 20 3c 6e 65 | 74 2f 69 66 2e 68 3e 0a |lude <ne|t/if.h>.|
|00002d90| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 69 6e 65 |#include| <netine|
|00002da0| 74 2f 69 66 5f 65 74 68 | 65 72 2e 68 3e 0a 23 69 |t/if_eth|er.h>.#i|
|00002db0| 6e 63 6c 75 64 65 20 3c | 73 79 73 2f 73 74 72 6f |nclude <|sys/stro|
|00002dc0| 70 74 73 2e 68 3e 0a 23 | 69 6e 63 6c 75 64 65 20 |pts.h>.#|include |
|00002dd0| 3c 6e 65 74 64 62 2e 68 | 3e 0a 0a 23 64 65 66 69 |<netdb.h|>..#defi|
|00002de0| 6e 65 20 6f 66 66 73 65 | 74 6f 66 28 54 2c 20 6d |ne offse|tof(T, m|
|00002df0| 29 20 28 28 73 69 7a 65 | 5f 74 29 26 28 28 28 54 |) ((size|_t)&(((T|
|00002e00| 20 2a 29 30 29 2d 3e 6d | 29 29 0a 0a 2f 2a 0a 20 | *)0)->m|))../*. |
|00002e10| 20 52 65 6e 61 6d 65 20 | 73 6f 6d 65 20 6f 66 20 | Rename |some of |
|00002e20| 74 68 65 20 70 61 63 6b | 65 74 20 66 69 6c 74 65 |the pack|et filte|
|00002e30| 72 20 6f 70 65 72 61 74 | 6f 72 73 20 73 6f 20 74 |r operat|ors so t|
|00002e40| 68 61 74 0a 20 20 20 74 | 68 65 20 6e 61 6d 65 73 |hat. t|he names|
|00002e50| 20 72 65 66 6c 65 63 74 | 20 77 68 61 74 20 74 68 | reflect| what th|
|00002e60| 65 79 20 61 63 74 75 61 | 6c 6c 79 20 64 6f 0a 2a |ey actua|lly do.*|
|00002e70| 2f 0a 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |/../* Sh|ort circ|
|00002e80| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00002e90| 20 6b 65 65 70 20 70 61 | 63 6b 65 74 20 2a 2f 0a | keep pa|cket */.|
|00002ea0| 23 64 65 66 69 6e 65 20 | 45 4e 46 5f 43 45 51 20 |#define |ENF_CEQ |
|00002eb0| 45 4e 46 5f 43 4f 52 0a | 2f 2a 20 53 68 6f 72 74 |ENF_COR.|/* Short|
|00002ec0| 20 63 69 72 63 75 69 74 | 20 69 66 20 6e 6f 74 20 | circuit| if not |
|00002ed0| 65 71 75 61 6c 20 61 6e | 64 20 6b 65 65 70 20 70 |equal an|d keep p|
|00002ee0| 61 63 6b 65 74 20 2a 2f | 0a 23 64 65 66 69 6e 65 |acket */|.#define|
|00002ef0| 20 45 4e 46 5f 43 4e 45 | 20 45 4e 46 5f 43 4e 41 | ENF_CNE| ENF_CNA|
|00002f00| 4e 44 0a 2f 2a 20 53 68 | 6f 72 74 20 63 69 72 63 |ND./* Sh|ort circ|
|00002f10| 75 69 74 20 69 66 20 65 | 71 75 61 6c 20 61 6e 64 |uit if e|qual and|
|00002f20| 20 72 65 6a 65 63 74 20 | 70 61 63 6b 65 74 20 2a | reject |packet *|
|00002f30| 2f 0a 23 64 65 66 69 6e | 65 20 45 4e 46 5f 43 52 |/.#defin|e ENF_CR|
|00002f40| 45 51 20 45 4e 46 5f 4e | 4f 52 0a 2f 2a 20 53 68 |EQ ENF_N|OR./* Sh|
|00002f50| 6f 72 74 20 63 69 72 63 | 75 69 74 20 69 66 20 6e |ort circ|uit if n|
|00002f60| 6f 74 20 65 71 75 61 6c | 20 61 6e 64 20 72 65 6a |ot equal| and rej|
|00002f70| 65 63 74 20 70 61 63 6b | 65 74 20 2a 2f 0a 23 64 |ect pack|et */.#d|
|00002f80| 65 66 69 6e 65 20 45 4e | 46 5f 43 52 4e 45 20 45 |efine EN|F_CRNE E|
|00002f90| 4e 46 5f 43 41 4e 44 0a | 0a 76 6f 69 64 0a 70 75 |NF_CAND.|.void.pu|
|00002fa0| 73 68 66 69 6c 74 65 72 | 28 69 6e 74 20 66 64 29 |shfilter|(int fd)|
|00002fb0| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 70 |.{. |struct p|
|00002fc0| 61 63 6b 65 74 66 69 6c | 74 20 70 66 3b 0a 20 20 |acketfil|t pf;. |
|00002fd0| 20 20 20 75 5f 73 68 6f | 72 74 20 2a 70 74 72 3b | u_sho|rt *ptr;|
|00002fe0| 0a 20 20 20 20 20 73 74 | 72 75 63 74 20 73 65 72 |. st|ruct ser|
|00002ff0| 76 65 6e 74 20 2a 73 65 | 3b 0a 0a 20 20 20 20 20 |vent *se|;.. |
|00003000| 70 66 2e 50 66 5f 50 72 | 69 6f 72 69 74 79 20 3d |pf.Pf_Pr|iority =|
|00003010| 20 30 3b 0a 20 20 20 20 | 20 70 74 72 20 3d 20 70 | 0;. | ptr = p|
|00003020| 66 2e 50 66 5f 46 69 6c | 74 65 72 3b 0a 20 20 20 |f.Pf_Fil|ter;. |
|00003030| 20 20 2a 70 74 72 2b 2b | 20 3d 20 45 4e 46 5f 50 | *ptr++| = ENF_P|
|00003040| 55 53 48 57 4f 52 44 20 | 2b 20 36 3b 0a 20 20 20 |USHWORD |+ 6;. |
|00003050| 20 20 2a 70 74 72 2b 2b | 20 3d 20 45 4e 46 5f 50 | *ptr++| = ENF_P|
|00003060| 55 53 48 4c 49 54 7c 45 | 4e 46 5f 43 52 4e 45 3b |USHLIT|E|NF_CRNE;|
|00003070| 0a 20 20 20 20 20 2a 70 | 74 72 2b 2b 20 3d 20 68 |. *p|tr++ = h|
|00003080| 74 6f 6e 73 28 45 54 48 | 45 52 54 59 50 45 5f 49 |tons(ETH|ERTYPE_I|
|00003090| 50 29 3b 0a 20 20 20 20 | 20 2a 70 74 72 2b 2b 20 |P);. | *ptr++ |
|000030a0| 3d 20 45 4e 46 5f 50 55 | 53 48 57 4f 52 44 20 2b |= ENF_PU|SHWORD +|
|000030b0| 20 31 31 3b 0a 20 20 20 | 20 20 2a 70 74 72 2b 2b | 11;. | *ptr++|
|000030c0| 20 3d 20 45 4e 46 5f 50 | 55 53 48 4c 49 54 7c 45 | = ENF_P|USHLIT|E|
|000030d0| 4e 46 5f 41 4e 44 3b 0a | 20 20 20 20 20 2a 70 74 |NF_AND;.| *pt|
|000030e0| 72 2b 2b 20 3d 20 30 78 | 66 66 3b 0a 20 20 20 20 |r++ = 0x|ff;. |
|000030f0| 20 2a 70 74 72 2b 2b 20 | 3d 20 45 4e 46 5f 50 55 | *ptr++ |= ENF_PU|
|00003100| 53 48 4c 49 54 7c 45 4e | 46 5f 43 52 4e 45 3b 0a |SHLIT|EN|F_CRNE;.|
|00003110| 20 20 20 20 20 2a 70 74 | 72 2b 2b 20 3d 20 31 37 | *pt|r++ = 17|
|00003120| 3b 20 2f 2a 20 55 44 50 | 20 2a 2f 0a 0a 20 20 20 |; /* UDP| */.. |
|00003130| 20 20 70 66 2e 50 66 5f | 46 69 6c 74 65 72 4c 65 | pf.Pf_|FilterLe|
|00003140| 6e 20 3d 20 70 74 72 20 | 2d 20 26 70 66 2e 50 66 |n = ptr |- &pf.Pf|
|00003150| 5f 46 69 6c 74 65 72 5b | 30 5d 3b 0a 0a 20 20 20 |_Filter[|0];.. |
|00003160| 20 20 69 66 28 69 6f 63 | 74 6c 28 66 64 2c 20 4e | if(ioc|tl(fd, N|
|00003170| 49 4f 43 53 45 54 46 2c | 20 26 70 66 29 20 3d 3d |IOCSETF,| &pf) ==|
|00003180| 20 2d 31 29 0a 09 20 20 | 70 65 72 72 6f 72 28 22 | -1).. |perror("|
|00003190| 70 66 20 73 65 74 66 22 | 29 3b 0a 7d 0a 0a 20 20 |pf setf"|);.}.. |
|000031a0| 20 20 20 0a 20 20 20 69 | 6e 74 20 63 3b 0a 20 20 | . i|nt c;. |
|000031b0| 20 20 20 0a 20 20 20 20 | 20 77 68 69 6c 65 28 28 | . | while((|
|000031c0| 63 3d 67 65 74 6f 70 74 | 28 61 72 67 63 2c 20 61 |c=getopt|(argc, a|
|000031d0| 72 67 76 2c 20 22 6e 69 | 3a 61 62 66 3a 22 29 29 |rgv, "ni|:abf:"))|
|000031e0| 20 21 3d 20 2d 31 29 7b | 0a 09 20 20 73 77 69 74 | != -1){|.. swit|
|000031f0| 63 68 28 63 29 7b 0a 09 | 20 20 63 61 73 65 20 27 |ch(c){..| case '|
|00003200| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 75 64 70 6c |netlog-1|.02/udpl|
|00003210| 6f 67 67 65 72 2f 75 64 | 70 6c 6f 67 2e 63 00 00 |ogger/ud|plog.c..|
|00003220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003260| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00003270| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00003280| 20 20 31 32 37 35 36 20 | 20 35 34 31 30 33 35 31 | 12756 | 5410351|
|00003290| 36 36 33 20 20 31 31 34 | 36 31 00 20 00 00 00 00 |663 114|61. ....|
|000032a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000033f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003400| 2f 2a 0a 20 20 20 20 20 | 75 64 70 6c 6f 67 67 65 |/*. |udplogge|
|00003410| 72 20 2d 20 41 20 55 44 | 50 20 74 72 61 66 66 69 |r - A UD|P traffi|
|00003420| 63 20 6c 6f 67 67 65 72 | 0a 20 20 20 20 20 43 6f |c logger|. Co|
|00003430| 70 79 72 69 67 68 74 20 | 28 43 29 20 31 39 39 33 |pyright |(C) 1993|
|00003440| 20 44 6f 75 67 6c 61 73 | 20 4c 65 65 20 53 63 68 | Douglas| Lee Sch|
|00003450| 61 6c 65 73 2c 20 44 61 | 76 69 64 20 4b 2e 20 48 |ales, Da|vid K. H|
|00003460| 65 73 73 2c 20 44 61 76 | 69 64 20 52 2e 20 53 61 |ess, Dav|id R. Sa|
|00003470| 66 66 6f 72 64 0a 0a 20 | 20 20 20 20 50 6c 65 61 |fford.. | Plea|
|00003480| 73 65 20 73 65 65 20 74 | 68 65 20 66 69 6c 65 20 |se see t|he file |
