/*

 *

 * (C) 2013-26 - ntop.org

 *

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 3 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software Foundation,

 * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

 *

 */

#ifndef _PREFS_H_

#define _PREFS_H_

#include "ntop_includes.h"

class Ntop;

class Flow;

extern void usage();

extern void nDPIusage();

typedef struct {

  char *name, *alias, *description;

  int id;

} InterfaceInfo;

typedef std::set<std::string> InterfacesSet;

class Prefs {

 private:

  u_int8_t num_deferred_interfaces_to_register;

  pcap_direction_t captureDirection;

  char **deferred_interfaces_to_register, *cli, *ciphers_list,

      *custom_geoip_dir;

  char *http_binding_address1, *http_binding_address2;

  char *https_binding_address1, *https_binding_address2;

  char* http_index_page;

  char* influx_internal_db_name;

  bool influx_internal_available;

  bool enable_client_x509_auth, reproduce_at_original_speed, disable_purge,

      strict_startup;

  char *zmq_publish_events_url, *http_log_path;

  const char *clickhouse_client, *clickhouse_cluster_name;

  Ntop* ntop;

  bool enable_dns_resolution, sniff_dns_responses, sniff_name_responses,

      sniff_local_name_responses, pcap_file_purge_hosts_flows,

      categorization_enabled, resolve_all_host_ip, change_user, daemonize,

      enable_auto_logout, enable_auto_logout_at_runtime, use_promiscuous_mode,

      enable_ixia_timestamps, full_stats_enabled, enable_interface_name_only,

      enable_users_login, disable_localhost_login, service_license_check,

      enable_sql_log, enable_access_log, enable_assets_log, log_to_file,

      enable_mac_ndpi_stats, enable_activities_debug, enable_behaviour_analysis,

      enable_asn_behaviour_analysis, enable_network_behaviour_analysis,

      enable_iface_l7_behaviour_analysis, emit_flow_alerts, emit_host_alerts,

      dump_flows_on_clickhouse, readonly_flows_dump, 

      do_reforge_timestamps, add_vlan_tags_to_cloud_exporters,

      collect_blacklist_stats, fail_on_invalid_license, limited_resources_mode,

      fingerprint_stats, tls_quic_hostnaming;

#ifndef HAVE_NEDGE

  bool use_mac_in_flow_key;

#endif

  u_int32_t behaviour_analysis_learning_period;

  u_int32_t iec60870_learning_period, modbus_learning_period,

      s7comm_learning_period, devices_learning_period,

      mac_address_cache_duration;

  u_int32_t host_port_learning_period;

  bool enable_flow_swap_heuristic;

  bool skip_dpi_for_collected_flows;

#ifdef NTOPNG_PRO

  ndpi_bitmap* modbus_allowed_function_codes;

  u_int modbus_too_many_exceptions;

  ndpi_bitmap* s7comm_allowed_function_codes;

  u_int s7comm_too_many_errors;

  u_int profinet_too_many_errors;

  bool data_archive_before_ttl_delete, asset_inventory_enabled,

      snmp_trap_enabled;

#endif

  ServiceAcceptance behaviour_analysis_learning_status_during_learning,

      behaviour_analysis_learning_status_post_learning;

  TsDriver timeseries_driver;

  u_int64_t iec104_allowed_typeids[2];

  u_int32_t auth_session_duration;

  bool auth_session_midnight_expiration;

  u_int32_t non_local_host_max_idle, local_host_cache_duration,

      local_host_max_idle, pkt_ifaces_flow_max_idle;

  u_int32_t active_local_hosts_cache_interval;

  u_int32_t intf_rrd_raw_days, intf_rrd_1min_days, intf_rrd_1h_days,

      intf_rrd_1d_days;

  u_int32_t other_rrd_raw_days, other_rrd_1min_days, other_rrd_1h_days,

      other_rrd_1d_days;

  u_int32_t housekeeping_frequency;

  bool disable_alerts, enable_top_talkers, enable_sites_collection,

      enable_active_local_hosts_cache, enable_dns_cache, split_ts_direction;

  bool enable_flow_device_port_rrd_creation,

      enable_observation_points_rrd_creation,

      enable_intranet_traffic_rrd_creation;

  bool enable_tiny_flows_export;

  bool enable_captive_portal, enable_informative_captive_portal,

      mac_based_captive_portal, enable_external_auth_captive_portal;

  bool override_dst_with_post_nat_dst, override_src_with_post_nat_src;

  bool routing_mode_enabled, global_dns_forging_enabled;

  bool device_protocol_policies_enabled, enable_vlan_trunk_bridge;

  bool enable_arp_matrix_generation;

  bool enable_zmq_encryption;

  bool disable_zmq_encryption;

  bool flow_table_time, flow_table_probe_order;

  bool enable_broadcast_domain_too_large;

  u_int32_t max_num_secs_before_delete_alert, alert_page_refresh_rate;

  int32_t max_entity_alerts;

  u_int32_t safe_search_dns_ip, global_primary_dns_ip, global_secondary_dns_ip;

  u_int32_t max_num_packets_per_tiny_flow, max_num_bytes_per_tiny_flow,

      dump_frequency;

  u_int32_t max_extracted_pcap_bytes, max_extracted_pcap_files;

  u_int32_t max_ui_strlen;

  u_int8_t default_l7policy;

