blob: 3770cebeac2dae39419b0606b98cc803cecd015d [file] [log] [blame]
Ben Menchaca84f36632014-02-28 20:57:38 +00001/*
2 **************************************************************************
Gareth Williamsd5618a82015-05-20 11:13:32 +01003 * Copyright (c) 2014-2015, The Linux Foundation. All rights reserved.
Ben Menchaca84f36632014-02-28 20:57:38 +00004 * Permission to use, copy, modify, and/or distribute this software for
5 * any purpose with or without fee is hereby granted, provided that the
6 * above copyright notice and this permission notice appear in all copies.
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
10 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
12 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
13 * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
14 **************************************************************************
15 */
16
Murat Sezginb3731e82014-11-26 12:20:59 -080017#include <linux/version.h>
Ben Menchaca84f36632014-02-28 20:57:38 +000018#include <linux/types.h>
19#include <linux/ip.h>
20#include <linux/tcp.h>
21#include <linux/module.h>
22#include <linux/skbuff.h>
23#include <linux/icmp.h>
24#include <linux/sysctl.h>
25#include <linux/kthread.h>
Murat Sezgin1f381852014-11-20 09:51:07 -080026#include <linux/device.h>
Ben Menchaca84f36632014-02-28 20:57:38 +000027#include <linux/fs.h>
28#include <linux/pkt_sched.h>
29#include <linux/string.h>
30#include <net/route.h>
31#include <net/ip.h>
32#include <net/tcp.h>
33#include <asm/unaligned.h>
34#include <asm/uaccess.h> /* for put_user */
35#include <net/ipv6.h>
36#include <linux/inet.h>
37#include <linux/in.h>
38#include <linux/udp.h>
39#include <linux/tcp.h>
40
41#include <linux/netfilter_ipv4.h>
42#include <linux/netfilter_bridge.h>
43#include <net/netfilter/nf_conntrack.h>
44#include <net/netfilter/nf_conntrack_helper.h>
45#include <net/netfilter/nf_conntrack_l4proto.h>
46#include <net/netfilter/nf_conntrack_l3proto.h>
47#include <net/netfilter/nf_conntrack_core.h>
48#include <net/netfilter/ipv4/nf_conntrack_ipv4.h>
49#include <net/netfilter/ipv4/nf_defrag_ipv4.h>
50
51/*
52 * Debug output levels
53 * 0 = OFF
54 * 1 = ASSERTS / ERRORS
55 * 2 = 1 + WARN
56 * 3 = 2 + INFO
57 * 4 = 3 + TRACE
58 */
59#define DEBUG_LEVEL ECM_TRACKER_DEBUG_LEVEL
60
61#include "ecm_types.h"
62#include "ecm_db_types.h"
Gareth Williamsd5618a82015-05-20 11:13:32 +010063#include "ecm_state.h"
Ben Menchaca84f36632014-02-28 20:57:38 +000064#include "ecm_tracker.h"
65
Gareth Williams88be3722015-03-23 19:51:01 +000066#ifdef ECM_TRACKER_DPI_SUPPORT_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +000067int ecm_tracker_data_total = 0; /* Data total for all skb list instances */
68int ecm_tracker_data_buffer_total = 0; /* Data buffer total allocated for all skb list instances */
69int ecm_tracker_data_limit = ECM_TRACKER_GLOBAL_DATA_LIMIT_DEFAULT;
70int ecm_tracker_data_buffer_limit = ECM_TRACKER_GLOBAL_DATA_BUFFER_LIMIT_DEFAULT;
71 /* Tracked limit for data across all instances */
Murat Sezgin8c345822015-05-27 15:35:38 -070072static DEFINE_SPINLOCK(ecm_tracker_lock); /* Global lock for the tracker globals */
Gareth Williams88be3722015-03-23 19:51:01 +000073#endif
Ben Menchaca84f36632014-02-28 20:57:38 +000074
75struct ecm_tracker_ip_protocols;
76
77typedef bool (*ecm_tracker_ip_header_helper_method_t)(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
78 /* A header helper method is used to inspect a protocol header, determine if it is valid, its size etc. and where any next header will be esp. important for IPv6 */
79
80/*
81 * Forward references for the header helpers
82 */
83static bool ecm_tracker_ip_header_helper_tcp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
84static bool ecm_tracker_ip_header_helper_udp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
85static bool ecm_tracker_ip_header_helper_icmp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
86static bool ecm_tracker_ip_header_helper_unknown(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
Gareth Williams8ac34292015-03-17 14:06:58 +000087static bool ecm_tracker_ip_header_helper_gre(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
88#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +000089static bool ecm_tracker_ip_header_helper_ipv6_generic(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
90static bool ecm_tracker_ip_header_helper_ipv6_fragment(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
Ben Menchaca84f36632014-02-28 20:57:38 +000091static bool ecm_tracker_ip_header_helper_ah(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
92static bool ecm_tracker_ip_header_helper_ipv6_icmp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr);
Gareth Williams8ac34292015-03-17 14:06:58 +000093#endif
Ben Menchaca84f36632014-02-28 20:57:38 +000094
95/*
96 * struct ecm_tracker_ip_protocols_known[]
97 * A list of protocols known to the tracker and which it will record the location of in its ecm_tracker_ip_header.
98 *
99 * This is especially important for IPv6 which can have multiple headers in its packet.
