X-Git-Url: http://git.sameswireless.fr/l2tpns.git/blobdiff_plain/8ed6b75f5ff7cdf8f9cea56ed63282d4547f2f0b..e7c9a1993778e9ac375d7f956dda7c3c802a83a5:/autosnoop.c?ds=inline

diff --git a/autosnoop.c b/autosnoop.c
index 1c27190..5633824 100644
--- a/autosnoop.c
+++ b/autosnoop.c
@@ -1,42 +1,76 @@
 #include <string.h>
-#include <malloc.h>
-#include <stdlib.h>
-#include <sys/wait.h>
-#include <sys/types.h>
+#include <sys/socket.h>
+#include <linux/rtnetlink.h>
+
 #include "l2tpns.h"
 #include "plugin.h"
-#include "control.h"
 
-int __plugin_api_version = 1;
-struct pluginfuncs p;
+/* set up intercept based on RADIUS reply */
+
+int plugin_api_version = PLUGIN_API_VERSION;
+static struct pluginfuncs *f = 0;
 
 int plugin_radius_response(struct param_radius_response *data)
 {
-	if (strcmp(data->key, "intercept") == 0)
+    if (!strcmp(data->key, "intercept"))
+    {
+	char *p;
+	data->s->snoop_ip = 0;
+	data->s->snoop_port = 0;
+	if ((p = strchr(data->value, ':')))
+	{
+	    *p++ = 0;
+	    if (*data->value)
+		data->s->snoop_ip = inet_addr(data->value);
+
+	    if (data->s->snoop_ip == INADDR_NONE)
+		data->s->snoop_ip = 0;
+
+	    if (*p)
+		data->s->snoop_port = atoi(p);
+
+	    f->log(3, f->get_id_by_session(data->s), data->s->tunnel,
+		"         Intercepting user to %s:%d\n",
+		f->fmtaddr(data->s->snoop_ip, 0), data->s->snoop_port);
+	}
+	else
 	{
-		if (strcmp(data->value, "yes") == 0)
-		{
-			p.log(3, 0, 0, 0, "         Intercepting user\n");
-			data->s->snoop = 1;
-		}
-		else if (strcmp(data->value, "no") == 0)
-		{
-			p.log(3, 0, 0, 0, "         Not intercepting user\n");
-			data->s->snoop = 0;
-		}
+	    f->log(3, f->get_id_by_session(data->s), data->s->tunnel,
+		    "         Not Intercepting user (reply string should"
+		    " be intercept=ip:port)\n");
 	}
+    }
+
 	return PLUGIN_RET_OK;
 }
 
-int plugin_init(struct pluginfuncs *funcs)
+int plugin_radius_reset(struct param_radius_reset *data)
 {
-	if (!funcs) return 0;
-	memcpy(&p, funcs, sizeof(p));
-
-	return 1;
+    data->s->snoop_ip = 0;
+    data->s->snoop_port = 0;
+    return PLUGIN_RET_OK;
 }
 
-void plugin_done()
+int plugin_radius_account(struct param_radius_account *data)
 {
+    if (data->s->snoop_ip && data->s->snoop_port)
+    {
+	uint8_t *p = *data->packet;
+
+	*p = 26;				// vendor-specific
+	*(uint32_t *) (p + 2) = htonl(9);	// Cisco
+	p[6] = 1;				// Cisco-AVPair
+	p[7] = 2 + sprintf((char *) p + 8, "intercept=%s:%d",
+	    f->fmtaddr(data->s->snoop_ip, 0), data->s->snoop_port);
+
+	p[1] = p[7] + 6;
+	*data->packet += p[1];
+    }
+
+    return PLUGIN_RET_OK;
 }
 
+int plugin_init(struct pluginfuncs *funcs)
+{
+    return ((f = funcs)) ? 1 : 0;
+}