LMS id {0000} = visibly undefined
[svn/Prometheus-QoS/.git] / prometheus.c
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2008 Michael Polak (xChaos) */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
9
10 /* Modified by: xChaos, 20110427
11 ludva, 20080415
12
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
17
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
22
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
26
27 GNU General Public License is located in file COPYING */
28
29 #define STRLEN 256
30 #define FIRSTGROUPID 1024
31 #define FIRSTIPCLASS 2048
32 #undef DEBUG
33
34 #include "cll1-0.6.2.h"
35
36 const char *version = "0.8.3";
37
38 /* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */
39 /* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */
40 /* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */
41 /* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */
42
43 const char *stats_html_signature = "<small>Statistics generated by Prometheus QoS version %s<br>GPL+Copyright(C)2005-2011 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></small>\n";
44
45 /* ======= All path names are defined here (for RPM patch) ======= */
46
47 char *tc = "/sbin/tc"; /* requires tc with HTB support */
48 char *iptables = "/sbin/iptables"; /* requires iptables utility */
49 char *iptablessave = "/sbin/iptables-save"; /* not yet required */
50 char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */
51 const char *ls = "/bin/ls"; /* this is not user configurable :-) */
52
53 char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
54 char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
55
56 char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
57 char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
58 char *html = "/var/www/traffic.html"; /* hall of fame filename */
59 char *preview = "/var/www/preview.html"; /* hall of fame preview */
60 char *cmdlog = "/var/log/prometheuslog"; /* command log filename */
61 char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
62 char *log_url = "logs/"; /* log directory relative URI prefix (partial URL) */
63 char *html_log_dir = "/var/www/logs/html/";
64
65 /* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
66
67 void help(void)
68 {
69 puts("Command line switches:\n\
70 \n\
71 -?, --help this help screen\n\
72 -v, --version show Version number of this utility and exit\n\
73 -c filename force alternative /etc/prometheus.Conf filename\n\
74 -h filename force alternative /etc/Hosts filename (overrides hosts keyword)\n\
75 -f just Flush iptables and tc classes and exit (stop shaping)\n\
76 -9 emergency iptables flush (do not read data transfer statistics)\n\
77 -p just generate Preview of data transfer statistics and exit\n\
78 -d Dry run (preview tc and iptables commands on stdout)\n\
79 -r Run (reset all statistics and start shaping)\n\
80 -n run Now (start shaping without delay - overrides qos-free-delay keyword)\n\
81 -l Mmm YYYY generate HTML summary of traffic Logs (Mmm=Jan-Dec or Year, YYYY=year)\n\
82 -m generate HTML summary of traffic logs for yesterday's Month\n\
83 -y generate HTML summary of traffic logs for yesterday's Year\n");
84 /* not yet implemented:
85 -s start shaping! (keep data transfer statistics - but apply shaping)\n\
86 */
87 }
88
89 /* === Configuraration file values defaults - stored in global variables ==== */
90
91 int filter_type = 1; /*1 mark, 2 classify*/
92 char *mark = "MARK";
93 char *mark_iptables = "MARK --set-mark ";
94 int dry_run = 0; /* preview - use puts() instead of system() */
95 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
96 FILE *iptables_file = NULL;
97 int enable_credit = 1; /* enable credit file */
98 int use_credit = 0; /* use credit file (if enabled)*/
99 char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
100 int hall_of_fame = 1; /* enable hall of fame */
101 char *lan = "eth0"; /* LAN interface */
102 char *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
103 char *wan = "eth1"; /* WAN/ISP interface */
104 char *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
105 char *qos_leaf = "sfq perturb 5"; /* leaf discipline */
106 char *qos_free_zone = NULL; /* QoS free zone */
107 int qos_proxy = 1; /* include proxy port to QoS */
108 int found_lmsid = 0; /* show links to users in LMS information system */
109 int include_upload = 1; /* upload+download=total traffic */
110 char *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */
111 int proxy_port = 3128; /* proxy port number */
112 long long int line = 1024; /* WAN/ISP download in kbps */
113 long long int up = 1024; /* WAN/ISP upload in kbps */
114 int free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */
115 int free_max = 64; /* maximum allowed bandwidth for all undefined hosts */
116 int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
117 int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
118 int max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
119 int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
120 int burst = 8; /* HTB burst (in kbits) */
121 int burst_main = 64;
122 int burst_group = 32;
123 int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
124 int keywordcount = 0;
125 /* not yet implemented:
126 int fixed_packets = 0; maximum number of pps per IP address (not class!)
127 int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
128 */
129 FILE *log_file = NULL;
130 char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
131
132 const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */
133 const int lowest_priority = 7; /* lowest HTB priority (HTB built-in value is 7) */
134 const int idxtable_treshold1 = 24; /* this is no longer configurable */
135 const int idxtable_treshold2 = 12; /* this is no longer configurable */
136 const int idxtable_bitmask1 = 3; /* this is no longer configurable */
137 const int idxtable_bitmask2 = 3; /* this is no longer configurable */
138
139 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
140
141 struct IP
142 {
143 char *addr;
144 char *name;
145 char *sharing;
146 int min;
147 int desired;
148 int max;
149 int mark;
150 int prio;
151 int fixedprio;
152 int group;
153 int lmsid;
154 unsigned long long direct;
155 unsigned long long proxy;
156 unsigned long long upload;
157 unsigned long long traffic;
158 unsigned long long credit;
159 unsigned long pktsup;
160 unsigned long pktsdown;
161 struct Keyword *keyword;
162 list(IP);
163 } *ips=NULL, *ip, *sharedip;
164
165 struct Group
166 {
167 int min;
168 int count;
169 int desired;
170 int id;
171 list(Group);
172 } *groups=NULL, *group;
173
174 struct Index
175 {
176 char *addr;
177 char *id;
178 struct Index *parent;
179 int bitmask;
180 int children;
181 list(Index);
182 } *idxs=NULL, *idx, *metaindex;
183
184 struct Keyword
185 {
186 char *key;
187
188 int asymetry_ratio; /* ratio for ADSL-like upload */
189 int asymetry_fixed; /* fixed treshold for ADSL-like upload */
190 int data_limit; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
191 int data_prio; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
192 long fixed_limit; /* fixed data limit for setting lower HTB ceil */
193 long fixed_prio; /* fixed data lmit for setting lower HTB prio */
194 int reserve_min; /* bonus for nominal HTB rate bandwidth (in kbps) */
195 int reserve_max; /* malus for nominal HTB ceil (in kbps) */
196 // int divide_max; /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */
197 // int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */
198 int default_prio; /* default HTB priority for this keyword */
199 char *html_color;
200 int ip_count;
201 char *leaf_discipline;
202
203 list(Keyword);
204 } *keyword,*defaultkeyword=NULL,*keywords=NULL;
205
206 /* Damned, this must be object oriented! This looks almost like constructor ;-) */
207
208 void TheIP(void)
209 {
210 create(ip,IP);
211 ip->name = "";
212 ip->addr = "";
213 ip->sharing = NULL;
214 ip->prio = highest_priority+1;
215 ip->lmsid = -1;
216 ip->fixedprio = \
217 ip->mark = \
218 ip->min = \
219 ip->max = \
220 ip->desired = \
221 ip->credit = \
222 ip->upload = \
223 ip->proxy = \
224 ip->direct = \
225 ip->traffic = \
226 ip->pktsup = \
227 ip->pktsdown = 0;
228 ip->keyword = keywords;
229 push(ip,ips);
230 }
231
232 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
233
234 char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)
235 {
236 /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
237 int dot=0,n;
238 char *ip,*outip,*outptr,*fmt;
239
240 duplicate(inip,ip);
241 /* debug printf("(%s,%d) -> ",ip,bitmask); */
242
243 if(ip && *ip && bitmask>=0 && bitmask<=32)
244 {
245 string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
246 }
247 else
248 {
249 /* should never exit here */
250 return "undefined";
251 }
252 outptr=outip;
253 while(ip && *ip)
254 {
255 if(*ip=='.')