100 */
101static struct ecm_tracker_ip_protocols {
102 uint8_t ip_protocol; /* The IP protocol we want to detect and record its information */
103 ecm_tracker_ip_protocol_type_t ecm_ip_protocol; /* The ECM Tracker protocol identifier equivalent */
104 char *name; /* Visual name of the protocol */
105 ecm_tracker_ip_header_helper_method_t header_helper; /* A function used to help process the header, e.g. its size etc. When a NULL helper is located, header processing stops. */
106} ecm_tracker_ip_protocols_known[256] =
107{
Gareth Williams8ac34292015-03-17 14:06:58 +0000108#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000109 {0, ECM_TRACKER_IP_PROTOCOL_TYPE_IPV6_HBH, "ipv6_hbh", ecm_tracker_ip_header_helper_ipv6_generic},
Gareth Williams8ac34292015-03-17 14:06:58 +0000110#else
111 {0, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "0", ecm_tracker_ip_header_helper_unknown},
112#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000113 {1, ECM_TRACKER_IP_PROTOCOL_TYPE_ICMP, "icmp", ecm_tracker_ip_header_helper_icmp},
114 {2, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "2", ecm_tracker_ip_header_helper_unknown},
115 {3, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "3", ecm_tracker_ip_header_helper_unknown},
116 {4, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "4", ecm_tracker_ip_header_helper_unknown},
117 {5, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "5", ecm_tracker_ip_header_helper_unknown},
118 {6, ECM_TRACKER_IP_PROTOCOL_TYPE_TCP, "tcp", ecm_tracker_ip_header_helper_tcp},
119 {7, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "7", ecm_tracker_ip_header_helper_unknown},
120 {8, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "8", ecm_tracker_ip_header_helper_unknown},
121 {9, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "9", ecm_tracker_ip_header_helper_unknown},
122 {10, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "10", ecm_tracker_ip_header_helper_unknown},
123 {11, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "11", ecm_tracker_ip_header_helper_unknown},
124 {12, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "12", ecm_tracker_ip_header_helper_unknown},
125 {13, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "13", ecm_tracker_ip_header_helper_unknown},
126 {14, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "14", ecm_tracker_ip_header_helper_unknown},
127 {15, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "15", ecm_tracker_ip_header_helper_unknown},
128 {16, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "16", ecm_tracker_ip_header_helper_unknown},
129 {17, ECM_TRACKER_IP_PROTOCOL_TYPE_UDP, "udp", ecm_tracker_ip_header_helper_udp},
130 {18, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "18", ecm_tracker_ip_header_helper_unknown},
131 {19, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "19", ecm_tracker_ip_header_helper_unknown},
132 {20, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "20", ecm_tracker_ip_header_helper_unknown},
133 {21, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "21", ecm_tracker_ip_header_helper_unknown},
134 {22, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "22", ecm_tracker_ip_header_helper_unknown},
135 {23, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "23", ecm_tracker_ip_header_helper_unknown},
136 {24, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "24", ecm_tracker_ip_header_helper_unknown},
137 {25, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "25", ecm_tracker_ip_header_helper_unknown},
138 {26, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "26", ecm_tracker_ip_header_helper_unknown},
139 {27, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "27", ecm_tracker_ip_header_helper_unknown},
140 {28, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "28", ecm_tracker_ip_header_helper_unknown},
141 {29, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "29", ecm_tracker_ip_header_helper_unknown},
142 {30, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "30", ecm_tracker_ip_header_helper_unknown},
143 {31, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "31", ecm_tracker_ip_header_helper_unknown},
144 {32, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "32", ecm_tracker_ip_header_helper_unknown},
145 {33, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "33", ecm_tracker_ip_header_helper_unknown},
146 {34, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "34", ecm_tracker_ip_header_helper_unknown},
147 {35, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "35", ecm_tracker_ip_header_helper_unknown},
148 {36, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "36", ecm_tracker_ip_header_helper_unknown},
149 {37, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "37", ecm_tracker_ip_header_helper_unknown},
150 {38, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "38", ecm_tracker_ip_header_helper_unknown},
151 {39, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "39", ecm_tracker_ip_header_helper_unknown},
152 {40, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "40", ecm_tracker_ip_header_helper_unknown},
153 {41, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "41", ecm_tracker_ip_header_helper_unknown},
154 {42, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "42", ecm_tracker_ip_header_helper_unknown},
Gareth Williams8ac34292015-03-17 14:06:58 +0000155#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000156 {43, ECM_TRACKER_IP_PROTOCOL_TYPE_IPV6_ROUTING, "ipv6_routing", ecm_tracker_ip_header_helper_ipv6_generic},
157 {44, ECM_TRACKER_IP_PROTOCOL_TYPE_IPV6_FRAGMENT, "ipv6_fragment", ecm_tracker_ip_header_helper_ipv6_fragment},
Gareth Williams8ac34292015-03-17 14:06:58 +0000158#else
159 {43, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "43", ecm_tracker_ip_header_helper_unknown},
160 {44, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "44", ecm_tracker_ip_header_helper_unknown},
161#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000162 {45, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "45", ecm_tracker_ip_header_helper_unknown},
163 {46, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "46", ecm_tracker_ip_header_helper_unknown},
164 {47, ECM_TRACKER_IP_PROTOCOL_TYPE_GRE, "gre", ecm_tracker_ip_header_helper_gre},
165 {48, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "48", ecm_tracker_ip_header_helper_unknown},
166 {49, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "49", ecm_tracker_ip_header_helper_unknown},
167 {50, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "50", ecm_tracker_ip_header_helper_unknown},
Gareth Williams8ac34292015-03-17 14:06:58 +0000168#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000169 {51, ECM_TRACKER_IP_PROTOCOL_TYPE_AH, "ah", ecm_tracker_ip_header_helper_ah},
Gareth Williams8ac34292015-03-17 14:06:58 +0000170#else
171 {51, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "51", ecm_tracker_ip_header_helper_unknown},
172#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000173 {52, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "52", ecm_tracker_ip_header_helper_unknown},
174 {53, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "53", ecm_tracker_ip_header_helper_unknown},
175 {54, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "54", ecm_tracker_ip_header_helper_unknown},
176 {55, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "55", ecm_tracker_ip_header_helper_unknown},
Gareth Williams8ac34292015-03-17 14:06:58 +0000177#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000178 {56, ECM_TRACKER_IP_PROTOCOL_TYPE_IPV6_ICMP, "ipv6_icmp", ecm_tracker_ip_header_helper_ipv6_icmp},
Gareth Williams8ac34292015-03-17 14:06:58 +0000179#else
180 {56, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "56", ecm_tracker_ip_header_helper_unknown},
181#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000182 {57, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "57", ecm_tracker_ip_header_helper_unknown},
183 {58, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "58", ecm_tracker_ip_header_helper_unknown},
184 {59, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "59", ecm_tracker_ip_header_helper_unknown},
Gareth Williams8ac34292015-03-17 14:06:58 +0000185#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000186 {60, ECM_TRACKER_IP_PROTOCOL_TYPE_IPV6_DO, "ipv6_do", ecm_tracker_ip_header_helper_ipv6_generic},
Gareth Williams8ac34292015-03-17 14:06:58 +0000187#else
188 {60, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "60", ecm_tracker_ip_header_helper_unknown},
189#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000190 {61, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "61", ecm_tracker_ip_header_helper_unknown},
191 {62, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "62", ecm_tracker_ip_header_helper_unknown},
192 {63, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "63", ecm_tracker_ip_header_helper_unknown},
193 {64, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "64", ecm_tracker_ip_header_helper_unknown},
194 {65, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "65", ecm_tracker_ip_header_helper_unknown},
195 {66, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "66", ecm_tracker_ip_header_helper_unknown},
196 {67, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "67", ecm_tracker_ip_header_helper_unknown},
197 {68, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "68", ecm_tracker_ip_header_helper_unknown},
198 {69, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "69", ecm_tracker_ip_header_helper_unknown},
199 {70, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "70", ecm_tracker_ip_header_helper_unknown},
200 {71, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "71", ecm_tracker_ip_header_helper_unknown},
201 {72, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "72", ecm_tracker_ip_header_helper_unknown},
202 {73, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "73", ecm_tracker_ip_header_helper_unknown},
203 {74, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "74", ecm_tracker_ip_header_helper_unknown},
204 {75, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "75", ecm_tracker_ip_header_helper_unknown},
205 {76, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "76", ecm_tracker_ip_header_helper_unknown},
