some more cleanup
[svn/Prometheus-QoS/.git] / prometheus.c
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2012 Michael Polak, Arachne Labs */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
9
10 /* Modified by: xChaos, 20121011
11 ludva, 20080415
12
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
17
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
22
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
26
27 GNU General Public License is located in file COPYING */
28
29 #define STRLEN 512
30 #undef DEBUG
31
32 #include "cll1-0.6.2.h"
33 #include "ipstruct.h"
34
35 const char *version = "0.8.3-g";
36
37 /* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */
38 /* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */
39 /* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */
40 /* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */
41
42 const char *stats_html_signature = "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2012 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
43
44 /* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
45
46 void help(void)
47 {
48 puts("Command line switches:\n\
49 \n\
50 -d Dry run (preview tc and iptables commands on stdout)\n\
51 -r Run (reset all statistics and start shaping - daily usage)\n\
52 -p just generate Preview of data transfer statistics and exit (after -r)\n\
53 -s start Shaping FUP limits (keeps data transfer stat like -p) (after -r)\n\
54 -n run Now (like -r delay - overrides qos-free-delay keyword, after boot)\n\
55 -f just Flush iptables and tc classes and exit (stop shaping, no QiS)\n\
56 -9 emergency iptables flush (like -f, but dumps data transfer statistics)\n\
57 \n\
58 -c filename force alternative /etc/prometheus/prometheus.conf filename\n\
59 -h filename force alternative /etc/hosts filename (overrides hosts keyword)\n\
60 -l Mmm YYYY generate HTML summary of Logged traffic (Mmm=Jan-Dec) (and exit)\n\
61 -m generate HTML summary of traffic for yesterday's Month (and exit)\n\
62 -y generate HTML summary of traffic for yesterday's Year (and exit)\n\
63 -? --help show this help scree (and exit)\n\
64 -v --version show Version number of this utility (and exit)\n");
65 }
66
67 /* ======= All path names are defined here (for RPM patch) ======= */
68
69 const char *tc = "/sbin/tc"; /* requires tc with HTB support */
70 const char *iptables = "/sbin/iptables"; /* requires iptables utility */
71 const char *iptablessave = "/sbin/iptables-save"; /* not yet required */
72 const char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */
73 const char *ls = "/bin/ls"; /* this is not user configurable :-) */
74
75 char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
76 char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
77
78 char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
79 char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
80 char *classmap = "/var/lib/misc/prometheus.classes"; /* credit log file */
81 char *html = "/var/www/traffic.html"; /* hall of fame - html version */
82 char *preview = "/var/www/preview.html"; /* hall of fame preview - html version */
83 char *json = "/var/www/logs/traffic.json"; /* hall of fame - json version */
84 char *json_preview = "/var/www/logs/preview.json"; /* hall of fame preview - json version */
85 char *cmdlog = "/var/log/prometheuslog"; /* command log filename */
86 char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
87 char *log_url = "/logs/"; /* log directory relative URI prefix (partial URL) */
88 char *html_log_dir = "/var/www/logs/html/";
89
90 char *jquery_url = "http://code.jquery.com/jquery-latest.js";
91 char *lms_url = "/lms/?m=customerinfo&amp;id=";
92 int use_jquery_popups = 1;
93 int row_odd_even = 0; /*<tr class="odd/even"> */
94
95 /* === Configuraration file values defaults - stored in global variables ==== */
96
97 int filter_type = 1; /*1 mark, 2 classify*/
98 char *mark = "MARK";
99 char *mark_iptables = "MARK --set-mark ";
100 int dry_run = 0; /* preview - use puts() instead of system() */
101 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
102 FILE *iptables_file = NULL;
103 int enable_credit = 1; /* enable credit file */
104 int use_credit = 0; /* use credit file (if enabled)*/
105 char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
106 int hall_of_fame = 1; /* enable hall of fame */
107 char *lan = "eth0"; /* LAN interface */
108 char *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
109 char *wan = "eth1"; /* WAN/ISP interface */
110 char *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
111 char *qos_leaf = "sfq perturb 5"; /* leaf discipline */
112 char *qos_free_zone = NULL; /* QoS free zone */
113 int qos_proxy = 1; /* include proxy port to QoS */
114 int found_lmsid = 0; /* show links to users in LMS information system */
115 int include_upload = 1; /* upload+download=total traffic */
116 char *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */
117 int proxy_port = 3128; /* proxy port number */
118 long long int line = 1024; /* WAN/ISP download in kbps */
119 long long int up = 1024; /* WAN/ISP upload in kbps */
120 int free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */
121 int free_max = 64; /* maximum allowed bandwidth for all undefined hosts */
122 int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
123 int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
124 int max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
125 int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
126 int burst = 8; /* HTB burst (in kbits) */
127 int burst_main = 64;
128 int burst_group = 32;
129 int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
130 int keywordcount = 0;
131 int class_count = 0;
132 int ip_count = 0;
133 /* not yet implemented:
134 int fixed_packets = 0; maximum number of pps per IP address (not class!)
135 int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
136 */
137 FILE *log_file = NULL;
138 char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
139
140 const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */
141 const int lowest_priority = 7; /* lowest HTB priority (HTB built-in value is 7) */
142 const int idxtable_treshold1 = 24; /* this is no longer configurable */
143 const int idxtable_treshold2 = 12; /* this is no longer configurable */
144 const int idxtable_bitmask1 = 3; /* this is no longer configurable */
145 const int idxtable_bitmask2 = 3; /* this is no longer configurable */
146
147 struct IP *ips = NULL, *ip, *sharedip;
148 struct Group *groups = NULL, *group;
149 struct Keyword *keyword, *defaultkeyword=NULL, *keywords=NULL;
150
151 void parse_ip_log(int argc, char **argv);
152 /* implementid in parselog.c */
153
154 void parse_hosts(char *hosts);
155 /* implementid in parsehosts.c */
156
157 const char *tr_odd_even(void)
158 {
159 row_odd_even = 1 - row_odd_even;
160 if(row_odd_even)
161 {
162 return "<tr class=\"even\">\n";
163 }
164 else
165 {
166 return "<tr class=\"odd\">\n";
167 }
168 }
169
170 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
171
172 struct Index
173 {
174 char *addr;
175 char *id;
176 struct Index *parent;
177 int bitmask;
178 int children;
179 list(Index);
180 } *idxs=NULL, *idx, *metaindex;
181
182
183 void TheIP(void);
184 /* function implemented in parsehosts.c */
185
186 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
187
188 char *very_ugly_ipv4_code(char *inip, int bitmask, int format_as_chainname)
189 {
190 /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
191 int dot=0, n;
192 char *ip,*outip,*outptr,*fmt;
193
194 duplicate(inip,ip);
195 /* debug printf("(%s,%d) -> ",ip,bitmask); */
196
197 if(ip && *ip && bitmask>=0 && bitmask<=32)
198 {
199 string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
200 }
201 else
202 {
203 /* should never exit here */
204 return "undefined";
205 }
206 outptr=outip;
207 while(ip && *ip)
208 {
209 if(*ip=='.')