  HostMask hostMask;

  u_int32_t max_num_hosts, max_num_flows;

  u_int32_t attacker_max_num_flows_per_sec, victim_max_num_flows_per_sec;

  u_int32_t attacker_max_num_syn_per_sec, victim_max_num_syn_per_sec;

  u_int8_t ewma_alpha_percent;

  u_int http_port, https_port;

  u_int8_t num_interfaces;

  u_int16_t auto_assigned_pool_id;

  u_int8_t vs_max_num_scans;

  bool vs_slow_scan;

  bool dump_flows_on_es, dump_flows_on_syslog, dump_json_flows_on_disk,

      dump_ext_json;

  bool asn_mode_enabled;

#ifdef NTOPNG_PRO

  bool dump_flows_direct;

  u_int32_t dump_queue_len, dump_queue_block_size;

  u_int32_t max_aggregated_flows_upperbound,

      max_aggregated_flows_traffic_upperbound;

#endif

  bool enable_runtime_flows_dump; /**< runtime preference to enable/disable

                                     flows dump from the UI */

  InterfaceInfo* ifNames;

  char* local_networks;

  bool local_networks_set, shutdown_when_done, simulate_vlans, simulate_macs,

      ignore_vlans, ignore_macs;

  bool insecure_tls; /**< Unsecure TLS connections a-la curl */

  u_int32_t num_simulated_ips;

  u_int16_t custom_if_mtu;

  char *data_dir, *install_dir, *docs_dir, *scripts_dir, *callbacks_dir,

      *pcap_dir, *clickhouse_archive_dir

#ifdef NTOPNG_PRO

      ,

      *pro_callbacks_dir

#endif

      ;

#if defined(HAVE_KAFKA) && defined(NTOPNG_PRO)

  char *kafka_brokers_list, *kafka_topic, *kafka_options;

#endif

  char* categorization_key;

  char* zmq_encryption_pwd;

  char* zmq_encryption_priv_key;

  char* http_prefix;

  char* instance_name;

  char *config_file_path, *ndpi_proto_path;

  char* packet_filter;

  char* user;

  bool user_set;

  char* redis_host;

  char* redis_password;

  char* redis_tls_ca_cert;

  char* redis_tls_cert;

  char* redis_tls_key;

  bool redis_tls_skip_verify;

  char* pid_path;

  char *cpu_affinity, *other_cpu_affinity;

#ifdef __linux__

  cpu_set_t other_cpu_affinity_mask;

#endif

  u_int8_t redis_db_id;

  int redis_port;

  int dns_mode;

  bool json_labels_string_format;

  char *es_type, *es_index, *es_url, *es_user, *es_pwd, *es_host;

  char* clickhouse_host;

  char* clickhouse_dbname;

  char* clickhouse_user;

  char* clickhouse_pw;

  char* clickhouse_ro_user;

  char* clickhouse_ro_pw;

  char* clickhouse_server_cn;

  char* clickhouse_client_cert;

  char* clickhouse_client_key;

#if defined(HAVE_CLICKHOUSE) && defined(NTOPNG_PRO)

  char* clickhouse_cluster_user; /* In case of ch cloud, 2 users are needed,

                    one for mysql and one for ch */

  bool ntopng_assets_inventory_enabled;

#endif

#if !defined(WIN32) && !defined(__APPLE__)

  int flows_syslog_facility;

#endif

  int clickhouse_tcp_port;

  bool clickhouse_tcp_port_secure;

  char *ls_host, *ls_port, *ls_proto;

  bool has_cmdl_trace_lvl; /**< Indicate whether a verbose level

                              has been provided on the command line.*/

#ifndef HAVE_NEDGE

  bool appliance;

#endif

  ServerConfiguration *gateway, *dns_servers, *ntp_servers, *smtp_servers,

      *dhcp_servers;

  ASNConfiguration *customer_asn, *sub_customer_asn, *remote_asn;

#ifdef NTOPNG_PRO

  AddressTree* networks_policy_configuration;

  AddressTree* networks_policy_configuration_shadow;

#endif

#ifdef HAVE_PF_RING

  int pfring_cluster_id;

#endif

  char* test_pre_script_path;

  char* test_runtime_script_path;

  char* test_post_script_path;

  char *message_broker_url, *message_broker;

  bool message_broker_enabled;

#ifdef NTOPNG_PRO

  bool print_maintenance, print_license;

  char* lic_mgr_config_file;

