flowmon-export-ipfix.h

Go to the documentation of this file.

#include <time.h>
#include <netdb.h>

#ifdef DEBUG
#define MSG(format, ...) fprintf(stderr, format, ## __VA_ARGS__)
#else
#define MSG(format, ...) {}
#endif

#define DEFAULT_TEMPLATE_FILE "/etc/flowmon/ipfix-template-file.txt"
#define FIRST_TEMPLATE_ID 258
#define IPFIX_VERISON 10
#define TEMPLATE_SET_ID 2
#define PACKET_DATA_SIZE 1458 /* ethernet 14, ip 20, udp 8 */
/* Template buffer cannot be filled more than to packet data size */
#define TEMPLATE_BUFFER_SIZE (PACKET_DATA_SIZE - IPFIX_HEADER_SIZE)
#define IPFIX_HEADER_SIZE 16
#define IPFIX_SET_HEADER_SIZE 4
#define RECONNECT_TIMEOUT 60

typedef struct {
        char *getterName; 
        uint16_t enterpriseNumber; 
        uint16_t elementID; 
        int32_t length; 
} template_file_record_t;


typedef struct template_t {
        uint16_t id; 
        uint8_t templateRecord[1024]; 
        uint16_t templateSize; 
        uint8_t buffer[TEMPLATE_BUFFER_SIZE]; 
        uint16_t bufferSize; 
        uint16_t recordCount; 
        uint16_t fieldCount; 
        uint64_t mask; 
        flow_record_getter_t *templateGetters; 
        template_file_record_t **templateFileRecords; 
        uint8_t exported; 
        time_t exportTime; 
        uint64_t exportPacket; 
        struct template_t *next;
} template_t;


typedef struct {
        /* General */
        flow_record_getter_t *getters; 
        uint32_t sequenceNum; 
        uint64_t counter; 
        uint64_t exportedPackets; 
        int socket; 
        struct addrinfo *addrinfo; 
        /* Parameters */
        char *host; 
        char *templateFile; 
        char *port; 
        int protocol; 
        int ip; 
        int flags; 
        uint32_t reconnectTimeout; 
        time_t lastReconnect; 
        uint32_t odid; 
        uint32_t templateRefreshTime; 
        uint32_t templateRefreshPackets; 
        /* Templates */
        template_file_record_t *templateFileRecords; 
        template_t *templates; 
        uint16_t templatesDataSize; 
} plugin_private_t;


typedef struct {
        char *data; 
        uint16_t length; 
        uint16_t flows; 
} ipfix_packet_t;


typedef struct ipfix_header {
        uint16_t version;

        uint16_t length;

        uint32_t exportTime;

        uint32_t sequenceNumber;

        uint32_t observationDomainId;
} ipfix_header_t;

typedef struct ipfix_template_set_header {
        uint16_t id;

        uint16_t length;

} ipfix_template_set_header_t;

static plugin_desc_t plugin_desc = {
        "ipfixx",
        "Plugin that exports data using IPFIX protocol\n"
        "Parameters are (delimited by ','):\n"
        " host=hostname                (default = localhost)\n"
        " port=port                    (default = 4739)\n"
        " ip=ip                        IP version used to connect to collector (4,6,64 or default).\n"
        "                              64 uses IPv6 and then IPv4 mapped addresses, default takes priorities from the system.\n"
        " protocol=proto               Protocol used to connect to collector - udp(default),tcp,sctp.\n"
        " reconnect-timeout=seconds    Timeout in seconds between reconnect attempts.\n"
        " odid=id                      Observation Domain ID (default = 0).\n"
        " template-file=filename       File with template parameters. (default = /etc/flowmon/ipfix-template-file.txt).\n"
        " template-refresh-time=time   Send templates to collector each 'time' seconds. UDP only (default = 600).\n"
        " template-refresh-packets=num Send templates to collector each 'num' packets. UDP only.\n",
        0,
        0
};