210 {
211 if(dot<(bitmask/8-1))
212 {
213 if(format_as_chainname)
214 {
215 *outptr='_';
216 }
217 else
218 {
219 *outptr='.';
220 }
221 outptr++;
222 dot++;
223 }
224 else
225 {
226 char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
227 if(cutdot)
228 {
229 *cutdot = '\0';
230 }
231
232 if(format_as_chainname)
233 {
234 fmt = "_%d_%d";
235 }
236 else
237 {
238 fmt = ".%d";
239 }
240
241 if(bitmask%8)
242 {
243 n = atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
244 }
245 else
246 {
247 n = 0;
248 }
249
250 /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
251 sprintf(outptr,fmt,n,bitmask);
252 if(!format_as_chainname)
253 {
254 while(bitmask<24)
255 {
256 strcat(outip,".0");
257 bitmask+=8;
258 }
259 }
260 /* debug printf("[%s]\n",outip); */
261 return outip;
262 }
263 }
264 else
265 {
266 *outptr=*ip;
267 outptr++;
268 }
269 ip++;
270 }
271 /*should never exit here*/
272 *outptr='\0';
273 return outip;
274 }
275
276 char *index_id(char *ip,int bitmask)
277 {
278 return very_ugly_ipv4_code(ip,bitmask,1);
279 }
280
281 char *subnet_id(char *ip,int bitmask)
282 {
283 return very_ugly_ipv4_code(ip,bitmask,0);
284 }
285
286 /* ================= Let's parse configuration file here =================== */
287
288 void reject_config_and_exit(char *filename)
289 {
290 printf("Configuration file %s rejected - abnormal exit.",filename);
291 exit(-1);
292 }
293
294 void get_config(char *config_filename)
295 {
296 char *cnf="mark";
297
298 printf("Configured keywords: ");
299 parse(config_filename)
300 {
301 option("keyword",kwd);
302 if(kwd)
303 {
304 printf("%s ",kwd);
305
306 create(keyword,Keyword);
307 keyword->key=kwd;
308 keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */
309 keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */
310 keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
311 keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
312 keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */
313 keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */
314 keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
315 keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */
316 keyword->default_prio=highest_priority+1;
317 keyword->html_color="000000";
318 keyword->ip_count=0;
319 keyword->leaf_discipline="";
320
321 push(keyword,keywords);
322 if(!defaultkeyword) defaultkeyword=keyword;
323 keywordcount++;
324
325 kwd=NULL;
326 }
327 else
328 {
329 for_each(keyword,keywords)
330 {
331 int l=strlen(keyword->key);
332
333 if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
334 {
335 char *tmptr=_; /* <---- l+1 ----> */
336 _+=l+1; /* via-prometheus-asymetry-ratio, etc. */
337 ioption("asymetry-ratio",keyword->asymetry_ratio);
338 ioption("asymetry-treshold",keyword->asymetry_fixed);
339 ioption("magic-relative-limit",keyword->data_limit);
340 ioption("magic-relative-prio",keyword->data_prio);
341 loption("magic-fixed-limit",keyword->fixed_limit);
342 loption("magic-fixed-prio",keyword->fixed_prio);
343 ioption("htb-default-prio",keyword->default_prio);
344 ioption("htb-rate-bonus",keyword->reserve_min);
345 ioption("htb-ceil-malus",keyword->reserve_max);
346 option("leaf-discipline",keyword->leaf_discipline);
347 option("html-color",keyword->html_color);
348 _=tmptr;
349
350 if(keyword->data_limit || keyword->fixed_limit ||
351 keyword->data_prio || keyword->fixed_prio)
352 {
353 use_credit=1;
354 }
355 }
356 }
357 }
358
359 option("tc",tc);
360 option("iptables",iptables);
361 option("iptables-save",iptablessave); /* new */
362 option("iptables-restore",iptablesrestore); /* new */
363 option("iptables-in-filename",iptablesfile); /* new */
364 option("hosts",hosts);
365 option("lan-interface",lan);
366 option("wan-interface",wan);
367 option("lan-medium",lan_medium);
368 option("wan-medium",wan_medium);
369 lloption("wan-download",line);
370 lloption("wan-upload",up);
371 ioption("hall-of-fame-enable",hall_of_fame);
372 option("hall-of-fame-title",title);
373 option("hall-of-fame-filename",html);
374 option("json-filename",json);
375 option("hall-of-fame-preview",preview);
376 option("json-preview",json_preview);
377 option("log-filename",cmdlog);
378 option("credit-filename",credit);
379 option("classmap-filename",classmap);
380 ioption("credit-enable",enable_credit);
381 option("log-traffic-directory",log_dir);
382 option("log-traffic-html-directory",html_log_dir);
383 option("log-traffic-url-path",log_url);
384 option("jquery-url",jquery_url);
385 option("lms-url",lms_url);
386 ioption("use-jquery-popups",use_jquery_popups);
387 option("qos-free-zone",qos_free_zone);
388 ioption("qos-free-delay",qos_free_delay);
389 ioption("qos-proxy-enable",qos_proxy);
390 option("qos-proxy-ip",proxy_ip);
391 option("htb-leaf-discipline",qos_leaf);
392 ioption("qos-proxy-port",proxy_port);
393 ioption("free-rate",free_min);
394 ioption("free-ceil",free_max);
395 ioption("htb-burst",burst);
396 ioption("htb-burst-main",burst_main);
397 ioption("htb-burst-group",burst_group);
398 ioption("htb-nesting-limit",max_nesting);
399 ioption("htb-r2q",htb_r2q);
400 ioption("magic-include-upload",include_upload);
401 ioption("magic-treshold",magic_treshold);
402 option("filter-type", cnf);
403 /* not yet implemented:
404 ioption("magic-fixed-packets",fixed_packets);
405 ioption("magic-relative-packets",packet_limit);
406 */
407 }
408 fail
409 {
410 perror(config_filename);
411 puts("Warning - using built-in defaults instead ...");
412 }
413 done; /* ugly macro end */
414 printf("\n");
415
416 /* leaf discipline for keywords */
417 for_each(keyword,keywords)
418 {
419 if(!strcmpi(keyword->leaf_discipline, ""))
420 {
421 keyword->leaf_discipline = qos_leaf;
422 }
423 }
424
425 if(strcmpi(cnf, "mark"))
426 {
427 filter_type = 2;
428 mark = "CLASSIFY";
429 mark_iptables = "CLASSIFY --set-class 1:";
430 }
431 else
432 {
433 filter_type = 1;
434 mark = "MARK";
435 mark_iptables = "MARK --set-mark ";
436 }
437
438 /* are supplied values meaningful ?*/
439 if(line<=0 || up<=0)
440 {
441 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
442 reject_config_and_exit(config_filename);
443 }
444 }
445
446 /* ===================== traffic analyser - uses iptables ================ */
447
448 void get_traffic_statistics(void)
449 {
450 char *str,*cmd;
451 int downloadflag=0;
452
453 textfile(Pipe,str) *line,*lines=NULL;
454 string(str,STRLEN);
455 string(cmd,STRLEN);
456
457 sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
458 shell(cmd);
459 input(str,STRLEN)
460 {
461 create(line,Pipe);
462 line->str=str;