#endif

  bool print_version, print_version_json;

  bool snmp_polling;

  bool active_monitoring, network_discovery, starttls;

  bool use_host_pools_for_local;

  bool dump_pcap_to_clickhouse; /* Dump pcap-interface flows to ClickHouse */

  bool query_performance_log;

  u_int32_t ch_ts_queue_size; /* ClickHouse timeseries export queue size */

  InterfacesSet lan_interfaces, wan_interfaces;

  inline void help() { usage(); }

  inline void nDPIhelp() { nDPIusage(); }

  void setCommandLineString(int optkey, const char* optarg);

  int setOption(int optkey, char* optarg);

  int checkOptions();

  void setTraceLevelFromRedis();

  void parseHTTPPort(char* arg);

  char* parseLocalNetworks(char* arg);

  static inline void set_binding_address(char** const dest, const char* addr) {

    if (dest && addr && addr[0] != '\0') {

      if (*dest) free(*dest);

      *dest = strdup(addr);

    }

  };

  bool getDefaultBoolPrefsValue(const char* pref_key, const bool default_value);

  void refreshBehaviourAnalysis();

 public:

  Prefs(Ntop* _ntop);

  virtual ~Prefs();

  inline char* get_local_networks() {

    if (!local_networks_set) return NULL;

    return (local_networks);

  };

  inline void disable_dns_resolution() { enable_dns_resolution = false; };

  inline void resolve_all_hosts() { resolve_all_host_ip = true; };

  inline bool is_dns_resolution_enabled_for_all_hosts() {

    return (resolve_all_host_ip);

  };

  inline bool is_dns_resolution_enabled() { return (enable_dns_resolution); };

  inline bool is_users_login_enabled() { return (enable_users_login); };

  inline bool is_localhost_users_login_disabled() {

    return (disable_localhost_login);

  };

  inline bool is_log_to_file_enabled() { return (log_to_file); };

  inline void disable_dns_responses_decoding() { sniff_dns_responses = false; };

  inline void disable_localhost_name_decoding() {

    sniff_local_name_responses = false;

  };

  inline void disable_all_name_decoding() { sniff_name_responses = false; };

  inline bool is_dns_decoding_enabled() /* DNS only */ {

    return (sniff_dns_responses);

  };

  inline bool is_name_decoding_enabled() /* Any */ {

    return (sniff_name_responses);

  };

  inline bool is_localhost_name_decoding_enabled() {

    return (sniff_local_name_responses);

  };

  inline void enable_categorization() { categorization_enabled = true; };

  inline bool is_categorization_enabled() { return (categorization_enabled); };

  inline bool do_change_user() { return (change_user); };

  inline void dont_change_user() { change_user = false; };

  inline bool is_sql_log_enabled() { return (enable_sql_log); };

  inline bool is_access_log_enabled() { return (enable_access_log); };

  inline void do_enable_access_log(bool state = true) {

    enable_access_log = state;

  };

  inline bool is_assets_log_enabled() { return (enable_assets_log); };

  inline void do_enable_assets_log(bool state = true) {

    enable_assets_log = state;

  };

  inline bool are_ixia_timestamps_enabled() {

    return (enable_ixia_timestamps);

  };

  inline char* get_user() { return (user); };

  inline void set_user(const char* u) {

    if (user) free(user);

    user = strdup(u);

    user_set = true;

  };

  inline bool is_user_set() { return user_set; };

  inline u_int32_t get_num_simulated_ips() const {

    return (num_simulated_ips);

  };

  inline u_int16_t get_custom_if_mtu() const { return (custom_if_mtu); };

  inline u_int8_t get_num_user_specified_interfaces() {

    return (num_interfaces);

  };

  inline bool do_dump_flows_on_es() { return (dump_flows_on_es); };

  bool do_dump_flows_on_clickhouse();

  inline bool do_dump_alerts_on_clickhouse() {

    return (do_dump_flows_on_clickhouse());

  };

  inline bool do_dump_flows_on_syslog() { return (dump_flows_on_syslog); };

#if defined(HAVE_KAFKA) && defined(NTOPNG_PRO)

  inline bool do_dump_flows_on_kafka() {

    return ((kafka_brokers_list && kafka_topic) ? true : false);

  };

#endif

  inline bool do_dump_extended_json() { return (dump_ext_json); };

  inline bool do_dump_json_flows_on_disk() {

    return (dump_json_flows_on_disk);

  };

  inline bool do_dump_flows() {

    return (do_dump_flows_on_es() || do_dump_flows_on_clickhouse() ||

            do_dump_flows_on_syslog()

#if defined(HAVE_KAFKA) && defined(NTOPNG_PRO)

            || do_dump_flows_on_kafka()

#endif

    );

  };

#ifdef NTOPNG_PRO

  inline u_int32_t get_dump_queue_len() { return dump_queue_len; };

  inline u_int32_t get_dump_queue_block_size() {

    return dump_queue_block_size;