256 {
257 if(dot<(bitmask/8-1))
258 {
259 if(format_as_chainname)
260 {
261 *outptr='_';
262 }
263 else
264 {
265 *outptr='.';
266 }
267 outptr++;
268 dot++;
269 }
270 else
271 {
272 char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
273 if(cutdot)*cutdot='\0';
274 if(format_as_chainname)
275 fmt="_%d_%d";
276 else
277 fmt=".%d";
278 if(bitmask%8)
279 n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
280 else
281 n=0;
282
283 /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
284 sprintf(outptr,fmt,n,bitmask);
285 if(!format_as_chainname) while(bitmask<24)
286 {
287 strcat(outip,".0");
288 bitmask+=8;
289 }
290 /* debug printf("[%s]\n",outip); */
291 return outip;
292 }
293 }
294 else
295 {
296 *outptr=*ip;
297 outptr++;
298 }
299 ip++;
300 }
301 /*should never exit here*/
302 *outptr='\0';
303 return outip;
304 }
305
306 char *hash_id(char *ip,int bitmask)
307 {
308 return very_ugly_ipv4_code(ip,bitmask,1);
309 }
310
311 char *subnet_id(char *ip,int bitmask)
312 {
313 return very_ugly_ipv4_code(ip,bitmask,0);
314 }
315
316 /* ================= Let's parse configuration file here =================== */
317
318 void reject_config_and_exit(char *filename)
319 {
320 printf("Configuration file %s rejected - abnormal exit.",filename);
321 exit(-1);
322 }
323
324 void get_config(char *config_filename)
325 {
326 char *cnf="mark";
327
328 printf("Configured keywords: ");
329 parse(config_filename)
330 {
331 option("keyword",kwd);
332 if(kwd)
333 {
334 printf("%s ",kwd);
335
336 create(keyword,Keyword);
337 keyword->key=kwd;
338 keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */
339 keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */
340 keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
341 keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
342 keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */
343 keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */
344 keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
345 keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */
346 keyword->default_prio=highest_priority+1;
347 keyword->html_color="000000";
348 keyword->ip_count=0;
349 keyword->leaf_discipline="";
350
351 push(keyword,keywords);
352 if(!defaultkeyword) defaultkeyword=keyword;
353 keywordcount++;
354
355 kwd=NULL;
356 }
357 else
358 {
359 for_each(keyword,keywords)
360 {
361 int l=strlen(keyword->key);
362
363 if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
364 {
365 char *tmptr=_; /* <---- l+1 ----> */
366 _+=l+1; /* via-prometheus-asymetry-ratio, etc. */
367 ioption("asymetry-ratio",keyword->asymetry_ratio);
368 ioption("asymetry-treshold",keyword->asymetry_fixed);
369 ioption("magic-relative-limit",keyword->data_limit);
370 ioption("magic-relative-prio",keyword->data_prio);
371 loption("magic-fixed-limit",keyword->fixed_limit);
372 loption("magic-fixed-prio",keyword->fixed_prio);
373 ioption("htb-default-prio",keyword->default_prio);
374 ioption("htb-rate-bonus",keyword->reserve_min);
375 ioption("htb-ceil-malus",keyword->reserve_max);
376 option("leaf-discipline",keyword->leaf_discipline);
377 option("html-color",keyword->html_color);
378 _=tmptr;
379
380 if(keyword->data_limit || keyword->fixed_limit ||
381 keyword->data_prio || keyword->fixed_prio)
382 {
383 use_credit=1;
384 }
385 }
386 }
387 }
388
389 option("tc",tc);
390 option("iptables",iptables);
391 option("iptables-save",iptablessave); /* new */
392 option("iptables-restore",iptablesrestore); /* new */
393 option("iptables-file",iptablesfile); /* new */
394 option("hosts",hosts);
395 option("lan-interface",lan);
396 option("wan-interface",wan);
397 option("lan-medium",lan_medium);
398 option("wan-medium",wan_medium);
399 lloption("wan-download",line);
400 lloption("wan-upload",up);
401 ioption("hall-of-fame-enable",hall_of_fame);
402 option("hall-of-fame-title",title);
403 option("hall-of-fame-filename",html);
404 option("hall-of-fame-preview",preview);
405 option("log-filename",cmdlog);
406 option("credit-filename",credit);
407 ioption("credit-enable",enable_credit);
408 option("log-traffic-directory",log_dir);
409 option("log-traffic-html-directory",html_log_dir);
410 option("log-traffic-url-path",log_url);
411 option("qos-free-zone",qos_free_zone);
412 ioption("qos-free-delay",qos_free_delay);
413 ioption("qos-proxy-enable",qos_proxy);
414 option("qos-proxy-ip",proxy_ip);
415 option("htb-leaf-discipline",qos_leaf);
416 ioption("qos-proxy-port",proxy_port);
417 ioption("free-rate",free_min);
418 ioption("free-ceil",free_max);
419 ioption("htb-burst",burst);
420 ioption("htb-burst-main",burst_main);
421 ioption("htb-burst-group",burst_group);
422 ioption("htb-nesting-limit",max_nesting);
423 ioption("htb-r2q",htb_r2q);
424 ioption("magic-include-upload",include_upload);
425 ioption("magic-treshold",magic_treshold);
426 option("filter-type", cnf);
427
428 /* not yet implemented:
429 ioption("magic-fixed-packets",fixed_packets);
430 ioption("magic-relative-packets",packet_limit);
431 */
432 }
433 fail
434 {
435 perror(config_filename);
436 puts("Warning - using built-in defaults instead ...");
437 }
438 done;
439 printf("\n");
440
441 /*leaf discipline for keywords*/
442 for_each(keyword,keywords)
443 {
444 if (!strcmpi(keyword->leaf_discipline, ""))
445 {
446 keyword->leaf_discipline = qos_leaf;
447 }
448 }
449
450 if (strcmpi(cnf, "mark"))
451 {
452 filter_type = 2;
453 mark = "CLASSIFY";
454 mark_iptables = "CLASSIFY --set-class 1:";
455 }
456 else
457 {
458 filter_type = 1;
459 mark = "MARK";
460 mark_iptables = "MARK --set-mark ";
461 }
462
463 /* are supplied values meaningful ?*/
464 if(line<=0 || up<=0)
465 {
466 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
467 reject_config_and_exit(config_filename);
468 }
469 }
470
471 /* ===================== traffic analyser - uses iptables ================ */
472
473 void get_traffic_statistics(void)
474 {
475 char *str,*cmd;
476 int downloadflag=0;
477
478 textfile(Pipe,str) *line,*lines=NULL;
479 string(str,STRLEN);
480 string(cmd,STRLEN);
481
482 sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
483 shell(cmd);
484 input(str,STRLEN)
485 {
486 create(line,Pipe);
487 line->str=str;
488 string(str,STRLEN);
489 append(line,lines);
490 }
491