206 {77, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "77", ecm_tracker_ip_header_helper_unknown},
207 {78, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "78", ecm_tracker_ip_header_helper_unknown},
208 {79, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "79", ecm_tracker_ip_header_helper_unknown},
209 {80, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "80", ecm_tracker_ip_header_helper_unknown},
210 {81, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "81", ecm_tracker_ip_header_helper_unknown},
211 {82, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "82", ecm_tracker_ip_header_helper_unknown},
212 {83, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "83", ecm_tracker_ip_header_helper_unknown},
213 {84, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "84", ecm_tracker_ip_header_helper_unknown},
214 {85, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "85", ecm_tracker_ip_header_helper_unknown},
215 {86, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "86", ecm_tracker_ip_header_helper_unknown},
216 {87, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "87", ecm_tracker_ip_header_helper_unknown},
217 {88, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "88", ecm_tracker_ip_header_helper_unknown},
218 {89, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "89", ecm_tracker_ip_header_helper_unknown},
219 {90, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "90", ecm_tracker_ip_header_helper_unknown},
220 {91, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "91", ecm_tracker_ip_header_helper_unknown},
221 {92, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "92", ecm_tracker_ip_header_helper_unknown},
222 {93, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "93", ecm_tracker_ip_header_helper_unknown},
223 {94, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "94", ecm_tracker_ip_header_helper_unknown},
224 {95, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "95", ecm_tracker_ip_header_helper_unknown},
225 {96, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "96", ecm_tracker_ip_header_helper_unknown},
226 {97, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "97", ecm_tracker_ip_header_helper_unknown},
227 {98, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "98", ecm_tracker_ip_header_helper_unknown},
228 {99, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "99", ecm_tracker_ip_header_helper_unknown},
229 {100, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "100", ecm_tracker_ip_header_helper_unknown},
230 {101, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "101", ecm_tracker_ip_header_helper_unknown},
231 {102, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "102", ecm_tracker_ip_header_helper_unknown},
232 {103, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "103", ecm_tracker_ip_header_helper_unknown},
233 {104, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "104", ecm_tracker_ip_header_helper_unknown},
234 {105, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "105", ecm_tracker_ip_header_helper_unknown},
235 {106, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "106", ecm_tracker_ip_header_helper_unknown},
236 {107, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "107", ecm_tracker_ip_header_helper_unknown},
237 {108, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "108", ecm_tracker_ip_header_helper_unknown},
238 {109, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "109", ecm_tracker_ip_header_helper_unknown},
239 {110, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "110", ecm_tracker_ip_header_helper_unknown},
240 {111, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "111", ecm_tracker_ip_header_helper_unknown},
241 {112, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "112", ecm_tracker_ip_header_helper_unknown},
242 {113, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "113", ecm_tracker_ip_header_helper_unknown},
243 {114, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "114", ecm_tracker_ip_header_helper_unknown},
244 {115, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "115", ecm_tracker_ip_header_helper_unknown},
245 {116, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "116", ecm_tracker_ip_header_helper_unknown},
246 {117, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "117", ecm_tracker_ip_header_helper_unknown},
247 {118, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "118", ecm_tracker_ip_header_helper_unknown},
248 {119, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "119", ecm_tracker_ip_header_helper_unknown},
249 {120, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "120", ecm_tracker_ip_header_helper_unknown},
250 {121, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "121", ecm_tracker_ip_header_helper_unknown},
251 {122, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "122", ecm_tracker_ip_header_helper_unknown},
252 {123, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "123", ecm_tracker_ip_header_helper_unknown},
253 {124, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "124", ecm_tracker_ip_header_helper_unknown},
254 {125, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "125", ecm_tracker_ip_header_helper_unknown},
255 {126, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "126", ecm_tracker_ip_header_helper_unknown},
256 {127, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "127", ecm_tracker_ip_header_helper_unknown},
257 {128, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "128", ecm_tracker_ip_header_helper_unknown},
258 {129, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "129", ecm_tracker_ip_header_helper_unknown},
259 {130, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "130", ecm_tracker_ip_header_helper_unknown},
260 {131, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "131", ecm_tracker_ip_header_helper_unknown},
261 {132, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "132", ecm_tracker_ip_header_helper_unknown},
262 {133, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "133", ecm_tracker_ip_header_helper_unknown},
263 {134, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "134", ecm_tracker_ip_header_helper_unknown},
264 {135, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "135", ecm_tracker_ip_header_helper_unknown},
265 {136, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "136", ecm_tracker_ip_header_helper_unknown},
266 {137, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "137", ecm_tracker_ip_header_helper_unknown},
267 {138, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "138", ecm_tracker_ip_header_helper_unknown},
268 {139, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "139", ecm_tracker_ip_header_helper_unknown},
269 {140, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "140", ecm_tracker_ip_header_helper_unknown},
270 {141, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "141", ecm_tracker_ip_header_helper_unknown},
271 {142, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "142", ecm_tracker_ip_header_helper_unknown},
272 {143, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "143", ecm_tracker_ip_header_helper_unknown},
273 {144, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "144", ecm_tracker_ip_header_helper_unknown},
274 {145, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "145", ecm_tracker_ip_header_helper_unknown},
275 {146, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "146", ecm_tracker_ip_header_helper_unknown},
276 {147, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "147", ecm_tracker_ip_header_helper_unknown},
277 {148, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "148", ecm_tracker_ip_header_helper_unknown},
278 {149, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "149", ecm_tracker_ip_header_helper_unknown},
279 {150, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "150", ecm_tracker_ip_header_helper_unknown},
280 {151, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "151", ecm_tracker_ip_header_helper_unknown},
281 {152, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "152", ecm_tracker_ip_header_helper_unknown},
282 {153, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "153", ecm_tracker_ip_header_helper_unknown},
283 {154, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "154", ecm_tracker_ip_header_helper_unknown},
284 {155, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "155", ecm_tracker_ip_header_helper_unknown},
285 {156, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "156", ecm_tracker_ip_header_helper_unknown},
286 {157, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "157", ecm_tracker_ip_header_helper_unknown},
287 {158, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "158", ecm_tracker_ip_header_helper_unknown},
288 {159, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "159", ecm_tracker_ip_header_helper_unknown},
289 {160, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "160", ecm_tracker_ip_header_helper_unknown},
290 {161, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "161", ecm_tracker_ip_header_helper_unknown},
291 {162, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "162", ecm_tracker_ip_header_helper_unknown},
292 {163, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "163", ecm_tracker_ip_header_helper_unknown},
293 {164, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "164", ecm_tracker_ip_header_helper_unknown},
294 {165, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "165", ecm_tracker_ip_header_helper_unknown},
295 {166, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "166", ecm_tracker_ip_header_helper_unknown},
296 {167, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "167", ecm_tracker_ip_header_helper_unknown},
297 {168, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "168", ecm_tracker_ip_header_helper_unknown},
298 {169, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "169", ecm_tracker_ip_header_helper_unknown},
299 {170, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "170", ecm_tracker_ip_header_helper_unknown},
300 {171, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "171", ecm_tracker_ip_header_helper_unknown},
301 {172, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "172", ecm_tracker_ip_header_helper_unknown},
302 {173, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "173", ecm_tracker_ip_header_helper_unknown},
