Go to the source code of this file.
Macros | |
#define | FB_CISCO_ASA_EVENT_ID 9998 |
#define | FB_CISCO_ASA_EVENT_XTRA 9997 |
#define | FB_CISCO_GENERIC 9999 |
#define | FB_CONNSPEC_INIT { FB_SCTP, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL } |
#define | FB_ERROR_BUFSZ 5 |
#define | FB_ERROR_CONN 11 |
#define | FB_ERROR_DOMAIN g_quark_from_string("fixbufError") |
#define | FB_ERROR_EOF 3 |
#define | FB_ERROR_EOM 2 |
#define | FB_ERROR_IMPL 6 |
#define | FB_ERROR_IO 7 |
#define | FB_ERROR_IPFIX 4 |
#define | FB_ERROR_LAXSIZE 16 |
#define | FB_ERROR_NETFLOWV9 12 |
#define | FB_ERROR_NLREAD 8 |
#define | FB_ERROR_NLWRITE 9 |
#define | FB_ERROR_NOELEMENT 10 |
#define | FB_ERROR_SETUP 15 |
#define | FB_ERROR_SFLOW 14 |
#define | FB_ERROR_TMPL 1 |
#define | FB_ERROR_TRANSMISC 13 |
#define | FB_IE_DEFAULT 0x00000000 |
#define | FB_IE_DELTACOUNTER 0x00000300 |
#define | FB_IE_F_ALIEN 0x00000080 |
#define | FB_IE_F_ENDIAN 0x00000001 |
#define | FB_IE_F_NONE 0x00000000 |
#define | FB_IE_F_REVERSIBLE 0x00000040 |
#define | FB_IE_FLAGS 0x00000500 |
#define | FB_IE_IDENTIFIER 0x00000400 |
#define | FB_IE_INIT(_name_, _ent_, _num_, _len_, _flags_) FB_IE_INIT_FULL(_name_, _ent_, _num_, _len_, _flags_, 0, 0, 0, (char *)NULL) |
#define | FB_IE_INIT_FULL(_name_, _ent_, _num_, _len_, _flags_, _min_, _max_, _type_, _desc_) { _ent_, _num_, _len_, _flags_, _type_, _min_, _max_, _name_, _desc_ } |
#define | FB_IE_INIT_FULL_SPLIT(_name_, _ent_, _num_, _len_, _rev_, _endian_, _semantics_, _units_, _min_, _max_, _type_, _desc_) |
#define | FB_IE_LIST 0x00000600 |
#define | FB_IE_NULL FB_IE_INIT(NULL, 0, 0, 0, 0) |
#define | FB_IE_PEN_REVERSE 29305 |
#define | FB_IE_QUANTITY 0x00000100 |
#define | FB_IE_REVERSE_STR "reverse" |
#define | FB_IE_REVERSE_STRLEN 7 |
#define | FB_IE_SEMANTIC(flags) ((flags & 0x0000ff00) >> 8) |
#define | FB_IE_SNMPCOUNTER 0x00000700 |
#define | FB_IE_SNMPGAUGE 0x00000800 |
#define | FB_IE_TOTALCOUNTER 0x00000200 |
#define | FB_IE_UNITS(flags) ((flags & 0xFFFF0000) >> 16) |
#define | FB_IE_VARLEN 65535 |
#define | FB_IE_VENDOR_BIT_REVERSE 0x4000 |
#define | FB_IESPEC_NULL { NULL, 0, 0 } |
#define | FB_IESPECID_NULL { {0, 0}, 0, 0 } |
#define | FB_RECORD_INIT {NULL, NULL, 0, 0, 0} |
#define | FB_RECORD_VALUE_INIT { NULL, NULL, { {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} } } |
#define | FB_TEMPLATE_ITER_NULL {NULL, UINT16_MAX} |
#define | FB_TEMPLATEFIELD_INIT {NULL, 0, 0, 0, NULL} |
#define | FB_TID_AUTO 0 |
#define | FB_TID_MIN_DATA 256 |
#define | FB_TID_OTS 3 |
#define | FB_TID_TS 2 |
#define | FB_TMPL_CMP_IGNORE_LENGTHS 0x02u |
#define | FB_TMPL_CMP_IGNORE_PADDING 0x01u |
#define | FB_TMPL_CMP_IGNORE_SCOPE 0x04u |
#define | FB_TMPL_COPY_IGNORE_SCOPE 0x04u |
#define | FB_TMPL_COPY_REMOVE_PADDING 0x01u |
#define | FB_TMPL_IS_META_ANY |
#define | FB_TMPL_IS_META_BASICLIST (1u << 4) |
#define | FB_TMPL_IS_META_ELEMENT (1u << 1) |
#define | FB_TMPL_IS_META_TEMPLATE_V1 (1u << 2) |
