rule.h

Linux下面截获以态网数据包！是在内核态下面运行的驱动程序

#ifndef	_HUNTER_RULE_H_
#define _HUNTER_RULE_H_

typedef struct _RULE
{
	struct _RULE	*pNext;
	UINT		ruleID;
	UINT		sip;			//源ip
	UINT		protocolType;	//协议类型
	UINT		ruleType;		//规则类型
	USHORT		keyLen;
	UINT		iKey;			//数字型规则
	char		key[ 0 ];		//字符串型规则
}RULE,*PRULE;

#define	RULE_RULETYPE_BLACKLIST	0X00000000
#define	RULE_RULETYPE_WHITELIST	0X80000000

#define	RULE_PROTOCOL_IP		0X00000001
#define	RULE_PROTOCOL_QQ		0X00000002
#define	RULE_PROTOCOL_MSN		0X00000004
#define	RULE_PROTOCOL_ICQ		0X00000008
#define	RULE_PROTOCOL_YAHOO		0X00000010
#define	RULE_PROTOCOL_MAIL		0X00000020
#define	RULE_PROTOCOL_IRC		0X00000040
#define	RULE_PROTOCOL_AOL		0X00000080
#define RULE_PROTOCOL_PP		0X00000100
#define	RULE_PROTOCOL_GTALK		0X00000200
#define	RULE_PROTOCOL_POST		0X00000400

typedef struct _RULE_HASH_HEAD
{
	RULE				*pRule;
	struct semaphore	fastMutex;
}RULE_HASH_HEAD, *PRULE_HASH_HEAD;

#define MAIL_HASH_LEN		199
#define	MSN_HASH_LEN		199
#define	QQ_HASH_LEN			199
#define	ICQ_HASH_LEN		199
#define	YAHOO_HASH_LEN		199
#define IRC_HASH_LEN		199
#define	AOL_HASH_LEN		199
#define	PP_HASH_LEN			199
#define GTALK_HASH_LEN		199

#include "list.h"
#include "DomainIPHash.h"

typedef struct _RULE_HASH
{
	RULE_HASH_HEAD	mail[MAIL_HASH_LEN];
	RULE_HASH_HEAD	msn[MSN_HASH_LEN];
	RULE_HASH_HEAD	qq[QQ_HASH_LEN];
	RULE_HASH_HEAD	icq[ICQ_HASH_LEN];
	RULE_HASH_HEAD	yahoo[YAHOO_HASH_LEN];
	RULE_HASH_HEAD	irc[IRC_HASH_LEN];
	RULE_HASH_HEAD	aol[AOL_HASH_LEN];
	RULE_HASH_HEAD	pp[PP_HASH_LEN];
	RULE_HASH_HEAD	gtalk[GTALK_HASH_LEN];	

}RULE_HASH, *PRULE_HASH;

#endif//_HUNTER_RULE_H_