303 {174, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "174", ecm_tracker_ip_header_helper_unknown},
304 {175, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "175", ecm_tracker_ip_header_helper_unknown},
305 {176, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "176", ecm_tracker_ip_header_helper_unknown},
306 {177, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "177", ecm_tracker_ip_header_helper_unknown},
307 {178, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "178", ecm_tracker_ip_header_helper_unknown},
308 {179, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "179", ecm_tracker_ip_header_helper_unknown},
309 {180, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "180", ecm_tracker_ip_header_helper_unknown},
310 {181, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "181", ecm_tracker_ip_header_helper_unknown},
311 {182, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "182", ecm_tracker_ip_header_helper_unknown},
312 {183, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "183", ecm_tracker_ip_header_helper_unknown},
313 {184, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "184", ecm_tracker_ip_header_helper_unknown},
314 {185, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "185", ecm_tracker_ip_header_helper_unknown},
315 {186, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "186", ecm_tracker_ip_header_helper_unknown},
316 {187, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "187", ecm_tracker_ip_header_helper_unknown},
317 {188, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "188", ecm_tracker_ip_header_helper_unknown},
318 {189, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "189", ecm_tracker_ip_header_helper_unknown},
319 {190, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "190", ecm_tracker_ip_header_helper_unknown},
320 {191, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "191", ecm_tracker_ip_header_helper_unknown},
321 {192, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "192", ecm_tracker_ip_header_helper_unknown},
322 {193, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "193", ecm_tracker_ip_header_helper_unknown},
323 {194, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "194", ecm_tracker_ip_header_helper_unknown},
324 {195, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "195", ecm_tracker_ip_header_helper_unknown},
325 {196, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "196", ecm_tracker_ip_header_helper_unknown},
326 {197, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "197", ecm_tracker_ip_header_helper_unknown},
327 {198, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "198", ecm_tracker_ip_header_helper_unknown},
328 {199, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "199", ecm_tracker_ip_header_helper_unknown},
329 {200, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "200", ecm_tracker_ip_header_helper_unknown},
330 {201, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "201", ecm_tracker_ip_header_helper_unknown},
331 {202, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "202", ecm_tracker_ip_header_helper_unknown},
332 {203, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "203", ecm_tracker_ip_header_helper_unknown},
333 {204, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "204", ecm_tracker_ip_header_helper_unknown},
334 {205, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "205", ecm_tracker_ip_header_helper_unknown},
335 {206, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "206", ecm_tracker_ip_header_helper_unknown},
336 {207, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "207", ecm_tracker_ip_header_helper_unknown},
337 {208, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "208", ecm_tracker_ip_header_helper_unknown},
338 {209, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "209", ecm_tracker_ip_header_helper_unknown},
339 {210, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "210", ecm_tracker_ip_header_helper_unknown},
340 {211, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "211", ecm_tracker_ip_header_helper_unknown},
341 {212, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "212", ecm_tracker_ip_header_helper_unknown},
342 {213, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "213", ecm_tracker_ip_header_helper_unknown},
343 {214, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "214", ecm_tracker_ip_header_helper_unknown},
344 {215, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "215", ecm_tracker_ip_header_helper_unknown},
345 {216, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "216", ecm_tracker_ip_header_helper_unknown},
346 {217, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "217", ecm_tracker_ip_header_helper_unknown},
347 {218, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "218", ecm_tracker_ip_header_helper_unknown},
348 {219, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "219", ecm_tracker_ip_header_helper_unknown},
349 {220, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "220", ecm_tracker_ip_header_helper_unknown},
350 {221, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "221", ecm_tracker_ip_header_helper_unknown},
351 {222, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "222", ecm_tracker_ip_header_helper_unknown},
352 {223, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "223", ecm_tracker_ip_header_helper_unknown},
353 {224, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "224", ecm_tracker_ip_header_helper_unknown},
354 {225, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "225", ecm_tracker_ip_header_helper_unknown},
355 {226, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "226", ecm_tracker_ip_header_helper_unknown},
356 {227, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "227", ecm_tracker_ip_header_helper_unknown},
357 {228, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "228", ecm_tracker_ip_header_helper_unknown},
358 {229, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "229", ecm_tracker_ip_header_helper_unknown},
359 {230, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "230", ecm_tracker_ip_header_helper_unknown},
360 {231, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "231", ecm_tracker_ip_header_helper_unknown},
361 {232, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "232", ecm_tracker_ip_header_helper_unknown},
362 {233, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "233", ecm_tracker_ip_header_helper_unknown},
363 {234, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "234", ecm_tracker_ip_header_helper_unknown},
364 {235, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "235", ecm_tracker_ip_header_helper_unknown},
365 {236, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "236", ecm_tracker_ip_header_helper_unknown},
366 {237, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "237", ecm_tracker_ip_header_helper_unknown},
367 {238, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "238", ecm_tracker_ip_header_helper_unknown},
368 {239, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "239", ecm_tracker_ip_header_helper_unknown},
369 {240, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "240", ecm_tracker_ip_header_helper_unknown},
370 {241, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "241", ecm_tracker_ip_header_helper_unknown},
371 {242, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "242", ecm_tracker_ip_header_helper_unknown},
372 {243, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "243", ecm_tracker_ip_header_helper_unknown},
373 {244, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "244", ecm_tracker_ip_header_helper_unknown},
374 {245, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "245", ecm_tracker_ip_header_helper_unknown},
375 {246, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "246", ecm_tracker_ip_header_helper_unknown},
376 {247, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "247", ecm_tracker_ip_header_helper_unknown},
377 {248, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "248", ecm_tracker_ip_header_helper_unknown},
378 {249, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "249", ecm_tracker_ip_header_helper_unknown},
379 {250, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "250", ecm_tracker_ip_header_helper_unknown},
380 {251, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "251", ecm_tracker_ip_header_helper_unknown},
381 {252, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "252", ecm_tracker_ip_header_helper_unknown},
382 {253, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "253", ecm_tracker_ip_header_helper_unknown},
383 {254, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "254", ecm_tracker_ip_header_helper_unknown},
384 {255, ECM_TRACKER_IP_PROTOCOL_TYPE_UNKNOWN, "255", ecm_tracker_ip_header_helper_unknown}
385};
386
Nicolas Costa1d9eb992014-05-15 10:01:03 -0500387static char *ecm_tracker_sender_state_strings[] = {
388 "Unknown",
389 "Establishing",
390 "Established",
391 "Closing",
392 "Closed",
393 "Fault"
394};
395
396static char *ecm_tracker_connection_state_strings[] = {
397 "Establishing",
398 "Established",
399 "Closing",
400 "Closed",
401 "Fault"
402};
403
Ben Menchaca84f36632014-02-28 20:57:38 +0000404/*
405 * ecm_tracker_ip_check_header_and_read()
Gareth Williams8ac34292015-03-17 14:06:58 +0000406 * Check that we have a complete network-level IP header, check it and return true if so.
Ben Menchaca84f36632014-02-28 20:57:38 +0000407 */
408bool ecm_tracker_ip_check_header_and_read(struct ecm_tracker_ip_header *ip_hdr, struct sk_buff *skb)
409{
Matthew McClintock0ffc52e2014-09-19 14:41:23 -0500410 struct iphdr *v4_hdr = NULL;
Gareth Williams8ac34292015-03-17 14:06:58 +0000411 uint16_t remain;
412#ifdef ECM_IPV6_ENABLE
Matthew McClintock0ffc52e2014-09-19 14:41:23 -0500413 struct ipv6hdr *v6_hdr = NULL;
Ben Menchaca84f36632014-02-28 20:57:38 +0000414 int16_t this_header;
Tushar Mathur1c60a752015-04-17 18:58:43 +0530415 int16_t prev_header;
Ben Menchaca84f36632014-02-28 20:57:38 +0000416 uint32_t offset;
Gareth Williams8ac34292015-03-17 14:06:58 +0000417#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000418
419 memset(ip_hdr, 0, sizeof(*ip_hdr));
420
421 ip_hdr->skb = skb;
422
423 /*
Gareth Williams8ac34292015-03-17 14:06:58 +0000424 * What version of IP header are we dealing with?