#define | FB_TMPL_IS_META_TEMPLATE_V3 (1u << 3) |
#define | FB_TMPL_IS_META_TMPL_ANY |
#define | FB_TMPL_IS_OPTIONS (1u << 0) |
#define | FB_TMPL_MD_LEVEL_0 0 |
#define | FB_TMPL_MD_LEVEL_1 1 |
#define | FB_TMPL_MD_LEVEL_NA 0xFF |
#define | FB_UNITS_BITS 0x00010000 |
#define | FB_UNITS_ENTRIES 0x000C0000 |
#define | FB_UNITS_FLOWS 0x00040000 |
#define | FB_UNITS_FRAMES 0x000D0000 |
#define | FB_UNITS_HOPS 0x000B0000 |
#define | FB_UNITS_INFERRED 0x000F0000 |
#define | FB_UNITS_MESSAGES 0x000A0000 |
#define | FB_UNITS_MICROSECONDS 0x00070000 |
#define | FB_UNITS_MILLISECONDS 0x00060000 |
#define | FB_UNITS_NANOSECONDS 0x00080000 |
#define | FB_UNITS_OCTETS 0x00020000 |
#define | FB_UNITS_PACKETS 0x00030000 |
#define | FB_UNITS_PORTS 0x000E0000 |
#define | FB_UNITS_SECONDS 0x00050000 |
#define | FB_UNITS_WORDS 0x00090000 |
#define | fbBLNext(type, basicList, current) ((type *)(fbBasicListGetNextPtr((basicList), (current)))) |
#define | fbInfoElementCheckIdent(_ie, _enterpriseNumber, _elementId) ((_elementId) == (_ie)->num && (_enterpriseNumber) == (_ie)->ent) |
#define | fbInfoElementGetDescription(_ie) ((_ie)->description) |
#define | fbInfoElementGetId(_ie) ((_ie)->num) |
#define | fbInfoElementGetLen(_ie) ((_ie)->len) |
#define | fbInfoElementGetMax(_ie) ((_ie)->max) |
#define | fbInfoElementGetMin(_ie) ((_ie)->min) |
#define | fbInfoElementGetName(_ie) ((_ie)->name) |
#define | fbInfoElementGetPEN(_ie) ((_ie)->ent) |
#define | fbInfoElementGetSemantics(_ie) ((fbInfoElementSemantics_t)(FB_IE_SEMANTIC((_ie)->flags))) |
#define | fbInfoElementGetType(_ie) ((fbInfoElementDataType_t)((_ie)->type)) |
#define | fbInfoElementGetUnits(_ie) ((fbInfoElementUnits_t)(FB_IE_UNITS((_ie)->units))) |
#define | fbInfoElementIsAlien(_ie) (!!((_ie)->flags & FB_IE_F_ALIEN)) |
#define | fbInfoElementIsDatetime(_ie) ((_ie)->type >= FB_DT_SEC && (_ie)->type <= FB_DT_NANOSEC) |
#define | fbInfoElementIsEndian(_ie) (!!((_ie)->flags & FB_IE_F_ENDIAN)) |
#define | fbInfoElementIsFloat(_ie) ((_ie)->type >= FB_FLOAT_32 && (_ie)->type <= FB_FLOAT_64) |
#define | fbInfoElementIsInteger(_ie) ((_ie)->type >= FB_UINT_8 && (_ie)->type <= FB_INT_64) |
#define | fbInfoElementIsIPAddress(_ie) ((_ie)->type >= FB_IP4_ADDR && (_ie)->type <= FB_IP6_ADDR) |
#define | fbInfoElementIsList(_ie) ((_ie)->type >= FB_BASIC_LIST && (_ie)->type <= FB_SUB_TMPL_MULTI_LIST) |
#define | fbInfoElementIsNumber(_ie) ((_ie)->type >= FB_UINT_8 && (_ie)->type <= FB_FLOAT_64) |
#define | fbInfoElementIsPadding(_ie) (210 == (_ie)->num && 0 == (_ie)->ent) |
#define | fbInfoElementIsReversible(_ie) (!!((_ie)->flags & FB_IE_F_REVERSIBLE)) |
#define | fbInfoElementIsSigned(_ie) ((_ie)->type >= FB_INT_8 && (_ie)->type <= FB_INT_64) |
#define | fbInfoElementIsUnsigned(_ie) ((_ie)->type >= FB_UINT_8 && (_ie)->type <= FB_UINT_64) |
#define | fbSTLNext(type, subTemplateList, current) ((type *)(fbSubTemplateListGetNextPtr((subTemplateList), (current)))) |
#define | fbSTMLEntryNext(type, subTemplateMultiListEntry, current) |