463 string(str,STRLEN);
464 append(line,lines);
465 }
466
467 for_each(line,lines)
468 {
469 int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
470 unsigned long long traffic=0;
471 unsigned long pkts=0;
472 char *ipaddr=NULL,*ptr;
473
474 /* debug puts(line->str); */
475 valid_columns(ptr,line->str,' ',col)
476 if(valid) switch(col)
477 {
478 case 1: if(eq(ptr,"Chain"))
479 {
480 setchainname=1;
481 }
482 else if(eq(ptr,"pkts"))
483 {
484 valid=0;
485 }
486 else
487 {
488 sscanf(ptr,"%lu",&pkts);
489 }
490 break;
491 case 2: if(setchainname)
492 {
493 if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
494 {
495 downloadflag = 1;
496 }
497 else
498 {
499 if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
500 {
501 downloadflag = 0;
502 }
503 }
504 if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
505 {
506 commonflag = 1;
507 }
508 }
509 else
510 {
511 sscanf(ptr,"%Lu",&traffic);
512 traffic += (1<<19);
513 traffic >>= 20;
514 }
515 break;
516 case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)
517 {
518 accept=eq(ptr,mark);
519 }
520 /*if(filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/
521 break;
522 case 8: if(downloadflag)
523 {
524 if(strstr(proxy_ip,ptr))
525 {
526 proxyflag=1;
527 }
528 }
529 else
530 {
531 ipaddr=ptr;
532 }
533 break;
534 case 9: if(downloadflag)ipaddr=ptr;break;
535 }
536
537 if(accept && traffic>0 && ipaddr)
538 {
539 if(proxyflag)
540 {
541 printf("(proxy) ");
542 }
543 else if(!downloadflag)
544 {
545 printf("(upload) ");
546 }
547 printf("IP %s: %Lu MB (%ld pkts)\n", ipaddr, traffic, pkts);
548
549 if_exists(ip,ips,eq(ip->addr,ipaddr));
550 else
551 {
552 TheIP();
553 ip->addr=ipaddr;
554 if(eq(ip->addr,"0.0.0.0/0"))
555 {
556 ip->name="(unregistered)";
557 ip->min=free_min;
558 ip->max=ip->desired=free_max;
559 }
560 }
561
562 if(downloadflag)
563 {
564 if(proxyflag)
565 {
566 ip->proxy=traffic;
567 }
568 else
569 {
570 ip->traffic+=traffic;
571 }
572 ip->direct=ip->traffic-ip->upload-ip->proxy;
573 ip->pktsdown=pkts;
574 }
575 else
576 {
577 ip->upload=traffic;
578 ip->pktsup=pkts;
579 if(include_upload)
580 {
581 ip->traffic+=traffic;
582 }
583 else
584 {
585 if(traffic>ip->traffic)
586 {
587 ip->traffic=traffic;
588 }
589 }
590 }
591 }
592 }
593 free(cmd);
594 }
595
596 /* ========== This function executes, logs OR ALSO prints command ========== */
597
598 void safe_run(char *cmd)
599 {
600 if(dry_run)
601 {
602 printf("\n=>%s\n",cmd);
603 }
604 else
605 {
606 system(cmd);
607 }
608 if(log_file)
609 {
610 fprintf(log_file,"%s\n",cmd);
611 }
612 }
613
614 void save_line(char *line)
615 {
616 fprintf(iptables_file,"%s\n",line);
617 }
618
619 void run_restore(void)
620 {
621 char *restor;
622 string(restor,STRLEN);
623
624 /*-----------------------------------------------------------------*/
625 printf("Running %s <%s ...\n", iptablesrestore, iptablesfile);
626 /*-----------------------------------------------------------------*/
627
628 save_line("COMMIT");
629 fclose(iptables_file);
630 if(dry_run)
631 {
632 parse(iptablesfile)
633 {
634 printf("%s\n",_);
635 }
636 done; /* ugly macro end */
637 }
638
639 sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
640 safe_run(restor);
641
642 free(restor);
643 }
644
645 char *parse_datafile_line(char *str)
646 {
647 char *ptr=strchr(str,' ');
648
649 if(ptr)
650 {
651 *ptr=0;
652 ptr++;
653 return ptr;
654 }
655 else
656 {
657 return NULL;
658 }
659 }
660
661 void append_log(struct IP *self) /*using global variables*/
662 {
663 char *d, *str;
664 FILE *f;
665
666 date(d); /* this is typical cll1.h macro - prints current date */
667 string(str,STRLEN);
668 sprintf(str,"%s/%s.log", log_dir, self->name);
669 f=fopen(str,"a");
670 if(f > 0)
671 {
672 fprintf(f,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%d\t%s",
673 time(NULL), self->name, self->traffic, self->direct, self->proxy,
674 self->upload, self->min, self->max, self->desired, self->lmsid, d); /* d = date*/
675 fclose(f);
676 }
677 else
678 {
679 perror(str);
680 }
681 }
682
683 /*-----------------------------------------------------------------*/
684 /* Are you looking for int main(int argc, char **argv) ? :-)) */
685 /*-----------------------------------------------------------------*/
686
687 program
688 {
689 int i=0; /* just plain old Fortran style integer :-) */
690 FILE *f=NULL; /* everything is just stream of bytes... */
691 char *str, *ptr, *d; /* LET A$=B$ :-) */
692 char *substring;
693
694 int parent=1;
695 int just_flush=FALSE; /* deactivates all previous actions */
696 int nodelay=FALSE;
697 int just_preview=FALSE; /* preview - generate just stats */
698 int start_shaping=FALSE; /* apply FUP - requires classmap file */
699 int just_logs=FALSE; /* just parse logs */
700 int run=FALSE;
701 int total=0;
702
703 char *chain_forward, *chain_postrouting;
704 char *althosts=NULL;
705
706 printf("\n\
707 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
708 Version %s - Copyright (C)2005-2012 Michael Polak, Arachne Labs\n\
709 iptables-restore & burst tunning & classify modification by Ludva\n\
710 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
711
712 /*----- Boring... we have to check command line options first: ----*/
713 arguments
714 {
715 argument("-c") { nextargument(config); }
716 argument("-h") { nextargument(althosts);}
717 argument("-d") { run=TRUE; dry_run=TRUE; }
718 argument("-f") { run=TRUE; just_flush=TRUE; }
719 argument("-9") { run=TRUE; just_flush=9; }
720 argument("-p") { run=TRUE; just_preview=TRUE; }
721 argument("-s") { run=TRUE; just_preview=TRUE; start_shaping=TRUE; }
722 argument("-r") { run=TRUE; }
723 argument("-n") { run=TRUE; nodelay=TRUE; }
724 argument("-l") { just_logs=TRUE; }
725 argument("-m") { just_logs=TRUE; }
726 argument("-y") { just_logs=TRUE; }
727 argument("-?") { help(); exit(0); }
728 argument("--help") { help(); exit(0); }
729 argument("-v") { exit(0); }
730 argument("--version") { exit(0); }
731 }
732
733 if(dry_run)
734 {
735 puts("*** THIS IS JUST DRY RUN ! ***\n");
736 }
737
738 date(d); /* this is typical cll1.h macro - prints current date */
739
740 /*-----------------------------------------------------------------*/
741 printf("Parsing configuration file %s ...\n", config);
742 /*-----------------------------------------------------------------*/
743 get_config(config);
744
745 if(just_logs)
746 {
747 parse_ip_log(argc,argv);
748 exit(0);
749 }
750 else if(not run)
751 {
752 help();
753 exit(0);
754 }
755
756 if(althosts)
757 {
758 hosts=althosts;
759 }
760
