misc.c

该源码是用C语言编写的,实现网络入侵检测系统的功能

#include <stdio.h>
#include <string.h>
#include <windows.h>
#include <winsock.h>
#include <sys/timeb.h>
#include <time.h>
#include <snort.h>

#undef interface

/****************************************************************************
 *
 * Function: gettimeofday(struct timeval *, struct timezone *)
 *
 * Purpose:  Get current time of day.
 *
 * Arguments: tv => Place to store the curent time of day.
 *            tz => Ignored.
 *
 * Returns: 0 => Success.
 *
 ****************************************************************************/

int gettimeofday(struct timeval *tv, struct timezone *tz) {
    struct _timeb tb;

	if(tv==NULL) return -1;
	_ftime(&tb);
	tv->tv_sec = tb.time;
	tv->tv_usec = ((int) tb.millitm) * 1000;
	return 0;
}

/****************************************************************************
 *
 * Function: GetAdapterFromList(void *,int)
 *
 * Purpose:  Get a specific adapter from the list of adapters on the system.
 *
 * Arguments: device => Device to look for.
 *            index => Adapter number.
 *
 * Returns: Adapter if device was valid.
 *
 * Comments: Shamelessly ripped from WinDump.
 *
 ****************************************************************************/

void *GetAdapterFromList(void *device,int index) {
        DWORD dwVersion;
        DWORD dwWindowsMajorVersion;
        char *Adapter95;
        WCHAR *Adapter;
        int i;

        dwVersion = GetVersion();
        dwWindowsMajorVersion =  (DWORD)(LOBYTE(LOWORD(dwVersion)));
                /* Windows 95. */
        if (dwVersion >= 0x80000000 && dwWindowsMajorVersion >= 4)
        {
                Adapter95 = device;
                for(i = 0;i < index - 1; i++){
                        while(*Adapter95++ != 0);
                        if(*Adapter95 == 0)
							return NULL;
                }
                return  Adapter95;
        }
        else{
				/* NT. */
                Adapter=(WCHAR *)device;
                for(i = 0;i < index - 1; i++){
                        while(*Adapter++ != 0);
                        if(*Adapter == 0)return NULL;
                }
                return  Adapter;
        }

}

/****************************************************************************
 *
 * Function: print_interface(char *)
 *
 * Purpose:  Print the interface number. Platform Independent.
 *
 * Arguments: interface => Name of Interface to print.
 *
 * Returns: Correct character format of Interface for the current platform.
 *
 * Comments: Shamelessly ripped from WinDump.
 *
 ****************************************************************************/

char *print_interface(char *interface){
  int i, j;
  char *device = malloc(128);

  DWORD dwVersion;
  DWORD dwWindowsMajorVersion;

  dwVersion=GetVersion();               /* get the OS version */
  dwWindowsMajorVersion =  (DWORD)(LOBYTE(LOWORD(dwVersion)));
  
  /* Windows 95. */
	if (dwVersion >= 0x80000000 && dwWindowsMajorVersion >= 4){
                for(i=0,j=0;i<128;i++)
                                if (interface[i]=='\0') break;
                                else if (interface[i]!='\0') {
                                        device[j]=interface[i];
                                        j++;
                                        }
                device[j]='\0';
                return(device);

        } else {
		/* Windows NT. */
                for(i=0,j=0;i<128;i++)
                                if (interface[i]=='\0'&& interface[i+1]=='\0') break;
                                else if (interface[i]!='\0') {
                                        device[j]=interface[i];
                                        j++;
                                        }
                device[j++]='\0';
                device[j]='\0';
				return(device);
        }
}

/****************************************************************************
 *
 * Function: PrintDeviceList(const char *)
 *
 * Purpose:  Print all interfaces forund on the system that we can listen on.
 *
 * Arguments: device => List of all devices to listen on.
 *
 * Returns: void function.
 *
 * Comments: Shamelessly ripped from WinDump.
 *
 ****************************************************************************/

void PrintDeviceList(const char *device)
{
        DWORD dwVersion;
        DWORD dwWindowsMajorVersion;
        const WCHAR* t;
        const char* t95;
        int i=0;
        int DescPos=0;
        char *Desc;
        int n=1;

        dwVersion=GetVersion();
        dwWindowsMajorVersion =  (DWORD)(LOBYTE(LOWORD(dwVersion)));
                /* Windows 95. */
        if (dwVersion >= 0x80000000 && dwWindowsMajorVersion >= 4)
        {
                t95=(char*)device;

                while(*(t95+DescPos)!=0 || *(t95+DescPos-1)!=0){
                        DescPos++;
                }

                Desc=(char*)t95+DescPos+1;
                                printf("\nInterface\tDevice\t\tDescription\n-------------------------------------------\n");
                printf("%d  ",n++);

                while (!(t95[i]==0 && t95[i-1]==0))
                {
                        if (t95[i]==0){
                                putchar(' ');
                                putchar('(');
                                while(*Desc!=0){
                                        putchar(*Desc);
                                        Desc++;
                                }
                                Desc++;
                                putchar(')');
                                putchar('\n');
                        }
                        else putchar(t95[i]);

                        if((t95[i]==0) && (t95[i+1]!=0)){
                                printf("%d ",n++);
                        }

                        i++;
                }
                putchar('\n');
        }

        else{
                                /* WinNT. */
                t=(WCHAR*)device;
                while(*(t+DescPos)!=0 || *(t+DescPos-1)!=0){
                        DescPos++;
                }
               DescPos<<=1;
                Desc=(char*)t+DescPos+2;
                                printf("\nInterface\tDevice\t\tDescription\n-------------------------------------------\n");
                printf("%d  ",n++);

                while (!(t[i]==0 && t[i-1]==0))
                {
                        if (t[i]==0)
                        {
                                putchar(' ');
                                putchar('(');
                                while(*Desc!=0){
                                        putchar(*Desc);
                                        Desc++;
                                }
                                Desc++;
                                putchar(')');
                                putchar('\n');
                        }
                        else putchar(t[i]);

                        if(t[i]==0 && t[i+1]!=0)printf("%d ",n++);

                        i++;
                }
                putchar('\n');
        }
}

/****************************************************************************
 *
 * Function: init_winsock(void)
 *
 * Purpose:  Initialize winsock.
 *
 * Arguments: None.
 *
 * Returns: 0 => Initilization failed.
 *          1 => Initilization succeeded.
 *
 ****************************************************************************/

int init_winsock(void) {
  WORD wVersionRequested = MAKEWORD(1, 1);
  WSADATA wsaData;

  if (WSAStartup(wVersionRequested, &wsaData)) {
    FatalError("[!] ERROR: Unable to find a usable Winsock.\n");
    return 0;
  }

  if (LOBYTE(wsaData.wVersion) < 1 || HIBYTE(wsaData.wVersion) < 1) {
    FatalError("[!] ERROR: Unable to find Winsock version 1.1 or greater. You have version %d.%d.\n",
	    LOBYTE(wsaData.wVersion), HIBYTE(wsaData.wVersion));
    WSACleanup();
    return 0;
  }
	
  return 1;
}	

int geteuid(void) {
	return 0;
}