|00003490| 60 43 4f 50 59 49 4e 47 | 27 20 66 6f 72 20 74 68 |`COPYING|' for th|
|000034a0| 65 20 63 6f 6d 70 6c 65 | 74 65 20 63 6f 70 79 72 |e comple|te copyr|
|000034b0| 69 67 68 74 20 6e 6f 74 | 69 63 65 2e 0a 0a 75 64 |ight not|ice...ud|
|000034c0| 70 6c 6f 67 2e 63 20 2d | 20 30 33 2f 32 30 2f 39 |plog.c -| 03/20/9|
|000034d0| 33 0a 0a 2a 2f 0a 23 69 | 6e 63 6c 75 64 65 20 3c |3..*/.#i|nclude <|
|000034e0| 73 74 64 69 6f 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |stdio.h>|.#includ|
|000034f0| 65 20 3c 73 79 73 2f 74 | 79 70 65 73 2e 68 3e 0a |e <sys/t|ypes.h>.|
|00003500| 23 69 6e 63 6c 75 64 65 | 20 3c 73 79 73 2f 73 6f |#include| <sys/so|
|00003510| 63 6b 65 74 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |cket.h>.|#include|
|00003520| 20 3c 6e 65 74 69 6e 65 | 74 2f 69 6e 2e 68 3e 0a | <netine|t/in.h>.|
|00003530| 23 69 6e 63 6c 75 64 65 | 20 3c 6e 65 74 64 62 2e |#include| <netdb.|
|00003540| 68 3e 0a 23 69 6e 63 6c | 75 64 65 20 3c 6e 65 74 |h>.#incl|ude <net|
|00003550| 69 6e 65 74 2f 69 6e 5f | 73 79 73 74 6d 2e 68 3e |inet/in_|systm.h>|
|00003560| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 6e 65 74 69 6e |.#includ|e <netin|
|00003570| 65 74 2f 69 70 2e 68 3e | 0a 23 69 6e 63 6c 75 64 |et/ip.h>|.#includ|
|00003580| 65 20 3c 6e 65 74 69 6e | 65 74 2f 75 64 70 2e 68 |e <netin|et/udp.h|
|00003590| 3e 0a 23 69 6e 63 6c 75 | 64 65 20 3c 73 79 73 2f |>.#inclu|de <sys/|
|000035a0| 74 69 6d 65 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |time.h>.|#include|
|000035b0| 20 3c 6e 65 74 64 62 2e | 68 3e 0a 23 69 6e 63 6c | <netdb.|h>.#incl|
|000035c0| 75 64 65 20 3c 6d 65 6d | 6f 72 79 2e 68 3e 0a 0a |ude <mem|ory.h>..|
|000035d0| 65 78 74 65 72 6e 20 63 | 68 61 72 20 2a 6f 70 74 |extern c|har *opt|
|000035e0| 61 72 67 3b 0a 65 78 74 | 65 72 6e 20 69 6e 74 20 |arg;.ext|ern int |
|000035f0| 6f 70 74 69 6e 64 2c 20 | 6f 70 74 65 72 72 3b 0a |optind, |opterr;.|
|00003600| 0a 23 69 6e 63 6c 75 64 | 65 20 22 64 65 66 73 2e |.#includ|e "defs.|
|00003610| 68 22 0a 0a 73 74 72 75 | 63 74 20 69 70 61 64 64 |h"..stru|ct ipadd|
|00003620| 72 20 7b 0a 20 20 20 20 | 20 75 6e 73 69 67 6e 65 |r {. | unsigne|
|00003630| 64 20 69 6e 74 20 61 64 | 64 72 3a 33 32 3b 0a 7d |d int ad|dr:32;.}|
|00003640| 3b 0a 0a 73 74 72 75 63 | 74 20 74 63 70 73 79 6e |;..struc|t tcpsyn|
|00003650| 6f 75 74 20 7b 0a 20 20 | 20 20 20 73 74 72 75 63 |out {. | struc|
|00003660| 74 20 74 69 6d 65 76 61 | 6c 20 74 70 3b 0a 20 20 |t timeva|l tp;. |
|00003670| 20 20 20 75 6e 73 69 67 | 6e 65 64 20 6c 6f 6e 67 | unsig|ned long|
|00003680| 20 69 70 73 72 63 61 64 | 64 72 3b 0a 20 20 20 20 | ipsrcad|dr;. |
|00003690| 20 75 6e 73 69 67 6e 65 | 64 20 6c 6f 6e 67 20 69 | unsigne|d long i|
|000036a0| 70 64 73 74 61 64 64 72 | 3b 0a 20 20 20 20 20 75 |pdstaddr|;. u|
|000036b0| 6e 73 69 67 6e 65 64 20 | 6c 6f 6e 67 20 74 63 70 |nsigned |long tcp|
|000036c0| 73 65 71 3b 0a 20 20 20 | 20 20 75 6e 73 69 67 6e |seq;. | unsign|
|000036d0| 65 64 20 73 68 6f 72 74 | 20 74 63 70 73 72 63 70 |ed short| tcpsrcp|
|000036e0| 6f 72 74 3b 0a 20 20 20 | 20 20 75 6e 73 69 67 6e |ort;. | unsign|
|000036f0| 65 64 20 73 68 6f 72 74 | 20 74 63 70 64 73 74 70 |ed short| tcpdstp|
|00003700| 6f 72 74 3b 0a 7d 3b 0a | 0a 73 74 61 74 69 63 20 |ort;.};.|.static |
|00003710| 76 6f 69 64 20 65 74 68 | 65 72 68 61 6e 64 6c 65 |void eth|erhandle|
|00003720| 72 28 63 68 61 72 20 2a | 2c 20 69 6e 74 2c 20 73 |r(char *|, int, s|
|00003730| 74 72 75 63 74 20 74 69 | 6d 65 76 61 6c 29 3b 0a |truct ti|meval);.|
|00003740| 73 74 61 74 69 63 20 76 | 6f 69 64 20 75 64 70 6c |static v|oid udpl|
|00003750| 6f 67 28 73 74 72 75 63 | 74 20 69 70 20 2a 2c 20 |og(struc|t ip *, |
|00003760| 73 74 72 75 63 74 20 74 | 69 6d 65 76 61 6c 29 3b |struct t|imeval);|
|00003770| 0a 73 74 61 74 69 63 20 | 76 6f 69 64 20 75 64 70 |.static |void udp|
|00003780| 6c 6f 67 62 69 6e 28 73 | 74 72 75 63 74 20 74 63 |logbin(s|truct tc|
|00003790| 70 73 79 6e 6f 75 74 20 | 2a 29 3b 0a 73 74 61 74 |psynout |*);.stat|
|000037a0| 69 63 20 76 6f 69 64 20 | 75 64 70 6c 6f 67 61 73 |ic void |udplogas|
|000037b0| 63 69 69 28 73 74 72 75 | 63 74 20 74 63 70 73 79 |cii(stru|ct tcpsy|
|000037c0| 6e 6f 75 74 20 2a 29 3b | 0a 73 74 61 74 69 63 20 |nout *);|.static |
|000037d0| 69 6e 74 20 69 73 61 63 | 74 69 76 65 28 73 74 72 |int isac|tive(str|
|000037e0| 75 63 74 20 74 63 70 73 | 79 6e 6f 75 74 20 2a 29 |uct tcps|ynout *)|
|000037f0| 3b 0a 73 74 61 74 69 63 | 20 76 6f 69 64 20 75 64 |;.static| void ud|
|00003800| 70 61 67 65 28 73 74 72 | 75 63 74 20 74 69 6d 65 |page(str|uct time|
|00003810| 76 61 6c 29 3b 0a 73 74 | 61 74 69 63 20 63 68 61 |val);.st|atic cha|
|00003820| 72 20 2a 67 65 74 75 64 | 70 70 6f 72 74 6e 61 6d |r *getud|pportnam|
|00003830| 65 28 75 6e 73 69 67 6e | 65 64 20 73 68 6f 72 74 |e(unsign|ed short|
|00003840| 29 3b 0a 65 78 74 65 72 | 6e 20 63 68 61 72 20 2a |);.exter|n char *|
|00003850| 67 65 74 74 69 6d 65 73 | 74 72 28 73 74 72 75 63 |gettimes|tr(struc|
|00003860| 74 20 74 69 6d 65 76 61 | 6c 29 3b 0a 0a 65 78 74 |t timeva|l);..ext|
|00003870| 65 72 6e 20 76 6f 69 64 | 20 70 75 73 68 66 69 6c |ern void| pushfil|
|00003880| 74 65 72 28 69 6e 74 29 | 3b 0a 0a 23 64 65 66 69 |ter(int)|;..#defi|
|00003890| 6e 65 20 4c 4f 47 42 49 | 4e 41 52 59 20 30 0a 23 |ne LOGBI|NARY 0.#|
|000038a0| 64 65 66 69 6e 65 20 4c | 4f 47 41 53 43 49 49 20 |define L|OGASCII |
|000038b0| 31 0a 73 74 61 74 69 63 | 20 69 6e 74 20 6c 6f 67 |1.static| int log|
|000038c0| 74 79 70 65 20 3d 20 4c | 4f 47 42 49 4e 41 52 59 |type = L|OGBINARY|
|000038d0| 3b 0a 73 74 61 74 69 63 | 20 46 49 4c 45 20 2a 6c |;.static| FILE *l|
|000038e0| 6f 67 66 69 6c 65 20 3d | 20 73 74 64 6f 75 74 3b |ogfile =| stdout;|
|000038f0| 0a 0a 69 6e 74 20 72 65 | 73 6f 6c 76 65 20 3d 20 |..int re|solve = |
|00003900| 30 3b 0a 0a 65 78 74 65 | 72 6e 20 63 68 61 72 20 |0;..exte|rn char |
|00003910| 2a 67 65 74 64 65 66 61 | 75 6c 74 69 66 28 63 68 |*getdefa|ultif(ch|
|00003920| 61 72 20 2a 29 3b 0a 0a | 6d 61 69 6e 28 69 6e 74 |ar *);..|main(int|
|00003930| 20 61 72 67 63 2c 20 63 | 68 61 72 20 2a 2a 61 72 | argc, c|har **ar|
|00003940| 67 76 29 0a 7b 0a 20 20 | 20 20 20 63 68 61 72 20 |gv).{. | char |
|00003950| 2a 65 69 66 20 3d 20 67 | 65 74 64 65 66 61 75 6c |*eif = g|etdefaul|
|00003960| 74 69 66 28 28 63 68 61 | 72 20 2a 29 30 29 3b 0a |tif((cha|r *)0);.|
|00003970| 20 20 20 20 20 69 6e 74 | 20 66 64 3b 0a 20 20 20 | int| fd;. |
|00003980| 20 20 69 6e 74 20 63 3b | 0a 20 20 20 20 20 0a 20 | int c;|. . |
|00003990| 20 20 20 20 77 68 69 6c | 65 28 28 63 3d 67 65 74 | whil|e((c=get|
|000039a0| 6f 70 74 28 61 72 67 63 | 2c 20 61 72 67 76 2c 20 |opt(argc|, argv, |
|000039b0| 22 6e 69 3a 61 62 66 3a | 22 29 29 20 21 3d 20 2d |"ni:abf:|")) != -|
|000039c0| 31 29 7b 0a 09 20 20 73 | 77 69 74 63 68 28 63 29 |1){.. s|witch(c)|
|000039d0| 7b 0a 09 20 20 63 61 73 | 65 20 27 61 27 3a 0a 09 |{.. cas|e 'a':..|
|000039e0| 20 20 20 20 20 20 20 6c | 6f 67 74 79 70 65 20 3d | l|ogtype =|
|000039f0| 20 4c 4f 47 41 53 43 49 | 49 3b 0a 09 20 20 20 20 | LOGASCI|I;.. |
|00003a00| 20 20 20 62 72 65 61 6b | 3b 0a 09 20 20 63 61 73 | break|;.. cas|