#define | fbSTMLNext(subTemplateMultiList, current) fbSubTemplateMultiListGetNextEntry((subTemplateMultiList), (current)) |
#define | fbTemplateFieldCheckIdent(_field, _enterpriseNumber, _elementId) |
#define | fbTemplateFieldGetId(_field) ((_field)->canon->num) |
#define | fbTemplateFieldGetIE(_field) ((_field)->canon) |
#define | fbTemplateFieldGetLen(_field) ((_field)->len) |
#define | fbTemplateFieldGetMemsize(_field) |
#define | fbTemplateFieldGetName(_field) ((_field)->canon->name) |
#define | fbTemplateFieldGetOffset(_field) ((_field)->offset) |
#define | fbTemplateFieldGetPEN(_field) ((_field)->canon->ent) |
#define | fbTemplateFieldGetRepeat(_field) ((_field)->midx) |
#define | fbTemplateFieldGetType(_field) ((fbInfoElementDataType_t)((_field)->canon->type)) |
#define | FIXBUF_CHECK_VERSION(major, minor, release) |
Data Structures | |
struct | fbBasicList_st |
struct | fbConnSpec_st |
struct | fbInfoElement_st |
struct | fbInfoElementOptRec_st |
struct | fbInfoElementSpec_st |
struct | fbInfoElementSpecId_st |
struct | fbInfoElementSpecId_st::fbInfoElementSpecIdIdent_st |
struct | fbListenerEntry_st |
struct | fbListenerGroupResult_st |
struct | fbRecord_st |
struct | fbRecordValue_st |
struct | fbSubTemplateList_st |
struct | fbSubTemplateMultiList_st |
struct | fbSubTemplateMultiListEntry_st |
struct | fbTemplateField_st |
struct | fbTemplateIter_st |
struct | fbVarfield_st |
union | fbRecordValue_st::v_un |
Fixbuf IPFIX protocol library public interface.
typedef struct fBuf_st fBuf_t |
An IPFIX message buffer.
Used to encode and decode records from IPFIX Messages. The internals of this structure are private to libfixbuf.
typedef struct fbVarfield_st fbVarfield_t |
A variable-length field value.
Variable-length information element content is represented by an fbVarfield_t on the internal side of the transcoder; that is, variable length fields in an IPFIX Message must be represented by this structure within the application record.
typedef struct fbInfoModel_st fbInfoModel_t |
An IPFIX information model.
Contains information element definitions. The internals of this structure are private to libfixbuf.
typedef GHashTableIter fbInfoModelIter_t |
An iterator over the information elements in an information model.
typedef enum fbInfoElementSemantics_en fbInfoElementSemantics_t |
fbInfoElementSemantics_t defines the possible semantics of an fbInfoElement_t.
See RFC 5610
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-semantics
typedef enum fbInfoElementUnits_en fbInfoElementUnits_t |
fbInfoElementUnits_t defines the possible units on an fbInfoElement_t.
See RFC 5610
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-units
typedef enum fbInfoElementDataType_en fbInfoElementDataType_t |
From RFC 5610: A description of the abstract data type of an IPFIX information element as registered in the IANA IPFIX IE Data Type subregistry.
typedef struct fbTemplate_st fbTemplate_t |
An IPFIX Template or Options Template.