Ben Menchaca84f36632014-02-28 20:57:38 +0000425 */
426 v4_hdr = skb_header_pointer(skb, 0, sizeof(struct iphdr), &ip_hdr->h.v4_hdr);
427 if (v4_hdr && (v4_hdr->version == 4)) {
428 DEBUG_TRACE("%p: skb: %p is ipv4\n", ip_hdr, skb);
429 ip_hdr->is_v4 = true;
Gareth Williams8ac34292015-03-17 14:06:58 +0000430 goto version_check_done;
Ben Menchaca84f36632014-02-28 20:57:38 +0000431 }
432
Gareth Williams8ac34292015-03-17 14:06:58 +0000433#ifdef ECM_IPV6_ENABLE
434 /*
435 * Try V6
436 */
437 DEBUG_TRACE("skb: %p contains no v4 header\n", skb);
438 v6_hdr = skb_header_pointer(skb, 0, sizeof(struct ipv6hdr), &ip_hdr->h.v6_hdr);
439 if (!v6_hdr || (v6_hdr->version != 6)) {
440 DEBUG_TRACE("skb: %p contains no v6 header\n", skb);
441 return false;
442 }
443 DEBUG_TRACE("%p: skb: %p is ipv6\n", ip_hdr, skb);
444 ip_hdr->is_v4 = false;
445#else
446 DEBUG_TRACE("skb: %p Other IP header versions unsupported\n", skb);
447 return false;
448#endif
449
450version_check_done:
Ben Menchaca84f36632014-02-28 20:57:38 +0000451 if (ip_hdr->is_v4) {
452 uint8_t protocol;
453 int16_t next_unused;
454 ecm_tracker_ip_protocol_type_t ecm_ip_protocol;
455 struct ecm_tracker_ip_protocols *etip;
456 struct ecm_tracker_ip_protocol_header *etiph;
457
458 DEBUG_TRACE("%p: skb: %p ipv4\n", ip_hdr, skb);
459
460 /*
461 * Process IPv4
462 */
463 ECM_NIN4_ADDR_TO_IP_ADDR(ip_hdr->src_addr, v4_hdr->saddr);
464 ECM_NIN4_ADDR_TO_IP_ADDR(ip_hdr->dest_addr, v4_hdr->daddr);
465 ip_hdr->ip_header_length = v4_hdr->ihl;
466 ip_hdr->ip_header_length <<= 2;
467 if (ip_hdr->ip_header_length < 20) {
468 DEBUG_WARN("%p: v4 invalid ip hdr len %d\n", skb, ip_hdr->ip_header_length);
469 return false;
470 }
471 ip_hdr->total_length = ntohs(v4_hdr->tot_len);
472 if (skb->len < ip_hdr->total_length) {
473 DEBUG_WARN("%p: v4 invalid total len: %u skb len: %u\n", skb, ip_hdr->total_length, skb->len);
474 return false;
475 }
476 remain = ip_hdr->total_length - ip_hdr->ip_header_length;
477
478 /*
479 * Fragmented?
480 */
481 ip_hdr->fragmented = (ntohs(v4_hdr->frag_off) & 0x3fff)? true : false;
482
483 /*
Gareth Williams8932a912014-06-11 18:06:25 -0700484 * DS field
485 */
486 ip_hdr->ds = ipv4_get_dsfield(v4_hdr);
487
488 /*
Shyam Sunderf0b6a592015-07-23 18:06:45 +0530489 * TTL field
490 */
491 ip_hdr->ttl = v4_hdr->ttl;
492
493 /*
Ben Menchaca84f36632014-02-28 20:57:38 +0000494 * Get the protocol and where the header info will be stored
495 */
496 protocol = v4_hdr->protocol;
497 ip_hdr->protocol = (int)v4_hdr->protocol;
498 etip = &ecm_tracker_ip_protocols_known[protocol]; /* Get header helper */
499 ecm_ip_protocol = etip->ecm_ip_protocol;
500 etiph = &ip_hdr->headers[ecm_ip_protocol]; /* Get where the header detail is stored in ip_hdr->headers[] */
501
502 DEBUG_TRACE("%p: v4 skb: %p, len: %d, ip_header_length: %u, total_length: %u, remain: %u, fragmented: %04x, protocol: %u, ecm_ip_protocol: %d src_addr: "
503 ECM_IP_ADDR_DOT_FMT ", dest addr: " ECM_IP_ADDR_DOT_FMT "\n",
504 ip_hdr,
505 skb,
506 skb->len,
507 ip_hdr->ip_header_length,
508 ip_hdr->total_length,
509 remain,
510 ip_hdr->fragmented,
511 ip_hdr->protocol,
512 ecm_ip_protocol,
513 ECM_IP_ADDR_TO_DOT(ip_hdr->src_addr),
514 ECM_IP_ADDR_TO_DOT(ip_hdr->dest_addr));
515
516 /*
517 * Populate protocol detail
518 * IPv4 can only have one.
519 */
520 if (!etip->header_helper(
521 etip,
522 etiph,
523 ip_hdr,
524 skb,
525 (uint8_t)ip_hdr->protocol,
526 ecm_ip_protocol,
527 ip_hdr->ip_header_length,
528 remain,
529 &next_unused)) {
530 DEBUG_WARN("%p: v4 header helper failed for: %u\n", skb, protocol);
531 return false;
532 }
Nicolas Costa585002e2014-05-15 09:46:04 -0500533
Ben Menchaca84f36632014-02-28 20:57:38 +0000534 return true;
535 }
536
Gareth Williams8ac34292015-03-17 14:06:58 +0000537#ifndef ECM_IPV6_ENABLE
538 return false;
539#else
Ben Menchaca84f36632014-02-28 20:57:38 +0000540 /*
541 * IPv6
542 */
543 ECM_NIN6_ADDR_TO_IP_ADDR(ip_hdr->src_addr, v6_hdr->saddr);
544 ECM_NIN6_ADDR_TO_IP_ADDR(ip_hdr->dest_addr, v6_hdr->daddr);
545 ip_hdr->ip_header_length = 40;
546 remain = ntohs(v6_hdr->payload_len);
547 ip_hdr->total_length = remain + 40;
548 if (skb->len < ip_hdr->total_length) {
549 DEBUG_WARN("%p: v6 invalid total len: %u skb len: %u\n", skb, ip_hdr->total_length, skb->len);
550 return false;
551 }
552
553 /*
Gareth Williams8932a912014-06-11 18:06:25 -0700554 * DS field
555 */
556 ip_hdr->ds = ipv6_get_dsfield(v6_hdr);
557
558 /*
Shyam Sunderf0b6a592015-07-23 18:06:45 +0530559 * hop_limit field
560 */
561 ip_hdr->ttl = v6_hdr->hop_limit;
562
563 /*
Ben Menchaca84f36632014-02-28 20:57:38 +0000564 * Process headers until we run out of space, error, or we get the no next header marker for v6 (protocol 59).