492 for_each(line,lines)
493 {
494 int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
495 unsigned long long traffic=0;
496 unsigned long pkts=0;
497 char *ipaddr=NULL,*ptr;
498
499 /* debug puts(line->str); */
500 valid_columns(ptr,line->str,' ',col)
501 if(valid) switch(col)
502 {
503 case 1: if(eq(ptr,"Chain"))
504 setchainname=1;
505 else if(eq(ptr,"pkts"))
506 valid=0;
507 else
508 sscanf(ptr,"%lu",&pkts);
509 break;
510 case 2: if(setchainname)
511 {
512 if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
513 downloadflag=1;
514 else
515 if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
516 downloadflag=0;
517
518 if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
519 commonflag=1;
520 }
521 else
522 sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;
523 break;
524 case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)
525 accept=eq(ptr,mark);
526 /*if (filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/
527 break;
528 case 8: if(downloadflag)
529 {
530 if(strstr(proxy_ip,ptr))proxyflag=1;
531 }
532 else
533 ipaddr=ptr;
534 break;
535 case 9: if(downloadflag)ipaddr=ptr;break;
536 }
537
538 if(accept && traffic>0 && ipaddr)
539 {
540 if(proxyflag)
541 {
542 printf("(proxy) ");
543 }
544 else if(!downloadflag)
545 {
546 printf("(upload) ");
547 }
548 printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);
549
550 if_exists(ip,ips,eq(ip->addr,ipaddr));
551 else
552 {
553 TheIP();
554 ip->addr=ipaddr;
555 if(eq(ip->addr,"0.0.0.0/0"))
556 {
557 ip->name="(unregistered)";
558 ip->min=free_min;
559 ip->max=ip->desired=free_max;
560 }
561 }
562
563 if(downloadflag)
564 {
565 if(proxyflag)
566 {
567 ip->proxy=traffic;
568 }
569 else
570 {
571 ip->traffic+=traffic;
572 }
573 ip->direct=ip->traffic-ip->upload-ip->proxy;
574 ip->pktsdown=pkts;
575 }
576 else
577 {
578 ip->upload=traffic;
579 ip->pktsup=pkts;
580 if(include_upload)
581 {
582 ip->traffic+=traffic;
583 }
584 else
585 {
586 if(traffic>ip->traffic)
587 {
588 ip->traffic=traffic;
589 }
590 }
591 }
592 }
593 }
594
595 free(cmd);
596 }
597
598 /* ========== This function executes, logs OR ALSO prints command ========== */
599
600 void safe_run(char *cmd)
601 {
602 if(dry_run)
603 {
604 printf("\n=>%s\n",cmd);
605 }
606 else
607 {
608 system(cmd);
609 }
610 if(log_file)
611 {
612 fprintf(log_file,"%s\n",cmd);
613 }
614 }
615
616 void save_line(char *line)
617 {
618 fprintf(iptables_file,"%s\n",line);
619 }
620
621 void run_restore(void)
622 {
623 char *restor, *str;
624 string(restor,STRLEN);
625
626 /*-----------------------------------------------------------------*/
627 printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);
628 /*-----------------------------------------------------------------*/
629
630 save_line("COMMIT");
631 fclose(iptables_file);
632 if(dry_run)
633 {
634 parse(iptablesfile)
635 {
636 printf("%s\n",_);
637 }
638 done;
639 }
640
641 sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
642 safe_run(restor);
643
644 free(restor);
645 }
646
647 /* == This function strips extra characters after IP address and stores it = */
648
649 void parse_ip(char *str)
650 {
651 char *ptr,*ipaddr=NULL,*ipname=NULL,*lmsid=NULL;
652
653 ptr=strchr(str,'{');
654 if(ptr)
655 {
656 lmsid=++ptr;
657 while(*ptr && *ptr!='}')
658 {
659 ptr++;
660 }
661 *ptr=0;
662 }
663
664 ptr=str;
665 while(*ptr && *ptr!=' ' && *ptr!=9)
666 {
667 ptr++;
668 }
669
670 *ptr=0;
671 ipaddr=str;
672 ptr++;
673 while(*ptr && (*ptr==' ' || *ptr==9))
674 {
675 ptr++;
676 }
677 ipname=ptr;
678 while(*ptr && *ptr!=' ' && *ptr!=9)
679 {
680 ptr++;
681 }
682 *ptr=0;
683
684 if_exists(ip,ips,eq(ip->addr,ipaddr));
685 else
686 {
687 TheIP();
688 }
689 ip->addr=ipaddr;
690 ip->name=ipname;
691 if(lmsid)
692 {
693 ip->lmsid=atoi(lmsid);
694 found_lmsid=1;
695 }
696 }
697
698 char *parse_datafile_line(char *str)
699 {
700 char *ptr=strchr(str,' ');
701
702 if(ptr)
703 {
704 *ptr=0;
705 ptr++;
706 return ptr;
707 }
708 else
709 {
710 return NULL;
711 }
712 }
713
714 struct IpLog
715 {
716 char *name;
717 long traffic;
718 long guaranted;
719 int i;
720 int lmsid;
721 long l;
722 list(IpLog);
723 } *iplog,*iplogs;
724
725 void parse_ip_log(int argc, char **argv)
726 {
727 char *month, *year, *str, *name="(undefined)", *ptr, *ptr2, *filename;
728 long traffic=0l, traffic_month, total=0, guaranted;
729 int col, col2, y_ok, m_ok, accept_month, i=1, any_month=0, lmsid;
730 char mstr[4], ystr[5];
731 FILE *f;
732 string(str,STRLEN);
733 string(filename,STRLEN);
734
735 if(argv[1][1]=='l') /* -l */
736 {
737 if(argc<4)
738 {
739 puts("Missing parameter(s)!\nUsage: prometheus -l Mmm YYYY (Mmm=Jan-Dec or Year, YYYY=year)");
740 exit(-1);
741 }
742 else
743 {
744 month=argv[2];
745 if(eq(month,"Year")) any_month=1;
746 year=argv[3];
747 }
748 }
749 else
750 {
751 time_t t = time(NULL) - 3600*24 ; /* yesterday's timestamp*/
752 struct tm *timep = localtime(&t);
753
754 if(argv[1][1]=='m') /* -m yestarday - month */
755 {
756 strftime(mstr, 4, "%b", timep);
757 month=mstr;
758 strftime(ystr, 5, "%Y", timep);
759 year=ystr;
760 }
761 else /* -y yesterday - year */
762 {
763 month="Year";
764 any_month=1;
765 strftime(ystr, 5, "%Y", timep);
766 year=ystr;
767 }
768 }
769 printf("Analysing traffic for %s %s ...\n",month,year);
770
771 /* sorry... next release of C<<1 header file will include for_path_files(name,path) { } macro */
772 sprintf(str,"%s %s/",ls,log_dir);
773 shell(str);
774 input(str,STRLEN)
775 {
776 if(strstr(str,".log"))
777 {
778 ptr=strrchr(str,'\n');
779 if(ptr) *ptr='\0';
780 sprintf(filename,"%s/%s",log_dir,str);
781 printf("Parsing %s ...",filename);
782 accept_month=0;
783 traffic_month=0;
784 guaranted=0;
785 lmsid=-1;
786 parse(filename)
787 {
788 y_ok=m_ok=0;
789 valid_columns(ptr,_,'\t',col) switch(col)
790 {
791 case 2: name = ptr;break;
792 case 3: traffic = atol(ptr);break;
793 /* column number - was 7, now 11...*/
794 case 7:
795 case 8:
796 case 9:
797 case 10:
798 case 11: if (isalpha(*ptr)) /* character, not numeric string = date, just one*/
799 {
800 valid_columns(ptr2,ptr,' ',col2) switch(col2)
801 {
802 case 2: if(any_month || eq(ptr2,month)) m_ok = 1; break;
803 case 5: if(eq(ptr2,year)) y_ok = 1; break;
804 }
805 }
806 else
807 {
