Initial import.
This commit is contained in:
Arnout Engelen
463
process.cpp
Normal file
463
process.cpp
Normal file
@@ -0,0 +1,463 @@
|
||||
#include <iostream>
|
||||
#include <strings.h>
|
||||
#include <string>
|
||||
#include <ncurses.h>
|
||||
#include <asm/types.h>
|
||||
#include <sys/types.h>
|
||||
#include <sys/socket.h>
|
||||
#include <stdlib.h>
|
||||
#include <pwd.h>
|
||||
#include <sys/types.h>
|
||||
|
||||
#include "process.h"
|
||||
#include "hashtbl.h"
|
||||
#include "nethogs.h"
|
||||
#include "inodeproc.cpp"
|
||||
//#include "inet6.c"
|
||||
|
||||
extern timeval curtime;
|
||||
extern std::string * caption;
|
||||
|
||||
/*struct aftype inet6_aftype =
|
||||
{
|
||||
"inet6", NULL, AF_INET6, sizeof(struct in6_addr),
|
||||
INET6_print, INET6_sprint, INET6_input, INET6_reserror,
|
||||
INET6_rprint, INET6_rinput, NULL,
|
||||
|
||||
-1,
|
||||
"/proc/net/if_inet6"
|
||||
};*/
|
||||
|
||||
|
||||
static int INET6_getsock(char *bufp, struct sockaddr *sap)
|
||||
{
|
||||
struct sockaddr_in6 *sin6;
|
||||
|
||||
sin6 = (struct sockaddr_in6 *) sap;
|
||||
sin6->sin6_family = AF_INET6;
|
||||
sin6->sin6_port = 0;
|
||||
|
||||
if (inet_pton(AF_INET6, bufp, sin6->sin6_addr.s6_addr) <= 0)
|
||||
return (-1);
|
||||
|
||||
return 16; /* ?;) */
|
||||
}
|
||||
|
||||
static int INET6_input(int type, char *bufp, struct sockaddr *sap)
|
||||
{
|
||||
return (INET6_getsock(bufp, sap));
|
||||
}
|
||||
|
||||
struct aftype {
|
||||
char *name;
|
||||
char *title;
|
||||
int af;
|
||||
int alen;
|
||||
char *(*print) (unsigned char *);
|
||||
char *(*sprint) (struct sockaddr *, int numeric);
|
||||
int (*input) (int type, char *bufp, struct sockaddr *);
|
||||
void (*herror) (char *text);
|
||||
int (*rprint) (int options);
|
||||
int (*rinput) (int typ, int ext, char **argv);
|
||||
|
||||
/* may modify src */
|
||||
int (*getmask) (char *src, struct sockaddr * mask, char *name);
|
||||
|
||||
int fd;
|
||||
char *flag_file;
|
||||
};
|
||||
/*
|
||||
* connection-inode table. takes information from /proc/net/tcp.
|
||||
* key contains source ip, source port, destination ip, destination
|
||||
* port in format: '1.2.3.4:5-1.2.3.4:5'
|
||||
*/
|
||||
HashTable * conninode = new HashTable (256);
|
||||
|
||||
// TODO check what happens to the 'content' field of the hash!!
|
||||
void addtoconninode (char * buffer)
|
||||
{
|
||||
char rem_addr[128], local_addr[128];
|
||||
int local_port, rem_port;
|
||||
struct sockaddr_in6 localaddr, remaddr;
|
||||
char addr6[INET6_ADDRSTRLEN];
|
||||
struct in6_addr in6;
|
||||
extern struct aftype inet6_aftype;
|
||||
// the following line leaks memory.