|00003a10| 65 20 27 62 27 3a 0a 09 | 20 20 20 20 20 20 20 6c |e 'b':..| l|
|00003a20| 6f 67 74 79 70 65 20 3d | 20 4c 4f 47 42 49 4e 41 |ogtype =| LOGBINA|
|00003a30| 52 59 3b 0a 09 20 20 20 | 20 20 20 20 62 72 65 61 |RY;.. | brea|
|00003a40| 6b 3b 0a 09 20 20 63 61 | 73 65 20 27 6e 27 3a 0a |k;.. ca|se 'n':.|
|00003a50| 09 20 20 20 20 20 20 20 | 72 65 73 6f 6c 76 65 20 |. |resolve |
|00003a60| 3d 20 30 3b 0a 09 20 20 | 20 20 20 20 20 62 72 65 |= 0;.. | bre|
|00003a70| 61 6b 3b 0a 09 20 20 63 | 61 73 65 20 27 69 27 3a |ak;.. c|ase 'i':|
|00003a80| 0a 09 20 20 20 20 20 20 | 20 65 69 66 20 3d 20 6f |.. | eif = o|
|00003a90| 70 74 61 72 67 3b 0a 09 | 20 20 20 20 20 20 20 62 |ptarg;..| b|
|00003aa0| 72 65 61 6b 3b 0a 09 20 | 20 63 61 73 65 20 27 66 |reak;.. | case 'f|
|00003ab0| 27 3a 0a 09 20 20 20 20 | 20 20 20 69 66 28 21 28 |':.. | if(!(|
|00003ac0| 6c 6f 67 66 69 6c 65 20 | 3d 20 66 6f 70 65 6e 28 |logfile |= fopen(|
|00003ad0| 6f 70 74 61 72 67 2c 20 | 22 61 22 29 29 29 7b 0a |optarg, |"a"))){.|
|00003ae0| 09 09 20 20 20 20 70 65 | 72 72 6f 72 28 6f 70 74 |.. pe|rror(opt|
|00003af0| 61 72 67 29 3b 0a 09 09 | 20 20 20 20 65 78 69 74 |arg);...| exit|
|00003b00| 28 31 29 3b 0a 09 20 20 | 20 20 20 20 20 7d 0a 09 |(1);.. | }..|
|00003b10| 20 20 20 20 20 20 20 62 | 72 65 61 6b 3b 0a 09 20 | b|reak;.. |
|00003b20| 20 64 65 66 61 75 6c 74 | 3a 0a 09 20 20 20 20 20 | default|:.. |
|00003b30| 20 20 66 70 72 69 6e 74 | 66 28 73 74 64 65 72 72 | fprint|f(stderr|
|00003b40| 2c 20 22 55 6e 6b 6e 6f | 77 6e 20 6f 70 74 69 6f |, "Unkno|wn optio|
|00003b50| 6e 3a 20 25 63 5c 6e 22 | 2c 20 63 29 3b 0a 09 20 |n: %c\n"|, c);.. |
|00003b60| 20 20 20 20 20 20 65 78 | 69 74 28 31 29 3b 0a 09 | ex|it(1);..|
|00003b70| 20 20 7d 0a 20 20 20 20 | 20 7d 0a 0a 20 20 20 20 | }. | }.. |
|00003b80| 20 66 64 20 3d 20 6f 70 | 65 6e 6e 69 74 28 65 69 | fd = op|ennit(ei|
|00003b90| 66 2c 20 70 75 73 68 66 | 69 6c 74 65 72 29 3b 0a |f, pushf|ilter);.|
|00003ba0| 20 20 20 20 20 70 72 6f | 63 70 6b 74 73 28 66 64 | pro|cpkts(fd|
|00003bb0| 2c 20 65 74 68 65 72 68 | 61 6e 64 6c 65 72 29 3b |, etherh|andler);|
|00003bc0| 0a 7d 0a 0a 76 6f 69 64 | 0a 65 74 68 65 72 68 61 |.}..void|.etherha|
|00003bd0| 6e 64 6c 65 72 28 63 68 | 61 72 20 2a 70 6b 74 2c |ndler(ch|ar *pkt,|
|00003be0| 20 69 6e 74 20 73 69 7a | 65 2c 20 73 74 72 75 63 | int siz|e, struc|
|00003bf0| 74 20 74 69 6d 65 76 61 | 6c 20 74 70 29 0a 7b 0a |t timeva|l tp).{.|
|00003c00| 20 20 20 20 20 75 64 70 | 6c 6f 67 28 28 73 74 72 | udp|log((str|
|00003c10| 75 63 74 20 69 70 20 2a | 29 28 70 6b 74 20 2b 20 |uct ip *|)(pkt + |
|00003c20| 31 34 29 2c 20 74 70 29 | 3b 0a 7d 0a 0a 0a 76 6f |14), tp)|;.}...vo|
|00003c30| 69 64 0a 75 64 70 6c 6f | 67 28 73 74 72 75 63 74 |id.udplo|g(struct|
|00003c40| 20 69 70 20 2a 69 70 2c | 20 73 74 72 75 63 74 20 | ip *ip,| struct |
|00003c50| 74 69 6d 65 76 61 6c 20 | 74 70 29 0a 7b 0a 20 20 |timeval |tp).{. |
|00003c60| 20 20 20 73 74 72 75 63 | 74 20 75 64 70 68 64 72 | struc|t udphdr|
|00003c70| 20 2a 75 64 70 3b 0a 20 | 20 20 20 20 73 74 72 75 | *udp;. | stru|
|00003c80| 63 74 20 74 63 70 73 79 | 6e 6f 75 74 20 6f 75 74 |ct tcpsy|nout out|
|00003c90| 62 75 66 3b 0a 0a 20 20 | 20 20 20 75 64 70 20 3d |buf;.. | udp =|
|00003ca0| 20 28 73 74 72 75 63 74 | 20 75 64 70 68 64 72 20 | (struct| udphdr |
|00003cb0| 2a 29 28 28 28 63 68 61 | 72 20 2a 29 69 70 29 20 |*)(((cha|r *)ip) |
|00003cc0| 2b 20 73 69 7a 65 6f 66 | 28 73 74 72 75 63 74 20 |+ sizeof|(struct |
|00003cd0| 69 70 29 29 3b 0a 0a 20 | 20 20 20 20 6d 65 6d 73 |ip));.. | mems|
|00003ce0| 65 74 28 28 63 68 61 72 | 20 2a 29 26 6f 75 74 62 |et((char| *)&outb|
|00003cf0| 75 66 2e 74 63 70 73 65 | 71 2c 20 30 2c 20 73 69 |uf.tcpse|q, 0, si|
|00003d00| 7a 65 6f 66 28 6c 6f 6e | 67 29 29 3b 0a 20 20 20 |zeof(lon|g));. |
|00003d10| 20 20 6d 65 6d 63 70 79 | 28 28 63 68 61 72 20 2a | memcpy|((char *|
|00003d20| 29 26 6f 75 74 62 75 66 | 2e 74 70 2c 20 28 63 68 |)&outbuf|.tp, (ch|
|00003d30| 61 72 20 2a 29 26 74 70 | 2c 20 73 69 7a 65 6f 66 |ar *)&tp|, sizeof|
|00003d40| 28 73 74 72 75 63 74 20 | 74 69 6d 65 76 61 6c 29 |(struct |timeval)|
|00003d50| 29 3b 0a 20 20 20 20 20 | 6d 65 6d 63 70 79 28 28 |);. |memcpy((|
|00003d60| 63 68 61 72 20 2a 29 26 | 6f 75 74 62 75 66 2e 69 |char *)&|outbuf.i|
|00003d70| 70 73 72 63 61 64 64 72 | 2c 20 28 63 68 61 72 20 |psrcaddr|, (char |
|00003d80| 2a 29 26 69 70 2d 3e 69 | 70 5f 73 72 63 2c 20 34 |*)&ip->i|p_src, 4|
|00003d90| 29 3b 0a 20 20 20 20 20 | 6d 65 6d 63 70 79 28 28 |);. |memcpy((|
|00003da0| 63 68 61 72 20 2a 29 26 | 6f 75 74 62 75 66 2e 69 |char *)&|outbuf.i|
|00003db0| 70 64 73 74 61 64 64 72 | 2c 20 28 63 68 61 72 20 |pdstaddr|, (char |
|00003dc0| 2a 29 26 69 70 2d 3e 69 | 70 5f 64 73 74 2c 20 34 |*)&ip->i|p_dst, 4|
|00003dd0| 29 3b 0a 20 20 20 20 20 | 6d 65 6d 63 70 79 28 28 |);. |memcpy((|
|00003de0| 63 68 61 72 20 2a 29 26 | 6f 75 74 62 75 66 2e 74 |char *)&|outbuf.t|
|00003df0| 63 70 73 72 63 70 6f 72 | 74 2c 20 28 63 68 61 72 |cpsrcpor|t, (char|
|00003e00| 20 2a 29 26 75 64 70 2d | 3e 75 68 5f 73 70 6f 72 | *)&udp-|>uh_spor|
|00003e10| 74 2c 20 32 29 3b 0a 20 | 20 20 20 20 6d 65 6d 63 |t, 2);. | memc|
|00003e20| 70 79 28 28 63 68 61 72 | 20 2a 29 26 6f 75 74 62 |py((char| *)&outb|
|00003e30| 75 66 2e 74 63 70 64 73 | 74 70 6f 72 74 2c 20 28 |uf.tcpds|tport, (|
|00003e40| 63 68 61 72 20 2a 29 26 | 75 64 70 2d 3e 75 68 5f |char *)&|udp->uh_|
|00003e50| 64 70 6f 72 74 2c 20 32 | 29 3b 0a 0a 20 20 20 20 |dport, 2|);.. |
|00003e60| 20 69 66 28 21 69 73 61 | 63 74 69 76 65 28 26 6f | if(!isa|ctive(&o|
|00003e70| 75 74 62 75 66 29 29 7b | 0a 09 20 20 73 77 69 74 |utbuf)){|.. swit|
|00003e80| 63 68 28 6c 6f 67 74 79 | 70 65 29 7b 0a 09 20 20 |ch(logty|pe){.. |
|00003e90| 63 61 73 65 20 4c 4f 47 | 42 49 4e 41 52 59 3a 0a |case LOG|BINARY:.|
|00003ea0| 09 20 20 20 20 20 20 20 | 75 64 70 6c 6f 67 62 69 |. |udplogbi|
|00003eb0| 6e 28 26 6f 75 74 62 75 | 66 29 3b 0a 09 20 20 20 |n(&outbu|f);.. |
|00003ec0| 20 20 20 20 62 72 65 61 | 6b 3b 0a 09 20 20 63 61 | brea|k;.. ca|
|00003ed0| 73 65 20 4c 4f 47 41 53 | 43 49 49 3a 0a 09 20 20 |se LOGAS|CII:.. |
|00003ee0| 20 20 20 20 20 75 64 70 | 6c 6f 67 61 73 63 69 69 | udp|logascii|
|00003ef0| 28 26 6f 75 74 62 75 66 | 29 3b 0a 09 20 20 20 20 |(&outbuf|);.. |
|00003f00| 20 20 20 62 72 65 61 6b | 3b 0a 09 20 20 64 65 66 | break|;.. def|
|00003f10| 61 75 6c 74 3a 0a 09 20 | 20 20 20 20 20 20 66 70 |ault:.. | fp|
|00003f20| 72 69 6e 74 66 28 73 74 | 64 65 72 72 2c 20 22 4c |rintf(st|derr, "L|
|00003f30| 6f 67 20 74 79 70 65 20 | 75 6e 6b 6e 6f 77 6e 3a |og type |unknown:|
|00003f40| 20 25 64 5c 6e 22 2c 20 | 6c 6f 67 74 79 70 65 29 | %d\n", |logtype)|
|00003f50| 3b 0a 09 20 20 20 20 20 | 20 20 62 72 65 61 6b 3b |;.. | break;|
|00003f60| 0a 09 20 20 7d 0a 20 20 | 20 20 20 7d 0a 20 20 20 |.. }. | }. |
|00003f70| 20 20 75 64 70 61 67 65 | 28 74 70 29 3b 0a 7d 0a | udpage|(tp);.}.|
|00003f80| 0a 76 6f 69 64 0a 75 64 | 70 6c 6f 67 62 69 6e 28 |.void.ud|plogbin(|
|00003f90| 73 74 72 75 63 74 20 74 | 63 70 73 79 6e 6f 75 74 |struct t|cpsynout|
|00003fa0| 20 2a 6f 75 74 62 75 66 | 29 0a 7b 0a 20 20 20 20 | *outbuf|).{. |