Templates define the structure of data records and options records within an IPFIX Message.
The internals of this structure are private to libfixbuf.
typedef struct fbInfoElement_st fbInfoElement_t |
A single IPFIX Information Element definition.
An Information Element describes the standard properties for a field in a record. This structure is contained in an fbInfoModel_t. As of libfixbuf 3.0.0, an fbTemplateField_t represents an fbInfoElement_t when used in an fbTemplate_t.
name
member and removed the midx
and ref
members. typedef struct fbTemplateField_st fbTemplateField_t |
fbTemplateField_t represents an fbInfoElement_t that has been added to an fbTemplate_t.
typedef struct fbTemplateIter_st fbTemplateIter_t |
fbTemplateIter_t iterates over the fbTemplateField_t objects in an fbTemplate_t.
To use, define the fbTemplateIter_t on the stack, using FB_TEMPLATE_ITER_NULL to zero it if desired. Bind it to a Template with fbTemplateIterInit(), iterate over the TemplateFields with fbTemplateIterNext() until that function returns NULL.
typedef struct fbBasicList_st fbBasicList_t |
A data type to represent an fbInfoElement_t of type basicList (FB_BASIC_LIST).
A BasicList contains zero or more instances of a single Information Element.
When reading from a fbCollector_t, you should first initialize the BasicList (fbBasicListCollectorInit() or memset() the list to 0
). After calling fBufNext(), you may query the BasicList for its element (fbBasicListGetInfoElement()), get the number of elements (fbBasicListCountElements()), get the element at a specific position (fbBasicListGetIndexedDataPtr()), and iterate over the elements (fbBasicListGetNextPtr() or fbBLNext()). When extracting data from the basicList, reduced length encoding of the element needs to be accounted for by the caller.
When building a BasicList for an fbExporter_t, use fbBasicListInitWithLength() to initialize the BasicList, then fill in the value for each element in the list. To add entries to the BasicList while building it, use fbBasicListAddNewElements().
In either case, the data buffer of the BasicList should be freed when it no longer needed (fbBasicListClear()) or before calling fBufNext() again.
typedef struct fbSubTemplateList_st fbSubTemplateList_t |
A data type to represent an fbInfoElement_t of type subTemplateList (FB_SUB_TMPL_LIST).
A SubTemplateList contains zero or more instances of structured a data type, where the data type is described by a single fbTemplate_t.
When reading from a fbCollector_t, you should first initialize the SubTemplateList (fbSubTemplateListCollectorInit() or memset() the list to 0
). After calling fBufNext(), you may query the SubTemplateList for its Template (fbSubTemplateListGetTemplate() and fbSubTemplateListGetTemplateID()), get the number of elements (fbSubTemplateListCountElements()), get the element at a specific position (fbSubTemplateListGetIndexedDataPtr()), and iterate over the elements (fbSubTemplateListGetNextPtr() or fbSTLNext()).
When building a SubTemplateList for an fbExporter_t, use fbSubTemplateListInit() to initialize the SubTemplateList, then fill in the value for each element in the list. To add entries to the SubTemplateList while building it, use fbSubTemplateListAddNewElements().
In either case, the data buffer of the SubTemplateList should be freed when it no longer needed (fbSubTemplateListClear()) or before calling fBufNext() again.
typedef struct fbSubTemplateMultiList_st fbSubTemplateMultiList_t |
A data type to represent an fbInfoElement_t of type subTemplateMultiList (FB_SUB_TMPL_MULTI_LIST).
A SubTemplateMultiList contains zero or more instances of structured data, where different elements may be described by different fbTemplate_t definitions.
In libfixbuf, groups of consecutive data instances that share the same Template are represented by an fbSubTemplateMultiListEntry_t. The SubTemplateMultiList contains only the list semantic, an array of SubTemplateMultiListEntries, and the length of the array.
A SubTemplateMultiList may be thought of as a list of SubTemplateLists (where SubTemplateMultiListEntry is equivalent to SubTemplateList).