565 */
566 offset = 40;
567 this_header = (int16_t)v6_hdr->nexthdr;
Tushar Mathur1c60a752015-04-17 18:58:43 +0530568 prev_header = this_header;
Ben Menchaca84f36632014-02-28 20:57:38 +0000569 while ((remain > 0) && (this_header >= 0) && (this_header != 59)) {
570 struct ecm_tracker_ip_protocols *etip;
571 struct ecm_tracker_ip_protocol_header *etiph;
572 ecm_tracker_ip_protocol_type_t ecm_ip_protocol;
573 int16_t next_header;
574
575 etip = &ecm_tracker_ip_protocols_known[this_header]; /* Get header helper */
576 ecm_ip_protocol = etip->ecm_ip_protocol;
577 etiph = &ip_hdr->headers[ecm_ip_protocol]; /* Get where the header detail is stored in ip_hdr->headers[] */
578
579 /*
580 * If this IP header has already been seen then we abort
581 */
582 if (etiph->size) {
583 DEBUG_WARN("v6 skb: %p, protocol: %d already seen at offset: %u, size: %u\n",
584 skb, this_header, etiph->offset, etiph->size);
585 return false;
586 }
587 if (!etip->header_helper(
588 etip,
589 etiph,
590 ip_hdr,
591 skb,
592 (uint8_t)this_header,
593 ecm_ip_protocol,
594 offset,
595 remain,
596 &next_header)) {
597 DEBUG_WARN("%p: v6 header helper failed for: %d\n", skb, this_header);
598 return false;
599 }
600
601 offset += etiph->size;
602 DEBUG_ASSERT(remain >= etiph->size, "v6 remain: %u goes negative after header size: %u", remain, etiph->size);
603 remain -= etiph->size;
604
Tushar Mathur1c60a752015-04-17 18:58:43 +0530605 prev_header = this_header;
Ben Menchaca84f36632014-02-28 20:57:38 +0000606 this_header = next_header;
607 }
608
609 /*
610 * Generally the last protocol seen is the upper layer protocol
611 */
Tushar Mathur1c60a752015-04-17 18:58:43 +0530612 ip_hdr->protocol = (int)prev_header;
Ben Menchaca84f36632014-02-28 20:57:38 +0000613
Gareth Williams8ac34292015-03-17 14:06:58 +0000614 return true;
615#endif
Ben Menchaca84f36632014-02-28 20:57:38 +0000616}
617EXPORT_SYMBOL(ecm_tracker_ip_check_header_and_read);
618
Gareth Williams8ac34292015-03-17 14:06:58 +0000619#ifdef ECM_IPV6_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +0000620/*
621 * ecm_tracker_ip_header_helper_ipv6_generic()
622 * Interpret a Generic IPv6 extension header
623 */
624static bool ecm_tracker_ip_header_helper_ipv6_generic(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
625 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
626{
627 struct ipv6_gen_hdr {
628 uint8_t next_protocol;
629 uint8_t header_ext_len;
630 } gen_header_buffer;
631 struct ipv6_gen_hdr *gen_header;
632 uint16_t hdr_size;
633
634 /*
635 * At least 8 bytes
636 */
637 if (remain < 8) {
638 return false;
639 }
640
641 gen_header = skb_header_pointer(skb, offset, sizeof(struct ipv6_gen_hdr), &gen_header_buffer);
642 if (!gen_header) {
643 return false;
644 }
645 hdr_size = gen_header->header_ext_len;
646 hdr_size <<= 3;
647 hdr_size += 8;
648 if (remain < hdr_size) {
649 DEBUG_WARN("IPv6 extension: %p packet remain: %u too small for tcp header: %u\n", skb, remain, hdr_size);
650 return false;
651 }
652 if (unlikely(ip_hdr->total_length < (offset + hdr_size))) {
653 DEBUG_WARN("TCP packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + hdr_size);
654 return false;
655 }
656
657 etiph->protocol_number = protocol;
658 etiph->header_size = hdr_size;
659 etiph->size = hdr_size;
660 etiph->offset = offset;
661
662 *next_hdr = (int16_t)gen_header->next_protocol;
Nicolas Costa585002e2014-05-15 09:46:04 -0500663 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000664}
665
666/*
667 * ecm_tracker_ip_header_helper_ipv6_fragment()
668 * Interpret a Generic IPv6 fragment header
669 */
670static bool ecm_tracker_ip_header_helper_ipv6_fragment(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
671 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
672{
673 struct ipv6_gen_hdr {
674 uint8_t next_protocol;
675 uint8_t reserved;
676 } gen_header_buffer;
677 struct ipv6_gen_hdr *gen_header;
678
679 /*
680 * At least 8 bytes
681 */
682 if (remain < 8) {
683 return false;
684 }
685
686 gen_header = skb_header_pointer(skb, offset, sizeof(struct ipv6_gen_hdr), &gen_header_buffer);
687 if (!gen_header) {
688 return false;
689 }
690 if (unlikely(ip_hdr->total_length < (offset + 8))) {
691 DEBUG_WARN("TCP packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + 8);
692 return false;
693 }
694
695 /*
696 * The very presence of a fragmemt header says it's fragmented
697 */
698 ip_hdr->fragmented = true;
699
700 etiph->protocol_number = protocol;
701 etiph->header_size = 8;
702 etiph->size = 8;
703 etiph->offset = offset;
704
705 *next_hdr = (int16_t)gen_header->next_protocol;
Nicolas Costa585002e2014-05-15 09:46:04 -0500706 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000707}
708
709/*
Gareth Williams8ac34292015-03-17 14:06:58 +0000710 * ecm_tracker_ip_header_helper_ah()
711 * Interpret an Authentication Header
712 */
713static bool ecm_tracker_ip_header_helper_ah(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
714 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
715{
716 struct ah_gen_hdr {
717 uint8_t next_protocol;
718 uint8_t header_len;
719 } gen_header_buffer;
720 struct ah_gen_hdr *gen_header;
721 uint16_t hdr_size;
722
723 /*
724 * At least 8 bytes
725 */
726 if (remain < 8) {
727 return false;
728 }
729
730 gen_header = skb_header_pointer(skb, offset, sizeof(struct ah_gen_hdr), &gen_header_buffer);
731 if (!gen_header) {
732 return false;
733 }
734
735 hdr_size = gen_header->header_len + 2;
736 hdr_size <<= 2;
737
738 if (!ip_hdr->is_v4) {
739 /*
740 * hdr_size needs to be a multiple of 8 in a v6 frame
741 */
742 if (hdr_size % 8) {
743 DEBUG_WARN("AH packet %p not multiple of 8 for v6 frame: %u\n", skb, hdr_size);
744 return false;
745 }
746 }
747
748 if (remain < hdr_size) {
749 DEBUG_WARN("AH packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + hdr_size);
750 return false;
751 }
752 if (unlikely(ip_hdr->total_length < (offset + hdr_size))) {
753 DEBUG_WARN("AH packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + hdr_size);
754 return false;
755 }
756
757 /*
758 * What header follows this one?
