Watchdog源码

最新推荐文章于 2025-01-22 12:46:35 发布

weixin_34013044

最新推荐文章于 2025-01-22 12:46:35 发布

阅读量1.2k

点赞数

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/zhangrui/archive/2012/03/08/2385040.html

本文深入探讨了WATCHDOG类的构造函数与新包检测功能，解析了其在网络监控中的核心作用。通过初始化参数设置与包检测流程，揭示了如何识别与应对网络中的恶意行为，包括包的读取、邻居节点的黑洞性能评估及信息清理等关键操作。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

/*
Constructor
*/
WATCHDOG::WATCHDOG(int32_t own_IP) {
    port = PORTW; //Port of the GW.
    devalue = 0; //Devalue old packets.
    readed_packets = 0;
    ip_packets = 0;
    arp_packets = 0;
    interesting_readed_packets = 0;
    heartbeat_malicious = HEARTBEAT_MALICIOUS_NODE;
    immediate_reaction_duration = IMMEDIATE_REATION_DURATION;
    percentile_of_loss = PERCENTAGE_LOSS;
    neighbour_timeout = NEIGHBOUR_TIMEOUT; //timeout for neighbours stored.
    storing_packet_timeout = STORE_PACKET_TIME;
    storing_route_timeout = STORE_ROUTE_TIME;
    reduction = WEIGHT_OF_OLD_PACKETS; //Weight of the olds packets when are devaluated.

//IniciateNeighbours(&neigs);
    neigs = new NEIGHBOURS();
    ownIP = own_IP;
    ownMAC=666;
    debug=0;
}

/*
New Packet detected!
*/
void
WATCHDOG::newPacket(int32_t source_ip, int32_t destination_ip, int source_mac, int destination_mac, int sourcePort, int destinationPort,  packet_t packet_type, char* tmp_data, double tmp_time) {
if(debug>0) printf("Node IP: %d MAC: %d says:\n",ownIP, ownMAC);
readPacket(source_ip, destination_ip, source_mac, destination_mac, sourcePort, destinationPort, packet_type, tmp_data, tmp_time);
neigs->SearchForBlackHole(percentile_of_loss, ownIP, heartbeat_malicious, immediate_reaction_duration, tmp_time);

/* Clean old information */
    neigs->DeleteOldNeighbours(neighbour_timeout, debug, tmp_time);
    neigs->RemoveOldPackets(storing_packet_timeout, tmp_time);
    neigs->RemoveOldFlows(storing_route_timeout, tmp_time);

/* Apply devaluation technique */
if (devalue){
neigs->CompressPacketsAllNeighbours(reduction);
    }
}