  };

  inline void toggle_dump_flows_direct(bool enable) {

    dump_flows_direct = enable;

  };

  inline bool do_dump_flows_direct() { return (dump_flows_direct); };

#endif

  inline bool is_runtime_flows_dump_enabled() const {

    return (enable_runtime_flows_dump);

  };

  inline bool is_readonly_flows_dump() { return (readonly_flows_dump); };

  inline bool is_flows_dump_enabled() {

    return (do_dump_flows() && is_runtime_flows_dump_enabled() &&

            !readonly_flows_dump);

  };

  int32_t getDefaultPrefsValue(const char* pref_key, int32_t default_value);

  void getDefaultStringPrefsValue(const char* pref_key, char** buffer,

                                  const char* default_value);

  char* get_if_name(int id);

  char* get_if_alias(int id);

  char* get_if_descr(int id);

  inline const char* get_config_file_path() { return (config_file_path); };

  inline const char* get_ndpi_proto_file_path() { return (ndpi_proto_path); };

  void set_data_dir(char* path) { data_dir = path; }

  inline char* get_data_dir() { return (data_dir); };

  inline char* get_docs_dir() { return (docs_dir); };  // HTTP docs

  inline const char* get_scripts_dir() { return (scripts_dir); };

  inline const char* get_callbacks_dir() { return (callbacks_dir); };

  inline char* get_influx_internal_db_name() {

    return (influx_internal_db_name);

  };

  void set_influx_internal_db_name(char* internal_name);

  inline bool get_influx_internal_available() {

    return (influx_internal_available);

  };

  inline void set_influx_internal_available(bool available) {

    influx_internal_available = available;

  };

  void set_callback_dir(char* path) { callbacks_dir = path; };

  inline const char* get_pcap_dir() { return (pcap_dir); };

  inline const char* get_clickhouse_archive_dir() {

    return (clickhouse_archive_dir);

  };

#ifdef NTOPNG_PRO

  inline const char* get_pro_callbacks_dir() { return (pro_callbacks_dir); };

#endif

  inline const char* get_test_pre_script_path() {

    return (test_pre_script_path);

  };

  inline const char* get_test_runtime_script_path() {

    return (test_runtime_script_path);

  };

  inline const char* get_test_post_script_path() {

    return (test_post_script_path);

  };

  inline const char* get_message_broker_url() { return (message_broker_url); };

  inline const char* get_message_broker() { return (message_broker); };

  inline bool is_message_broker_enabled() { return (message_broker_enabled); };

  inline char* get_categorization_key() { return (categorization_key); };

  inline char* get_http_prefix() { return (http_prefix); };

  inline char* get_instance_name() { return (instance_name); };

  inline bool do_auto_logout() { return (enable_auto_logout); };

  inline bool do_auto_logout_at_runtime() {

    return (enable_auto_logout_at_runtime);

  };

  inline bool interface_name_only() { return (enable_interface_name_only); };

  inline bool do_ignore_vlans() { return (ignore_vlans); };

  inline bool do_ignore_macs() { return (ignore_macs); };

  inline bool do_simulate_vlans() { return (simulate_vlans); };

  inline bool do_simulate_macs() { return (simulate_macs); };

  inline bool do_insecure_tls() { return (insecure_tls); };

  inline bool do_snmp_polling() { return (snmp_polling); };

  bool do_active_monitoring();

  inline bool get_active_monitoring_pref() { return (active_monitoring); };

  inline bool do_tls_quic_hostnaming() { return (tls_quic_hostnaming); };

  inline bool email_starttls_enabled() { return (starttls); };

  inline bool dump_pcap_to_clickhouse_enabled() {

    return (dump_pcap_to_clickhouse);

  };

  inline u_int32_t get_ch_ts_queue_size() { return (ch_ts_queue_size); };

  inline bool query_performance_log_enabled() {

    return (query_performance_log);

  };

  inline char* get_cpu_affinity() { return (cpu_affinity); };

  inline char* get_other_cpu_affinity() { return (other_cpu_affinity); };

#ifdef __linux__

  inline cpu_set_t* get_other_cpu_affinity_mask() {

    return (&other_cpu_affinity_mask);

  };

#endif

  inline u_int get_http_port() { return (http_port); };

  inline u_int get_https_port() { return (https_port); };

  inline bool is_client_x509_auth_enabled() {

    return (enable_client_x509_auth);

