diff options
Diffstat (limited to 'packages/openwrt/net/nDPId-testing/nDPId-testing.init')
-rw-r--r-- | packages/openwrt/net/nDPId-testing/nDPId-testing.init | 286 |
1 files changed, 286 insertions, 0 deletions
diff --git a/packages/openwrt/net/nDPId-testing/nDPId-testing.init b/packages/openwrt/net/nDPId-testing/nDPId-testing.init new file mode 100644 index 000000000..850ec47a8 --- /dev/null +++ b/packages/openwrt/net/nDPId-testing/nDPId-testing.init @@ -0,0 +1,286 @@ +#!/bin/sh /etc/rc.common + +START=99 +STOP=80 + +USE_PROCD=1 + +NDPID_SUFFIX="-testing" +NDPISRVD_NAME="nDPIsrvd${NDPID_SUFFIX}" +NDPISRVD_BIN="/usr/bin/${NDPISRVD_NAME}" +NDPISRVD_ANALYSED_NAME="nDPIsrvd${NDPID_SUFFIX}-analysed" +NDPISRVD_ANALYSED_BIN="/usr/bin/${NDPISRVD_ANALYSED_NAME}" +NDPISRVD_CAPTURED_NAME="nDPIsrvd${NDPID_SUFFIX}-captured" +NDPISRVD_CAPTURED_BIN="/usr/bin/${NDPISRVD_CAPTURED_NAME}" +NDPID_NAME="nDPId${NDPID_SUFFIX}" +NDPID_BIN="/usr/sbin/${NDPID_NAME}" +DISTRIBUTOR_SOCKET="/var/run/${NDPID_NAME}/nDPIsrvd-distributor.sock" + +print_arg_bool() { + local cfg="$1" + local var="$2" + local opt="$3" + local aux + + config_get_bool aux "$cfg" "$var" '0' + if [ $aux -ne 0 ]; then + printf ' %s' "$opt" + fi +} + +print_arg_str() { + local cfg="$1" + local var="$2" + local opt="$3" + local aux + + config_get aux "$cfg" "$var" + if [ ! -z "$aux" ]; then + printf ' %s' "$opt$aux" + fi +} + +start_ndpid_instance() { + local cfg=$1 + local aux + local args + local netif + local sink + + config_get_bool aux "$cfg" 'enabled' '0' + if [ "$aux" -eq 0 ]; then + return 1 + fi + + # General + config_get_bool netif "$cfg" 'interface' + if [ -z "$netif" ]; then + netif='default' + fi + + config_get sink "$cfg" 'udp_connect' + if [ -z "$sink" ]; then + sink="/var/run/${NDPID_NAME}/nDPIsrvd-collector.sock" + fi + + args="$(print_arg_str "$cfg" 'interface' '-i')" + args="$args$(print_arg_bool "$cfg" 'use_pfring' '-r')" + args="$args$(print_arg_bool "$cfg" 'internal_only' '-I')" + args="$args$(print_arg_bool "$cfg" 'external_only' '-E')" + args="$args$(print_arg_str "$cfg" 'bpf_filter' '-B')" + args="$args$(print_arg_bool "$cfg" 'use_poll' '-e')" + args="$args$(print_arg_str "$cfg" 'proto_file' '-P')" + args="$args$(print_arg_str "$cfg" 'cat_file' '-C')" + args="$args$(print_arg_str "$cfg" 'ja3_file' '-J')" + args="$args$(print_arg_str "$cfg" 'ssl_file' '-S')" + args="$args$(print_arg_str "$cfg" 'alias' '-a')" + args="$args$(print_arg_bool "$cfg" 'analysis' '-A')" + args="$args$(print_arg_bool "$cfg" 'compression' '-z')" + + # Tuning + args="$args$(print_arg_str "$cfg" 'max_flows_per_thread' '-omax-flows-per-thread=')" + args="$args$(print_arg_str "$cfg" 'max_idle_flows_per_thread' '-omax-idle-flows-per-thread=')" + args="$args$(print_arg_str "$cfg" 'max_reader_threads' '-omax-reader-threads=')" + args="$args$(print_arg_str "$cfg" 'daemon_status_interval' '-odaemon-status-interval=')" + args="$args$(print_arg_str "$cfg" 'compression_scan_interval' '-ocompression-scan-interval=')" + args="$args$(print_arg_str "$cfg" 'compression_flow_inactivity' '-ocompression-flow-inactivity=')" + args="$args$(print_arg_str "$cfg" 'flow_scan_interval' '-oflow-scan-interval=')" + args="$args$(print_arg_str "$cfg" 'generic_max_idle_time' '-ogeneric-max-idle-time=')" + args="$args$(print_arg_str "$cfg" 'icmp_max_idle_time' '-oicmp-max-idle-time=')" + args="$args$(print_arg_str "$cfg" 'udp_max_idle_time' '-oudp-max-idle-time=')" + args="$args$(print_arg_str "$cfg" 'tcp_max_idle_time' '-otcp-max-idle-time=')" + args="$args$(print_arg_str "$cfg" 'tcp_max_post_end_flow_time' '-otcp-max-post-end-flow-time=')" + args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_send' '-omax-packets-per-flow-to-send=')" + args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_process' '-omax-packets-per-flow-to-process=')" + args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_analyse' '-omax-packets-per-flow-to-analyse=')" + args="$args$(print_arg_str "$cfg" 'error_event_threshold_n' '-oerror-event-threshold-n=')" + args="$args$(print_arg_str "$cfg" 'error_event_threshold_time' '-oerror-event-threshold-time=')" + + procd_open_instance + procd_set_param command ${NDPID_BIN} + procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPId-${netif}.pid" + procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPId-${netif}.pid" -c"${sink}" $args + + config_get_bool aux "$cfg" 'respawn' '0' + [ "$aux" = 1 ] && procd_set_param respawn + + procd_close_instance +} + +validate_ndpid_section() { + uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \ + 'enabled:bool:0' \ + 'respawn:bool:0' \ + 'interface:string' \ + 'internal_only:bool:0' \ + 'external_only:bool:0' \ + 'bpf_filter:string' \ + 'udp_connect:string' \ + 'proto_file:string' \ + 'cat_file:string' \ + 'ja3_file:string' \ + 'ssl_file:string' \ + 'alias:string' \ + 'analysis:bool:0' \ + 'compression:bool:0' \ + 'max_flows_per_thread:uinteger' \ + 'max_idle_flows_per_thread:uinteger' \ + 'max_reader_threads:uinteger' \ + 'daemon_status_interval:uinteger' \ + 'compression_scan_interval:uinteger' \ + 'compression_flow_inactivity:uinteger' \ + 'flow_scan_interval:uinteger' \ + 'generic_max_idle_time:uinteger' \ + 'icmp_max_idle_time:uinteger' \ + 'udp_max_idle_time:uinteger' \ + 'tcp_max_idle_time:uinteger' \ + 'tcp_max_post_end_flow_time:uinteger' \ + 'max_packets_per_flow_to_send:uinteger' \ + 'max_packets_per_flow_to_process:uinteger' \ + 'max_packets_per_flow_to_analyse:uinteger' \ + 'error_event_threshold_n:uinteger' \ + 'error_event_threshold_time:uinteger' +} + +start_ndpisrvd_instance() { + local cfg=$1 + local aux + local args + local collector_sock + + config_get_bool aux "$cfg" 'enabled' '0' + if [ "$aux" -eq 0 ]; then + return 1 + fi + + collector_sock="/var/run/${NDPID_NAME}/nDPIsrvd-collector.sock" + + args="$(print_arg_str "$cfg" 'tcp_listen' '-S')" + args="$args$(print_arg_str "$cfg" 'max_remotes' '-m')" + args="$args$(print_arg_str "$cfg" 'max_buffered_json_lines' '-C')" + + procd_open_instance + procd_set_param command ${NDPISRVD_BIN} + procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd.pid" + procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd.pid" -c"${collector_sock}" -s"${DISTRIBUTOR_SOCKET}" $args + + config_get_bool aux "$cfg" 'respawn' '0' + [ "$aux" = 1 ] && procd_set_param respawn + + procd_close_instance +} + +validate_ndpisrvd_section() { + uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \ + 'enabled:bool:0' \ + 'respawn:bool:0' \ + 'tcp_listen:string' \ + 'max_remotes:uinteger' \ + 'max_buffered_json_lines:uinteger' +} + +start_ndpisrvd_analysed_instance() { + local cfg="$1" + local csv_dir + + config_get_bool aux "$cfg" 'enabled' '0' + if [ "$aux" -eq 0 ]; then + return 1 + fi + + config_get aux "$cfg" 'csv_dir' + if [ -z "$aux" ]; then + return 1 + fi + mkdir -p "$aux" + chown ndpi:ndpi "$aux" + + csv_dir="$(print_arg_str "$cfg" 'csv_dir' '')" + csv_dir="-o${csv_dir}/nDPId-analyse.csv" + + procd_open_instance + procd_set_param command ${NDPISRVD_ANALYSED_BIN} + procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd-analysed.pid" + procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd-analysed.pid" -s"${DISTRIBUTOR_SOCKET}" ${csv_dir} + + config_get_bool aux "$cfg" 'respawn' '0' + [ "$aux" = 1 ] && procd_set_param respawn + + procd_close_instance +} + +validate_ndpisrvd_analysed_section() { + uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \ + 'enabled:bool:0' \ + 'respawn:bool:0' \ + 'csv_dir:string' +} + +start_ndpisrvd_captured_instance() { + local cfg="$1" + local args + local risk_args + + config_get_bool aux "$cfg" 'enabled' '0' + if [ "$aux" -eq 0 ]; then + return 1 + fi + + config_get aux "$cfg" 'datadir' + if [ -z "$aux" ]; then + return 1 + fi + mkdir -p "$aux" + chown ndpi:ndpi "$aux" + + handle_capture_risks() { + local risk=" -R$1" + printf '%s' "$risk" + } + risk_args="$(config_list_foreach "$cfg" capture_risk handle_capture_risks)" + + args="$(print_arg_str "$cfg" 'pcap_rotation' '-r')" + args="$args$(print_arg_str "$cfg" 'datadir' '-D')" + args="$args$(print_arg_bool "$cfg" 'capture_guessed' '-G')" + args="$args$(print_arg_bool "$cfg" 'capture_undetected' '-U')" + args="$args$(print_arg_bool "$cfg" 'capture_midstream' '-M')" + args="$args$(print_arg_bool "$cfg" 'ignore_empty_l4' '-E')" + + procd_open_instance + procd_set_param command ${NDPISRVD_CAPTURED_BIN} + procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd-captured.pid" + procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd-captured.pid" -s"${DISTRIBUTOR_SOCKET}" $args ${risk_args} + + config_get_bool aux "$cfg" 'respawn' '0' + [ "$aux" = 1 ] && procd_set_param respawn + + procd_close_instance +} + +validate_ndpisrvd_captured_section() { + uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \ + 'enabled:bool:0' \ + 'respawn:bool:0' \ + 'pcap_rotation:uinteger' \ + 'datadir:string' \ + 'capture_guessed:bool:1' \ + 'capture_undetected:bool:1' \ + 'capture_midstream:bool:1' \ + 'ignore_empty_l4:bool:1' \ + 'capture_risk:list(string)' +} + +start_service() { + config_load ${NDPID_NAME} + + user_exists ndpi 6543 || user_add ndpi 6543 + group_exists ndpi 6543 || group_add ndpi 6543 + + mkdir -p "/var/run/${NDPID_NAME}" + chown ndpi:ndpi "/var/run/${NDPID_NAME}" + + config_foreach validate_ndpisrvd_section nDPIsrvd start_ndpisrvd_instance + config_foreach validate_ndpisrvd_analysed_section nDPIsrvd-analysed start_ndpisrvd_analysed_instance + config_foreach validate_ndpisrvd_captured_section nDPIsrvd-captured start_ndpisrvd_captured_instance + config_foreach validate_ndpid_section nDPId start_ndpid_instance +} |