ftrec.c

netflow,抓包

  rec_v6->exaddr = rec_v1->exaddr;
  rec_v6->srcaddr = rec_v1->srcaddr;
  rec_v6->dstaddr = rec_v1->dstaddr;
  rec_v6->nexthop = rec_v1->nexthop;
  rec_v6->input = rec_v1->input;
  rec_v6->output = rec_v6->output;
  rec_v6->dPkts = rec_v1->dPkts;
  rec_v6->dOctets = rec_v1->dOctets;
  rec_v6->First = rec_v1->First;
  rec_v6->Last = rec_v1->Last;
  rec_v6->srcport = rec_v1->srcport;
  rec_v6->dstport = rec_v1->dstport;
  rec_v6->prot = rec_v1->prot;
  rec_v6->tos = rec_v1->tos;
  rec_v6->tcp_flags = rec_v1->tcp_flags;

} /* ftrec_xlate_1to6 */

void ftrec_xlate_1to7(struct fts3rec_v1 *rec_v1, struct fts3rec_v7 *rec_v7)
{

  bzero(rec_v7, sizeof (struct fts3rec_v7));

  rec_v7->unix_secs = rec_v1->unix_secs;
  rec_v7->unix_nsecs = rec_v1->unix_nsecs;
  rec_v7->sysUpTime = rec_v1->sysUpTime;
  rec_v7->exaddr = rec_v1->exaddr;
  rec_v7->srcaddr = rec_v1->srcaddr;
  rec_v7->dstaddr = rec_v1->dstaddr;
  rec_v7->nexthop = rec_v1->nexthop;
  rec_v7->input = rec_v1->input;
  rec_v7->output = rec_v7->output;
  rec_v7->dPkts = rec_v1->dPkts;
  rec_v7->dOctets = rec_v1->dOctets;
  rec_v7->First = rec_v1->First;
  rec_v7->Last = rec_v1->Last;
  rec_v7->srcport = rec_v1->srcport;
  rec_v7->dstport = rec_v1->dstport;
  rec_v7->prot = rec_v1->prot;
  rec_v7->tos = rec_v1->tos;
  rec_v7->tcp_flags = rec_v1->tcp_flags;

} /* ftrec_xlate_1to7 */

void ftrec_xlate_1to1005(struct fts3rec_v1 *rec_v1,
  struct fts3rec_v1005 *rec_v1005)
{

  bzero(rec_v1005, sizeof (struct fts3rec_v1005));

  rec_v1005->unix_secs = rec_v1->unix_secs;
  rec_v1005->unix_nsecs = rec_v1->unix_nsecs;
  rec_v1005->sysUpTime = rec_v1->sysUpTime;
  rec_v1005->exaddr = rec_v1->exaddr;
  rec_v1005->srcaddr = rec_v1->srcaddr;
  rec_v1005->dstaddr = rec_v1->dstaddr;
  rec_v1005->nexthop = rec_v1->nexthop;
  rec_v1005->input = rec_v1->input;
  rec_v1005->output = rec_v1->output;
  rec_v1005->dPkts = rec_v1->dPkts;
  rec_v1005->dOctets = rec_v1->dOctets;
  rec_v1005->First = rec_v1->First;
  rec_v1005->Last = rec_v1->Last;
  rec_v1005->srcport = rec_v1->srcport;
  rec_v1005->dstport = rec_v1->dstport;
  rec_v1005->prot = rec_v1->prot;
  rec_v1005->tos = rec_v1->tos;
  rec_v1005->tcp_flags = rec_v1->tcp_flags;

