summaryrefslogtreecommitdiff
path: root/packages/openwrt/net/nDPId-testing/nDPId-testing.init
diff options
context:
space:
mode:
Diffstat (limited to 'packages/openwrt/net/nDPId-testing/nDPId-testing.init')
-rw-r--r--packages/openwrt/net/nDPId-testing/nDPId-testing.init286
1 files changed, 286 insertions, 0 deletions
diff --git a/packages/openwrt/net/nDPId-testing/nDPId-testing.init b/packages/openwrt/net/nDPId-testing/nDPId-testing.init
new file mode 100644
index 000000000..850ec47a8
--- /dev/null
+++ b/packages/openwrt/net/nDPId-testing/nDPId-testing.init
@@ -0,0 +1,286 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+STOP=80
+
+USE_PROCD=1
+
+NDPID_SUFFIX="-testing"
+NDPISRVD_NAME="nDPIsrvd${NDPID_SUFFIX}"
+NDPISRVD_BIN="/usr/bin/${NDPISRVD_NAME}"
+NDPISRVD_ANALYSED_NAME="nDPIsrvd${NDPID_SUFFIX}-analysed"
+NDPISRVD_ANALYSED_BIN="/usr/bin/${NDPISRVD_ANALYSED_NAME}"
+NDPISRVD_CAPTURED_NAME="nDPIsrvd${NDPID_SUFFIX}-captured"
+NDPISRVD_CAPTURED_BIN="/usr/bin/${NDPISRVD_CAPTURED_NAME}"
+NDPID_NAME="nDPId${NDPID_SUFFIX}"
+NDPID_BIN="/usr/sbin/${NDPID_NAME}"
+DISTRIBUTOR_SOCKET="/var/run/${NDPID_NAME}/nDPIsrvd-distributor.sock"
+
+print_arg_bool() {
+ local cfg="$1"
+ local var="$2"
+ local opt="$3"
+ local aux
+
+ config_get_bool aux "$cfg" "$var" '0'
+ if [ $aux -ne 0 ]; then
+ printf ' %s' "$opt"
+ fi
+}
+
+print_arg_str() {
+ local cfg="$1"
+ local var="$2"
+ local opt="$3"
+ local aux
+
+ config_get aux "$cfg" "$var"
+ if [ ! -z "$aux" ]; then
+ printf ' %s' "$opt$aux"
+ fi
+}
+
+start_ndpid_instance() {
+ local cfg=$1
+ local aux
+ local args
+ local netif
+ local sink
+
+ config_get_bool aux "$cfg" 'enabled' '0'
+ if [ "$aux" -eq 0 ]; then
+ return 1
+ fi
+
+ # General
+ config_get_bool netif "$cfg" 'interface'
+ if [ -z "$netif" ]; then
+ netif='default'
+ fi
+
+ config_get sink "$cfg" 'udp_connect'
+ if [ -z "$sink" ]; then
+ sink="/var/run/${NDPID_NAME}/nDPIsrvd-collector.sock"
+ fi
+
+ args="$(print_arg_str "$cfg" 'interface' '-i')"
+ args="$args$(print_arg_bool "$cfg" 'use_pfring' '-r')"
+ args="$args$(print_arg_bool "$cfg" 'internal_only' '-I')"
+ args="$args$(print_arg_bool "$cfg" 'external_only' '-E')"
+ args="$args$(print_arg_str "$cfg" 'bpf_filter' '-B')"
+ args="$args$(print_arg_bool "$cfg" 'use_poll' '-e')"
+ args="$args$(print_arg_str "$cfg" 'proto_file' '-P')"
+ args="$args$(print_arg_str "$cfg" 'cat_file' '-C')"
+ args="$args$(print_arg_str "$cfg" 'ja3_file' '-J')"
+ args="$args$(print_arg_str "$cfg" 'ssl_file' '-S')"
+ args="$args$(print_arg_str "$cfg" 'alias' '-a')"
+ args="$args$(print_arg_bool "$cfg" 'analysis' '-A')"
+ args="$args$(print_arg_bool "$cfg" 'compression' '-z')"
+
+ # Tuning
+ args="$args$(print_arg_str "$cfg" 'max_flows_per_thread' '-omax-flows-per-thread=')"
+ args="$args$(print_arg_str "$cfg" 'max_idle_flows_per_thread' '-omax-idle-flows-per-thread=')"
+ args="$args$(print_arg_str "$cfg" 'max_reader_threads' '-omax-reader-threads=')"
+ args="$args$(print_arg_str "$cfg" 'daemon_status_interval' '-odaemon-status-interval=')"
+ args="$args$(print_arg_str "$cfg" 'compression_scan_interval' '-ocompression-scan-interval=')"
+ args="$args$(print_arg_str "$cfg" 'compression_flow_inactivity' '-ocompression-flow-inactivity=')"