When reading from a fbCollector_t, you call fBufNext() to fill the SubTemplateMultiList. You may then query the SubTemplateMultiList for the number of entries (fbSubTemplateMultiListCountElements()), get the entry at a specific position (fbSubTemplateMultiListGetIndexedEntry()), and iterate over the entries (fbSubTemplateMultiListGetNextEntry() or fbSTMLNext()). For each entry, you will need to iterate over its contents (details in the description of fbSubTemplateMultiListEntry_t).
When building a SubTemplateMultiList for an fbExporter_t, use fbSubTemplateMultiListInit() to initialize the SubTemplateMultiList, then fill in the value for each fbSubTemplateMultiListEntry_t in the list. To add entries to the SubTemplateMultiList while building it, use fbSubTemplateMultiListAddNewEntries().
In either case, the data buffer of the SubTemplateMultiList should be freed (fbSubTemplateMultiListClear()) before collecting or exporting another record.
typedef struct fbRecord_st fbRecord_t |
fbRecord_t maintains a buffer holding an IPFIX record's data, the fbTemplate_t that describes that data and the template's ID.
The caller should initialize rec
with an data buffer and store the length of that buffer in reccapacity
. All fixbuf functions treat reccapacity
as constant. FIXME—We could allow the fbRecord_t to maintain this buffer itself.
Before each call to fBufNextRecord(), the caller sets tid
to the template to use to read the record. fBufNextRecord() updates tmpl
and recsize
reads the data into rec
.
The caller is responsible for calling fbRecordFreeLists() before reusing the record. FIXME—We should probably change this.
typedef struct fbRecordValue_st fbRecordValue_t |
fbRecordValue_t is used to access the value of a single Element (or Field) in an fbRecord_t.
When an fbRecordValue_t is created on the stack, it should be initialized with FB_RECORD_VALUE_INIT.
If you use it to access FB_STRING or FB_OCTET_ARRAY data, call either fbRecordValueClear() to ensure its internal string buffer is freed or fbRecordValueTakeVarfieldBuf() to take ownship of the internal string buffer before the RecordValue leaves scope.
typedef struct fbInfoElementOptRec_st fbInfoElementOptRec_t |
The corresponding C struct for a record whose template is the RFC 5610 Information Element Type Options Template.
If collecting this record, use the function fbInfoElementAddOptRecElement() to add the fbInfoElement_t it describes to the fbInfoModel_t.
To export RFC5610 elements, use fbSessionSetMetadataExportElements().
typedef struct fbInfoElementSpec_st fbInfoElementSpec_t |
A single IPFIX Information Element specification.
Used to name an information element (fbInfoElement_t) for inclusion in an fbTemplate_t by fbTemplateAppendSpecArray() and for querying whether a template contains an element via fbTemplateContainsElementByName().
typedef struct fbInfoElementSpecId_st fbInfoElementSpecId_t |
A single IPFIX Information Element specification using the element's numeric identifier and private enterprise number.
Used to name an information element (fbInfoElement_t) for inclusion in an fbTemplate_t by fbTemplateAppendArraySpecId().
typedef struct fbSession_st fbSession_t |
An IPFIX Transport Session state container.
Though Session creation and lifetime are managed by the fbCollector_t and fbExporter_t types, each fBuf_t buffer uses this type to store session state, including internal and external Templates and Message Sequence Number information.
typedef enum fbTransport_en fbTransport_t |
Transport protocol for connection specifier.
typedef struct fbConnSpec_st fbConnSpec_t |
Connection specifier.
Used to define a peer address for fbExporter_t, or a passive address for fbListener_t.
typedef struct fbTemplateInfo_st fbTemplateInfo_t |
fbTemplateInfo_t describes an fbTemplate_t.
This information is encoded and sent between IPFIX senders and receives to provide enhanced description of the structure of the templates.
typedef struct fbBasicListInfo_st fbBasicListInfo_t |
fbBasicListInfo_t describes a basicList and is used by fbTemplateInfo_t.
fbBasicListInfo_t contains the enterprise and element numbers of the fbInfoElement_t the list contains and the numbers for the basicList itself.
typedef struct fbExporter_st fbExporter_t |
IPFIX Exporting Process endpoint.