} /* ftrec_xlate_1to1005 */

void ftrec_xlate_6to1(struct fts3rec_v6 *rec_v6, struct fts3rec_v1 *rec_v1)
{

  bzero(rec_v1, sizeof (struct fts3rec_v1));

  rec_v1->unix_secs = rec_v6->unix_secs;
  rec_v1->unix_nsecs = rec_v6->unix_nsecs;
  rec_v1->sysUpTime = rec_v6->sysUpTime;
  rec_v1->exaddr = rec_v6->exaddr;
  rec_v1->srcaddr = rec_v6->srcaddr;
  rec_v1->dstaddr = rec_v6->dstaddr;
  rec_v1->nexthop = rec_v6->nexthop;
  rec_v1->input = rec_v6->input;
  rec_v1->output = rec_v6->output;
  rec_v1->dPkts = rec_v6->dPkts;
  rec_v1->dOctets = rec_v6->dOctets;
  rec_v1->First = rec_v6->First;
  rec_v1->Last = rec_v6->Last;
  rec_v1->srcport = rec_v6->srcport;
  rec_v1->dstport = rec_v6->dstport;
  rec_v1->prot = rec_v6->prot;
  rec_v1->tos = rec_v6->tos;
  rec_v1->tcp_flags = rec_v6->tcp_flags;

} /* ftrec_xlate_6to1 */

void ftrec_xlate_6to5(struct fts3rec_v6 *rec_v6, struct fts3rec_v5 *rec_v5)
{

  bzero(rec_v5, sizeof (struct fts3rec_v5));

  rec_v5->unix_secs = rec_v6->unix_secs;
  rec_v5->unix_nsecs = rec_v6->unix_nsecs;
  rec_v5->sysUpTime = rec_v6->sysUpTime;
  rec_v5->exaddr = rec_v6->exaddr;
  rec_v5->srcaddr = rec_v6->srcaddr;
  rec_v5->dstaddr = rec_v6->dstaddr;
  rec_v5->nexthop = rec_v6->nexthop;
  rec_v5->input = rec_v6->input;
  rec_v5->output = rec_v6->output;
  rec_v5->dPkts = rec_v6->dPkts;
  rec_v5->dOctets = rec_v6->dOctets;
  rec_v5->First = rec_v6->First;
  rec_v5->Last = rec_v6->Last;
  rec_v5->srcport = rec_v6->srcport;
  rec_v5->dstport = rec_v6->dstport;
  rec_v5->prot = rec_v6->prot;
  rec_v5->tos = rec_v6->tos;
  rec_v5->tcp_flags = rec_v6->tcp_flags;
  rec_v5->engine_type = rec_v6->engine_type;
  rec_v5->engine_id = rec_v6->engine_id;
  rec_v5->src_mask = rec_v6->src_mask;
  rec_v5->dst_mask = rec_v6->dst_mask;
  rec_v5->src_as = rec_v6->src_as;
  rec_v5->dst_as = rec_v6->dst_as;

} /* ftrec_xlate_6to5 */

void ftrec_xlate_6to7(struct fts3rec_v6 *rec_v6, struct fts3rec_v7 *rec_v7)
{

  bzero(rec_v7, sizeof (struct fts3rec_v7));

  rec_v7->unix_secs = rec_v6->unix_secs;
  rec_v7->unix_nsecs = rec_v6->unix_nsecs;
  rec_v7->sysUpTime = rec_v6->sysUpTime;
  rec_v7->exaddr = rec_v6->exaddr;
  rec_v7->srcaddr = rec_v6->srcaddr;
  rec_v7->dstaddr = rec_v6->dstaddr;
  rec_v7->nexthop = rec_v6->nexthop;
  rec_v7->input = rec_v6->input;
  rec_v7->output = rec_v6->output;
  rec_v7->dPkts = rec_v6->dPkts;
  rec_v7->dOctets = rec_v6->dOctets;
  rec_v7->First = rec_v6->First;
  rec_v7->Last = rec_v6->Last;
  rec_v7->srcport = rec_v6->srcport;
  rec_v7->dstport = rec_v6->dstport;
  rec_v7->prot = rec_v6->prot;
  rec_v7->tos = rec_v6->tos;
  rec_v7->tcp_flags = rec_v6->tcp_flags;
  rec_v7->engine_type = rec_v6->engine_type;
  rec_v7->engine_id = rec_v6->engine_id;
  rec_v7->src_mask = rec_v6->src_mask;
  rec_v7->dst_mask = rec_v6->dst_mask;
  rec_v7->src_as = rec_v6->src_as;
  rec_v7->dst_as = rec_v6->dst_as;