808 if(col == 7) guaranted = atol(ptr);
809 if(col == 10) lmsid = atoi(ptr);
810 }
811 }
812
813 if(y_ok && m_ok)
814 {
815 traffic_month += traffic;
816 accept_month = 1;
817 }
818 }
819 done;
820
821 if(accept_month)
822 {
823 create(iplog,IpLog);
824 iplog->name = name;
825 iplog->guaranted = guaranted;
826 iplog->traffic = traffic_month;
827 iplog->lmsid = lmsid;
828 insert(iplog,iplogs,desc_order_by,traffic);
829 printf(" %ld MB\n",iplog->traffic);
830 }
831 else
832 {
833 puts(" no records.");
834 }
835 }
836 }
837 sprintf(str,"%s/%s-%s.html",html_log_dir,year,month);
838 printf("Writing %s ...",str);
839 f=fopen(str,"w");
840 if(f)
841 {
842 fprintf(f,"<table border><tr><th colspan=\"2\">%s %s</th><th colspan=\"2\">Data transfers</th><th align=\"right\">Min.speed</th></tr>\n ",month,year);
843
844 for_each(iplog,iplogs)
845 {
846 if(iplog->traffic)
847 {
848 fprintf(f,"<tr><td align=\"right\">%d</td><th align=\"left\">%s</td><td align=\"right\">%ld M</td><th align=\"right\">%ld G</th><td align=\"right\">%ld kbps</th></tr>\n",
849 i++, iplog->name, iplog->traffic, iplog->traffic>>10, iplog->guaranted);
850 total+=iplog->traffic>>10;
851 iplog->i=i;
852 iplog->l=total;
853 }
854 }
855 fprintf(f,"<tr><th colspan=\"3\" align=\"left\">Total:</th><th align=\"right\">%ld GB</th><th align=\"right\">%Ld kbps</th></tr>\n", total, line);
856 fputs("</table>\n", f);
857
858 if(i>10)
859 {
860 fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
861 fputs("<tr><td>Analytic category</td>\n",f);
862 fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
863
864 if_exists(iplog,iplogs,iplog->l>=total/4)
865 {
866 fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
867 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
868 }
869
870 if_exists(iplog,iplogs,iplog->i==10)
871 {
872 fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
873 fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
874 }
875
876 if_exists(iplog,iplogs,iplog->l>=total/2)
877 {
878 fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
879 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
880 }
881
882 if_exists(iplog,iplogs,iplog->l>=4*total/5)
883 {
884 fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
885 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
886 }
887
888 if_exists (iplog,iplogs,iplog->i>=i/5)
889 {
890 fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
891 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
892 }
893
894 if_exists(iplog,iplogs,iplog->i>=i/4)
895 {
896 fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
897 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
898 }
899
900 if_exists(iplog,iplogs,iplog->i>=i/2)
901 {
902 fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
903 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
904 }
905
906 if_exists(iplog,iplogs,iplog->i>=4*i/5)
907 {
908 fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
909 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
910 }
911
912 fprintf(f,"<tr><td>All users, all traffic</td>\n");
913 fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%ld G</th><th align=\"right\">100 %%</th></tr>\n",i-1,total);
914 fputs("</table>\n", f);
915 }
916
917 fprintf(f, stats_html_signature, version);
918 fclose(f);
919 puts(" done.");
920 }
921 }
922
923 /*-----------------------------------------------------------------*/
924 /* Are you looking for int main(int argc, char **argv) ? :-)) */
925 /*-----------------------------------------------------------------*/
926
927 program
928 {
929 int i=0;
930 FILE *f=NULL;
931 char *str, *ptr, *d;
932 char *substring;
933 int class_count=0,ip_count=0;
934 int parent=1;
935 int just_flush=FALSE;
936 int nodelay=FALSE;
937 int just_preview=FALSE; /* preview - generate just stats */
938 int just_logs=FALSE; /* just parse logs */
939 int run=FALSE;
940
941 char *chain_forward, *chain_postrouting;
942 char *althosts=NULL;
943
944 printf("\n\
945 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
946 Version %s - Copyright (C)2005-2011 Michael Polak (xChaos)\n\
947 iptables-restore & burst tunning & classify modification by Ludva\n\
948 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
949
950 /*----- Boring... we have to check command line options first: ----*/
951
952 arguments
953 {
954 argument("-c") { nextargument(config); }
955 argument("-h") { nextargument(althosts);}
956 argument("-d") { run=TRUE; dry_run=TRUE; }
957 argument("-f") { run=TRUE; just_flush=TRUE; }
958 argument("-9") { run=TRUE; just_flush=9; }
959 argument("-p") { run=TRUE; just_preview=TRUE; }
960 argument("-r") { run=TRUE; }
961 argument("-n") { run=TRUE; nodelay=TRUE; }
962 argument("-l") { just_logs=TRUE; }
963 argument("-m") { just_logs=TRUE; }
964 argument("-y") { just_logs=TRUE; }
965 argument("-?") { help(); exit(0); }
966 argument("--help") { help(); exit(0); }
967 argument("-v") { exit(0); }
968 argument("--version") { exit(0); }
969 }
970
971 if(dry_run)
972 {
973 puts("*** THIS IS JUST DRY RUN ! ***\n");
974 }
975
976 date(d); /* this is typical cll1.h macro - prints current date */
977
978 /*-----------------------------------------------------------------*/
979 printf("Parsing configuration file %s ...\n", config);
980 /*-----------------------------------------------------------------*/
981 get_config(config);
982
983 if(just_logs)
984 {
985 parse_ip_log(argc,argv);
986 exit(0);
987 }
988 else if(not run)
989 {
990 help();
991 exit(0);
992 }
993
994 if(althosts)
995 {
996 hosts=althosts;
997 }
998
999 if(just_flush<9)
1000 {
1001 /*-----------------------------------------------------------------*/
1002 puts("Parsing iptables verbose output ...");
1003 /*-----------------------------------------------------------------*/
1004 get_traffic_statistics();
1005 }
1006
1007 /*-----------------------------------------------------------------*/
1008 printf("Parsing class defintion file %s ...\n", hosts);
1009 /*-----------------------------------------------------------------*/
1010 int groupidx = FIRSTGROUPID;
1011 parse(hosts)
1012 {
1013 str=_;
1014
1015 if(*str<'0' || *str>'9')
1016 {
1017 /* any line starting with non-number is comment ...*/
1018 continue;
1019 }
1020
1021 //Does this IP share QoS class with some other ?