761 if(just_flush<9)
762 {
763 /*-----------------------------------------------------------------*/
764 puts("Parsing iptables verbose output ...");
765 /*-----------------------------------------------------------------*/
766 get_traffic_statistics();
767 }
768
769 /*-----------------------------------------------------------------*/
770 printf("Parsing class defintion file %s ...\n", hosts);
771 /*-----------------------------------------------------------------*/
772 parse_hosts(hosts);
773
774 /*-----------------------------------------------------------------*/
775 /* cll1.h - let's allocate brand new character buffer... */
776 /*-----------------------------------------------------------------*/
777 string(str,STRLEN);
778
779 /*-----------------------------------------------------------------*/
780 puts("Resolving shared connections ...");
781 /*-----------------------------------------------------------------*/
782 for_each(ip,ips) if(ip->sharing)
783 {
784 for_each(sharedip,ips) if(eq(sharedip->name,ip->sharing))
785 {
786 sharedip->traffic+=ip->traffic;
787 ip->traffic=0;
788 ip->mark=sharedip->mark;
789 ip->lmsid=sharedip->lmsid;
790 break;
791 }
792 if(not sharedip)
793 {
794 printf("Unresolved shared connection: %s %s sharing-%s\n",
795 ip->addr, ip->name, ip->sharing);
796 }
797 }
798
799 if(enable_credit && just_flush<9)
800 {
801 /*-----------------------------------------------------------------*/
802 printf("Parsing credit file %s ...\n", credit);
803 /*-----------------------------------------------------------------*/
804 parse(credit)
805 {
806 ptr=parse_datafile_line(_);
807 if(ptr)
808 {
809 if_exists(ip,ips,eq(ip->addr,_))
810 {
811 sscanf(ptr,"%Lu",&(ip->credit));
812 }
813 }
814 }
815 done; /* ugly macro end */
816 }
817
818 if(!just_preview)
819 {
820 /*-----------------------------------------------------------------*/
821 puts("Initializing iptables and tc classes ...");
822 /*-----------------------------------------------------------------*/
823
824 iptables_file=fopen(iptablesfile,"w");
825 if(iptables_file == NULL)
826 {
827 puts("Cannot open iptablesfile!");
828 exit(-1);
829 }
830
831 log_file=fopen(cmdlog,"w");
832 if(log_file == NULL)
833 {
834 puts("Cannot open logfile!");
835 exit(-1);
836 }
837
838 save_line(iptablespreamble);
839 run_restore();
840
841 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
842 safe_run(str);
843
844 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
845 safe_run(str);
846
847 iptables_file=fopen(iptablesfile,"w");
848 save_line(iptablespreamble);
849
850 if(qos_free_zone && *qos_free_zone!='0')
851 {
852 char *chain;
853
854 sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);
855 save_line(str);
856
857 if(qos_proxy)
858 {
859 save_line(":post_noproxy - [0:0]");
860 sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);
861 save_line(str);
862 sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);
863 save_line(str);
864 sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
865 save_line(str);
866
867 chain="post_noproxy";
868 }
869 else
870 {
871 chain="POSTROUTING";
872 }
873
874 sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);
875 save_line(str);
876 }
877
878 if(ip_count>idxtable_treshold1 && !just_flush)
879 {
880 int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
881 char *subnet, *buf;
882 /*-----------------------------------------------------------------*/
883 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
884 /*-----------------------------------------------------------------*/
885
886 save_line(":post_common - [0:0]");
887 save_line(":forw_common - [0:0]");
888
889 for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
890 {
891 buf=index_id(ip->addr,bitmask);
892 if_exists(idx,idxs,eq(idx->id,buf))
893 {
894 idx->children++;
895 }
896 else
897 {
898 create(idx,Index);
899 idx->addr=ip->addr;
900 idx->id=buf;
901 idx->bitmask=bitmask;
902 idx->parent=NULL;
903 idx->children=0;
904 idxcount++;
905 push(idx,idxs);
906 }
907 }
908
909 /* brutal perfomance optimalization */
910 while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
911 {
912 bitmask-=idxtable_bitmask2;
913 idxcount=0;
914
915 for_each(idx,idxs) if(idx->parent == NULL)
916 {
917 buf=index_id(idx->addr,bitmask);
918 if_exists(metaindex,idxs,eq(metaindex->id,buf))
919 {
920 metaindex->children++;
921 }
922 else
923 {
924 create(metaindex,Index);
925 metaindex->addr=idx->addr;
926 metaindex->id=buf;
927 metaindex->bitmask=bitmask;
928 metaindex->parent=NULL;
929 metaindex->children=0;
930 idxcount++;
931 push(metaindex,idxs);
932 }
933 idx->parent=metaindex;
934 }
935 }
936
937 /* this should slightly optimize throughout ... */
938 sort(idx,idxs,desc_order_by,children);
939 sort(idx,idxs,order_by,bitmask);
940
941 i=0;
942 for_each(idx,idxs)
943 {
944 subnet=subnet_id(idx->addr,idx->bitmask);
945 printf("%d: %s/%d\n",
946 ++i, subnet, idx->bitmask);
947
948 sprintf(str,":post_%s - [0:0]", idx->id);
949 save_line(str);
950
951 sprintf(str,":forw_%s - [0:0]", idx->id);
952 save_line(str);
953
954 if(idx->parent)
955 {
956 string(buf,strlen(idx->parent->id)+6);
957 sprintf(buf,"post_%s",idx->parent->id);
958 }
959 else
960 {
961 buf="POSTROUTING";
962 }
963
964 sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);
965 save_line(str);
966
967 sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);
968 save_line(str);
969
970 if(idx->parent)
971 {
972 string(buf,strlen(idx->parent->id)+6);
973 sprintf(buf,"forw_%s",idx->parent->id);
974 }
975 else
976 {
977 buf="FORWARD";
978 }
979
980 sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);
981 save_line(str);
982
983 sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);
984 save_line(str);
985 }
986 printf("Total indexed iptables chains created: %d\n", i);
987
988 sprintf(str,"-A FORWARD -o %s -j forw_common", wan);
989 save_line(str);
990
991 sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);
992 save_line(str);
993 }
994
995 }
996
997 if(just_flush)
998 {
999 fclose(iptables_file);
1000 if(log_file)
1001 {
1002 fclose(log_file);
1003 }
1004 puts("Just flushed iptables and tc classes - now exiting ...");
1005 exit(0);
1006 }
1007
1008 if(!just_preview)
1009 {
1010 if(!dry_run && !nodelay && qos_free_delay)
1011 {
1012 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
1013 sleep(qos_free_delay);
1014 }
1015
1016 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
1017 tc,lan,htb_r2q);
1018 safe_run(str);
1019
1020 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1021 tc,lan,lan_medium,lan_medium,burst_main,highest_priority);