} /* ftrec_xlate_6to7 */

void ftrec_xlate_6to1005(struct fts3rec_v6 *rec_v6,
  struct fts3rec_v1005 *rec_v1005)
{

  bzero(rec_v1005, sizeof (struct fts3rec_v1005));

  rec_v1005->unix_secs = rec_v6->unix_secs;
  rec_v1005->unix_nsecs = rec_v6->unix_nsecs;
  rec_v1005->sysUpTime = rec_v6->sysUpTime;
  rec_v1005->exaddr = rec_v6->exaddr;
  rec_v1005->srcaddr = rec_v6->srcaddr;
  rec_v1005->dstaddr = rec_v6->dstaddr;
  rec_v1005->nexthop = rec_v6->nexthop;
  rec_v1005->input = rec_v6->input;
  rec_v1005->output = rec_v6->output;
  rec_v1005->dPkts = rec_v6->dPkts;
  rec_v1005->dOctets = rec_v6->dOctets;
  rec_v1005->First = rec_v6->First;
  rec_v1005->Last = rec_v6->Last;
  rec_v1005->srcport = rec_v6->srcport;
  rec_v1005->dstport = rec_v6->dstport;
  rec_v1005->prot = rec_v6->prot;
  rec_v1005->tos = rec_v6->tos;
  rec_v1005->tcp_flags = rec_v6->tcp_flags;
  rec_v1005->engine_type = rec_v6->engine_type;
  rec_v1005->engine_id = rec_v6->engine_id;
  rec_v1005->src_mask = rec_v6->src_mask;
  rec_v1005->dst_mask = rec_v6->dst_mask;
  rec_v1005->src_as = rec_v6->src_as;
  rec_v1005->dst_as = rec_v6->dst_as;

} /* ftrec_xlate_6to1005 */

void ftrec_xlate_7to1(struct fts3rec_v7 *rec_v7, struct fts3rec_v1 *rec_v1)
{

  bzero(rec_v1, sizeof (struct fts3rec_v1));

  rec_v1->unix_secs = rec_v7->unix_secs;
  rec_v1->unix_nsecs = rec_v7->unix_nsecs;
  rec_v1->sysUpTime = rec_v7->sysUpTime;
  rec_v1->exaddr = rec_v7->exaddr;
  rec_v1->srcaddr = rec_v7->srcaddr;
  rec_v1->dstaddr = rec_v7->dstaddr;
  rec_v1->nexthop = rec_v7->nexthop;
  rec_v1->input = rec_v7->input;
  rec_v1->output = rec_v7->output;
  rec_v1->dPkts = rec_v7->dPkts;
  rec_v1->dOctets = rec_v7->dOctets;
  rec_v1->First = rec_v7->First;
  rec_v1->Last = rec_v7->Last;
  rec_v1->srcport = rec_v7->srcport;
  rec_v1->dstport = rec_v7->dstport;
  rec_v1->prot = rec_v7->prot;
  rec_v1->tos = rec_v7->tos;
  rec_v1->tcp_flags = rec_v7->tcp_flags;

} /* ftrec_xlate_7to1 */


void ftrec_xlate_7to5(struct fts3rec_v7 *rec_v7, struct fts3rec_v5 *rec_v5)
{

  bzero(rec_v5, sizeof (struct fts3rec_v5));