1022 substring=strstr(str,"sharing-");
1023 if(substring)
1024 {
1025 substring+=8; //"sharing-"
1026 parse_ip(str);
1027 ip_count++;
1028 ip->sharing=substring;
1029 ip->keyword=defaultkeyword; /* settings for default keyword */
1030 while(*substring && *substring!='\n')
1031 {
1032 substring++;
1033 }
1034 *substring=0;
1035 }
1036 else
1037 {
1038 //Do we have to create new QoS class for this IP ?
1039
1040 if_exists(keyword,keywords,(substring=strstr(str,keyword->key)))
1041 {
1042 parse_ip(str);
1043 ip_count++;
1044 ip->keyword=keyword;
1045 keyword->ip_count++;
1046 ip->prio=keyword->default_prio;
1047 substring+=strlen(keyword->key)+1;
1048 ptr=substring;
1049 while(*ptr && *ptr!='-')
1050 {
1051 ptr++;
1052 }
1053 if(*ptr=='-')
1054 {
1055 *ptr=0;
1056 ip->max=ip->desired=atoi(ptr+1);
1057 }
1058 ip->min=atoi(substring);
1059 if(ip->min<=0)
1060 {
1061 printf(" %s: Illegal value of minimum bandwidth 0 kbps, using %d kbps\n",str,free_min);
1062 ip->min=free_min;
1063 }
1064 if(ip->max<=ip->min)
1065 {
1066 ip->fixedprio=1;
1067 ip->max=ip->min+ip->keyword->reserve_min;
1068 }
1069 else
1070 {
1071 ip->max-=ip->keyword->reserve_max;
1072 if(ip->max<ip->min)
1073 {
1074 ip->max=ip->min;
1075 }
1076 }
1077 ip->mark=FIRSTIPCLASS+1+class_count++;
1078
1079 if_exists(group,groups,group->min==ip->min)
1080 {
1081 group->count++;
1082 group->desired+=ip->min;
1083 ip->group = group->id;
1084 }
1085 else
1086 {
1087 create(group,Group);
1088 group->min=ip->min;
1089 group->id = groupidx++;
1090 ip->group = group->id;
1091
1092 if(group->min<8) group->min=8;
1093 /* Warning - this is maybe because of primitive tc namespace, can be fixed */
1094 /* it is because class IDs are derived from min. bandwidth. - xCh */
1095 //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;
1096
1097 group->count=1;
1098 group->desired=ip->min;
1099 insert(group,groups,desc_order_by,min);
1100 }
1101 }//endif keyword-
1102 }//endif sharing-
1103 }
1104 fail
1105 {
1106 perror(hosts);
1107 exit(-1);
1108 }
1109 done;
1110
1111 /*-----------------------------------------------------------------*/
1112 /* cll1.h - let's allocate brand new character buffer... */
1113 /*-----------------------------------------------------------------*/
1114 string(str,STRLEN);
1115
1116 /*-----------------------------------------------------------------*/
1117 puts("Resolving shared connections ...");
1118 /*-----------------------------------------------------------------*/
1119 for_selected(ip,ips,ip->sharing)
1120 {
1121 for_selected(sharedip,ips,eq(sharedip->name,ip->sharing))
1122 {
1123 sharedip->traffic+=ip->traffic;
1124 ip->traffic=0;
1125 ip->mark=sharedip->mark;
1126 break;
1127 }
1128 if(!sharedip)
1129 {
1130 printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);
1131 }
1132 }
1133
1134 if(enable_credit && just_flush<9)
1135 {
1136 /*-----------------------------------------------------------------*/
1137 printf("Parsing credit file %s ...\n", credit);
1138 /*-----------------------------------------------------------------*/
1139 parse(credit)
1140 {
1141 ptr=parse_datafile_line(_);
1142 if(ptr)
1143 {
1144 if_exists(ip,ips,eq(ip->addr,_))
1145 {
1146 sscanf(ptr,"%Lu",&(ip->credit));
1147 }
1148 }
1149 }
1150 done;
1151 }
1152
1153 if(!just_preview)
1154 {
1155 /*-----------------------------------------------------------------*/
1156 puts("Initializing iptables and tc classes ...");
1157 /*-----------------------------------------------------------------*/
1158
1159 iptables_file=fopen(iptablesfile,"w");
1160 if (iptables_file == NULL)
1161 {
1162 puts("Cannot open iptablesfile!");
1163 exit(-1);
1164 }
1165
1166 log_file=fopen(cmdlog,"w");
1167 if (log_file == NULL)
1168 {
1169 puts("Cannot open logfile!");
1170 exit(-1);
1171 }
1172
1173 save_line(iptablespreamble);
1174 run_restore();
1175
1176 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
1177 safe_run(str);
1178
1179 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
1180 safe_run(str);
1181
1182 iptables_file=fopen(iptablesfile,"w");
1183 save_line(iptablespreamble);
1184
1185 if(qos_free_zone && *qos_free_zone!='0')
1186 {
1187 char *chain;
1188
1189 sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);
1190 save_line(str);
1191
1192 if(qos_proxy)
1193 {
1194 save_line(":post_noproxy - [0:0]");
1195 sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);
1196 save_line(str);
1197 sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);
1198 save_line(str);
1199 sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
1200 save_line(str);
1201
1202 chain="post_noproxy";
1203 }
1204 else
1205 {
1206 chain="POSTROUTING";
1207 }
1208
1209 sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);
1210 save_line(str);
1211 }
1212
1213 if(ip_count>idxtable_treshold1 && !just_flush)
1214 {
1215 int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
1216 char *subnet, *buf;
1217 /*-----------------------------------------------------------------*/
1218 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
1219 /*-----------------------------------------------------------------*/
1220
1221 save_line(":post_common - [0:0]");
1222 save_line(":forw_common - [0:0]");
1223
1224 for_selected(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
1225 {
1226 buf=hash_id(ip->addr,bitmask);
1227 if_exists(idx,idxs,eq(idx->id,buf))
1228 {
1229 idx->children++;
1230 }
1231 else
1232 {
1233 create(idx,Index);
1234 idx->addr=ip->addr;
1235 idx->id=buf;
1236 idx->bitmask=bitmask;
1237 idx->parent=NULL;
1238 idx->children=0;
1239 idxcount++;
1240 push(idx,idxs);
1241 }
1242 }
1243
1244 /* brutal perfomance optimalization */
1245 while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
1246 {
1247 bitmask-=idxtable_bitmask2;
1248 idxcount=0;
1249
1250 for_selected(idx,idxs,idx->parent==NULL)
1251 {
1252 buf=hash_id(idx->addr,bitmask);
1253 if_exists(metaindex,idxs,eq(metaindex->id,buf))
1254 {
1255 metaindex->children++;
1256 }
1257 else
1258 {
1259 create(metaindex,Index);
1260 metaindex->addr=idx->addr;
1261 metaindex->id=buf;
1262 metaindex->bitmask=bitmask;
1263 metaindex->parent=NULL;
1264 metaindex->children=0;
1265 idxcount++;
1266 push(metaindex,idxs);