  };

  inline char* get_redis_host() { return (redis_host); }

  inline char* get_redis_password() { return (redis_password); }

  inline char* get_redis_tls_ca_cert() { return (redis_tls_ca_cert); }

  inline char* get_redis_tls_cert() { return (redis_tls_cert); }

  inline char* get_redis_tls_key() { return (redis_tls_key); }

  inline bool get_redis_tls_skip_verify() { return (redis_tls_skip_verify); }

  inline u_int get_redis_port() { return (redis_port); };

  inline u_int get_redis_db_id() { return (redis_db_id); };

  inline char* get_pid_path() { return (pid_path); };

  inline char* get_packet_filter() { return (packet_filter); };

  inline u_int32_t get_max_num_hosts() { return (max_num_hosts); };

  inline u_int32_t get_max_num_flows() { return (max_num_flows); };

  inline bool daemonize_ntopng() { return (daemonize); };

  inline u_int32_t get_attacker_max_num_flows_per_sec() {

    return (attacker_max_num_flows_per_sec);

  };

  inline u_int32_t get_victim_max_num_flows_per_sec() {

    return (victim_max_num_flows_per_sec);

  };

  inline u_int32_t get_attacker_max_num_syn_per_sec() {

    return (attacker_max_num_syn_per_sec);

  };

  inline u_int32_t get_victim_max_num_syn_per_sec() {

    return (victim_max_num_syn_per_sec);

  };

  inline u_int8_t get_ewma_alpha_percent() { return (ewma_alpha_percent); };

  void add_default_interfaces();

  int loadFromCLI(int argc, char* argv[]);

  int loadFromFile(const char* path);

  void checkPorts();

  void add_network_interface(char* name, char* description);

  inline bool json_labels_as_strings() { return (json_labels_string_format); };

  inline void set_json_symbolic_labels_format(bool as_string) {

    json_labels_string_format = as_string;

  };

  void set_routing_mode(bool enabled);

  virtual void lua(lua_State* vm);

  void reloadPrefsFromRedis();

  void loadInstanceNameDefaults();

  void resetDeferredInterfacesToRegister();

  bool addDeferredInterfaceToRegister(const char* ifname);

  void registerNetworkInterfaces();

  void refreshHostsAlertsPrefs();

  void refreshDeviceProtocolsPolicyPref();

  /* Runtime database dump prefs. Allows the user to toggle flows dump from the

   * UI at runtime. */

  void refreshDbDumpPrefs();

  void bind_http_to_address(const char* addr1, const char* addr2);

  void bind_https_to_address(const char* addr1, const char* addr2);

  void bind_http_to_loopback() {

    bind_http_to_address((char*)CONST_LOOPBACK_ADDRESS,

                         (char*)CONST_LOOPBACK_ADDRESS);

  };

  inline void bind_https_to_loopback() {

    bind_https_to_address((char*)CONST_LOOPBACK_ADDRESS,

                          (char*)CONST_LOOPBACK_ADDRESS);

  };

  inline void get_http_binding_addresses(const char** addr1,

                                         const char** addr2) {

    *addr1 = http_binding_address1;

    *addr2 = http_binding_address2;

  };

  inline void get_https_binding_addresses(const char** addr1,

                                          const char** addr2) {

    *addr1 = https_binding_address1;

    *addr2 = https_binding_address2;

  };

  inline bool checkServiceLicense() { return (service_license_check); };

  inline void disableServiceLicense() { service_license_check = false; };

  inline char* get_es_type() { return (es_type); };

  inline char* get_es_index() { return (es_index); };

  inline char* get_es_url() { return (es_url); };

  inline char* get_es_user() { return (es_user); };

  inline char* get_es_pwd() { return (es_pwd); };

  const inline char* get_es_host() { return (es_host); };

  inline bool shutdownWhenDone() { return (shutdown_when_done); }

  inline void set_promiscuous_mode(bool mode) { use_promiscuous_mode = mode; };

  inline bool use_promiscuous() { return (use_promiscuous_mode); };

  inline char* get_clickhouse_host() { return (clickhouse_host); };

  inline int get_clickhouse_tcp_port() { return (clickhouse_tcp_port); };

  inline bool is_clickhouse_tcp_port_secure() {

    return (clickhouse_tcp_port_secure);

  };

  inline char* get_clickhouse_dbname() { return (clickhouse_dbname); };

  inline char* get_clickhouse_user() { return (clickhouse_user); };

#if defined(HAVE_CLICKHOUSE) && defined(NTOPNG_PRO)

  /* If this is not NULL, it means that the user is using CH Cloud */

  inline char* get_clickhouse_cluster_user() {

    return (clickhouse_cluster_user);

  };

#endif

  inline char* get_clickhouse_pw() { return (clickhouse_pw); };

  inline char* get_clickhouse_ro_user() { return (clickhouse_ro_user); };

  inline char* get_clickhouse_ro_pw() { return (clickhouse_ro_pw); };

  inline char* get_clickhouse_server_cn() { return (clickhouse_server_cn); };

  inline char* get_clickhouse_client_cert() { return (clickhouse_client_cert); };

  inline char* get_clickhouse_client_key() { return (clickhouse_client_key); };

#if !defined(WIN32) && !defined(__APPLE__)

  inline int get_flows_syslog_facility() { return (flows_syslog_facility); };