  rec_v5->unix_secs = rec_v7->unix_secs;
  rec_v5->unix_nsecs = rec_v7->unix_nsecs;
  rec_v5->sysUpTime = rec_v7->sysUpTime;
  rec_v5->exaddr = rec_v7->exaddr;
  rec_v5->srcaddr = rec_v7->srcaddr;
  rec_v5->dstaddr = rec_v7->dstaddr;
  rec_v5->nexthop = rec_v7->nexthop;
  rec_v5->input = rec_v7->input;
  rec_v5->output = rec_v7->output;
  rec_v5->dPkts = rec_v7->dPkts;
  rec_v5->dOctets = rec_v7->dOctets;
  rec_v5->First = rec_v7->First;
  rec_v5->Last = rec_v7->Last;
  rec_v5->srcport = rec_v7->srcport;
  rec_v5->dstport = rec_v7->dstport;
  rec_v5->prot = rec_v7->prot;
  rec_v5->tos = rec_v7->tos;
  rec_v5->tcp_flags = rec_v7->tcp_flags;
  rec_v5->engine_type = rec_v7->engine_type;
  rec_v5->engine_id = rec_v7->engine_id;
  rec_v5->src_mask = rec_v7->src_mask;
  rec_v5->dst_mask = rec_v7->dst_mask;
  rec_v5->src_as = rec_v7->src_as;
  rec_v5->dst_as = rec_v7->dst_as;

} /* ftrec_xlate_7to5 */

void ftrec_xlate_7to6(struct fts3rec_v7 *rec_v7, struct fts3rec_v6 *rec_v6)
{

  bzero(rec_v6, sizeof (struct fts3rec_v6));

  rec_v6->unix_secs = rec_v7->unix_secs;
  rec_v6->unix_nsecs = rec_v7->unix_nsecs;
  rec_v6->sysUpTime = rec_v7->sysUpTime;
  rec_v6->exaddr = rec_v7->exaddr;
  rec_v6->srcaddr = rec_v7->srcaddr;
  rec_v6->dstaddr = rec_v7->dstaddr;
  rec_v6->nexthop = rec_v7->nexthop;
  rec_v6->input = rec_v7->input;
  rec_v6->output = rec_v7->output;
  rec_v6->dPkts = rec_v7->dPkts;
  rec_v6->dOctets = rec_v7->dOctets;
  rec_v6->First = rec_v7->First;
  rec_v6->Last = rec_v7->Last;
  rec_v6->srcport = rec_v7->srcport;
  rec_v6->dstport = rec_v7->dstport;
  rec_v6->prot = rec_v7->prot;
  rec_v6->tos = rec_v7->tos;
  rec_v6->tcp_flags = rec_v7->tcp_flags;
  rec_v6->engine_type = rec_v7->engine_type;
  rec_v6->engine_id = rec_v7->engine_id;
  rec_v6->src_mask = rec_v7->src_mask;
  rec_v6->dst_mask = rec_v7->dst_mask;
  rec_v6->src_as = rec_v7->src_as;
  rec_v6->dst_as = rec_v7->dst_as;

} /* ftrec_xlate_7to6 */

void ftrec_xlate_7to1005(struct fts3rec_v7 *rec_v7,
  struct fts3rec_v1005 *rec_v1005)
{

  bzero(rec_v1005, sizeof (struct fts3rec_v1005));

  rec_v1005->unix_secs = rec_v7->unix_secs;
  rec_v1005->unix_nsecs = rec_v7->unix_nsecs;
  rec_v1005->sysUpTime = rec_v7->sysUpTime;
  rec_v1005->exaddr = rec_v7->exaddr;
  rec_v1005->srcaddr = rec_v7->srcaddr;
  rec_v1005->dstaddr = rec_v7->dstaddr;
  rec_v1005->nexthop = rec_v7->nexthop;
  rec_v1005->input = rec_v7->input;
  rec_v1005->output = rec_v7->output;
  rec_v1005->dPkts = rec_v7->dPkts;
  rec_v1005->dOctets = rec_v7->dOctets;
  rec_v1005->First = rec_v7->First;
  rec_v1005->Last = rec_v7->Last;
  rec_v1005->srcport = rec_v7->srcport;
  rec_v1005->dstport = rec_v7->dstport;
  rec_v1005->prot = rec_v7->prot;
  rec_v1005->tos = rec_v7->tos;
  rec_v1005->tcp_flags = rec_v7->tcp_flags;
  rec_v1005->engine_type = rec_v7->engine_type;
  rec_v1005->engine_id = rec_v7->engine_id;
  rec_v1005->src_mask = rec_v7->src_mask;
  rec_v1005->dst_mask = rec_v7->dst_mask;
  rec_v1005->src_as = rec_v7->src_as;
  rec_v1005->dst_as = rec_v7->dst_as;

