/src/ntopng/include/flow_checks/UnexpectedServer.h
Line | Count | Source |
1 | | /* |
2 | | * |
3 | | * (C) 2013-24 - ntop.org |
4 | | * |
5 | | * |
6 | | * This program is free software; you can redistribute it and/or modify |
7 | | * it under the terms of the GNU General Public License as published by |
8 | | * the Free Software Foundation; either version 3 of the License, or |
9 | | * (at your option) any later version. |
10 | | * |
11 | | * This program is distributed in the hope that it will be useful, |
12 | | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
13 | | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
14 | | * GNU General Public License for more details. |
15 | | * |
16 | | * You should have received a copy of the GNU General Public License |
17 | | * along with this program; if not, write to the Free Software Foundation, |
18 | | * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. |
19 | | * |
20 | | */ |
21 | | |
22 | | #ifndef _UNEXPECTED_HOST_H_ |
23 | | #define _UNEXPECTED_HOST_H_ |
24 | | |
25 | | #include "ntop_includes.h" |
26 | | |
27 | | class UnexpectedServer : public FlowCheck { |
28 | | private: |
29 | | ndpi_ptree_t *whitelist_ptree; |
30 | | void *whitelist_automa; |
31 | | |
32 | | virtual FlowAlertType getAlertType() const = 0; |
33 | | |
34 | | protected: |
35 | 0 | virtual bool isAllowedHost(Flow *f) { return (false); } |
36 | | |
37 | 0 | virtual bool isAllowedProto(Flow *f) { return (false); } |
38 | 0 | virtual const IpAddress *getServerIP(Flow *f) { |
39 | 0 | return (f->get_srv_ip_addr()); |
40 | 0 | } |
41 | | |
42 | | public: |
43 | | UnexpectedServer() |
44 | 0 | : FlowCheck(ntopng_edition_community, false /* All interfaces */, |
45 | 0 | false /* Don't exclude for nEdge */, |
46 | 0 | false /* NOT only for nEdge */, |
47 | 0 | true /* has_protocol_detected */, |
48 | 0 | false /* has_periodic_update */, false /* has_flow_end */) { |
49 | 0 | whitelist_automa = NULL; |
50 | 0 | if ((whitelist_ptree = ndpi_ptree_create()) == NULL) throw "Out of memory"; |
51 | 0 | }; |
52 | | |
53 | 0 | ~UnexpectedServer() { |
54 | 0 | if (whitelist_ptree) ndpi_ptree_destroy(whitelist_ptree); |
55 | 0 | if (whitelist_automa) ndpi_free_automa(whitelist_automa); |
56 | 0 | }; |
57 | | |
58 | | void protocolDetected(Flow *f); |
59 | 0 | bool loadConfiguration(json_object *config) { return (true); } |
60 | | }; |
61 | | |
62 | | #endif /* _UNEXPECTED_HOST_H_ */ |