#endif

  inline char* get_ls_host() { return (ls_host); };

  inline char* get_ls_port() { return (ls_port); };

  inline char* get_ls_proto() { return (ls_proto); };

  inline char* get_zmq_encryption_pwd() { return (zmq_encryption_pwd); };

  inline char* get_zmq_encryption_priv_key() {

    return (zmq_encryption_priv_key);

  };

  inline bool is_zmq_encryption_enabled() { return (enable_zmq_encryption); };

  inline bool is_zmq_encryption_disabled() {

    return (disable_zmq_encryption);

  };

  inline char* get_command_line() { return (cli ? cli : (char*)""); };

  inline void add_lan_interface(char* iface) { lan_interfaces.insert(iface); };

  inline void add_wan_interface(char* iface) { wan_interfaces.insert(iface); };

  inline bool is_lan_interface(char* iface) {

    return lan_interfaces.find(iface) != lan_interfaces.end();

  }

  inline bool is_wan_interface(char* iface) {

    return wan_interfaces.find(iface) != wan_interfaces.end();

  }

  inline int get_num_lan_interfaces() { return lan_interfaces.size(); }

  inline int get_num_wan_interfaces() { return wan_interfaces.size(); }

  inline InterfacesSet* get_lan_interfaces() { return &lan_interfaces; }

  inline InterfacesSet* get_wan_interfaces() { return &wan_interfaces; }

  inline bool areMacNdpiStatsEnabled() { return (enable_mac_ndpi_stats); };

  inline pcap_direction_t getCaptureDirection() { return (captureDirection); };

  inline void setCaptureDirection(pcap_direction_t dir) {

    captureDirection = dir;

  };

#ifdef HAVE_PF_RING

  inline bool hasPF_RINGClusterID() { return pfring_cluster_id >= 0; };

  inline int getPF_RINGClusterID() { return pfring_cluster_id; };

#endif

  inline bool hasCmdlTraceLevel() { return has_cmdl_trace_lvl; };

  inline u_int32_t get_auth_session_duration() {

    return (auth_session_duration);

  };

  inline bool get_auth_session_midnight_expiration() {

    return (auth_session_midnight_expiration);

  };

  inline u_int32_t get_housekeeping_frequency() {

    return (housekeeping_frequency);

  };

  inline u_int32_t get_host_max_idle(bool localHost) const {

    return (localHost ? local_host_max_idle : non_local_host_max_idle);

  };

  /* Maximum idleness for hosts with alerts engaged, that is, with ongoing

   * issues. */

  inline u_int32_t get_alerted_host_max_idle() const {

    return (local_host_max_idle); /* Treat all hosts as local */

  };

  inline u_int32_t get_local_host_cache_duration() {

    return (local_host_cache_duration);

  };

  inline u_int32_t get_pkt_ifaces_flow_max_idle() {

    return (pkt_ifaces_flow_max_idle);

  };

  inline char* getHttpIndexPage() { return http_index_page; };

  inline bool isASNModeEnabled() { return asn_mode_enabled; };

  inline bool are_top_talkers_enabled() { return (enable_top_talkers); };

  inline bool are_sites_collection_enabled() {

    return (enable_sites_collection);

  };

  inline bool is_dns_cache_enabled() { return (enable_dns_cache); };

  inline bool flow_table_duration_or_last_seen() { return (flow_table_time); };

  inline bool is_active_local_host_cache_enabled() {

    return (enable_active_local_hosts_cache);

  };

  inline bool is_tiny_flows_export_enabled() {

    return (enable_tiny_flows_export);

  };

  inline bool is_flow_device_port_rrd_creation_enabled() {

    return (enable_flow_device_port_rrd_creation);

  };

  inline bool is_observation_points_rrd_creation_enabled() {

    return (enable_observation_points_rrd_creation);

  };

  inline char* get_http_log_path() { return (http_log_path); };

  inline bool is_intranet_traffic_rrd_creation_enabled() {

    return (enable_intranet_traffic_rrd_creation);

  };

  inline bool is_arp_matrix_generation_enabled() {

    return (enable_arp_matrix_generation);

  };

  inline bool do_override_dst_with_post_nat_dst() const {

    return (override_dst_with_post_nat_dst);

  };

  inline bool do_override_src_with_post_nat_src() const {

    return (override_src_with_post_nat_src);

  };

  inline bool are_device_protocol_policies_enabled() const {

    return (device_protocol_policies_enabled);

  };

  inline bool isVLANTrunkModeEnabled() const {

    return (enable_vlan_trunk_bridge);

  }

  inline bool isCaptivePortalEnabled() const {

    return (enable_captive_portal && !enable_vlan_trunk_bridge);

  }

  inline bool enableActivitiesDebug() const {

    return (enable_activities_debug);