1022 safe_run(str);
1023
1024 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1025 tc,lan,line,line,burst_main,highest_priority);
1026 safe_run(str);
1027
1028 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);
1029 safe_run(str);
1030
1031 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1032 tc,wan,wan_medium,wan_medium,burst_main,highest_priority);
1033 safe_run(str);
1034
1035 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1036 tc,wan,up,up,burst_main,highest_priority);
1037 safe_run(str);
1038 }
1039
1040 /*-----------------------------------------------------------------*/
1041 puts("Locating heavy downloaders and generating root classes ...");
1042 /*-----------------------------------------------------------------*/
1043 sort(ip,ips,desc_order_by,traffic);
1044
1045 /*-----------------------------------------------------------------*/
1046 /* sub-scope - local variables */
1047 {
1048 long long int rate = line;
1049 long long int max = line;
1050 int group_count = 0;
1051 FILE *credit_file = NULL;
1052
1053 if(!just_preview && !dry_run && enable_credit)
1054 {
1055 credit_file = fopen(credit,"w");
1056 }
1057
1058 for_each(group,groups)
1059 {
1060 if(!just_preview)
1061 {
1062 //download
1063 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
1064 tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
1065 safe_run(str);
1066
1067 //upload
1068 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
1069 tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);
1070 safe_run(str);
1071 }
1072
1073 if(group_count++ < max_nesting)
1074 {
1075 parent = group->id;
1076 }
1077
1078 rate -= digital_divide*group->min;
1079 if(rate < group->min)
1080 {
1081 rate = group->min;
1082 }
1083
1084 /*shaping of aggresive downloaders, with credit file support */
1085 if(use_credit)
1086 {
1087 int group_rate = group->min, priority_sequence = lowest_priority;
1088
1089 for_each(ip, ips) if(ip->min == group->min && ip->max > ip->min)
1090 {
1091 if( ip->keyword->data_limit && !ip->fixedprio
1092 && ( ip->traffic>ip->credit
1093 + (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))) )
1094 {
1095 if(group_rate<ip->max)
1096 {
1097 ip->max=group_rate;
1098 }
1099 group_rate+=magic_treshold;
1100 ip->prio=lowest_priority;
1101 if(ip->prio<highest_priority+2)
1102 {
1103 ip->prio=highest_priority+2;
1104 }
1105 }
1106 else
1107 {
1108 if( ip->keyword->data_prio
1109 && !ip->fixedprio
1110 && ( ip->traffic>ip->credit
1111 + (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20))) )
1112 {
1113 ip->prio=priority_sequence--;
1114 if(ip->prio<highest_priority+1)
1115 {
1116 ip->prio=highest_priority+1;
1117 }
1118 }
1119
1120 if(credit_file)
1121 {
1122 unsigned long long lcredit=0;
1123
1124 if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1125 {
1126 lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1127 }
1128 fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1129 }
1130 }
1131 }
1132 }
1133 }
1134 if(credit_file)
1135 {
1136 fclose(credit_file);
1137 }
1138 }
1139
1140 if(just_preview)
1141 {
1142 if(start_shaping)
1143 {
1144 printf("Reading %s and applying Fair Use Policy rules ... \n", classmap);
1145 parse(classmap)
1146 {
1147 ptr=strchr(_,' ');
1148 if(ptr)
1149 {
1150 *ptr=0;
1151 ptr++;
1152 if_exists(ip,ips,eq(ip->addr,_))
1153 {
1154 ip->mark=atoi(ptr);
1155 if(ip->max < ip->desired) /* apply FUP limit immediately.... */
1156 {
1157 printf("Applying limit for %-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1158 printf("(down: %dk-%dk ", ip->min, ip->max);
1159 sprintf(str, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1160 tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1161 safe_run(str);
1162 printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1163 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1164 sprintf(str,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1165 tc, wan, ip->group, ip->mark,
1166 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1167 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1168 safe_run(str);
1169 }
1170 }
1171 }
1172 }
1173 fail
1174 {
1175 perror(classmap);
1176 puts("Warning - classmap file not fund, just generating preview ...");
1177 start_shaping=FALSE;
1178 }
1179 done; /* ugly macro end */
1180 }
1181 html=preview;
1182 json=json_preview;
1183 }
1184
1185 if(!dry_run && !just_flush)
1186 {
1187 /*-----------------------------------------------------------------*/
1188 printf("Writing json overview %s ... ", json);
1189 /*-----------------------------------------------------------------*/
1190 f=fopen(json, "w");
1191 if(f > 0)
1192 {
1193 int jsoncount=0;
1194 fprintf(f, "{\n");
1195 for_each(ip, ips)
1196 {
1197 if( ip->lmsid > 0
1198 && (ip->traffic || ip->direct || ip->proxy || ip->upload))
1199 {
1200 if(jsoncount)
1201 {
1202 fprintf(f, ",\n");
1203 }
1204 fprintf(f, " \"%s\":{ \"lms\": %d, \"ip\":\"%s\", \"total\":%Lu, \"down\":%Lu, \"proxy\":%Lu, \"up\":%Lu, \"min\":%d, \"max\":%d, \"limit\":%d }",
1205 ip->name, ip->lmsid, ip->addr, ip->traffic, ip->direct, ip->proxy, ip->upload, ip->min, ip->desired, ip->max);
1206 jsoncount++;
1207 }
1208 }
1209 fprintf(f, "}\n");
1210 fclose(f);
1211 puts("done.");
1212 }
1213 else
1214 {
1215 perror(json);
1216 }
1217 }
1218
1219 f=fopen(html,"w");
1220 if(f > 0)
1221 {
1222 int count=1;
1223 i=0;
1224
1225 /*-----------------------------------------------------------------*/
1226 printf("Sorting data and generating statistics page %s ...\n", html);
1227 /*-----------------------------------------------------------------*/
1228
1229 if(use_jquery_popups)
1230 {
1231 fprintf(f,"<script type=\"text/javascript\" src=\"%s\"></script>\n", jquery_url);
1232 }
1233 fputs("<table class=\"decorated last\">\n\
1234 <caption>Bandwidth classes</caption>\n\
1235 <thead><tr>\n\
1236 <th style=\"text-align: right\">#</th>\n\
1237 <th style=\"text-align: right\">group</th>\n\
1238 <th style=\"text-align: right\">IPs</th>\n\
1239 <th style=\"text-align: right\">requested</th>\n",f);
1240 fprintf(f,"<th colspan=\"%d\">data limits</th>\n", keywordcount);
1241 fputs("</tr></thead><tbody>\n",f);
1242
1243 row_odd_even = 0;
1244 for_each(group, groups)
1245 {
1246 #ifdef DEBUG
1247 printf("%d kb/s group: %d bandwidth requested: %d kb/s\n",group->min,group->count,group->desired);
1248 #endif
1249 fprintf(f, "%s<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d&nbsp;kb/s</td>",
1250 tr_odd_even(), count, group->min);