1267 }
1268 idx->parent=metaindex;
1269 }
1270 }
1271
1272 /* this should slightly optimize throughout ... */
1273 sort(idx,idxs,desc_order_by,children);
1274 sort(idx,idxs,order_by,bitmask);
1275
1276 i=0;
1277 for_each(idx,idxs)
1278 {
1279 subnet=subnet_id(idx->addr,idx->bitmask);
1280 printf("%d: %s/%d\n",++i,subnet,idx->bitmask);
1281
1282 sprintf(str,":post_%s - [0:0]", idx->id);
1283 save_line(str);
1284
1285 sprintf(str,":forw_%s - [0:0]", idx->id);
1286 save_line(str);
1287
1288 if(idx->parent)
1289 {
1290 string(buf,strlen(idx->parent->id)+6);
1291 sprintf(buf,"post_%s",idx->parent->id);
1292 }
1293 else
1294 {
1295 buf="POSTROUTING";
1296 }
1297
1298 sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);
1299 save_line(str);
1300
1301 sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);
1302 save_line(str);
1303
1304 if(idx->parent)
1305 {
1306 string(buf,strlen(idx->parent->id)+6);
1307 sprintf(buf,"forw_%s",idx->parent->id);
1308 }
1309 else
1310 {
1311 buf="FORWARD";
1312 }
1313
1314 sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);
1315 save_line(str);
1316
1317 sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);
1318 save_line(str);
1319 }
1320 printf("Total indexed iptables chains created: %d\n", i);
1321
1322 sprintf(str,"-A FORWARD -o %s -j forw_common", wan);
1323 save_line(str);
1324
1325 sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);
1326 save_line(str);
1327 }
1328
1329 }
1330
1331 if(just_flush)
1332 {
1333 fclose(iptables_file);
1334 if (log_file) fclose(log_file);
1335 puts("Just flushed iptables and tc classes - now exiting ...");
1336 exit(0);
1337 }
1338
1339 if(!just_preview)
1340 {
1341 if(!dry_run && !nodelay && qos_free_delay)
1342 {
1343 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
1344 sleep(qos_free_delay);
1345 }
1346
1347 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,lan,htb_r2q);
1348 safe_run(str);
1349
1350 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1351 tc,lan,lan_medium,lan_medium,burst_main,highest_priority);
1352 safe_run(str);
1353
1354 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1355 tc,lan,line,line,burst_main,highest_priority);
1356 safe_run(str);
1357
1358 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);
1359 safe_run(str);
1360
1361 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1362 tc,wan,wan_medium,wan_medium,burst_main,highest_priority);
1363 safe_run(str);
1364
1365 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1366 tc,wan,up,up,burst_main,highest_priority);
1367 safe_run(str);
1368 }
1369
1370 /*-----------------------------------------------------------------*/
1371 puts("Locating heavy downloaders and generating root classes ...");
1372 /*-----------------------------------------------------------------*/
1373 sort(ip,ips,desc_order_by,traffic);
1374
1375 /*-----------------------------------------------------------------*/
1376 /* sub-scope - local variables */
1377 {
1378 long long int rate=line;
1379 long long int max=line;
1380 int group_count=0;
1381 FILE *credit_file=NULL;
1382
1383 if(!just_preview && !dry_run && enable_credit)
1384 {
1385 credit_file=fopen(credit,"w");
1386 }
1387
1388 for_each(group,groups)
1389 {
1390 if(!just_preview)
1391 {
1392 //download
1393 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
1394 tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
1395 safe_run(str);
1396
1397 //upload
1398 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
1399 tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);
1400 safe_run(str);
1401 }
1402
1403 if(group_count++<max_nesting)
1404 {
1405 parent=group->id;
1406 }
1407
1408 rate-=digital_divide*group->min;
1409 if(rate<group->min)
1410 {
1411 rate=group->min;
1412 }
1413
1414 /*shaping of aggresive downloaders, with credit file support */
1415 if(use_credit)
1416 {
1417 int group_rate=group->min, priority_sequence=lowest_priority;
1418
1419 for_selected(ip, ips, ip->min==group->min && ip->max>ip->min)
1420 {
1421 if( ip->keyword->data_limit && !ip->fixedprio &&
1422 ip->traffic>ip->credit+
1423 (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)) )
1424 {
1425 if(group_rate<ip->max)
1426 {
1427 ip->max=group_rate;
1428 }
1429 group_rate+=magic_treshold;
1430 ip->prio=lowest_priority;
1431 if(ip->prio<highest_priority+2)
1432 {
1433 ip->prio=highest_priority+2;
1434 }
1435 }
1436 else
1437 {
1438 if( ip->keyword->data_prio && !ip->fixedprio &&
1439 ip->traffic>ip->credit+
1440 (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20)) )
1441 {
1442 ip->prio=priority_sequence--;
1443 if(ip->prio<highest_priority+1)
1444 {
1445 ip->prio=highest_priority+1;
1446 }
1447 }
1448
1449 if(credit_file)
1450 {
1451 unsigned long long lcredit=0;
1452
1453 if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1454 {
1455 lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1456 }
1457 fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1458 }
1459 }
1460 }
1461
1462 }
1463 }
1464 if(credit_file)
1465 {
1466 fclose(credit_file);
1467 }
1468 }
1469
1470 if(just_preview)
1471 {
1472 f=fopen(preview,"w");
1473 ptr=preview;
1474 }
1475 else if(!dry_run && !just_flush)
1476 {
1477 /*-----------------------------------------------------------------*/
1478 printf("Writing data transfer database ...\n");
1479 /*-----------------------------------------------------------------*/
1480 f=fopen("/var/run/prometheus.previous","w");
1481 if(f)
1482 {
1483 for_selected(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)
1484 fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);
1485 fclose(f);
1486 }
1487
1488 f=fopen(html,"w");
1489 ptr=html;
1490 }
1491
1492 if(f)
1493 {
1494 int total=0;
1495 int count=1;
1496 i=0;
1497
1498 /*-----------------------------------------------------------------*/
1499 printf("Sorting data and generating statistics page %s ...\n",ptr);
1500 /*-----------------------------------------------------------------*/
1501
1502 fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);
1503 fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);
1504 fputs("</tr>\n",f);
1505
1506 for_each(group,groups)
1507 {
1508 #ifdef DEBUG