|
||||
unsigned long * inode = (unsigned long *) malloc (sizeof(unsigned long));
|
||||
// TODO check it matched
|
||||
sscanf(buffer, "%*d: %64[0-9A-Fa-f]:%X %64[0-9A-Fa-f]:%X %*X %*lX:%*lX %*X:%*lX %*lX %*d %*d %ld %*512s\n",
|
||||
local_addr, &local_port, rem_addr, &rem_port, inode);
|
||||
|
||||
if (strlen(local_addr) > 8)
|
||||
{
|
||||
/* Demangle what the kernel gives us */
|
||||
sscanf(local_addr, "%08X%08X%08X%08X",
|
||||
&in6.s6_addr32[0], &in6.s6_addr32[1],
|
||||
&in6.s6_addr32[2], &in6.s6_addr32[3]);
|
||||
inet_ntop(AF_INET6, &in6, addr6, sizeof(addr6));
|
||||
INET6_getsock(addr6, (struct sockaddr *) &localaddr);
|
||||
sscanf(rem_addr, "%08X%08X%08X%08X",
|
||||
&in6.s6_addr32[0], &in6.s6_addr32[1],
|
||||
&in6.s6_addr32[2], &in6.s6_addr32[3]);
|
||||
inet_ntop(AF_INET6, &in6, addr6, sizeof(addr6));
|
||||
INET6_getsock(addr6, (struct sockaddr *) &remaddr);
|
||||
localaddr.sin6_family = AF_INET6;
|
||||
remaddr.sin6_family = AF_INET6;
|
||||
}
|
||||
else
|
||||
{
|
||||
sscanf(local_addr, "%X", &((struct sockaddr_in *)&localaddr)->sin_addr.s_addr);
|
||||
sscanf(rem_addr, "%X", &((struct sockaddr_in *)&remaddr)->sin_addr.s_addr);
|
||||
((struct sockaddr *) &localaddr)->sa_family = AF_INET;
|
||||
((struct sockaddr *) &remaddr)->sa_family = AF_INET;
|
||||
}
|
||||
|
||||
char * hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
// also add the reverse.
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
// also add the aliases :S
|
||||
if (strcmp(inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), "172.16.3.1") == 0)
|
||||
{
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", "195.169.216.157", local_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, "195.169.216.157", local_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
}
|
||||
if (strcmp(inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), "172.16.3.1") == 0)
|
||||
{
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, "195.169.216.157", rem_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", "195.169.216.157", rem_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
}
|
||||
if (strcmp(inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), "195.169.216.157") == 0)
|
||||
{
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", "172.16.3.1", local_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), rem_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, "172.16.3.1", local_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
}
|
||||
if (strcmp(inet_ntoa(((struct sockaddr_in *)&remaddr)->sin_addr), "195.169.216.157") == 0)
|
||||
{
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, "172.16.3.1", rem_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
|
||||
hashkey = (char *) malloc (92 * sizeof(char));
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s:%d-", "172.16.3.1", rem_port);
|
||||
snprintf(hashkey, 92 * sizeof(char), "%s%s:%d", hashkey, inet_ntoa(((struct sockaddr_in *)&localaddr)->sin_addr), local_port);
|
||||
conninode->add(hashkey, (void *)inode);
|
||||
}
|
||||
}
|
||||
|
||||
void refreshconninode ()
|
||||
{
|
||||
delete conninode;
|
||||
conninode = new HashTable (256);
|
||||
|
||||
char buffer[8192];
|
||||
FILE * procinfo = fopen ("/proc/net/tcp", "r");
|
||||
if (procinfo)
|
||||
{
|
||||
fgets(buffer, sizeof(buffer), procinfo);
|
||||
do
|
||||
{
|
||||
if (fgets(buffer, sizeof(buffer), procinfo))
|
||||
addtoconninode(buffer);
|
||||
} while (!feof(procinfo));
|
||||
fclose(procinfo);
|
||||
}
|
||||
else
|
||||
{
|
||||
std::cout << "Error: couldn't open /proc/net/tcp\n";
|
||||
exit(0);
|
||||
}
|
||||
|
||||
procinfo = fopen ("/proc/net/tcp6", "r");
|
||||
if (procinfo != NULL) {