  }

#ifdef HAVE_NEDGE

  bool isInformativeCaptivePortalEnabled() const;

  bool isExternalAuthCaptivePortalEnabled() const;

  const char* getCaptivePortalUrl();

  inline bool isMacBasedCaptivePortal() const {

    return (mac_based_captive_portal);

  }

#endif

  const TsDriver getTimeseriesDriver() const { return (timeseries_driver); }

  inline u_int8_t getDefaultl7Policy() { return (default_l7policy); }

  inline u_int32_t get_dump_frequency() const { return (dump_frequency); };

  inline u_int32_t get_max_num_packets_per_tiny_flow() const {

    return (max_num_packets_per_tiny_flow);

  };

  inline u_int32_t get_max_num_bytes_per_tiny_flow() const {

    return (max_num_bytes_per_tiny_flow);

  };

  inline u_int64_t get_max_extracted_pcap_bytes() {

    return max_extracted_pcap_bytes;

  };

  inline u_int64_t get_max_extracted_pcap_files() {

    return max_extracted_pcap_files;

  };

  inline u_int32_t get_safe_search_dns_ip() { return (safe_search_dns_ip); };

  inline u_int32_t get_global_primary_dns_ip() {

    return (global_primary_dns_ip);

  };

  inline u_int32_t get_global_secondary_dns_ip() {

    return (global_secondary_dns_ip);

  };

  inline bool isGlobalDNSDefined() {

    return (global_primary_dns_ip ? true : false);

  };

  inline HostMask getHostMask() { return (hostMask); };

  inline u_int16_t get_auto_assigned_pool_id() {

    return (auto_assigned_pool_id);

  };

  inline u_int16_t is_routing_mode() { return (routing_mode_enabled); };

#ifndef HAVE_NEDGE

  inline bool is_appliance() { return (appliance); };

#endif

  inline bool isGlobalDnsForgingEnabled() {

    return (global_dns_forging_enabled);

  };

  inline bool reproduceOriginalSpeed() {

    return (reproduce_at_original_speed);

  };

  inline void doReproduceOriginalSpeed() {

    reproduce_at_original_speed = true;

  };

  inline bool purgeHostsFlowsOnPcapFiles() {

    return (pcap_file_purge_hosts_flows /* || dump_flows_on_clickhouse */);

  };

  inline bool disablePurge() { return (disable_purge); };

  inline bool isStrictStartup() { return (strict_startup); };

  inline void enableBehaviourAnalysis() { enable_behaviour_analysis = true; };

  inline bool isBehavourAnalysisEnabled() {

    return (enable_behaviour_analysis);

  };

  inline u_int32_t behaviourAnalysisLearningPeriod() {

    return behaviour_analysis_learning_period;

  };

  inline bool isBroadcastDomainTooLargeEnabled() {

    return (enable_broadcast_domain_too_large);

  };

  inline bool isASNBehavourAnalysisEnabled() {

    return (enable_asn_behaviour_analysis);

  };

  inline bool isNetworkBehavourAnalysisEnabled() {

    return (enable_network_behaviour_analysis);

  };

  inline bool isIfaceL7BehavourAnalysisEnabled() {

    return (enable_iface_l7_behaviour_analysis);

  };

  inline ServiceAcceptance behaviourAnalysisStatusDuringLearning() {

    return behaviour_analysis_learning_status_during_learning;

  };

  inline ServiceAcceptance behaviourAnalysisStatusPostLearning() {

    return behaviour_analysis_learning_status_post_learning;

  };

  inline u_int64_t* getIEC104AllowedTypeIDs() {

    return (iec104_allowed_typeids);

  };

  inline u_int32_t getIEC60870LearingPeriod() {

    return (iec60870_learning_period);

  };

  inline u_int32_t getModbusLearningPeriod() {

    return (modbus_learning_period);

  };

  inline u_int32_t getS7CommLearningPeriod() {

    return (s7comm_learning_period);

  };

#ifdef NTOPNG_PRO

  inline bool isAssetInventoryEnabled() {

    return (asset_inventory_enabled && !isASNModeEnabled());

  };

  inline bool isSNMPTrapEnabled() { return snmp_trap_enabled; };

  inline ndpi_bitmap* getModbusAllowedFunctionCodes() {

    return (modbus_allowed_function_codes);

  };

  inline void setModbusTooManyExceptionsThreshold(u_int v) {

    modbus_too_many_exceptions = v;

  }

  inline u_int getModbusTooManyExceptionsThreshold() {

    return (modbus_too_many_exceptions);

  }

  inline ndpi_bitmap* getS7CommAllowedFunctionCodes() {

    return (s7comm_allowed_function_codes);

  };

  inline void setS7CommTooManyErrorsThreshold(u_int v) {

    s7comm_too_many_errors = v;

  }

  inline u_int getS7CommTooManyErrorsThreshold() {

    return (s7comm_too_many_errors);