1509 printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);
1510 #endif
1511 fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);
1512 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);
1513
1514 for_each(keyword,keywords)
1515 {
1516 fprintf(f,"<td align=\"right\"><font color=\"#%s\">%d M</font></td>",keyword->html_color,group->min*keyword->data_limit);
1517 }
1518 i+=group->desired;
1519 total+=group->count;
1520 count++;
1521 }
1522 #ifdef DEBUG
1523 printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);
1524 #endif
1525 fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %Ld k</td>",line);
1526 fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);
1527
1528 for_each(keyword,keywords)
1529 {
1530 fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count);
1531 }
1532 fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));
1533 fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);
1534
1535 fputs("</table>\n",f);
1536 }
1537 else if(!dry_run && !just_flush)
1538 perror(html);
1539
1540 i=1;
1541 if(f)
1542 {
1543 unsigned long long total=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
1544 int active_classes=0;
1545 int colspan;
1546 FILE *iplog;
1547 struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
1548
1549 colspan=11;
1550 if(qos_proxy)
1551 {
1552 colspan++;
1553 }
1554 if(found_lmsid)
1555 {
1556 colspan++;
1557 }
1558
1559 fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);
1560 fprintf(f," (%s)</th></tr>\n", d);
1561 fputs("<tr><td align=\"right\">#</td><td>hostname</td>",f);
1562 if(found_lmsid)
1563 {
1564 fputs("<td align=\"right\">lms</td>\n",f);
1565 }
1566 fputs("<td align=\"right\">credit</td>\
1567 <td align=\"right\">limit</td>\
1568 <td align=\"right\">total</td>\
1569 <td align=\"right\">direct</td>\n",f);
1570 if(qos_proxy)
1571 {
1572 fputs("<td align=\"right\">proxy</td>\n",f);
1573 }
1574 fputs("<td align=\"right\">upload</td>\
1575 <td align=\"right\">minimum</td>\
1576 <td align=\"right\">desired</td>\
1577 <td align=\"right\">maximum</td>\
1578 <td>prio</td></tr>\n",f);
1579
1580 for_each(ip,ips)
1581 {
1582 char *f1="", *f2="";
1583 if(ip->max<ip->desired)
1584 {
1585 f1="<font color=\"red\">";
1586 f2="</font>";
1587 }
1588 else if(ip->prio>highest_priority+1)
1589 {
1590 f1="<font color=\"brown\">";
1591 f2="</font>";
1592 }
1593
1594 #ifdef DEBUG
1595 printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
1596 #endif
1597 fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a></td>\n", ip->name, i, log_url, ip->name, ip->name);
1598 if(found_lmsid)
1599 {
1600 fputs("<td align=\"right\">",f);
1601 if(ip->lmsid > 0)
1602 {
1603 /*base URL will be configurable soon ... */
1604 fprintf(f,"<a href=\"https://hermes.spoje.net/?m=customerinfo&amp;id=%d\">%04d</a>\n", ip->lmsid, ip->lmsid);
1605 }
1606 else if(ip->lmsid == 0)
1607 {
1608 fputs("----",f);
1609 }
1610 fputs("</td>\n",f);
1611 }
1612 fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->credit);
1613 fprintf(f,"<td align=\"right\"><font color=\"#%s\">%Lu M</font></td>",
1614 ip->keyword->html_color, ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
1615 fprintf(f,"<td align=\"right\">%s%Lu M%s</td><td align=\"right\">%Lu M</td>\n", f1, ip->traffic, f2, ip->direct);
1616 if(qos_proxy)
1617 {
1618 fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);
1619 }
1620 fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->upload);
1621 fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",
1622 ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);
1623 total+=ip->traffic;
1624 total_direct+=ip->direct;
1625 total_proxy+=ip->proxy;
1626 total_upload+=ip->upload;
1627 if(ip->traffic>0)
1628 {
1629 active_classes++;
1630 tmp_sum+=ip->traffic;
1631 create(sum,Sum);
1632 sum->l=tmp_sum;
1633 sum->i=active_classes;
1634 insert(sum,sums,order_by,i);
1635 }
1636
1637 i++;
1638
1639 if(!just_preview)
1640 {
1641 sprintf(str,"%s/%s.log",log_dir,ip->name);
1642 iplog=fopen(str,"a");
1643 if(iplog)
1644 {
1645 fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%d\t%s",
1646 time(NULL),ip->name,ip->traffic,ip->direct,ip->proxy,ip->upload,ip->min,ip->max,ip->desired,ip->lmsid,d); /* d = date*/
1647 fclose(iplog);
1648 }
1649 }
1650
1651 }
1652 fprintf(f,"<tr><th colspan=\"%d\" align=\"left\">SUMMARY:</td>",colspan-7);
1653 fprintf(f,"<th align=\"right\">%Lu M</th>\
1654 <th align=\"right\">%Lu M</th>\n", total, total_direct);
1655 if(qos_proxy)
1656 {
1657 fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);
1658 }
1659 fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);
1660 fputs("<td colspan=\"4\"></td></th>\n</table>\n",f);
1661
1662 if(active_classes>10)
1663 {
1664 fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
1665 fputs("<tr><td>Analytic category</td>\n",f);
1666 fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
1667
1668 if_exists(sum,sums,sum->l>=total/4)
1669 {
1670 fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
1671 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1672 }
1673
1674 if_exists(sum,sums,sum->i==10)
1675 {
1676 fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
1677 fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1678 }
1679
1680 if_exists(sum,sums,sum->l>=total/2)
1681 {
1682 fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
1683 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1684 }
1685
1686 if_exists(sum,sums,sum->l>=4*total/5)
1687 {
1688 fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
1689 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1690 }
1691
1692 if_exists (sum,sums,sum->i>=(active_classes+1)/5)
1693 {
1694 fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
1695 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1696 }
1697
1698 if_exists(sum,sums,sum->i>=(active_classes+1)/4)
1699 {
1700 fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
1701 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1702 }
1703
1704 if_exists(sum,sums,sum->i>=(active_classes+1)/2)
1705 {
1706 fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
1707 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1708 }
1709
1710 if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)