|
||||
fgets(buffer, sizeof(buffer), procinfo);
|
||||
do {
|
||||
if (fgets(buffer, sizeof(buffer), procinfo))
|
||||
addtoconninode(buffer);
|
||||
} while (!feof(procinfo));
|
||||
fclose (procinfo);
|
||||
}
|
||||
}
|
||||
|
||||
class ProcList
|
||||
{
|
||||
public:
|
||||
ProcList (Process * m_val, ProcList * m_next)
|
||||
{
|
||||
if (DEBUG)
|
||||
assert (m_val != NULL);
|
||||
val = m_val; next = m_next;
|
||||
}
|
||||
Process * getVal () { return val; }
|
||||
ProcList * getNext () { return next; }
|
||||
ProcList * next;
|
||||
private:
|
||||
Process * val;
|
||||
};
|
||||
|
||||
Process * unknownproc = new Process (0, "unknown");
|
||||
ProcList * processes = new ProcList (unknownproc, NULL);
|
||||
|
||||
float tokbps (bpf_u_int32 bytes)
|
||||
{
|
||||
return (((double)bytes) / PERIOD) / 1024;
|
||||
}
|
||||
|
||||
char * uid2username (int uid)
|
||||
{
|
||||
struct passwd * pwd;
|
||||
/* getpwuid() allocates space for this itself,
|
||||
* which we shouldn't free */
|
||||
pwd = getpwuid(uid);
|
||||
if (pwd == NULL)
|
||||
{
|
||||
return strdup ("unlisted");
|
||||
} else {
|
||||
return strdup(pwd->pw_name);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
class Line
|
||||
{
|
||||
public:
|
||||
Line (const char * name, double n_sent_kbps, double n_recv_kbps, int pid, int uid)
|
||||
{
|
||||
m_name = name;
|
||||
sent_kbps = n_sent_kbps;
|
||||
recv_kbps = n_recv_kbps;
|
||||
m_pid = pid;
|
||||
m_uid = uid;
|
||||
}
|
||||
|
||||
void show (int row)
|
||||
{
|
||||
#if DEBUG
|
||||
std::cout << m_name << "\t" << m_sent_kbps << "\t" << recv_kbps << std::endl;
|
||||
#else
|
||||
mvprintw (3+row, 0, "%d", m_pid);
|
||||
char * username = uid2username(m_uid);
|
||||
mvprintw (3+row, 6, "%s", username);
|
||||
free (username);
|
||||
mvprintw (3+row, 6 + 9, "%s", m_name);
|
||||
mvprintw (3+row, 6 + 9 + PROGNAME_WIDTH + 2, "%10.3f", sent_kbps);
|
||||
mvprintw (3+row, 6 + 9 + PROGNAME_WIDTH + 2 + 9 + 3, "%10.3f", recv_kbps);
|
||||
mvprintw (3+row, 6 + 9 + PROGNAME_WIDTH + 2 + 9 + 3 + 11, "KB/sec", recv_kbps);
|
||||
// TODO fix
|
||||
//if(m_kbps-upload_kbps>upload_kbps)
|
||||
// mvprintw (3+row, 6 + 20 + PROGNAME_WIDTH + 2, "<<<<");
|
||||
// else mvprintw (3+row, 6 + 20 + PROGNAME_WIDTH + 2, ">>>>");
|
||||
|
||||
#endif
|
||||
}
|
||||
|
||||
double sent_kbps;
|
||||
double recv_kbps;
|
||||
private:
|
||||
const char * m_name;
|
||||
int m_pid;
|
||||
int m_uid;
|
||||
};
|
||||
|
||||
int GreatestFirst (const void * ma, const void * mb)
|
||||
{
|
||||
Line ** pa = (Line **)ma;
|
||||
Line ** pb = (Line **)mb;
|
||||
Line * a = *pa;
|
||||
Line * b = *pb;
|
||||
if (a->recv_kbps > b->recv_kbps)
|
||||
{
|
||||
return -1;
|
||||
}
|
||||
if (a->recv_kbps == b->recv_kbps)
|
||||
{
|
||||
return 0;
|
||||
}
|
||||
return 1;
|
||||
}
|
||||
int count_processes()
|
||||
{
|
||||
int i = 0;
|
||||
ProcList * curproc = processes;
|
||||
while (curproc != NULL)
|
||||
{
|
||||
i++; curproc = curproc->getNext();
|
||||
}
|
||||
return i;
|
||||
}
|
||||
|
||||
void do_refresh()
|
||||
{
|
||||
if (!DEBUG)
|
||||
{
|
||||
clear();
|
||||
mvprintw (0, 0, "%s", caption->c_str());
|
||||
attron(A_REVERSE);
|
||||
mvprintw (2, 0, " PID USER PROGRAM SENT RECEIVED ");
|
||||
attroff(A_REVERSE);
|
||||
}
|
||||
else
|
||||
std::cout << "Refreshing:\n";
|
||||
ProcList * curproc = processes;
|
||||
ProcList * lastproc = NULL;
|
||||
int nproc = count_processes();
|
||||
Line * lines [nproc];
|
||||
int n = 0;
|
||||
while (curproc != NULL)
|
||||
{
|
||||
// walk though its connections, summing up
|
||||
// their data, and throwing away old stuff.
|
||||
// if the last packet is older than PROCESSTIMEOUT seconds, discard.