} /* ftrec_xlate_7to1005 */

/*
 * function fts3rec_compute_offsets
 *
 * populate a fts3rec_offset structure with structure offsets appropriate
 * for the version in ftv.
 *
 * returns 0 for success, < 0 otherwise.
 */
int fts3rec_compute_offsets(struct fts3rec_offsets *o, struct ftver *ftv)
{
  int ret;

  ret = -1;

  switch (ftv->d_version) {

    case 1:
      FT_OFFSET(unix_secs, fts3rec_v1)
      FT_OFFSET(unix_nsecs, fts3rec_v1)
      FT_OFFSET(sysUpTime, fts3rec_v1)
      FT_OFFSET(exaddr, fts3rec_v1)
      FT_OFFSET(srcaddr, fts3rec_v1)
      FT_OFFSET(dstaddr, fts3rec_v1)
      FT_OFFSET(nexthop, fts3rec_v1)
      FT_OFFSET(input, fts3rec_v1)
      FT_OFFSET(output, fts3rec_v1)
      FT_OFFSET(dPkts, fts3rec_v1)
      FT_OFFSET(dOctets, fts3rec_v1)
      FT_OFFSET(First, fts3rec_v1)
      FT_OFFSET(Last, fts3rec_v1)
      FT_OFFSET(srcport, fts3rec_v1)
      FT_OFFSET(dstport, fts3rec_v1)
      FT_OFFSET(prot, fts3rec_v1)
      FT_OFFSET(tos, fts3rec_v1)
      FT_OFFSET(tcp_flags, fts3rec_v1)
      ret = 0;
      break;

    case 5:
      FT_OFFSET(unix_secs, fts3rec_v5)
      FT_OFFSET(unix_nsecs, fts3rec_v5)
      FT_OFFSET(sysUpTime, fts3rec_v5)
      FT_OFFSET(exaddr, fts3rec_v5)
      FT_OFFSET(srcaddr, fts3rec_v5)
      FT_OFFSET(dstaddr, fts3rec_v5)
      FT_OFFSET(nexthop, fts3rec_v5)
      FT_OFFSET(input, fts3rec_v5)
      FT_OFFSET(output, fts3rec_v5)
      FT_OFFSET(dPkts, fts3rec_v5)
      FT_OFFSET(dOctets, fts3rec_v5)
      FT_OFFSET(First, fts3rec_v5)
      FT_OFFSET(Last, fts3rec_v5)
      FT_OFFSET(srcport, fts3rec_v5)
      FT_OFFSET(dstport, fts3rec_v5)
      FT_OFFSET(prot, fts3rec_v5)
      FT_OFFSET(tos, fts3rec_v5)
      FT_OFFSET(tcp_flags, fts3rec_v5)
      FT_OFFSET(engine_type, fts3rec_v5)
      FT_OFFSET(engine_id, fts3rec_v5)
      FT_OFFSET(src_mask, fts3rec_v5)
      FT_OFFSET(dst_mask, fts3rec_v5)
      FT_OFFSET(src_as, fts3rec_v5)
      FT_OFFSET(dst_as, fts3rec_v5)
      ret = 0;
      break;

    case 6:
      FT_OFFSET(unix_secs, fts3rec_v6)
      FT_OFFSET(unix_nsecs, fts3rec_v6)
      FT_OFFSET(sysUpTime, fts3rec_v6)
      FT_OFFSET(exaddr, fts3rec_v6)
      FT_OFFSET(srcaddr, fts3rec_v6)
      FT_OFFSET(dstaddr, fts3rec_v6)
      FT_OFFSET(nexthop, fts3rec_v6)
      FT_OFFSET(input, fts3rec_v6)
      FT_OFFSET(output, fts3rec_v6)