|00003fb0| 20 77 72 69 74 65 28 66 | 69 6c 65 6e 6f 28 6c 6f | write(f|ileno(lo|
|00003fc0| 67 66 69 6c 65 29 2c 20 | 28 63 68 61 72 20 2a 29 |gfile), |(char *)|
|00003fd0| 6f 75 74 62 75 66 2c 20 | 73 69 7a 65 6f 66 28 73 |outbuf, |sizeof(s|
|00003fe0| 74 72 75 63 74 20 74 63 | 70 73 79 6e 6f 75 74 29 |truct tc|psynout)|
|00003ff0| 29 3b 0a 7d 0a 0a 76 6f | 69 64 0a 75 64 70 6c 6f |);.}..vo|id.udplo|
|00004000| 67 61 73 63 69 69 28 73 | 74 72 75 63 74 20 74 63 |gascii(s|truct tc|
|00004010| 70 73 79 6e 6f 75 74 20 | 2a 6f 75 74 62 75 66 29 |psynout |*outbuf)|
|00004020| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 69 |.{. |struct i|
|00004030| 6e 5f 61 64 64 72 20 68 | 61 64 64 72 3b 0a 0a 20 |n_addr h|addr;.. |
|00004040| 20 20 20 20 66 70 75 74 | 73 28 67 65 74 74 69 6d | fput|s(gettim|
|00004050| 65 73 74 72 28 6f 75 74 | 62 75 66 2d 3e 74 70 29 |estr(out|buf->tp)|
|00004060| 2c 20 6c 6f 67 66 69 6c | 65 29 3b 0a 20 20 20 20 |, logfil|e);. |
|00004070| 20 66 70 72 69 6e 74 66 | 28 6c 6f 67 66 69 6c 65 | fprintf|(logfile|
|00004080| 2c 20 22 20 25 38 58 20 | 22 2c 20 6f 75 74 62 75 |, " %8X |", outbu|
|00004090| 66 2d 3e 74 63 70 73 65 | 71 29 3b 0a 20 20 20 20 |f->tcpse|q);. |
|000040a0| 20 6d 65 6d 63 70 79 28 | 26 68 61 64 64 72 2e 73 | memcpy(|&haddr.s|
|000040b0| 5f 61 64 64 72 2c 20 26 | 6f 75 74 62 75 66 2d 3e |_addr, &|outbuf->|
|000040c0| 69 70 73 72 63 61 64 64 | 72 2c 20 34 29 3b 0a 20 |ipsrcadd|r, 4);. |
|000040d0| 20 20 20 20 66 70 72 69 | 6e 74 66 28 6c 6f 67 66 | fpri|ntf(logf|
|000040e0| 69 6c 65 2c 20 22 25 2d | 32 31 73 22 2c 20 72 65 |ile, "%-|21s", re|
|000040f0| 73 6f 6c 76 65 20 3f 20 | 63 67 65 74 68 6f 73 74 |solve ? |cgethost|
|00004100| 62 79 61 64 64 72 28 68 | 61 64 64 72 29 20 3a 20 |byaddr(h|addr) : |
|00004110| 69 6e 65 74 5f 6e 74 6f | 61 28 68 61 64 64 72 29 |inet_nto|a(haddr)|
|00004120| 29 3b 0a 20 20 20 20 20 | 66 70 75 74 63 28 27 20 |);. |fputc(' |
|00004130| 27 2c 20 6c 6f 67 66 69 | 6c 65 29 3b 0a 20 20 20 |', logfi|le);. |
|00004140| 20 20 66 70 75 74 73 28 | 67 65 74 75 64 70 70 6f | fputs(|getudppo|
|00004150| 72 74 6e 61 6d 65 28 6f | 75 74 62 75 66 2d 3e 74 |rtname(o|utbuf->t|
|00004160| 63 70 73 72 63 70 6f 72 | 74 29 2c 20 6c 6f 67 66 |cpsrcpor|t), logf|
|00004170| 69 6c 65 29 3b 0a 20 20 | 20 20 20 66 70 75 74 73 |ile);. | fputs|
|00004180| 28 22 20 2d 3e 20 22 2c | 20 6c 6f 67 66 69 6c 65 |(" -> ",| logfile|
|00004190| 29 3b 0a 20 20 20 20 20 | 6d 65 6d 63 70 79 28 26 |);. |memcpy(&|
|000041a0| 68 61 64 64 72 2e 73 5f | 61 64 64 72 2c 20 26 6f |haddr.s_|addr, &o|
|000041b0| 75 74 62 75 66 2d 3e 69 | 70 64 73 74 61 64 64 72 |utbuf->i|pdstaddr|
|000041c0| 2c 20 34 29 3b 0a 20 20 | 20 20 20 66 70 72 69 6e |, 4);. | fprin|
|000041d0| 74 66 28 6c 6f 67 66 69 | 6c 65 2c 20 22 25 2d 32 |tf(logfi|le, "%-2|
|000041e0| 31 73 22 2c 20 72 65 73 | 6f 6c 76 65 20 3f 20 63 |1s", res|olve ? c|
|000041f0| 67 65 74 68 6f 73 74 62 | 79 61 64 64 72 28 68 61 |gethostb|yaddr(ha|
|00004200| 64 64 72 29 20 3a 20 69 | 6e 65 74 5f 6e 74 6f 61 |ddr) : i|net_ntoa|
|00004210| 28 68 61 64 64 72 29 29 | 3b 0a 20 20 20 20 20 66 |(haddr))|;. f|
|00004220| 70 75 74 63 28 27 20 27 | 2c 20 6c 6f 67 66 69 6c |putc(' '|, logfil|
|00004230| 65 29 3b 0a 20 20 20 20 | 20 66 70 75 74 73 28 67 |e);. | fputs(g|
|00004240| 65 74 75 64 70 70 6f 72 | 74 6e 61 6d 65 28 6f 75 |etudppor|tname(ou|
|00004250| 74 62 75 66 2d 3e 74 63 | 70 64 73 74 70 6f 72 74 |tbuf->tc|pdstport|
|00004260| 29 2c 20 6c 6f 67 66 69 | 6c 65 29 3b 3b 0a 20 20 |), logfi|le);;. |
|00004270| 20 20 20 66 70 75 74 63 | 28 27 5c 6e 27 2c 20 6c | fputc|('\n', l|
|00004280| 6f 67 66 69 6c 65 29 3b | 0a 20 20 20 20 20 66 66 |ogfile);|. ff|
|00004290| 6c 75 73 68 28 6c 6f 67 | 66 69 6c 65 29 3b 0a 7d |lush(log|file);.}|
|000042a0| 0a 0a 63 68 61 72 20 2a | 0a 67 65 74 75 64 70 70 |..char *|.getudpp|
|000042b0| 6f 72 74 6e 61 6d 65 28 | 75 6e 73 69 67 6e 65 64 |ortname(|unsigned|
|000042c0| 20 73 68 6f 72 74 20 70 | 29 0a 7b 0a 20 20 20 20 | short p|).{. |
|000042d0| 20 73 74 72 75 63 74 20 | 73 65 72 76 65 6e 74 20 | struct |servent |
|000042e0| 2a 73 65 3b 0a 20 20 20 | 20 20 73 74 61 74 69 63 |*se;. | static|
|000042f0| 20 63 68 61 72 20 72 65 | 73 75 6c 74 5b 38 30 5d | char re|sult[80]|
|00004300| 3b 0a 0a 20 20 20 20 20 | 69 66 28 72 65 73 6f 6c |;.. |if(resol|
|00004310| 76 65 20 26 26 20 28 73 | 65 20 3d 20 67 65 74 73 |ve && (s|e = gets|
|00004320| 65 72 76 62 79 70 6f 72 | 74 28 28 75 6e 73 69 67 |ervbypor|t((unsig|
|00004330| 6e 65 64 20 69 6e 74 29 | 6e 74 6f 68 73 28 70 29 |ned int)|ntohs(p)|
|00004340| 2c 20 22 75 64 70 22 29 | 29 29 0a 09 20 20 73 74 |, "udp")|)).. st|
|00004350| 72 63 70 79 28 72 65 73 | 75 6c 74 2c 20 73 65 2d |rcpy(res|ult, se-|
|00004360| 3e 73 5f 6e 61 6d 65 29 | 3b 0a 20 20 20 20 20 65 |>s_name)|;. e|
|00004370| 6c 73 65 0a 09 20 20 73 | 70 72 69 6e 74 66 28 72 |lse.. s|printf(r|
|00004380| 65 73 75 6c 74 2c 20 22 | 25 75 22 2c 20 28 75 6e |esult, "|%u", (un|
|00004390| 73 69 67 6e 65 64 20 69 | 6e 74 29 6e 74 6f 68 73 |signed i|nt)ntohs|
|000043a0| 28 70 29 29 3b 0a 20 20 | 20 20 20 0a 20 20 20 20 |(p));. | . |
|000043b0| 20 72 65 74 75 72 6e 20 | 72 65 73 75 6c 74 3b 0a | return |result;.|
|000043c0| 7d 0a 0a 73 74 72 75 63 | 74 20 75 64 70 61 63 74 |}..struc|t udpact|
|000043d0| 69 76 65 20 7b 0a 20 20 | 20 20 20 73 74 72 75 63 |ive {. | struc|
|000043e0| 74 20 75 64 70 61 63 74 | 69 76 65 20 2a 6e 65 78 |t udpact|ive *nex|
|000043f0| 74 3b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 74 |t;. |struct t|
|00004400| 63 70 73 79 6e 6f 75 74 | 20 62 75 66 3b 0a 7d 3b |cpsynout| buf;.};|
|00004410| 0a 0a 73 74 72 75 63 74 | 20 75 64 70 61 63 74 69 |..struct| udpacti|
|00004420| 76 65 20 2a 75 64 70 68 | 65 61 64 20 3d 20 28 73 |ve *udph|ead = (s|
|00004430| 74 72 75 63 74 20 75 64 | 70 61 63 74 69 76 65 20 |truct ud|pactive |
|00004440| 2a 29 30 3b 0a 0a 69 6e | 74 0a 69 73 61 63 74 69 |*)0;..in|t.isacti|
|00004450| 76 65 28 73 74 72 75 63 | 74 20 74 63 70 73 79 6e |ve(struc|t tcpsyn|
|00004460| 6f 75 74 20 2a 62 75 66 | 29 0a 7b 0a 20 20 20 20 |out *buf|).{. |
|00004470| 20 73 74 72 75 63 74 20 | 75 64 70 61 63 74 69 76 | struct |udpactiv|
|00004480| 65 20 2a 72 6f 76 65 3b | 0a 0a 20 20 20 20 20 66 |e *rove;|.. f|
|00004490| 6f 72 28 72 6f 76 65 3d | 75 64 70 68 65 61 64 3b |or(rove=|udphead;|
|000044a0| 72 6f 76 65 3b 72 6f 76 | 65 3d 72 6f 76 65 2d 3e |rove;rov|e=rove->|
|000044b0| 6e 65 78 74 29 7b 0a 09 | 20 20 69 66 28 21 6d 65 |next){..| if(!me|
|000044c0| 6d 63 6d 70 28 26 72 6f | 76 65 2d 3e 62 75 66 2e |mcmp(&ro|ve->buf.|
|000044d0| 69 70 73 72 63 61 64 64 | 72 2c 20 26 62 75 66 2d |ipsrcadd|r, &buf-|
|000044e0| 3e 69 70 73 72 63 61 64 | 64 72 2c 20 34 29 20 26 |>ipsrcad|dr, 4) &|
|000044f0| 26 0a 09 20 20 20 20 20 | 21 6d 65 6d 63 6d 70 28 |&.. |!memcmp(|
|00004500| 26 72 6f 76 65 2d 3e 62 | 75 66 2e 69 70 64 73 74 |&rove->b|uf.ipdst|
|00004510| 61 64 64 72 2c 20 26 62 | 75 66 2d 3e 69 70 64 73 |addr, &b|uf->ipds|
|00004520| 74 61 64 64 72 2c 20 34 | 29 20 26 26 0a 09 20 20 |taddr, 4|) &&.. |
|00004530| 20 20 20 21 6d 65 6d 63 | 6d 70 28 26 72 6f 76 65 | !memc|mp(&rove|