1251 fprintf(f, "<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d&nbsp;kb/s</td>",
1252 group->count, group->desired);
1253
1254 for_each(keyword, keywords) if(keyword->ip_count)
1255 {
1256 fprintf(f,"<td style=\"text-align: right\"><span style=\"color:#%s\">%d&nbsp;MB</span></td>",
1257 keyword->html_color, group->min*keyword->data_limit);
1258 }
1259 i += group->desired;
1260 total += group->count;
1261 count++;
1262 }
1263 #ifdef DEBUG
1264 printf("Total groups: %d Total bandwidth requested: %d kb/s\nAGGREGATION: 1/%d\n",
1265 count, i, i/line);
1266 #endif
1267 fprintf(f,"</tr></tbody>\n\
1268 <thead><tr>\n\
1269 <th colspan=\"2\" style=\"text-align: left\">Line %Ld kb/s</td>",line);
1270 fprintf(f,"<th style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d kb/s</td>",total,i);
1271
1272 for_each(keyword, keywords) if(keyword->ip_count)
1273 {
1274 fprintf(f,"<th style=\"text-align: right\">%d IPs</th>",keyword->ip_count);
1275 }
1276 fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n", (int)(0.5+i/line));
1277 fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n", keywordcount, total);
1278
1279 fputs("</thead></table>\n",f);
1280 }
1281 else if(!dry_run && !just_flush)
1282 {
1283 perror(html);
1284 }
1285
1286 i=0;
1287 if(f > 0)
1288 {
1289 unsigned long long total_traffic=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
1290 int active_classes=0;
1291 int colspan=12;
1292 struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
1293 int limit_count=0, prio_count=0;
1294 int popup_button=0;
1295
1296 if(qos_proxy)
1297 {
1298 colspan++;
1299 }
1300
1301 fprintf(f,"<p><table class=\"decorated last\">\n<caption>%s",title);
1302 fprintf(f," (%s)</caption>\n", d);
1303 fputs("<thead><tr>\n<th colspan=\"3\">&nbsp;</th>\n",f);
1304 fputs("<th style=\"text-align: right\">credit</th>\n\
1305 <th style=\"text-align: right\">FUP</th>\n\
1306 <th style=\"text-align: right\">total</th>\n\
1307 <th style=\"text-align: right\">down</th>\n",f);
1308 if(qos_proxy)
1309 {
1310 fputs("<th style=\"text-align: right\">proxy</th>\n",f);
1311 }
1312 fputs("<th style=\"text-align: right\">up</th>\n\
1313 <th style=\"text-align: right\">min</th>\n\
1314 <th style=\"text-align: right\">max</th>\n\
1315 <th style=\"text-align: right\">limit</th>\n\
1316 <th>&nbsp;</th>\n\
1317 </tr><tr>\n\
1318 <th style=\"text-align: right\">#</th>\n\
1319 <th>hostname [+sharing]</th>\n\
1320 <th style=\"text-align: right\">LMS</th>\n\
1321 <th style=\"text-align: right\">MB</th>\n\
1322 <th style=\"text-align: right\">MB</th>\n\
1323 <th style=\"text-align: right\">MB</th>\n\
1324 <th style=\"text-align: right\">MB</th>\n\
1325 <th style=\"text-align: right\">MB</th>\n\
1326 <th style=\"text-align: right\">kb/s</th>\n\
1327 <th style=\"text-align: right\">kb/s</th>\n\
1328 <th style=\"text-align: right\">kb/s</th>\n\
1329 <th>prio</th>\n\
1330 </tr></thead><tbody>\n",f);
1331
1332 row_odd_even = 0;
1333 for_each(ip,ips) if(!use_jquery_popups || !ip->sharing)
1334 {
1335 char *f1="", *f2="";
1336 i++;
1337
1338 if(ip->max < ip->desired)
1339 {
1340 f1="<span style=\"color:red\">";
1341 f2="</span>";
1342 limit_count++;
1343 }
1344 else if(ip->prio > highest_priority+1)
1345 {
1346 f1="<span style=\"color:brown\">";
1347 f2="</span>";
1348 prio_count++;
1349 }
1350
1351 #ifdef DEBUG
1352 printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
1353 #endif
1354 /* hostnames -------------------------------------- */
1355 fprintf(f,"%s<td style=\"text-align: right\"><a name=\"%s\"></a>%d</td><td><a class=\"blue\" target=\"_blank\" href=\"%s%s.log\">%s</a>\n",
1356 tr_odd_even(), ip->name, i, log_url, ip->name, ip->name);
1357
1358 if(use_jquery_popups)
1359 {
1360 fprintf(f,"<span id=\"sharing_%d\" style=\"display:none\">",i);
1361 popup_button=0;
1362 for_each(sharedip, ips) if(eq(ip->name, sharedip->sharing))
1363 {
1364 fprintf(f,"<br /><a class=\"blue\" target=\"_blank\" href=\"%s%s.log\">%s</a>\n", log_url, sharedip->name, sharedip->name);
1365 popup_button++;
1366 }
1367 fputs("</span>\n",f);
1368 if(popup_button)
1369 {
1370 fprintf(f,"<span>[<a class=\"blue\" href=\"#\" onClick=\"$(this).parent().hide();$(\'#sharing_%d\').show();$(\'#download_%d\').show();$(\'#upload_%d\').show();return(false);\" style=\"cursor: pointer;\">+%d</a>]</span>",
1371 i, i, i, popup_button);
1372 }
1373 }
1374 fputs("</td>\n",f);
1375 /* ----------------------------------------------- */
1376
1377 if(found_lmsid)
1378 {
1379 fputs("<td style=\"text-align: right\">",f);
1380 if(ip->lmsid > 0)
1381 {
1382 fprintf(f,"<a class=\"blue\" target=\"_blank\" href=\"%s%d\">%04d</a>\n", lms_url, ip->lmsid, ip->lmsid);
1383 }
1384 else if(ip->lmsid == 0)
1385 {
1386 fputs("-------",f);
1387 }
1388 fputs("</td>\n",f);
1389 }
1390 fprintf(f,"<td style=\"text-align: right\">%Lu</td>\n", ip->credit);
1391 fprintf(f,"<td style=\"text-align: right\"><span style=\"color:#%s\">%Lu</span></td>",
1392 ip->keyword->html_color,
1393 ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
1394 fprintf(f,"<td style=\"text-align: right\">%s%Lu%s", f1, ip->traffic, f2);
1395
1396 /* download --------------------------------------- */
1397 fprintf(f,"</td><td style=\"text-align: right\">%Lu", ip->direct);
1398 if(use_jquery_popups)
1399 {
1400 fprintf(f,"<span id=\"download_%d\" style=\"display:none\">",i);
1401 for_each(sharedip, ips) if(eq(ip->name, sharedip->sharing))
1402 {
1403 fprintf(f,"<br />%Lu", sharedip->direct);
1404 }
1405 fputs("</span>\n",f);
1406 }
1407 fputs("</td>\n",f);
1408 /* ----------------------------------------------- */
1409
1410 if(qos_proxy)
1411 {
1412 fprintf(f,"<td style=\"text-align: right\">%Lu</td>\n", ip->proxy);
1413 }
1414 /* upload ---------------------------------------- */
1415 fprintf(f,"<td style=\"text-align: right\">%Lu", ip->upload);
1416 if(use_jquery_popups)
1417 {
1418 fprintf(f,"<span id=\"upload_%d\" style=\"display:none\">",i);
1419 for_each(sharedip,ips) if(eq(ip->name, sharedip->sharing))
1420 {
1421 fprintf(f,"<br />%Lu", sharedip->upload);
1422 }
1423 fputs("</span>\n",f);
1424 }
1425 fputs("</td>\n",f);
1426 /* ----------------------------------------------- */
1427
1428 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1429 <td style=\"text-align: right\">%d</td>\n\
1430 <td style=\"text-align: right\">%s%d%s</td>\n\
1431 <td>%s%d%s</td></tr>\n",
1432 ip->min, ip->desired,
1433 f1, ip->max, f2,
1434 f1, ip->prio, f2);
1435
1436 total_traffic+=ip->traffic;
1437 total_direct+=ip->direct;
1438 total_proxy+=ip->proxy;