759 */
760 *next_hdr = gen_header->next_protocol;
761
762 etiph->protocol_number = protocol;
763 etiph->header_size = hdr_size;
764 etiph->size = hdr_size;
765 etiph->offset = offset;
766 return true;
767}
768
769/*
770 * ecm_tracker_ip_header_helper_ipv6_icmp()
771 * Interpret a ICMP V6 header
772 */
773static bool ecm_tracker_ip_header_helper_ipv6_icmp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
774 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
775{
776 if (remain < 4) {
777 DEBUG_WARN("v6 icmp: %p too small: %u\n", skb, remain);
778 return false;
779 }
780
781 etiph->protocol_number = protocol;
782 etiph->header_size = 4;
783 etiph->size = remain;
784 etiph->offset = offset;
785
786 /*
787 * There is no header following a V6 ICMP header
788 */
789 *next_hdr = -1;
790 return true;
791}
792
793#endif
794
795/*
Ben Menchaca84f36632014-02-28 20:57:38 +0000796 * ecm_tracker_ip_header_helper_tcp()
797 * Interpret a TCP header
798 */
799static bool ecm_tracker_ip_header_helper_tcp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
800 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
801{
802 struct tcphdr tcp_header_buffer;
803 struct tcphdr *tcp_header;
804 uint16_t hdr_size;
805
806 DEBUG_ASSERT((protocol == IPPROTO_TCP) && (ecm_ip_protocol == ECM_TRACKER_IP_PROTOCOL_TYPE_TCP), "Bad protocol: %u or ecm_ip_protocol: %d", protocol, ecm_ip_protocol);
807
808 if (remain < 20) {
809 return false;
810 }
811
812 tcp_header = skb_header_pointer(skb, offset, sizeof(struct tcphdr), &tcp_header_buffer);
813 if (!tcp_header) {
814 return false;
815 }
816 hdr_size = tcp_header->doff;
817 hdr_size <<= 2;
818 if (hdr_size < 20) {
819 return false;
820 }
821 if (remain < hdr_size) {
822 DEBUG_WARN("TCP packet: %p packet remain: %u too small for tcp header: %u\n", skb, remain, hdr_size);
823 return false;
824 }
825 if (unlikely(ip_hdr->total_length < (offset + hdr_size))) {
826 DEBUG_WARN("TCP packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + hdr_size);
827 return false;
828 }
829
830 etiph->protocol_number = protocol;
831 etiph->header_size = hdr_size;
832 etiph->size = remain;
833 etiph->offset = offset;
834
835 /*
836 * There is no header following a TCP header
837 */
838 *next_hdr = -1;
Nicolas Costa585002e2014-05-15 09:46:04 -0500839 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000840}
841
842/*
843 * ecm_tracker_ip_header_helper_gre()
844 * Interpret a GRE header
845 */
846static bool ecm_tracker_ip_header_helper_gre(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
847 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
848{
849 uint32_t gre_hdr_buffer;
850 uint32_t *gre_hdr_ptr;
851 uint32_t gre_hdr;
852 uint16_t hdr_size;
853
854 DEBUG_ASSERT((protocol == IPPROTO_GRE) && (ecm_ip_protocol == ECM_TRACKER_IP_PROTOCOL_TYPE_GRE), "Bad protocol: %u or ecm_ip_protocol: %d", protocol, ecm_ip_protocol);
855
856 if (remain < 4) {
857 return false;
858 }
859
860 gre_hdr_ptr = skb_header_pointer(skb, offset, sizeof(gre_hdr_buffer), &gre_hdr_buffer);
861 if (!gre_hdr_ptr) {
862 return false;
863 }
864 gre_hdr = ntohl(*gre_hdr_ptr);
865 hdr_size = 4;
866 if (gre_hdr & 0x80000000) {
867 /*
868 * Checksum
869 */
870 hdr_size += 4;
871 }
872 if (gre_hdr & 0x20000000) {
873 /*
874 * Key
875 */
876 hdr_size += 4;
877 }
878 if (gre_hdr & 0x10000000) {
879 /*
880 * Sequence
881 */
882 hdr_size += 4;
883 }
884 if (remain < hdr_size) {
885 DEBUG_WARN("GRE packet: %p packet remain: %u too small for tcp header: %u\n", skb, remain, hdr_size);
886 return false;
887 }
888 if (unlikely(ip_hdr->total_length < (offset + hdr_size))) {
889 DEBUG_WARN("GRE packet %p too short (total_length: %u, require: %u)\n", skb, ip_hdr->total_length, offset + hdr_size);
890 return false;
891 }
892
893 etiph->protocol_number = protocol;
894 etiph->header_size = hdr_size;
895 etiph->size = remain;
896 etiph->offset = offset;
897
898 /*
899 * There is no header following a GRE header
900 */
901 *next_hdr = -1;
Nicolas Costa585002e2014-05-15 09:46:04 -0500902 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000903}
904
905/*
Ben Menchaca84f36632014-02-28 20:57:38 +0000906 * ecm_tracker_ip_header_helper_udp()
907 * Interpret a UDP header
908 */
909static bool ecm_tracker_ip_header_helper_udp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
910 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
911{
912 DEBUG_ASSERT((protocol == IPPROTO_UDP) && (ecm_ip_protocol == ECM_TRACKER_IP_PROTOCOL_TYPE_UDP), "Bad protocol: %u or ecm_ip_protocol: %d", protocol, ecm_ip_protocol);
913
914 DEBUG_TRACE("udp helper skb: %p, protocol: %u, ecm_ip_proto: %d, offset: %u, remain: %u\n", skb, protocol, ecm_ip_protocol, offset, remain);
915 if (remain < 8) {
916 DEBUG_TRACE("not enough UDP header: %u\n", remain);
917 return false;
918 }
919
920 etiph->protocol_number = protocol;
921 etiph->header_size = 8;
922 etiph->size = remain;
923 etiph->offset = offset;
924
925 /*
926 * There is no header following a UDP header
927 */
928 *next_hdr = -1;
Nicolas Costa585002e2014-05-15 09:46:04 -0500929 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000930}
931
932/*
933 * ecm_tracker_ip_header_helper_unknown()
934 * Interpret a unknown header
935 */
936static bool ecm_tracker_ip_header_helper_unknown(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
937 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
938{
939 /*
940 * There is no header following an unknown header
941 */
942 *next_hdr = -1;
943 etiph->protocol_number = protocol;
944 etiph->header_size = remain;
945 etiph->size = remain;
946 etiph->offset = offset;
Nicolas Costa585002e2014-05-15 09:46:04 -0500947 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +0000948}
949
950/*
951 * ecm_tracker_ip_header_helper_icmp()
952 * Interpret a ICMP V4 header
953 */
954static bool ecm_tracker_ip_header_helper_icmp(struct ecm_tracker_ip_protocols *etip, struct ecm_tracker_ip_protocol_header *etiph, struct ecm_tracker_ip_header *ip_hdr,
955 struct sk_buff *skb, uint8_t protocol, ecm_tracker_ip_protocol_type_t ecm_ip_protocol, uint32_t offset, uint32_t remain, int16_t *next_hdr)
956{
957 struct icmphdr icmp_header_buffer;
958 struct icmphdr *icmp_header;
959
960 DEBUG_ASSERT((protocol == IPPROTO_ICMP) && (ecm_ip_protocol == ECM_TRACKER_IP_PROTOCOL_TYPE_ICMP), "Bad protocol: %u or ecm_ip_protocol: %d", protocol, ecm_ip_protocol);
961
962 if (remain < 8) {
963 return false;
964 }
965
966 icmp_header = skb_header_pointer(skb, offset, sizeof(struct icmphdr), &icmp_header_buffer);
967 if (!icmp_header) {
968 return false;
969 }
970 switch(icmp_header->type) {
971 case ICMP_SOURCE_QUENCH:
972 case ICMP_REDIRECT:
973 case ICMP_TIME_EXCEEDED:
974 case ICMP_DEST_UNREACH:
975 /*
976 * Should be at least our 8 bytes and minimum 20 bytes for an IP header.
977 * NOTE: We are not looking at options that extend this header!