|00004540| 2d 3e 62 75 66 2e 74 63 | 70 73 72 63 70 6f 72 74 |->buf.tc|psrcport|
|00004550| 2c 20 26 62 75 66 2d 3e | 74 63 70 73 72 63 70 6f |, &buf->|tcpsrcpo|
|00004560| 72 74 2c 20 32 29 20 26 | 26 0a 09 20 20 20 20 20 |rt, 2) &|&.. |
|00004570| 21 6d 65 6d 63 6d 70 28 | 26 72 6f 76 65 2d 3e 62 |!memcmp(|&rove->b|
|00004580| 75 66 2e 74 63 70 64 73 | 74 70 6f 72 74 2c 20 26 |uf.tcpds|tport, &|
|00004590| 62 75 66 2d 3e 74 63 70 | 64 73 74 70 6f 72 74 2c |buf->tcp|dstport,|
|000045a0| 20 32 29 29 7b 0a 09 20 | 20 20 20 20 20 20 6d 65 | 2)){.. | me|
|000045b0| 6d 63 70 79 28 26 72 6f | 76 65 2d 3e 62 75 66 2e |mcpy(&ro|ve->buf.|
|000045c0| 74 70 2c 20 26 62 75 66 | 2d 3e 74 70 2c 20 73 69 |tp, &buf|->tp, si|
|000045d0| 7a 65 6f 66 28 73 74 72 | 75 63 74 20 74 69 6d 65 |zeof(str|uct time|
|000045e0| 76 61 6c 29 29 3b 0a 09 | 20 20 20 20 20 20 20 72 |val));..| r|
|000045f0| 65 74 75 72 6e 20 31 3b | 0a 09 20 20 7d 0a 09 20 |eturn 1;|.. }.. |
|00004600| 20 2f 2a 20 52 65 73 70 | 6f 6e 73 65 3f 20 2a 2f | /* Resp|onse? */|
|00004610| 0a 09 20 20 69 66 28 21 | 6d 65 6d 63 6d 70 28 26 |.. if(!|memcmp(&|
|00004620| 72 6f 76 65 2d 3e 62 75 | 66 2e 69 70 73 72 63 61 |rove->bu|f.ipsrca|
|00004630| 64 64 72 2c 20 26 62 75 | 66 2d 3e 69 70 64 73 74 |ddr, &bu|f->ipdst|
|00004640| 61 64 64 72 2c 20 34 29 | 20 26 26 0a 09 20 20 20 |addr, 4)| &&.. |
|00004650| 20 20 21 6d 65 6d 63 6d | 70 28 26 72 6f 76 65 2d | !memcm|p(&rove-|
|00004660| 3e 62 75 66 2e 69 70 64 | 73 74 61 64 64 72 2c 20 |>buf.ipd|staddr, |
|00004670| 26 62 75 66 2d 3e 69 70 | 73 72 63 61 64 64 72 2c |&buf->ip|srcaddr,|
|00004680| 20 34 29 20 26 26 0a 09 | 20 20 20 20 20 21 6d 65 | 4) &&..| !me|
|00004690| 6d 63 6d 70 28 26 72 6f | 76 65 2d 3e 62 75 66 2e |mcmp(&ro|ve->buf.|
|000046a0| 74 63 70 73 72 63 70 6f | 72 74 2c 20 26 62 75 66 |tcpsrcpo|rt, &buf|
|000046b0| 2d 3e 74 63 70 64 73 74 | 70 6f 72 74 2c 20 32 29 |->tcpdst|port, 2)|
|000046c0| 20 26 26 0a 09 20 20 20 | 20 20 21 6d 65 6d 63 6d | &&.. | !memcm|
|000046d0| 70 28 26 72 6f 76 65 2d | 3e 62 75 66 2e 74 63 70 |p(&rove-|>buf.tcp|
|000046e0| 64 73 74 70 6f 72 74 2c | 20 26 62 75 66 2d 3e 74 |dstport,| &buf->t|
|000046f0| 63 70 73 72 63 70 6f 72 | 74 2c 20 32 29 29 7b 0a |cpsrcpor|t, 2)){.|
|00004700| 09 20 20 20 20 20 20 20 | 6d 65 6d 63 70 79 28 26 |. |memcpy(&|
|00004710| 72 6f 76 65 2d 3e 62 75 | 66 2e 74 70 2c 20 26 62 |rove->bu|f.tp, &b|
|00004720| 75 66 2d 3e 74 70 2c 20 | 73 69 7a 65 6f 66 28 73 |uf->tp, |sizeof(s|
|00004730| 74 72 75 63 74 20 74 69 | 6d 65 76 61 6c 29 29 3b |truct ti|meval));|
|00004740| 0a 09 20 20 20 20 20 20 | 20 72 65 74 75 72 6e 20 |.. | return |
|00004750| 31 3b 0a 09 20 20 7d 0a | 20 20 20 20 20 7d 0a 20 |1;.. }.| }. |
|00004760| 20 20 20 20 72 6f 76 65 | 20 3d 20 28 73 74 72 75 | rove| = (stru|
|00004770| 63 74 20 75 64 70 61 63 | 74 69 76 65 20 2a 29 6d |ct udpac|tive *)m|
|00004780| 61 6c 6c 6f 63 28 73 69 | 7a 65 6f 66 28 73 74 72 |alloc(si|zeof(str|
|00004790| 75 63 74 20 75 64 70 61 | 63 74 69 76 65 29 29 3b |uct udpa|ctive));|
|000047a0| 0a 20 20 20 20 20 72 6f | 76 65 2d 3e 6e 65 78 74 |. ro|ve->next|
|000047b0| 20 3d 20 75 64 70 68 65 | 61 64 3b 0a 20 20 20 20 | = udphe|ad;. |
|000047c0| 20 75 64 70 68 65 61 64 | 20 3d 20 72 6f 76 65 3b | udphead| = rove;|
|000047d0| 0a 20 20 20 20 20 6d 65 | 6d 63 70 79 28 26 72 6f |. me|mcpy(&ro|
|000047e0| 76 65 2d 3e 62 75 66 2c | 20 62 75 66 2c 20 73 69 |ve->buf,| buf, si|
|000047f0| 7a 65 6f 66 28 73 74 72 | 75 63 74 20 74 63 70 73 |zeof(str|uct tcps|
|00004800| 79 6e 6f 75 74 29 29 3b | 0a 0a 20 20 20 20 20 72 |ynout));|.. r|
|00004810| 65 74 75 72 6e 20 30 3b | 0a 7d 0a 0a 76 6f 69 64 |eturn 0;|.}..void|
|00004820| 0a 75 64 70 61 67 65 28 | 73 74 72 75 63 74 20 74 |.udpage(|struct t|
|00004830| 69 6d 65 76 61 6c 20 74 | 70 29 0a 7b 0a 20 20 20 |imeval t|p).{. |
|00004840| 20 20 73 74 72 75 63 74 | 20 75 64 70 61 63 74 69 | struct| udpacti|
|00004850| 76 65 20 2a 72 6f 76 65 | 2c 20 2a 70 72 65 76 2c |ve *rove|, *prev,|
|00004860| 20 2a 74 65 6d 70 3b 0a | 0a 20 20 20 20 20 70 72 | *temp;.|. pr|
|00004870| 65 76 3d 28 73 74 72 75 | 63 74 20 75 64 70 61 63 |ev=(stru|ct udpac|
|00004880| 74 69 76 65 20 2a 29 30 | 3b 0a 20 20 20 20 20 72 |tive *)0|;. r|
|00004890| 6f 76 65 3d 75 64 70 68 | 65 61 64 3b 0a 20 20 20 |ove=udph|ead;. |
|000048a0| 20 20 77 68 69 6c 65 28 | 72 6f 76 65 29 7b 0a 09 | while(|rove){..|
|000048b0| 20 20 69 66 28 28 74 70 | 2e 74 76 5f 73 65 63 20 | if((tp|.tv_sec |
|000048c0| 2d 20 72 6f 76 65 2d 3e | 62 75 66 2e 74 70 2e 74 |- rove->|buf.tp.t|
|000048d0| 76 5f 73 65 63 29 20 3e | 20 33 30 30 29 7b 0a 09 |v_sec) >| 300){..|
|000048e0| 20 20 20 20 20 20 20 69 | 66 28 70 72 65 76 29 7b | i|f(prev){|
|000048f0| 0a 09 09 20 20 20 20 70 | 72 65 76 2d 3e 6e 65 78 |... p|rev->nex|
|00004900| 74 20 3d 20 72 6f 76 65 | 2d 3e 6e 65 78 74 3b 0a |t = rove|->next;.|
|00004910| 09 09 20 20 20 20 66 72 | 65 65 28 72 6f 76 65 29 |.. fr|ee(rove)|
|00004920| 3b 0a 09 09 20 20 20 20 | 72 6f 76 65 3d 70 72 65 |;... |rove=pre|
|00004930| 76 2d 3e 6e 65 78 74 3b | 0a 09 20 20 20 20 20 20 |v->next;|.. |
|00004940| 20 7d 0a 09 20 20 20 20 | 20 20 20 65 6c 73 65 20 | }.. | else |
|00004950| 7b 0a 09 09 20 20 20 20 | 75 64 70 68 65 61 64 20 |{... |udphead |
|00004960| 3d 20 72 6f 76 65 2d 3e | 6e 65 78 74 3b 0a 09 09 |= rove->|next;...|
|00004970| 20 20 20 20 66 72 65 65 | 28 72 6f 76 65 29 3b 0a | free|(rove);.|
|00004980| 09 09 20 20 20 20 72 6f | 76 65 3d 75 64 70 68 65 |.. ro|ve=udphe|
|00004990| 61 64 2d 3e 6e 65 78 74 | 3b 0a 09 20 20 20 20 20 |ad->next|;.. |
|000049a0| 20 20 7d 0a 09 20 20 7d | 0a 09 20 20 65 6c 73 65 | }.. }|.. else|
|000049b0| 20 7b 0a 09 20 20 20 20 | 20 20 20 70 72 65 76 3d | {.. | prev=|
|000049c0| 72 6f 76 65 3b 0a 09 20 | 20 20 20 20 20 20 72 6f |rove;.. | ro|
|000049d0| 76 65 3d 72 6f 76 65 2d | 3e 6e 65 78 74 3b 0a 09 |ve=rove-|>next;..|
|000049e0| 20 20 7d 0a 20 20 20 20 | 20 7d 0a 7d 0a 0a 2e 74 | }. | }.}...t|
|000049f0| 63 70 73 72 63 70 6f 72 | 74 2c 20 28 63 68 61 72 |cpsrcpor|t, (char|
|00004a00| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 69 6e 63 6c |netlog-1|.02/incl|
|00004a10| 75 64 65 2f 00 00 00 00 | 00 00 00 00 00 00 00 00 |ude/....|........|
|00004a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004a60| 00 00 00 00 20 20 20 37 | 35 35 20 00 20 20 20 33 |.... 7|55 . 3|
|00004a70| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00004a80| 20 20 20 20 20 20 30 20 | 20 35 33 36 35 35 34 35 | 0 | 5365545|
|00004a90| 31 35 32 20 20 20 37 33 | 34 35 00 20 00 00 00 00 |152 73|45. ....|
|00004aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c00| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 69 6e 63 6c |netlog-1|.02/incl|
|00004c10| 75 64 65 2f 65 74 68 65 | 72 64 65 66 73 2e 68 00 |ude/ethe|rdefs.h.|
|00004c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c60| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00004c70| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00004c80| 20 20 20 20 36 31 36 20 | 20 35 33 36 35 31 31 34 | 616 | 5365114|
|00004c90| 36 30 30 20 20 31 31 35 | 32 35 00 20 00 00 00 00 |600 115|25. ....|