1439 total_upload+=ip->upload;
1440 if(ip->traffic>0)
1441 {
1442 active_classes++;
1443 tmp_sum+=ip->traffic;
1444 create(sum,Sum);
1445 sum->l=tmp_sum;
1446 sum->i=active_classes;
1447 insert(sum,sums,order_by,i);
1448 }
1449
1450 if(!just_preview)
1451 {
1452 append_log(ip);
1453 for_each(sharedip,ips) if(eq(ip->name, sharedip->sharing))
1454 {
1455 append_log(sharedip);
1456 }
1457 }
1458 }
1459 fprintf(f,"</tbody><thead><tr>\n\
1460 <th colspan=\"%d\" style=\"text-align: left\">%d CLASSES</th>", colspan-7, i);
1461 fprintf(f,"<th style=\"text-align: right\">%Lu</th><th style=\"text-align: right\">%Lu</th>\n", total_traffic, total_direct);
1462 if(qos_proxy)
1463 {
1464 fprintf(f,"<th style=\"text-align: right\">%Lu</th>\n", total_proxy);
1465 }
1466 fprintf(f,"<th style=\"text-align: right\">%Lu</th>", total_upload);
1467 fprintf(f,"<th colspan=\"4\"><span style=\"color:red\">LIMIT %dx</span> <span style=\"color:brown\">LOW-PRIO %dx</span></th></tr>\n</thead></table>\n",limit_count,prio_count);
1468
1469 row_odd_even = 0;
1470 if(active_classes>10)
1471 {
1472 int top20_count=0,top20_perc1=0;
1473 long long top20_perc2=0;
1474 unsigned long long top20_sum=0l;
1475
1476 fputs("<a name=\"erp\"></a><p><table class=\"decorated last\"><caption>Enterprise Resource Planning (ERP)</caption>\n",f);
1477 fputs("<thead><tr>\n\
1478 <th>Analytic category</th>\n\
1479 <th colspan=\"2\" style=\"text-align: center\">Active Classes</th>\n\
1480 <th colspan=\"2\" style=\"text-align: center\">Data transfers</th>\n\
1481 </tr></thead><tbody>\n",f);
1482
1483 if_exists(sum,sums,sum->l>=total_traffic/4)
1484 {
1485 fprintf(f,"%s<td>Top 25%% of traffic</td>\n", tr_odd_even());
1486 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1487 <td style=\"text-align: right\">%d %%</td>\n\
1488 <td style=\"text-align: right\">%Lu MB</td>\n\
1489 <td style=\"text-align: right\">%Ld %%</td></tr>\n",
1490 sum->i, (100*sum->i+50)/active_classes, sum->l, (100*sum->l+50)/total_traffic);
1491 }
1492
1493 if_exists(sum,sums,sum->i==10)
1494 {
1495 fprintf(f,"%s<td>Top 10 downloaders</td>\n", tr_odd_even());
1496 fprintf(f,"<td style=\"text-align: right\"><strong>10</strong></td>\n\
1497 <td style=\"text-align: right\">%d %%</td>\n\
1498 <td style=\"text-align: right\">%Lu MB</td>\n\
1499 <td style=\"text-align: right\">%Ld %%</td></tr>\n",
1500 (100*sum->i+50)/active_classes, sum->l, (100*sum->l+50)/total_traffic);
1501 }
1502
1503 if_exists(sum,sums,sum->l>=total_traffic/2)
1504 {
1505 fprintf(f,"%s<td>Top 50%% of traffic</td>\n", tr_odd_even());
1506 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1507 <td style=\"text-align: right\">%d %%</td>\n\
1508 <td style=\"text-align: right\">%Lu MB</td>\n\
1509 <td style=\"text-align: right\"><strong>%Ld %%</strong></td></tr>\n",
1510 sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1511 }
1512
1513 if_exists(sum,sums,sum->l>=4*total_traffic/5)
1514 {
1515 fprintf(f,"%s<td>Top 80%% of traffic</td>\n", tr_odd_even());
1516 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1517 <td style=\"text-align: right\">%d %%</td>\n\
1518 <td style=\"text-align: right\">%Lu MB</td>\n\
1519 <td style=\"text-align: right\"><strong>%Ld %%</strong></td></tr>\n",
1520 sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1521 }
1522
1523 if_exists(sum,sums,sum->i>=(active_classes+1)/5)
1524 {
1525 fprintf(f,"%s<td>Top 20%% downloaders</td>\n", tr_odd_even());
1526 top20_count=sum->i;
1527 top20_perc1=(100*sum->i+50)/active_classes;
1528 top20_sum=sum->l;
1529 top20_perc2=(100*sum->l+50)/total_traffic;
1530 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1531 <td style=\"text-align: right\"><strong>%d %%</strong></td>\n\
1532 <td style=\"text-align: right\">%Lu MB</td>\n\
1533 <td style=\"text-align: right\">%Ld %%</td></tr>\n",
1534 top20_count,top20_perc1,top20_sum,top20_perc2);
1535 }
1536
1537 if_exists(sum,sums,sum->i>=(active_classes+1)/4)
1538 {
1539 fprintf(f,"%s<td>Top 25%% downloaders</td>\n", tr_odd_even());
1540 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1541 <td style=\"text-align: right\">%d %%</td>\n\
1542 <td style=\"text-align: right\">%Lu MB</td>\n\
1543 <td style=\"text-align: right\">%Ld %%</td></tr>\n",
1544 sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1545 }
1546
1547 if_exists(sum,sums,sum->i>=(active_classes+1)/2)
1548 {
1549 fprintf(f,"%s<td>Top 50%% downloaders</td>\n", tr_odd_even());
1550 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1551 <td style=\"text-align: right\"><strong>%d %%</strong></td>\n\
1552 <td style=\"text-align: right\">%Lu MB</td>\n\
1553 <td style=\"text-align: right\">%Ld %%</td></tr>\n",
1554 sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1555 }
1556
1557 if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)
1558 {
1559 fprintf(f,"%s<td>Top 80%% downloaders</td>\n", tr_odd_even());
1560 fprintf(f,"<td style=\"text-align: right\">%d</td>\n\
1561 <td style=\"text-align: right\">%d %%</td>\n\
1562 <td style=\"text-align: right\">%Lu MB</td>\n\
1563 <td style=\"text-align: right\">%Ld %%</td></tr></tbody>\n",
1564 sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1565 }
1566
1567 fprintf(f,"<thead><tr><th><a class=\"blue\" target=\"_blank\" href=\"%sERP.log\">All users, all traffic</a></th>\n", log_url);
1568 fprintf(f,"<th style=\"text-align: right\">%d</th>\n\
1569 <th style=\"text-align: right\">100 %%</th>\n\
1570 <th style=\"text-align: right\">%Lu MB</th>\n\
1571 <th style=\"text-align: right\">100 %%</th></tr>\n",active_classes,total_traffic);
1572 fputs("</thead></table>\n", f);
1573
1574 /* write basic ERP data to log directory */
1575 if(!just_preview)
1576 {
1577 FILE *iplog;
1578 sprintf(str,"%s/ERP.log",log_dir);
1579 iplog=fopen(str,"a");
1580 if(iplog)
1581 {
1582 fprintf(iplog,"%ld\t%d\t%d %%\t%Lu M\t%Ld %%\tACTIVE %d\tTRAFFIC %Lu M\tCLASSES %d\tFUP-LIMIT %d\tLOW-PRIO %d\t%s",
1583 time(NULL), top20_count, top20_perc1, top20_sum, top20_perc2,
1584 active_classes, total_traffic, i, limit_count, prio_count, d); /* d = date*/
1585 fclose(iplog);
1586 }
1587 else
1588 {
1589 perror(str);
1590 }
1591 }
1592 }
1593
1594 fprintf(f, stats_html_signature, version);
1595 fclose(f);
1596 }
1597
1598 if(just_preview)
1599 {
1600 char swchar='p';
1601 if(start_shaping)
1602 {
1603 swchar='s';
1604 }
1605 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar);
1606 exit(0);
1607 }
1608
1609 i=0;
1610 #ifdef DEBUG
1611 printf("%-22s %-15s mark\n","name","ip");
1612 #endif
1613
1614 printf("Writing %s ... ", classmap);