978 */
979 if (remain < 28) {
980 DEBUG_WARN("icmp skb: %p type: %u too small: %u\n", skb, icmp_header->type, remain);
981 return false;
982 }
983 etiph->header_size = 8;
984 etiph->size = remain;
985 break;
986
987 case ICMP_ADDRESS:
988 case ICMP_ADDRESSREPLY:
989 case ICMP_TIMESTAMP:
990 if (remain < 12) {
991 DEBUG_WARN("icmp skb: %p type: %u too small: %u\n", skb, icmp_header->type, remain);
992 return false;
993 }
994 etiph->header_size = 12;
995 etiph->size = remain;
996 break;
997 case ICMP_TIMESTAMPREPLY:
998 if (remain < 20) {
999 DEBUG_WARN("icmp skb: %p type: %u too small: %u\n", skb, icmp_header->type, remain);
1000 return false;
1001 }
1002 etiph->header_size = 20;
1003 etiph->size = remain;
1004 break;
1005 case ICMP_PARAMETERPROB:
1006 case ICMP_INFO_REQUEST:
1007 case ICMP_INFO_REPLY:
1008 default:
1009 etiph->header_size = 8;
1010 etiph->size = remain;
1011 }
1012 etiph->protocol_number = protocol;
1013 etiph->offset = offset;
1014
1015 /*
1016 * There is no header following a ICMP header
1017 */
1018 *next_hdr = -1;
Nicolas Costa585002e2014-05-15 09:46:04 -05001019 return true;
Ben Menchaca84f36632014-02-28 20:57:38 +00001020}
1021
Gareth Williams88be3722015-03-23 19:51:01 +00001022#ifdef ECM_TRACKER_DPI_SUPPORT_ENABLE
Ben Menchaca84f36632014-02-28 20:57:38 +00001023/*
Ben Menchaca84f36632014-02-28 20:57:38 +00001024 * ecm_tracker_data_limit_set()
1025 * Set global tracked data limit
1026 */
1027void ecm_tracker_data_limit_set(uint32_t limit)
1028{
1029 int data_limit = (int)limit;
1030 DEBUG_ASSERT(data_limit > 0, "Invalid limit %d\n", data_limit);
1031 spin_lock_bh(&ecm_tracker_lock);
1032 ecm_tracker_data_limit = data_limit;
1033 spin_unlock_bh(&ecm_tracker_lock);
1034}
1035EXPORT_SYMBOL(ecm_tracker_data_limit_set);
1036
1037/*
1038 * ecm_tracker_data_limit_get()
1039 * Return global tracked data limit
1040 */
1041uint32_t ecm_tracker_data_limit_get(void)
1042{
1043 uint32_t data_total;
1044 spin_lock_bh(&ecm_tracker_lock);
1045 data_total = (uint32_t)ecm_tracker_data_limit;
1046 spin_unlock_bh(&ecm_tracker_lock);
1047 return data_total;
1048}
1049EXPORT_SYMBOL(ecm_tracker_data_limit_get);
1050
1051/*
1052 * ecm_tracker_data_total_get()
1053 * Return global tracked data quantity
1054 */
1055uint32_t ecm_tracker_data_total_get(void)
1056{
1057 uint32_t data_total;
1058 spin_lock_bh(&ecm_tracker_lock);
1059 data_total = (uint32_t)ecm_tracker_data_total;
1060 spin_unlock_bh(&ecm_tracker_lock);
1061 return data_total;
1062}
1063EXPORT_SYMBOL(ecm_tracker_data_total_get);
1064
1065/*
1066 * ecm_tracker_data_buffer_total_get()
1067 * Return global tracked data buffer size
1068 */
1069uint32_t ecm_tracker_data_buffer_total_get(void)
1070{
1071 uint32_t data_buffer_total;
1072 spin_lock_bh(&ecm_tracker_lock);
1073 data_buffer_total = (uint32_t)ecm_tracker_data_buffer_total;
1074 spin_unlock_bh(&ecm_tracker_lock);
1075 return data_buffer_total;
1076}
1077EXPORT_SYMBOL(ecm_tracker_data_buffer_total_get);
1078
1079/*
1080 * ecm_tracker_data_total_increase()
1081 * Increase global tracked data quantity
1082 *
1083 * If this function returns false then the increase has been denied and tracking of that data should not occur.
1084 * Therefore call this function BEFORE tracking the actual data.
1085 */
1086bool ecm_tracker_data_total_increase(uint32_t n, uint32_t data_buffer_size)
1087{
1088 spin_lock_bh(&ecm_tracker_lock);
1089
1090 /*
1091 * Would we exceed our global limit?
1092 */
1093 DEBUG_ASSERT((ecm_tracker_data_total + (int)n) > 0, "bad total\n");
1094 if (((ecm_tracker_data_buffer_total + data_buffer_size) > ecm_tracker_data_buffer_limit)
1095 || ((ecm_tracker_data_total + n) > ecm_tracker_data_limit)) {
1096 spin_unlock_bh(&ecm_tracker_lock);
1097 return false;
1098 }
1099 ecm_tracker_data_buffer_total += data_buffer_size;
1100 ecm_tracker_data_total += (int)n;
1101 spin_unlock_bh(&ecm_tracker_lock);
1102 return true;
1103}
1104EXPORT_SYMBOL(ecm_tracker_data_total_increase);
1105
1106/*
1107 * ecm_tracker_data_total_decrease()
1108 * Decrease global tracked data quantity
1109 */
1110void ecm_tracker_data_total_decrease(uint32_t n, uint32_t data_buffer_size)
1111{
1112 spin_lock_bh(&ecm_tracker_lock);
1113 ecm_tracker_data_total -= (int)n;
1114 ecm_tracker_data_buffer_total -= data_buffer_size;
1115 DEBUG_ASSERT(ecm_tracker_data_total >= 0, "bad total\n");
1116 DEBUG_ASSERT(ecm_tracker_data_buffer_total >= 0, "bad total\n");
1117 spin_unlock_bh(&ecm_tracker_lock);
1118}
1119EXPORT_SYMBOL(ecm_tracker_data_total_decrease);
Gareth Williams88be3722015-03-23 19:51:01 +00001120#endif
Ben Menchaca84f36632014-02-28 20:57:38 +00001121
1122/*
1123 * ecm_tracker_module_get()
1124 * Take a reference to the module
1125 */
1126void ecm_tracker_module_get(void)
1127{
1128 try_module_get(THIS_MODULE);
1129}
1130EXPORT_SYMBOL(ecm_tracker_module_get);
1131
1132/*
1133 * ecm_tracker_module_put()
1134 * Release a reference to the module
1135 */
1136void ecm_tracker_module_put(void)
1137{
1138 module_put(THIS_MODULE);
1139}
1140EXPORT_SYMBOL(ecm_tracker_module_put);
1141
Gareth Williams88be3722015-03-23 19:51:01 +00001142/*
1143 * ecm_tracker_sender_state_to_string()
1144 * Convert a sender state to a string equivalent
1145 */
1146const char *ecm_tracker_sender_state_to_string(enum ecm_tracker_sender_states s)
Nicolas Costa1d9eb992014-05-15 10:01:03 -05001147{
1148 return ecm_tracker_sender_state_strings[s];
1149}
1150EXPORT_SYMBOL(ecm_tracker_sender_state_to_string);
1151
Gareth Williams88be3722015-03-23 19:51:01 +00001152/*
1153 * ecm_tracker_connection_state_to_string()
1154 * Convert a connection state to its string equivalent
1155 */
1156const char *ecm_tracker_connection_state_to_string(enum ecm_tracker_connection_states s)
Nicolas Costa1d9eb992014-05-15 10:01:03 -05001157{
1158 return ecm_tracker_connection_state_strings[s];
1159}
1160EXPORT_SYMBOL(ecm_tracker_connection_state_to_string);