|
||||
if (DEBUG)
|
||||
{
|
||||
assert (curproc != NULL);
|
||||
assert (curproc->getVal() != NULL);
|
||||
}
|
||||
if (curproc->getVal()->getLastPacket() + PROCESSTIMEOUT <= curtime.tv_sec)
|
||||
{
|
||||
if (lastproc)
|
||||
{
|
||||
lastproc->next = curproc->next;
|
||||
ProcList * newcur = curproc->next;
|
||||
delete curproc;
|
||||
curproc = newcur;
|
||||
nproc--;
|
||||
} else {
|
||||
processes = curproc->getNext();
|
||||
delete curproc;
|
||||
curproc = processes;
|
||||
nproc--;
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
bpf_u_int32 sum = 0,
|
||||
sum_local = 0,
|
||||
sum_conn = 0,
|
||||
sum_connLocal = 0;
|
||||
ConnList * curconn = curproc->getVal()->incoming;
|
||||
while (curconn != NULL)
|
||||
{
|
||||
curconn->getVal()->sumanddel(curtime, &sum, &sum_local);
|
||||
sum_connLocal+=sum_local;
|
||||
sum_conn+=sum;
|
||||
curconn = curconn->getNext();
|
||||
}
|
||||
lines[n] = new Line (curproc->getVal()->name, tokbps(sum_conn), tokbps(sum_connLocal), curproc->getVal()->pid, curproc->getVal()->uid);
|
||||
lastproc = curproc;
|
||||
curproc = curproc->next;
|
||||
n++;
|
||||
}
|
||||
}
|
||||
qsort (lines, nproc, sizeof(Line *), GreatestFirst);
|
||||
for (int i=0; i<nproc; i++)
|
||||
{
|
||||
lines[i]->show(i);
|
||||
delete lines[i];
|
||||
}
|
||||
if (!DEBUG)
|
||||
refresh();
|
||||
}
|
||||
|
||||
/* returns the process from proclist with matching pid
|
||||
* if none, creates it */
|
||||
Process * getProcess (unsigned long inode)
|
||||
{
|
||||
struct prg_node * node = prg_cache_get(inode);
|
||||
|
||||
if (node == NULL)
|
||||
{
|
||||
prg_cache_clear();
|
||||
prg_cache_load();
|
||||
node = prg_cache_get(inode);
|
||||
if (node == NULL)
|
||||
return unknownproc;
|
||||
}
|
||||
|
||||
ProcList * current = processes;
|
||||
while (current != NULL)
|
||||
{
|
||||
if (node->pid == current->getVal()->pid)
|
||||
return current->getVal();
|
||||
current = current->next;
|
||||
}
|
||||
|
||||
Process * newproc = new Process (inode);
|
||||
newproc->name = strdup(node->name);
|
||||
newproc->pid = node->pid;
|
||||
|
||||
char procdir [100];
|
||||
sprintf(procdir , "/proc/%d", node->pid);
|
||||
struct stat stats;
|
||||
stat(procdir, &stats);
|
||||
newproc->uid = stats.st_uid;
|
||||
|
||||
processes = new ProcList (newproc, processes);
|
||||
return newproc;
|
||||
}
|
||||
|
||||
Process * getProcess (Connection * connection)
|
||||
{
|
||||
ProcList * curproc = processes;
|
||||
|
||||
// see if we already know the inode for this connection
|
||||
if (DEBUG)
|
||||
std::cout << "Connection reference packet found at " << connection->refpacket << std::endl;
|
||||
unsigned long * inode = (unsigned long *) conninode->get(connection->refpacket->gethashstring());
|
||||
|
||||
if (inode == NULL)
|
||||
{
|
||||
// no? refresh and check conn/inode table
|
||||
#if DEBUG
|
||||
cerr << "Not in table, refreshing it.\n";
|
||||
#endif
|
||||
refreshconninode();
|
||||
inode = (unsigned long *) conninode->get(connection->refpacket->gethashstring());
|
||||
if (inode == NULL)
|
||||
{
|
||||
#if DEBUG
|
||||
//cerr << connection->refpacket->gethashstring() << " STILL not in table - dropping\n";
|
||||
#endif
|
||||
return NULL;
|
||||
}
|
||||
}
|
||||
|
||||
Process * proc = getProcess(*inode);
|
||||
proc->incoming = new ConnList (connection, proc->incoming);
|
||||
return proc;
|
||||
}
|
||||
|
||||
void procclean ()
|
||||
{
|
||||
delete conninode;
|
||||
prg_cache_clear();
|
||||
}
|
||||
Reference in New Issue
Block a user