1615 f = fopen(classmap, "w");
1616 if(f < 0)
1617 {
1618 perror(classmap);
1619 }
1620
1621 /*-----------------------------------------------------------------*/
1622 puts("Generating iptables and tc classes ... ");
1623 /*-----------------------------------------------------------------*/
1624
1625 for_each(ip, ips) if(ip->mark > 0)
1626 {
1627 if(idxs)
1628 {
1629 char *buf;
1630 duplicate(ip->addr,buf);
1631 buf=index_id(ip->addr,32-idxtable_bitmask1);
1632
1633 string(chain_forward,6+strlen(buf));
1634 strcpy(chain_forward,"forw_");
1635 strcat(chain_forward,buf);
1636
1637 string(chain_postrouting,6+strlen(buf));
1638 strcpy(chain_postrouting,"post_");
1639 strcat(chain_postrouting,buf);
1640
1641 free(buf);
1642 }
1643 else
1644 {
1645 chain_forward="FORWARD";
1646 chain_postrouting="POSTROUTING";
1647 }
1648
1649 #ifdef DEBUG
1650 printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1651 #endif
1652
1653 /* -------------------------------------------------------- mark download */
1654
1655 sprintf(str, "-A %s -d %s/32 -o %s -j %s%d",
1656 chain_postrouting, ip->addr, lan, mark_iptables, ip->mark);
1657 /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/
1658 /* -m limit --limit 1/s */
1659 save_line(str);
1660
1661 if(qos_proxy)
1662 {
1663 sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",
1664 chain_postrouting, proxy_ip, proxy_port, ip->addr, lan, mark_iptables, ip->mark);
1665 /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/
1666 save_line(str);
1667 }
1668
1669 sprintf(str, "-A %s -d %s/32 -o %s -j ACCEPT",
1670 chain_postrouting, ip->addr, lan);
1671 save_line(str);
1672
1673 /* -------------------------------------------------------- mark upload */
1674 sprintf(str, "-A %s -s %s/32 -o %s -j %s%d",
1675 chain_forward, ip->addr, wan, mark_iptables, ip->mark);
1676 /* sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/
1677 save_line(str);
1678
1679 sprintf(str, "-A %s -s %s/32 -o %s -j ACCEPT",
1680 chain_forward, ip->addr, wan);
1681 save_line(str);
1682
1683 if(ip->min)
1684 {
1685 /* -------------------------------------------------------- download class */
1686 #ifdef DEBUG
1687 printf("(down: %dk-%dk ", ip->min, ip->max);
1688 #endif
1689
1690 sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1691 tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1692 safe_run(str);
1693
1694 if(strcmpi(ip->keyword->leaf_discipline, "none"))
1695 {
1696 sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s",
1697 tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1698 safe_run(str);
1699 }
1700
1701 if(filter_type == 1)
1702 {
1703 sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1704 tc, lan, ip->mark, ip->mark);
1705 safe_run(str);
1706 }
1707
1708 /* -------------------------------------------------------- upload class */
1709 #ifdef DEBUG
1710 printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1711 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1712 #endif
1713
1714 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1715 tc, wan, ip->group, ip->mark,
1716 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1717 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1718 safe_run(str);
1719
1720 if(strcmpi(ip->keyword->leaf_discipline, "none"))
1721 {
1722 sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s",
1723 tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1724 safe_run(str);
1725 }
1726
1727 if(filter_type == 1)
1728 {
1729 sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1730 tc, wan, ip->mark, ip->mark);
1731 safe_run(str);
1732 }
1733
1734 if(f > 0)
1735 {
1736 fprintf(f, "%s %d\n", ip->addr, ip->mark);
1737 }
1738 }
1739 else
1740 {
1741 #ifdef DEBUG
1742 printf("(sharing %s)\n", ip->sharing);
1743 #endif
1744 }
1745 i++;
1746 }
1747 if(f > 0)
1748 {
1749 puts("done.");
1750 fclose(f);
1751 }
1752
1753 if(idxs)
1754 {
1755 chain_forward = "forw_common";
1756 chain_postrouting = "post_common";
1757 }
1758 else
1759 {
1760 chain_forward = "FORWARD";
1761 chain_postrouting = "POSTROUTING";
1762 }
1763 /* -------------------------------- classify or reject free download */
1764 {
1765 char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
1766 if(free_min)
1767 {
1768 final_chain = "ACCEPT";
1769 }
1770 if(qos_proxy)
1771 {
1772 if(free_min)
1773 {
1774 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1775 chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);
1776 save_line(str);
1777 }
1778 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",
1779 chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1780 save_line(str);
1781 }
1782 if(free_min)
1783 {
1784 sprintf(str,"-A %s -o %s -j %s%d", chain_postrouting, lan, mark_iptables, 3);
1785 save_line(str);
1786 }
1787 sprintf(str,"-A %s -o %s -j %s", chain_postrouting, lan, final_chain);
1788 save_line(str);
1789 /* ------------------------------- classify or reject free upload */
1790 if(free_min)
1791 {
1792 sprintf(str,"-A %s -o %s -j %s%d", chain_forward, wan, mark_iptables, 3);
1793 save_line(str);
1794 }
1795 sprintf(str,"-A %s -o %s -j %s", chain_forward, wan, final_chain);
1796 save_line(str);
1797 }
1798
1799 if(free_min) /* allocate free bandwith if it is not zero... */
1800 {
1801 /*-----------------------------------------------------------------*/
1802 puts("Generating free bandwith classes ...");
1803 /*-----------------------------------------------------------------*/
1804 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1805 tc, lan, parent, free_min, free_max,burst, lowest_priority);
1806 safe_run(str);
1807 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1808 tc, wan, parent, free_min, free_max, burst, lowest_priority);
1809 safe_run(str);
1810 /* tc SFQ */
1811 if(strcmpi(qos_leaf, "none"))
1812 {
1813 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc, lan, qos_leaf);
1814 safe_run(str);
1815
1816 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc, wan, qos_leaf);
1817 safe_run(str);
1818 }
1819 /* tc handle 1 fw flowid */
1820 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc, lan);
1821 safe_run(str);
1822
1823 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc, wan);
1824 safe_run(str);
1825 }
1826 printf("Total IP count: %d\n", i);
1827 run_restore();
1828 if(log_file)
1829 {
1830 fclose(log_file);
1831 }
1832 return 0;
1833 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1834 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1835 }
This page took 1.332627 seconds and 4 git commands to generate.