|00004ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004e00| 2f 2a 0a 20 20 20 20 20 | 6e 65 74 20 6c 6f 67 67 |/*. |net logg|
|00004e10| 65 72 20 2d 20 6e 65 74 | 77 6f 72 6b 20 74 72 61 |er - net|work tra|
|00004e20| 66 66 69 63 20 6c 6f 67 | 67 69 6e 67 20 6c 69 62 |ffic log|ging lib|
|00004e30| 72 61 72 79 0a 20 20 20 | 20 20 43 6f 70 79 72 69 |rary. | Copyri|
|00004e40| 67 68 74 20 28 43 29 20 | 31 39 39 33 20 44 6f 75 |ght (C) |1993 Dou|
|00004e50| 67 6c 61 73 20 4c 65 65 | 20 53 63 68 61 6c 65 73 |glas Lee| Schales|
|00004e60| 2c 20 44 61 76 69 64 20 | 4b 2e 20 48 65 73 73 2c |, David |K. Hess,|
|00004e70| 20 44 61 76 69 64 20 52 | 2e 20 53 61 66 66 6f 72 | David R|. Saffor|
|00004e80| 64 0a 0a 20 20 20 20 20 | 50 6c 65 61 73 65 20 73 |d.. |Please s|
|00004e90| 65 65 20 74 68 65 20 66 | 69 6c 65 20 60 43 4f 50 |ee the f|ile `COP|
|00004ea0| 59 49 4e 47 27 20 66 6f | 72 20 74 68 65 20 63 6f |YING' fo|r the co|
|00004eb0| 6d 70 6c 65 74 65 20 63 | 6f 70 79 72 69 67 68 74 |mplete c|opyright|
|00004ec0| 20 6e 6f 74 69 63 65 2e | 0a 0a 65 74 68 65 72 64 | notice.|..etherd|
|00004ed0| 65 66 73 2e 68 20 2d 20 | 30 33 2f 32 30 2f 39 33 |efs.h - |03/20/93|
|00004ee0| 0a 0a 2a 2f 0a 73 74 72 | 75 63 74 20 65 74 68 65 |..*/.str|uct ethe|
|00004ef0| 72 74 79 70 65 73 20 7b | 0a 20 20 20 20 20 75 6e |rtypes {|. un|
|00004f00| 73 69 67 6e 65 64 20 69 | 6e 74 20 74 79 70 65 3b |signed i|nt type;|
|00004f10| 0a 20 20 20 20 20 63 68 | 61 72 20 2a 64 65 73 63 |. ch|ar *desc|
|00004f20| 72 69 70 74 69 6f 6e 3b | 0a 20 20 20 20 20 76 6f |ription;|. vo|
|00004f30| 69 64 20 28 2a 68 61 6e | 64 6c 65 72 29 28 29 3b |id (*han|dler)();|
|00004f40| 0a 7d 3b 0a 0a 73 74 72 | 75 63 74 20 61 64 61 70 |.};..str|uct adap|
|00004f50| 74 65 72 73 20 7b 0a 20 | 20 20 20 20 75 6e 73 69 |ters {. | unsi|
|00004f60| 67 6e 65 64 20 69 6e 74 | 20 70 72 65 66 69 78 3b |gned int| prefix;|
|00004f70| 0a 20 20 20 20 20 63 68 | 61 72 20 2a 6d 61 6e 75 |. ch|ar *manu|
|00004f80| 66 61 63 74 75 72 65 72 | 3b 0a 7d 3b 0a 0a 6c 65 |facturer|;.};..le|
|00004f90| 29 3b 0a 20 20 20 20 20 | 6d 65 6d 63 70 79 28 26 |);. |memcpy(&|
|00004fa0| 68 61 64 64 72 2e 73 5f | 61 64 64 72 2c 20 26 6f |haddr.s_|addr, &o|
|00004fb0| 75 74 62 75 66 2d 3e 69 | 70 64 73 74 61 64 64 72 |utbuf->i|pdstaddr|
|00004fc0| 2c 20 34 29 3b 0a 20 20 | 20 20 20 66 70 72 69 6e |, 4);. | fprin|
|00004fd0| 74 66 28 6c 6f 67 66 69 | 6c 65 2c 20 22 25 2d 32 |tf(logfi|le, "%-2|
|00004fe0| 31 73 22 2c 20 72 65 73 | 6f 6c 76 65 20 3f 20 63 |1s", res|olve ? c|
|00004ff0| 67 65 74 68 6f 73 74 62 | 79 61 64 64 72 28 68 61 |gethostb|yaddr(ha|
|00005000| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 69 6e 63 6c |netlog-1|.02/incl|
|00005010| 75 64 65 2f 64 65 66 73 | 2e 68 00 00 00 00 00 00 |ude/defs|.h......|
|00005020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005060| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00005070| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00005080| 20 20 20 20 37 32 30 20 | 20 35 33 36 35 31 31 34 | 720 | 5365114|
|00005090| 35 36 37 20 20 31 30 35 | 30 35 00 20 00 00 00 00 |567 105|05. ....|
|000050a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000050b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000050c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000050d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000050e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000050f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000051f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005200| 2f 2a 0a 20 20 20 20 20 | 6e 65 74 20 6c 6f 67 67 |/*. |net logg|
|00005210| 65 72 20 2d 20 6e 65 74 | 77 6f 72 6b 20 74 72 61 |er - net|work tra|
|00005220| 66 66 69 63 20 6c 6f 67 | 67 69 6e 67 20 6c 69 62 |ffic log|ging lib|
|00005230| 72 61 72 79 0a 20 20 20 | 20 20 43 6f 70 79 72 69 |rary. | Copyri|
|00005240| 67 68 74 20 28 43 29 20 | 31 39 39 33 20 44 6f 75 |ght (C) |1993 Dou|
|00005250| 67 6c 61 73 20 4c 65 65 | 20 53 63 68 61 6c 65 73 |glas Lee| Schales|
|00005260| 2c 20 44 61 76 69 64 20 | 4b 2e 20 48 65 73 73 2c |, David |K. Hess,|
|00005270| 20 44 61 76 69 64 20 52 | 2e 20 53 61 66 66 6f 72 | David R|. Saffor|
|00005280| 64 0a 0a 20 20 20 20 20 | 50 6c 65 61 73 65 20 73 |d.. |Please s|
|00005290| 65 65 20 74 68 65 20 66 | 69 6c 65 20 60 43 4f 50 |ee the f|ile `COP|
|000052a0| 59 49 4e 47 27 20 66 6f | 72 20 74 68 65 20 63 6f |YING' fo|r the co|
|000052b0| 6d 70 6c 65 74 65 20 63 | 6f 70 79 72 69 67 68 74 |mplete c|opyright|
|000052c0| 20 6e 6f 74 69 63 65 2e | 0a 0a 64 65 66 73 2e 68 | notice.|..defs.h|
|000052d0| 20 2d 20 30 33 2f 32 30 | 2f 39 33 0a 0a 2a 2f 0a | - 03/20|/93..*/.|
|000052e0| 0a 73 74 72 75 63 74 20 | 73 74 72 5f 74 61 62 6c |.struct |str_tabl|
|000052f0| 65 20 7b 0a 20 20 20 20 | 20 75 6e 73 69 67 6e 65 |e {. | unsigne|
|00005300| 64 20 69 6e 74 20 76 61 | 6c 75 65 3b 0a 20 20 20 |d int va|lue;. |
|00005310| 20 20 63 68 61 72 20 2a | 74 65 78 74 3b 0a 7d 3b | char *|text;.};|
|00005320| 0a 0a 73 74 72 75 63 74 | 20 76 61 6c 5f 73 74 72 |..struct| val_str|
|00005330| 5f 68 6e 64 6c 20 7b 0a | 20 20 20 20 20 75 6e 73 |_hndl {.| uns|
|00005340| 69 67 6e 65 64 20 69 6e | 74 20 76 61 6c 75 65 3b |igned in|t value;|
|00005350| 0a 20 20 20 20 20 63 68 | 61 72 20 2a 74 65 78 74 |. ch|ar *text|
|00005360| 3b 0a 20 20 20 20 20 76 | 6f 69 64 20 28 2a 68 61 |;. v|oid (*ha|
|00005370| 6e 64 6c 65 72 29 28 29 | 3b 0a 7d 3b 0a 0a 65 78 |ndler)()|;.};..ex|
|00005380| 74 65 72 6e 20 69 6e 74 | 20 6f 70 65 6e 6e 69 74 |tern int| opennit|
|00005390| 28 63 68 61 72 20 2a 2c | 20 76 6f 69 64 20 28 2a |(char *,| void (*|
|000053a0| 29 28 69 6e 74 29 29 3b | 0a 65 78 74 65 72 6e 20 |)(int));|.extern |
|000053b0| 76 6f 69 64 20 70 72 6f | 63 70 6b 74 73 28 69 6e |void pro|cpkts(in|
|000053c0| 74 2c 20 76 6f 69 64 20 | 28 2a 29 28 29 29 3b 0a |t, void |(*)());.|
|000053d0| 74 66 28 6c 6f 67 66 69 | 6c 65 2c 20 22 25 2d 32 |tf(logfi|le, "%-2|
|000053e0| 31 73 22 2c 20 72 65 73 | 6f 6c 76 65 20 3f 20 63 |1s", res|olve ? c|
|000053f0| 67 65 74 68 6f 73 74 62 | 79 61 64 64 72 28 68 61 |gethostb|yaddr(ha|
|00005400| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 6c 69 62 2f |netlog-1|.02/lib/|
|00005410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005460| 00 00 00 00 20 20 20 37 | 35 35 20 00 20 20 20 33 |.... 7|55 . 3|
|00005470| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00005480| 20 20 20 20 20 20 30 20 | 20 35 34 31 30 34 33 34 | 0 | 5410434|
|00005490| 36 33 32 20 20 20 36 34 | 35 37 00 20 00 00 00 00 |632 64|57. ....|
|000054a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000054b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000054c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000054d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000054e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000054f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000055f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005600| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 6c 69 62 2f |netlog-1|.02/lib/|
|00005610| 68 6f 73 74 73 2e 63 00 | 00 00 00 00 00 00 00 00 |hosts.c.|........|