+ args="$args$(print_arg_str "$cfg" 'flow_scan_interval' '-oflow-scan-interval=')"
+ args="$args$(print_arg_str "$cfg" 'generic_max_idle_time' '-ogeneric-max-idle-time=')"
+ args="$args$(print_arg_str "$cfg" 'icmp_max_idle_time' '-oicmp-max-idle-time=')"
+ args="$args$(print_arg_str "$cfg" 'udp_max_idle_time' '-oudp-max-idle-time=')"
+ args="$args$(print_arg_str "$cfg" 'tcp_max_idle_time' '-otcp-max-idle-time=')"
+ args="$args$(print_arg_str "$cfg" 'tcp_max_post_end_flow_time' '-otcp-max-post-end-flow-time=')"
+ args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_send' '-omax-packets-per-flow-to-send=')"
+ args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_process' '-omax-packets-per-flow-to-process=')"
+ args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_analyse' '-omax-packets-per-flow-to-analyse=')"
+ args="$args$(print_arg_str "$cfg" 'error_event_threshold_n' '-oerror-event-threshold-n=')"
+ args="$args$(print_arg_str "$cfg" 'error_event_threshold_time' '-oerror-event-threshold-time=')"
+
+ procd_open_instance
+ procd_set_param command ${NDPID_BIN}
+ procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPId-${netif}.pid"
+ procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPId-${netif}.pid" -c"${sink}" $args
+
+ config_get_bool aux "$cfg" 'respawn' '0'
+ [ "$aux" = 1 ] && procd_set_param respawn
+
+ procd_close_instance
+}
+
+validate_ndpid_section() {
+ uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \
+ 'enabled:bool:0' \
+ 'respawn:bool:0' \
+ 'interface:string' \
+ 'internal_only:bool:0' \
+ 'external_only:bool:0' \
+ 'bpf_filter:string' \
+ 'udp_connect:string' \
+ 'proto_file:string' \
+ 'cat_file:string' \
+ 'ja3_file:string' \
+ 'ssl_file:string' \
+ 'alias:string' \
+ 'analysis:bool:0' \
+ 'compression:bool:0' \
+ 'max_flows_per_thread:uinteger' \
+ 'max_idle_flows_per_thread:uinteger' \
+ 'max_reader_threads:uinteger' \
+ 'daemon_status_interval:uinteger' \
+ 'compression_scan_interval:uinteger' \
+ 'compression_flow_inactivity:uinteger' \
+ 'flow_scan_interval:uinteger' \
+ 'generic_max_idle_time:uinteger' \
+ 'icmp_max_idle_time:uinteger' \
+ 'udp_max_idle_time:uinteger' \
+ 'tcp_max_idle_time:uinteger' \
+ 'tcp_max_post_end_flow_time:uinteger' \
+ 'max_packets_per_flow_to_send:uinteger' \
+ 'max_packets_per_flow_to_process:uinteger' \
+ 'max_packets_per_flow_to_analyse:uinteger' \
+ 'error_event_threshold_n:uinteger' \
+ 'error_event_threshold_time:uinteger'
+}
+
+start_ndpisrvd_instance() {
+ local cfg=$1
+ local aux
+ local args
+ local collector_sock
+
+ config_get_bool aux "$cfg" 'enabled' '0'
+ if [ "$aux" -eq 0 ]; then
+ return 1
+ fi
+
+ collector_sock="/var/run/${NDPID_NAME}/nDPIsrvd-collector.sock"
+
+ args="$(print_arg_str "$cfg" 'tcp_listen' '-S')"
+ args="$args$(print_arg_str "$cfg" 'max_remotes' '-m')"
+ args="$args$(print_arg_str "$cfg" 'max_buffered_json_lines' '-C')"
+
+ procd_open_instance
+ procd_set_param command ${NDPISRVD_BIN}
+ procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd.pid"
+ procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd.pid" -c"${collector_sock}" -s"${DISTRIBUTOR_SOCKET}" $args
+
+ config_get_bool aux "$cfg" 'respawn' '0'
+ [ "$aux" = 1 ] && procd_set_param respawn
+
+ procd_close_instance
+}
+
+validate_ndpisrvd_section() {
+ uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \
+ 'enabled:bool:0' \
+ 'respawn:bool:0' \
+ 'tcp_listen:string' \
+ 'max_remotes:uinteger' \
+ 'max_buffered_json_lines:uinteger'
+}
+
+start_ndpisrvd_analysed_instance() {
+ local cfg="$1"
+ local csv_dir
+
+ config_get_bool aux "$cfg" 'enabled' '0'
+ if [ "$aux" -eq 0 ]; then
+ return 1
+ fi
+
+ config_get aux "$cfg" 'csv_dir'
+ if [ -z "$aux" ]; then
+ return 1
+ fi
+ mkdir -p "$aux"
+ chown ndpi:ndpi "$aux"
+
+ csv_dir="$(print_arg_str "$cfg" 'csv_dir' '')"
+ csv_dir="-o${csv_dir}/nDPId-analyse.csv"
+
+ procd_open_instance
+ procd_set_param command ${NDPISRVD_ANALYSED_BIN}
+ procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd-analysed.pid"
+ procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd-analysed.pid" -s"${DISTRIBUTOR_SOCKET}" ${csv_dir}
+
+ config_get_bool aux "$cfg" 'respawn' '0'
+ [ "$aux" = 1 ] && procd_set_param respawn
+
+ procd_close_instance
+}
+
+validate_ndpisrvd_analysed_section() {
+ uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \
+ 'enabled:bool:0' \
+ 'respawn:bool:0' \
+ 'csv_dir:string'
+}
+
+start_ndpisrvd_captured_instance() {
+ local cfg="$1"
+ local args
+ local risk_args
+
+ config_get_bool aux "$cfg" 'enabled' '0'
+ if [ "$aux" -eq 0 ]; then
+ return 1
+ fi
+
+ config_get aux "$cfg" 'datadir'
+ if [ -z "$aux" ]; then
+ return 1
+ fi
+ mkdir -p "$aux"
+ chown ndpi:ndpi "$aux"
+
+ handle_capture_risks() {
+ local risk=" -R$1"
+ printf '%s' "$risk"
+ }
+ risk_args="$(config_list_foreach "$cfg" capture_risk handle_capture_risks)"
+
+ args="$(print_arg_str "$cfg" 'pcap_rotation' '-r')"
+ args="$args$(print_arg_str "$cfg" 'datadir' '-D')"
+ args="$args$(print_arg_bool "$cfg" 'capture_guessed' '-G')"
+ args="$args$(print_arg_bool "$cfg" 'capture_undetected' '-U')"
+ args="$args$(print_arg_bool "$cfg" 'capture_midstream' '-M')"
+ args="$args$(print_arg_bool "$cfg" 'ignore_empty_l4' '-E')"
+
+ procd_open_instance
+ procd_set_param command ${NDPISRVD_CAPTURED_BIN}
+ procd_set_param pidfile "/var/run/${NDPID_NAME}/nDPIsrvd-captured.pid"
+ procd_append_param command -undpi -gndpi -p"/var/run/${NDPID_NAME}/nDPIsrvd-captured.pid" -s"${DISTRIBUTOR_SOCKET}" $args ${risk_args}
+
+ config_get_bool aux "$cfg" 'respawn' '0'
+ [ "$aux" = 1 ] && procd_set_param respawn
+
+ procd_close_instance
+}
+
+validate_ndpisrvd_captured_section() {
+ uci_load_validate ${NDPID_NAME} nDPId "$1" "$2" \
+ 'enabled:bool:0' \
+ 'respawn:bool:0' \
+ 'pcap_rotation:uinteger' \
+ 'datadir:string' \
+ 'capture_guessed:bool:1' \
+ 'capture_undetected:bool:1' \
+ 'capture_midstream:bool:1' \
+ 'ignore_empty_l4:bool:1' \
+ 'capture_risk:list(string)'
+}
+
+start_service() {
+ config_load ${NDPID_NAME}
+
+ user_exists ndpi 6543 || user_add ndpi 6543
+ group_exists ndpi 6543 || group_add ndpi 6543
+
+ mkdir -p "/var/run/${NDPID_NAME}"
+ chown ndpi:ndpi "/var/run/${NDPID_NAME}"
+
+ config_foreach validate_ndpisrvd_section nDPIsrvd start_ndpisrvd_instance
+ config_foreach validate_ndpisrvd_analysed_section nDPIsrvd-analysed start_ndpisrvd_analysed_instance
+ config_foreach validate_ndpisrvd_captured_section nDPIsrvd-captured start_ndpisrvd_captured_instance
+ config_foreach validate_ndpid_section nDPId start_ndpid_instance
+}