  }

  inline void setProfinetTooManyErrorsThreshold(u_int v) {

    profinet_too_many_errors = v;

  }

  inline u_int getProfinetTooManyErrorsThreshold() {

    return (profinet_too_many_errors);

  }

#endif

  inline u_int32_t devicesLearingPeriod() { return (devices_learning_period); };

  inline u_int32_t macAddressCacheDuration() {

    return (mac_address_cache_duration);

  };

  inline u_int32_t hostPortLearningPeriod() {

    return (host_port_learning_period);

  };

  inline bool isFlowSwapHeuristicEnabled() {

    return (enable_flow_swap_heuristic);

  };

  inline bool skipDPIforCollectedFlows() {

    return (skip_dpi_for_collected_flows);

  };

  inline bool are_alerts_disabled() { return (disable_alerts); };

  inline bool dontEmitFlowAlerts() {

    return (disable_alerts || !emit_flow_alerts);

  };

  inline bool dontEmitHostAlerts() {

    return (disable_alerts || !emit_host_alerts);

  };

  inline void dontUseClickHouse() { dump_flows_on_clickhouse = false; };

  inline char* getZMQPublishEventsURL() { return (zmq_publish_events_url); };

  inline const char* getClickHouseClientPath() { return (clickhouse_client); };

  inline const char* getClickHouseClusterName() {

    return (clickhouse_cluster_name);

  };

#ifdef NTOPNG_PRO

  void setModbusAllowedFunctionCodes(const char* function_codes);

  void setS7CommAllowedFunctionCodes(const char* function_codes);

#endif

  void setIEC104AllowedTypeIDs(const char* type_ids);

  void validate();

#if defined(HAVE_KAFKA) && defined(NTOPNG_PRO)

  char* getKakfaBrokersList() { return (kafka_brokers_list); }

  char* getKafkaTopic() { return (kafka_topic); }

  char* getKafkaOptions() { return (kafka_options); }

#endif

  void reloadServersConfiguration();

  void reloadASNConfiguration();

#ifdef NTOPNG_PRO

  bool reloadNetworksPolicyConfiguration();

  bool loadPolicyConfiguration(AddressTree* tree, char* key,

                               NetworkConfigurationId id);

  AddressTree* getNetworksPolicyConfiguration();

#endif

  bool isGateway(IpAddress* ip, u_int16_t vlan_id);

  bool isDNSServer(IpAddress* ip, u_int16_t vlan_id);

  bool isNTPServer(IpAddress* ip, u_int16_t vlan_id);

  bool isSMTPServer(IpAddress* ip, u_int16_t vlan_id);

  bool isDHCPServer(IpAddress* ip, u_int16_t vlan_id);

  bool isCustomerASN(u_int32_t asn);

  bool isSubCustomerASN(u_int32_t asn);

  bool isRemoteASN(u_int32_t asn);

  ServerConfiguration* getConfiguredGateways() { return (gateway); }

  ServerConfiguration* getConfiguredDNSServers() { return (dns_servers); }

  ServerConfiguration* getConfiguredNTPServers() { return (ntp_servers); }

  ServerConfiguration* getConfiguredSMTPServers() { return (smtp_servers); }

  ServerConfiguration* getConfiguredDHCPServers() { return (dhcp_servers); }

  ASNConfiguration* getCustomerASN() { return (customer_asn); }

  ASNConfiguration* getSubCustomerASN() { return (sub_customer_asn); }

  ASNConfiguration* getRemoteASN() { return (remote_asn); }

#ifndef HAVE_NEDGE

  inline bool useMacAddressInFlowKey() { return (use_mac_in_flow_key); }

#endif

  inline bool useHostPoolsForLocal() const { return use_host_pools_for_local; }

  inline bool areFingerprintStatsEnabled() { return (fingerprint_stats); }

  inline bool doReforgeTimestamps() { return (do_reforge_timestamps); }

  inline void enableVLANCloudToExporters() {

    add_vlan_tags_to_cloud_exporters = true;

  }

  inline bool addVLANCloudToExporters() {

    return (add_vlan_tags_to_cloud_exporters);

  }

  inline bool collectBlackListStats() { return (collect_blacklist_stats); }

  inline bool limitResourcesUsage() { return (limited_resources_mode); }

  inline bool failOnInvalidLicense() { return (fail_on_invalid_license); }

  inline char* getCiphersList() { return (ciphers_list); }

#ifdef NTOPNG_PRO

  inline char* getLicMgrConfigFile() { return (lic_mgr_config_file); }

  inline AddressTree* getNwPolicyConfig() {

    return (networks_policy_configuration);

  }

#endif

  inline char* getCustomGeoIPDir() { return (custom_geoip_dir); }

  void setCustomGeoIPDir(char* d);

  inline bool fullStatsEnabled() { return (full_stats_enabled); }

  bool isFlowDedupEnabled();

};

#endif /* _PREFS_H_ */