|00005620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005660| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00005670| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00005680| 20 20 20 33 31 30 34 20 | 20 35 33 36 35 31 31 34 | 3104 | 5365114|
|00005690| 34 37 32 20 20 31 30 30 | 35 34 00 20 00 00 00 00 |472 100|54. ....|
|000056a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000056b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000056c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000056d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000056e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000056f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000057f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005800| 2f 2a 0a 20 20 20 20 20 | 6e 65 74 20 6c 6f 67 67 |/*. |net logg|
|00005810| 65 72 20 2d 20 6e 65 74 | 77 6f 72 6b 20 74 72 61 |er - net|work tra|
|00005820| 66 66 69 63 20 6c 6f 67 | 67 69 6e 67 20 6c 69 62 |ffic log|ging lib|
|00005830| 72 61 72 79 0a 20 20 20 | 20 20 43 6f 70 79 72 69 |rary. | Copyri|
|00005840| 67 68 74 20 28 43 29 20 | 31 39 39 33 20 44 6f 75 |ght (C) |1993 Dou|
|00005850| 67 6c 61 73 20 4c 65 65 | 20 53 63 68 61 6c 65 73 |glas Lee| Schales|
|00005860| 2c 20 44 61 76 69 64 20 | 4b 2e 20 48 65 73 73 2c |, David |K. Hess,|
|00005870| 20 44 61 76 69 64 20 52 | 2e 20 53 61 66 66 6f 72 | David R|. Saffor|
|00005880| 64 0a 0a 20 20 20 20 20 | 50 6c 65 61 73 65 20 73 |d.. |Please s|
|00005890| 65 65 20 74 68 65 20 66 | 69 6c 65 20 60 43 4f 50 |ee the f|ile `COP|
|000058a0| 59 49 4e 47 27 20 66 6f | 72 20 74 68 65 20 63 6f |YING' fo|r the co|
|000058b0| 6d 70 6c 65 74 65 20 63 | 6f 70 79 72 69 67 68 74 |mplete c|opyright|
|000058c0| 20 6e 6f 74 69 63 65 2e | 0a 0a 68 6f 73 74 73 2e | notice.|..hosts.|
|000058d0| 63 20 2d 20 30 33 2f 32 | 30 2f 39 33 0a 0a 2a 2f |c - 03/2|0/93..*/|
|000058e0| 0a 23 69 6e 63 6c 75 64 | 65 20 3c 73 79 73 2f 74 |.#includ|e <sys/t|
|000058f0| 79 70 65 73 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |ypes.h>.|#include|
|00005900| 20 3c 6e 65 74 69 6e 65 | 74 2f 69 6e 2e 68 3e 0a | <netine|t/in.h>.|
|00005910| 23 69 6e 63 6c 75 64 65 | 20 3c 73 79 73 2f 73 6f |#include| <sys/so|
|00005920| 63 6b 65 74 2e 68 3e 0a | 23 69 6e 63 6c 75 64 65 |cket.h>.|#include|
|00005930| 20 3c 6e 65 74 64 62 2e | 68 3e 0a 23 69 6e 63 6c | <netdb.|h>.#incl|
|00005940| 75 64 65 20 3c 73 69 67 | 6e 61 6c 2e 68 3e 0a 0a |ude <sig|nal.h>..|
|00005950| 65 78 74 65 72 6e 20 63 | 68 61 72 20 2a 69 6e 65 |extern c|har *ine|
|00005960| 74 5f 6e 74 6f 61 28 73 | 74 72 75 63 74 20 69 6e |t_ntoa(s|truct in|
|00005970| 5f 61 64 64 72 29 3b 0a | 0a 73 74 72 75 63 74 20 |_addr);.|.struct |
|00005980| 68 6e 63 61 63 68 65 20 | 7b 0a 20 20 20 20 20 73 |hncache |{. s|
|00005990| 74 72 75 63 74 20 69 6e | 5f 61 64 64 72 20 68 61 |truct in|_addr ha|
|000059a0| 3b 0a 20 20 20 20 20 63 | 68 61 72 20 2a 68 6e 3b |;. c|har *hn;|
|000059b0| 0a 7d 3b 0a 0a 73 74 72 | 75 63 74 20 68 6e 63 61 |.};..str|uct hnca|
|000059c0| 63 68 65 20 68 6f 73 74 | 63 61 63 68 65 5b 32 30 |che host|cache[20|
|000059d0| 34 38 5d 3b 0a 73 74 61 | 74 69 63 20 69 6e 74 20 |48];.sta|tic int |
|000059e0| 68 6e 63 5f 69 6e 69 74 | 20 3d 20 30 3b 0a 73 74 |hnc_init| = 0;.st|
|000059f0| 61 74 69 63 20 75 6e 73 | 69 67 6e 65 64 20 6c 6f |atic uns|igned lo|
|00005a00| 6e 67 20 68 69 74 20 3d | 20 30 2c 20 6d 69 73 73 |ng hit =| 0, miss|
|00005a10| 20 3d 20 30 2c 20 63 6f | 6c 6c 20 3d 20 30 3b 0a | = 0, co|ll = 0;.|
|00005a20| 0a 73 69 67 75 73 72 31 | 28 29 0a 7b 0a 20 20 20 |.sigusr1|().{. |
|00005a30| 20 20 70 72 69 6e 74 66 | 28 22 48 69 74 2f 4d 69 | printf|("Hit/Mi|
|00005a40| 73 73 3a 20 25 6c 75 2f | 25 6c 75 2c 20 43 6f 6c |ss: %lu/|%lu, Col|
|00005a50| 6c 69 73 69 6f 6e 73 3a | 20 25 6c 75 5c 6e 22 2c |lisions:| %lu\n",|
|00005a60| 0a 09 20 20 20 20 68 69 | 74 2c 20 6d 69 73 73 2c |.. hi|t, miss,|
|00005a70| 63 6f 6c 6c 29 3b 0a 7d | 0a 0a 63 68 61 72 20 2a |coll);.}|..char *|
|00005a80| 0a 63 67 65 74 68 6f 73 | 74 62 79 61 64 64 72 28 |.cgethos|tbyaddr(|
|00005a90| 73 74 72 75 63 74 20 69 | 6e 5f 61 64 64 72 20 69 |struct i|n_addr i|
|00005aa0| 70 68 61 29 0a 7b 0a 20 | 20 20 20 20 75 6e 73 69 |pha).{. | unsi|
|00005ab0| 67 6e 65 64 20 69 6e 74 | 20 68 61 73 68 3b 0a 20 |gned int| hash;. |
|00005ac0| 20 20 20 20 73 74 72 75 | 63 74 20 68 6f 73 74 65 | stru|ct hoste|
|00005ad0| 6e 74 20 2a 68 65 3b 0a | 20 20 20 20 20 75 6e 73 |nt *he;.| uns|
|00005ae0| 69 67 6e 65 64 20 6c 6f | 6e 67 20 68 61 3b 0a 20 |igned lo|ng ha;. |
|00005af0| 20 20 20 20 63 68 61 72 | 20 2a 6e 61 6d 65 3b 0a | char| *name;.|
|00005b00| 0a 20 20 20 20 20 68 61 | 20 3d 20 68 74 6f 6e 6c |. ha| = htonl|
|00005b10| 28 69 70 68 61 2e 73 5f | 61 64 64 72 29 3b 0a 20 |(ipha.s_|addr);. |
|00005b20| 20 20 20 20 68 61 73 68 | 20 3d 20 68 61 20 26 20 | hash| = ha & |
|00005b30| 30 78 37 66 66 3b 0a 0a | 20 20 20 20 20 69 66 28 |0x7ff;..| if(|
|00005b40| 21 68 6e 63 5f 69 6e 69 | 74 29 7b 0a 09 20 20 69 |!hnc_ini|t){.. i|
|00005b50| 6e 74 20 69 3b 0a 09 20 | 20 66 6f 72 28 69 3d 30 |nt i;.. | for(i=0|
|00005b60| 3b 69 3c 32 30 34 38 3b | 69 2b 2b 29 7b 0a 09 20 |;i<2048;|i++){.. |
|00005b70| 20 20 20 20 20 20 68 6f | 73 74 63 61 63 68 65 5b | ho|stcache[|
|00005b80| 69 5d 2e 68 6e 20 3d 20 | 28 63 68 61 72 20 2a 29 |i].hn = |(char *)|
|00005b90| 30 3b 0a 09 20 20 20 20 | 20 20 20 6d 65 6d 73 65 |0;.. | memse|
|00005ba0| 74 28 26 68 6f 73 74 63 | 61 63 68 65 5b 69 5d 2e |t(&hostc|ache[i].|
|00005bb0| 68 61 2c 20 30 2c 20 34 | 29 3b 0a 09 20 20 7d 0a |ha, 0, 4|);.. }.|
|00005bc0| 09 20 20 68 6e 63 5f 69 | 6e 69 74 20 3d 20 31 3b |. hnc_i|nit = 1;|
|00005bd0| 0a 09 20 20 73 69 67 6e | 61 6c 28 53 49 47 55 53 |.. sign|al(SIGUS|
|00005be0| 52 31 2c 20 73 69 67 75 | 73 72 31 29 3b 0a 20 20 |R1, sigu|sr1);. |
|00005bf0| 20 20 20 7d 0a 20 20 20 | 20 20 0a 20 20 20 20 20 | }. | . |
|00005c00| 69 66 28 28 6d 65 6d 63 | 6d 70 28 26 68 6f 73 74 |if((memc|mp(&host|
|00005c10| 63 61 63 68 65 5b 68 61 | 73 68 5d 2e 68 61 2c 20 |cache[ha|sh].ha, |
|00005c20| 26 68 61 2c 20 34 29 20 | 3d 3d 20 30 29 20 26 26 |&ha, 4) |== 0) &&|
|00005c30| 0a 09 68 6f 73 74 63 61 | 63 68 65 5b 68 61 73 68 |..hostca|che[hash|
|00005c40| 5d 2e 68 6e 29 7b 0a 09 | 20 20 6e 61 6d 65 20 3d |].hn){..| name =|
|00005c50| 20 68 6f 73 74 63 61 63 | 68 65 5b 68 61 73 68 5d | hostcac|he[hash]|
|00005c60| 2e 68 6e 3b 0a 09 20 20 | 68 69 74 2b 2b 3b 0a 20 |.hn;.. |hit++;. |
|00005c70| 20 20 20 20 7d 0a 20 20 | 20 20 20 65 6c 73 65 20 | }. | else |
|00005c80| 7b 0a 09 20 20 6d 69 73 | 73 2b 2b 3b 0a 09 20 20 |{.. mis|s++;.. |
|00005c90| 69 66 28 68 65 20 3d 20 | 67 65 74 68 6f 73 74 62 |if(he = |gethostb|
|00005ca0| 79 61 64 64 72 28 28 63 | 68 61 72 20 2a 29 26 68 |yaddr((c|har *)&h|
|00005cb0| 61 2c 20 34 2c 20 41 46 | 5f 49 4e 45 54 29 29 0a |a, 4, AF|_INET)).|
|00005cc0| 09 20 20 20 20 20 20 20 | 6e 61 6d 65 20 3d 20 68 |. |name = h|
|00005cd0| 65 2d 3e 68 5f 6e 61 6d | 65 3b 0a 09 20 20 65 6c |e->h_nam|e;.. el|
|00005ce0| 73 65 0a 09 20 20 20 20 | 20 20 20 6e 61 6d 65 20 |se.. | name |