1711 {
1712 fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
1713 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1714 }
1715
1716 fprintf(f,"<tr><td>All users, all traffic</td>\n");
1717 fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%Lu M</th><th align=\"right\">100 %%</th></tr>\n",active_classes,total);
1718 fputs("</table>\n", f);
1719 }
1720 fprintf(f, stats_html_signature, version);
1721 fclose(f);
1722 }
1723
1724 if(just_preview)
1725 {
1726 puts("Statistics preview generated (-p switch) - now exiting ...");
1727 exit(0);
1728 }
1729
1730 /*-----------------------------------------------------------------*/
1731 puts("Generating iptables and tc classes ...");
1732 /*-----------------------------------------------------------------*/
1733
1734 i=0;
1735 printf("%-22s %-15s mark\n","name","ip");
1736
1737 for_selected(ip,ips,ip->mark>0)
1738 {
1739
1740 if(idxs)
1741 {
1742 char *buf;
1743 duplicate(ip->addr,buf);
1744 buf=hash_id(ip->addr,32-idxtable_bitmask1);
1745
1746 string(chain_forward,6+strlen(buf));
1747 strcpy(chain_forward,"forw_");
1748 strcat(chain_forward,buf);
1749
1750 string(chain_postrouting,6+strlen(buf));
1751 strcpy(chain_postrouting,"post_");
1752 strcat(chain_postrouting,buf);
1753
1754 free(buf);
1755 }
1756 else
1757 {
1758 chain_forward="FORWARD";
1759 chain_postrouting="POSTROUTING";
1760 }
1761
1762 printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1763
1764 /* -------------------------------------------------------- mark download */
1765
1766 sprintf(str,"-A %s -d %s/32 -o %s -j %s%d",chain_postrouting,ip->addr,lan,mark_iptables,ip->mark);
1767 /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/
1768 /* -m limit --limit 1/s */
1769 save_line(str);
1770
1771 if(qos_proxy)
1772 {
1773 sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,mark_iptables,ip->mark);
1774 /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/
1775 save_line(str);
1776 }
1777
1778 sprintf(str,"-A %s -d %s/32 -o %s -j ACCEPT",chain_postrouting,ip->addr,lan);
1779 save_line(str);
1780
1781 /* -------------------------------------------------------- mark upload */
1782 sprintf(str,"-A %s -s %s/32 -o %s -j %s%d",chain_forward,ip->addr,wan,mark_iptables,ip->mark);
1783 /* sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/
1784 save_line(str);
1785
1786 sprintf(str,"-A %s -s %s/32 -o %s -j ACCEPT",chain_forward,ip->addr,wan);
1787 save_line(str);
1788
1789 if(ip->min)
1790 {
1791 /* -------------------------------------------------------- download class */
1792 printf("(down: %dk-%dk ", ip->min, ip->max);
1793
1794 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1795 safe_run(str);
1796
1797 if (strcmpi(ip->keyword->leaf_discipline, "none"))
1798 {
1799 sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1800 safe_run(str);
1801 }
1802 if (filter_type == 1)
1803 {
1804 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);
1805 safe_run(str);
1806 }
1807
1808 /* -------------------------------------------------------- upload class */
1809 printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1810 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1811
1812 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1813 tc, wan, ip->group, ip->mark,
1814 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1815 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1816 safe_run(str);
1817
1818 if (strcmpi(ip->keyword->leaf_discipline, "none"))
1819 {
1820 sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1821 safe_run(str);
1822 }
1823 if (filter_type == 1)
1824 {
1825 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);
1826 safe_run(str);
1827 }
1828 }
1829 else
1830 printf("(sharing %s)\n", ip->sharing);
1831 i++;
1832 }
1833
1834 if(idxs)
1835 {
1836 chain_forward = "forw_common";
1837 chain_postrouting = "post_common";
1838 }
1839 else
1840 {
1841 chain_forward = "FORWARD";
1842 chain_postrouting = "POSTROUTING";
1843 }
1844 /* -------------------------------- classify or reject free download */
1845 {
1846 char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
1847 if(free_min) final_chain = "ACCEPT";
1848 if(qos_proxy)
1849 {
1850 if(free_min)
1851 {
1852 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);
1853 save_line(str);
1854 }
1855 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1856 save_line(str);
1857 }
1858 if(free_min)
1859 {
1860 sprintf(str,"-A %s -o %s -j %s%d",chain_postrouting,lan,mark_iptables,3);
1861 save_line(str);
1862 }
1863 sprintf(str,"-A %s -o %s -j %s",chain_postrouting,lan,final_chain);
1864 save_line(str);
1865 /* ------------------------------- classify or reject free upload */
1866 if(free_min)
1867 {
1868 sprintf(str,"-A %s -o %s -j %s%d",chain_forward,wan,mark_iptables,3);
1869 save_line(str);
1870 }
1871 sprintf(str,"-A %s -o %s -j %s",chain_forward,wan,final_chain);
1872 save_line(str);
1873 }
1874
1875 if(free_min) /* allocate free bandwith if it is not zero... */
1876 {
1877 /*-----------------------------------------------------------------*/
1878 puts("Generating free bandwith classes ...");
1879 /*-----------------------------------------------------------------*/
1880 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1881 tc,lan,parent,free_min,free_max,burst,lowest_priority);
1882 safe_run(str);
1883 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1884 tc,wan,parent,free_min,free_max,burst,lowest_priority);
1885 safe_run(str);
1886 /* tc SFQ */
1887 if (strcmpi(qos_leaf, "none"))
1888 {
1889 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);
1890 safe_run(str);
1891
1892 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);
1893 safe_run(str);
1894 }
1895 /* tc handle 1 fw flowid */
1896 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);
1897 safe_run(str);
1898
1899 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);
1900 safe_run(str);
1901 }
1902 printf("Total IP count: %d\n", i);
1903 run_restore();
1904 if (log_file) fclose(log_file);
1905 return 0;
1906 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1907 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1908 }
This page took 2.194508 seconds and 4 git commands to generate.