|00005cf0| 3d 20 20 69 6e 65 74 5f | 6e 74 6f 61 28 69 70 68 |= inet_|ntoa(iph|
|00005d00| 61 29 3b 0a 0a 09 20 20 | 6d 65 6d 63 70 79 28 26 |a);... |memcpy(&|
|00005d10| 68 6f 73 74 63 61 63 68 | 65 5b 68 61 73 68 5d 2e |hostcach|e[hash].|
|00005d20| 68 61 2c 20 26 68 61 2c | 20 34 29 3b 0a 09 20 20 |ha, &ha,| 4);.. |
|00005d30| 69 66 28 68 6f 73 74 63 | 61 63 68 65 5b 68 61 73 |if(hostc|ache[has|
|00005d40| 68 5d 2e 68 6e 29 7b 0a | 09 20 20 20 20 20 20 20 |h].hn){.|. |
|00005d50| 66 72 65 65 28 68 6f 73 | 74 63 61 63 68 65 5b 68 |free(hos|tcache[h|
|00005d60| 61 73 68 5d 2e 68 6e 29 | 3b 0a 09 20 20 20 20 20 |ash].hn)|;.. |
|00005d70| 20 20 63 6f 6c 6c 2b 2b | 3b 0a 09 20 20 7d 0a 09 | coll++|;.. }..|
|00005d80| 20 20 68 6f 73 74 63 61 | 63 68 65 5b 68 61 73 68 | hostca|che[hash|
|00005d90| 5d 2e 68 6e 20 3d 20 28 | 63 68 61 72 20 2a 29 6d |].hn = (|char *)m|
|00005da0| 61 6c 6c 6f 63 28 73 74 | 72 6c 65 6e 28 6e 61 6d |alloc(st|rlen(nam|
|00005db0| 65 29 2b 31 29 3b 0a 09 | 20 20 73 74 72 63 70 79 |e)+1);..| strcpy|
|00005dc0| 28 68 6f 73 74 63 61 63 | 68 65 5b 68 61 73 68 5d |(hostcac|he[hash]|
|00005dd0| 2e 68 6e 2c 20 6e 61 6d | 65 29 3b 0a 20 20 20 20 |.hn, nam|e);. |
|00005de0| 20 7d 0a 20 20 20 20 20 | 72 65 74 75 72 6e 20 6e | }. |return n|
|00005df0| 61 6d 65 3b 0a 7d 0a 0a | 76 6f 69 64 0a 6f 75 74 |ame;.}..|void.out|
|00005e00| 68 6f 73 74 28 73 74 72 | 75 63 74 20 69 6e 5f 61 |host(str|uct in_a|
|00005e10| 64 64 72 20 68 61 29 0a | 7b 0a 20 20 20 20 20 70 |ddr ha).|{. p|
|00005e20| 72 69 6e 74 66 28 22 20 | 25 73 22 2c 20 63 67 65 |rintf(" |%s", cge|
|00005e30| 74 68 6f 73 74 62 79 61 | 64 64 72 28 68 61 29 29 |thostbya|ddr(ha))|
|00005e40| 3b 0a 7d 0a 2c 20 34 29 | 20 26 26 0a 09 20 20 20 |;.}., 4)| &&.. |
|00005e50| 20 20 21 6d 65 6d 63 6d | 70 28 26 72 6f 76 65 2d | !memcm|p(&rove-|
|00005e60| 3e 62 75 66 2e 69 70 64 | 73 74 61 64 64 72 2c 20 |>buf.ipd|staddr, |
|00005e70| 26 62 75 66 2d 3e 69 70 | 73 72 63 61 64 64 72 2c |&buf->ip|srcaddr,|
|00005e80| 20 34 29 20 26 26 0a 09 | 20 20 20 20 20 21 6d 65 | 4) &&..| !me|
|00005e90| 6d 63 6d 70 28 26 72 6f | 76 65 2d 3e 62 75 66 2e |mcmp(&ro|ve->buf.|
|00005ea0| 74 63 70 73 72 63 70 6f | 72 74 2c 20 26 62 75 66 |tcpsrcpo|rt, &buf|
|00005eb0| 2d 3e 74 63 70 64 73 74 | 70 6f 72 74 2c 20 32 29 |->tcpdst|port, 2)|
|00005ec0| 20 26 26 0a 09 20 20 20 | 20 20 21 6d 65 6d 63 6d | &&.. | !memcm|
|00005ed0| 70 28 26 72 6f 76 65 2d | 3e 62 75 66 2e 74 63 70 |p(&rove-|>buf.tcp|
|00005ee0| 64 73 74 70 6f 72 74 2c | 20 26 62 75 66 2d 3e 74 |dstport,| &buf->t|
|00005ef0| 63 70 73 72 63 70 6f 72 | 74 2c 20 32 29 29 7b 0a |cpsrcpor|t, 2)){.|
|00005f00| 09 20 20 20 20 20 20 20 | 6d 65 6d 63 70 79 28 26 |. |memcpy(&|
|00005f10| 72 6f 76 65 2d 3e 62 75 | 66 2e 74 70 2c 20 26 62 |rove->bu|f.tp, &b|
|00005f20| 75 66 2d 3e 74 70 2c 20 | 73 69 7a 65 6f 66 28 73 |uf->tp, |sizeof(s|
|00005f30| 74 72 75 63 74 20 74 69 | 6d 65 76 61 6c 29 29 3b |truct ti|meval));|
|00005f40| 0a 09 20 20 20 20 20 20 | 20 72 65 74 75 72 6e 20 |.. | return |
|00005f50| 31 3b 0a 09 20 20 7d 0a | 20 20 20 20 20 7d 0a 20 |1;.. }.| }. |
|00005f60| 20 20 20 20 72 6f 76 65 | 20 3d 20 28 73 74 72 75 | rove| = (stru|
|00005f70| 63 74 20 75 64 70 61 63 | 74 69 76 65 20 2a 29 6d |ct udpac|tive *)m|
|00005f80| 61 6c 6c 6f 63 28 73 69 | 7a 65 6f 66 28 73 74 72 |alloc(si|zeof(str|
|00005f90| 75 63 74 20 75 64 70 61 | 63 74 69 76 65 29 29 3b |uct udpa|ctive));|
|00005fa0| 0a 20 20 20 20 20 72 6f | 76 65 2d 3e 6e 65 78 74 |. ro|ve->next|
|00005fb0| 20 3d 20 75 64 70 68 65 | 61 64 3b 0a 20 20 20 20 | = udphe|ad;. |
|00005fc0| 20 75 64 70 68 65 61 64 | 20 3d 20 72 6f 76 65 3b | udphead| = rove;|
|00005fd0| 0a 20 20 20 20 20 6d 65 | 6d 63 70 79 28 26 72 6f |. me|mcpy(&ro|
|00005fe0| 76 65 2d 3e 62 75 66 2c | 20 62 75 66 2c 20 73 69 |ve->buf,| buf, si|
|00005ff0| 7a 65 6f 66 28 73 74 72 | 75 63 74 20 74 63 70 73 |zeof(str|uct tcps|
|00006000| 6e 65 74 6c 6f 67 2d 31 | 2e 30 32 2f 6c 69 62 2f |netlog-1|.02/lib/|
|00006010| 6d 69 73 63 2e 63 00 00 | 00 00 00 00 00 00 00 00 |misc.c..|........|
|00006020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006060| 00 00 00 00 20 20 20 36 | 34 34 20 00 20 20 20 33 |.... 6|44 . 3|
|00006070| 31 35 20 00 20 20 20 31 | 34 34 20 00 20 20 20 20 |15 . 1|44 . |
|00006080| 20 20 20 31 30 30 35 20 | 20 35 33 36 35 31 31 34 | 1005 | 5365114|
|00006090| 35 33 33 20 20 20 37 36 | 34 33 00 20 00 00 00 00 |533 76|43. ....|
|000060a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000061f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006200| 2f 2a 0a 20 20 20 20 20 | 6e 65 74 20 6c 6f 67 67 |/*. |net logg|
|00006210| 65 72 20 2d 20 6e 65 74 | 77 6f 72 6b 20 74 72 61 |er - net|work tra|
|00006220| 66 66 69 63 20 6c 6f 67 | 67 69 6e 67 20 6c 69 62 |ffic log|ging lib|
|00006230| 72 61 72 79 0a 20 20 20 | 20 20 43 6f 70 79 72 69 |rary. | Copyri|
|00006240| 67 68 74 20 28 43 29 20 | 31 39 39 33 20 44 6f 75 |ght (C) |1993 Dou|
|00006250| 67 6c 61 73 20 4c 65 65 | 20 53 63 68 61 6c 65 73 |glas Lee| Schales|
|00006260| 2c 20 44 61 76 69 64 20 | 4b 2e 20 48 65 73 73 2c |, David |K. Hess,|
|00006270| 20 44 61 76 69 64 20 52 | 2e 20 53 61 66 66 6f 72 | David R|. Saffor|
|00006280| 64 0a 0a 20 20 20 20 20 | 50 6c 65 61 73 65 20 73 |d.. |Please s|
|00006290| 65 65 20 74 68 65 20 66 | 69 6c 65 20 60 43 4f 50 |ee the f|ile `COP|
|000062a0| 59 49 4e 47 27 20 66 6f | 72 20 74 68 65 20 63 6f |YING' fo|r the co|
|000062b0| 6d 70 6c 65 74 65 20 63 | 6f 70 79 72 69 67 68 74 |mplete c|opyright|
|000062c0| 20 6e 6f 74 69 63 65 2e | 0a 0a 6d 69 73 63 2e 63 | notice.|..misc.c|
|000062d0| 20 2d 20 30 33 2f 32 30 | 2f 39 33 0a 0a 2a 2f 0a | - 03/20|/93..*/.|
|000062e0| 23 69 6e 63 6c 75 64 65 | 20 3c 63 74 79 70 65 2e |#include| <ctype.|
|000062f0| 68 3e 0a 0a 23 69 6e 63 | 6c 75 64 65 20 22 64 65 |h>..#inc|lude "de|
|00006300| 66 73 2e 68 22 0a 0a 69 | 6e 74 0a 69 73 6e 75 6d |fs.h"..i|nt.isnum|
|00006310| 73 74 72 28 63 68 61 72 | 20 2a 73 29 0a 7b 0a 20 |str(char| *s).{. |
|00006320| 20 20 20 20 66 6f 72 28 | 3b 2a 73 3b 73 2b 2b 29 | for(|;*s;s++)|
|00006330| 0a 09 20 20 69 66 28 21 | 69 73 64 69 67 69 74 28 |.. if(!|isdigit(|
|00006340| 2a 73 29 29 0a 09 20 20 | 20 20 20 20 20 62 72 65 |*s)).. | bre|
|00006350| 61 6b 3b 0a 0a 20 20 20 | 20 20 72 65 74 75 72 6e |ak;.. | return|
|00006360| 20 21 2a 73 3b 0a 7d 0a | 0a 62 75 6d 70 69 74 28 | !*s;.}.|.bumpit(|
|00006370| 73 74 72 75 63 74 20 76 | 61 6c 5f 73 74 72 5f 68 |struct v|al_str_h|
|00006380| 6e 64 6c 20 2a 78 2c 20 | 69 6e 74 20 6e 64 78 29 |ndl *x, |int ndx)|
|00006390| 0a 7b 0a 20 20 20 20 20 | 73 74 72 75 63 74 20 76 |.{. |struct v|
|000063a0| 61 6c 5f 73 74 72 5f 68 | 6e 64 6c 20 74 65 6d 70 |al_str_h|ndl temp|
|000063b0| 3b 0a 20 20 20 20 20 69 | 66 28 6e 64 78 29 7b 0a |;. i|f(ndx){.|
|000063c0| 09 20 20 74 65 6d 70 20 | 3d 20 78 5b 6e 64 78 2d |. temp |= x[ndx-|
|000063d0| 31 5d 3b 0a 09 20 20 78 | 5b 6e 64 78 2d 31 5d 20 |1];.. x|[ndx-1] |
|000063e0| 3d 20 78 5b 6e 64 78 5d | 3b 0a 09 20 20 78 5b 6e |= x[ndx]|;.. x[n|
|000063f0| 64 78 5d 20 3d 20 74 65 | 6d 70 3b 0a 20 20 20 20 |dx] = te|mp;. |
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.