Used to export messages from an associated IPFIX Message Buffer to a remote Collecting Process, or to an IPFIX File. The internals of this structure are private to libfixbuf.
typedef struct fbCollector_st fbCollector_t |
IPFIX Collecting Process endpoint.
Used to collect messages into an associated IPFIX Message Buffer from a remote Exporting Process, or from an IPFIX File. Use this with the fbListener_t structure to implement a full Collecting Process, including Transport Session setup. The internals of this structure are private to libfixbuf.
typedef struct fbListener_st fbListener_t |
IPFIX Collecting Process session listener.
Used to wait for connections from IPFIX Exporting Processes, and to manage open connections via a select(2)-based mechanism. The internals of this structure are private to libfixbuf.
typedef struct fbListenerGroup_st fbListenerGroup_t |
Structure that represents a group of listeners.
typedef struct fbListenerEntry_st fbListenerEntry_t |
ListenerEntry's make up an fbListenerGroup_t as a linked list.
typedef struct fbListenerGroupResult_st fbListenerGroupResult_t |
A ListenerGroupResult contains the fbListener whose listening socket got a new connection (cf.
fbListenerGroupWait()). It is tied to the fBuf_t that is produced for the connection. These comprise a linked list.
typedef void(* fbTemplateCtxFree_fn) (void *tmpl_ctx, void *app_ctx) |
A callback function that is called when a template is freed.
This function should be set during the fbNewTemplateCallback_fn.
tmpl_ctx | a pointer to the ctx that is stored within the fbTemplate. This is the context to be cleaned up. |
app_ctx | the app_ctx pointer that was passed to the fbSessionAddNewTemplateCallback() call. This is for context only and should not be cleaned up. |
typedef void(* fbNewTemplateCallback_fn) (fbSession_t *session, uint16_t tid, fbTemplate_t *tmpl, void *app_ctx, void **tmpl_ctx, fbTemplateCtxFree_fn *tmpl_ctx_free_fn) |
A callback function that will be called when the session receives a new external template.
This callback can be used to assign an internal template to an incoming external template for nested template records using fbSessionAddTemplatePair() or to apply some context variable to a template.
The callback should be set using fbSessionAddNewTemplateCallback(), and that function should be called after fbSessionAlloc(). Libfixbuf often clones session upon receiving a connection (particularly in the UDP case since a collector and fbuf can have multiple sessions), and this callback is carried over to cloned sessions.
session | a pointer to the session that received the template |
tid | the template ID for the template that was received |
tmpl | pointer to the template information of the received template |
app_ctx | the app_ctx pointer that was passed to the fbSessionAddNewTemplateCallback() call |
tmpl_ctx | pointer that is stored in the fbTemplate structure. |
tmpl_ctx_free_fn | a callback function that should be called to free the tmpl_ctx when the template is freed/replaced. |
typedef enum fbListSemantics_en fbListSemantics_t |
fbListSemantics_t defines the possible values for the semantics of the structured Data Types: basicLists, subTemplateLists, and subTemplateMultiLists.
See RFC 6313.
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-structured-data-types-semantics
typedef struct fbSubTemplateMultiListEntry_st fbSubTemplateMultiListEntry_t |
A data type used in a fbSubTemplateMultiList_t to represent structured data instances that share the same fbTemplate_t.
The SubTemplateMultiList contains an array of these objects.
When reading from a fbCollector_t, use the methods on the SubTemplateMultiList to get each SubTemplateMultiListEntry. For each entry, you may get its Template (fbSubTemplateMultiListEntryGetTemplate() and fbSubTemplateMultiListEntryGetTemplateID()), get its number of elements (fbSubTemplateMultiListEntryCountElements()), get the element at a specific position (fbSubTemplateMultiListEntryGetIndexedPtr()), and iterate over the elements (fbSubTemplateMultiListEntryNextDataPtr() or fbSTMLEntryNext()).
When writing to an fbExporter_t, first initialize the fbSubTemplateMultiList_t and then get a reference to a SubTemplateMultiListEntry. For the entry, initialize it (fbSubTemplateMultiListEntryInit()) and then fill in the value for each element in the list. To add entries to the SubTemplateMultiListEntry while building it, use fbSubTemplateMultiListEntryAddNewElements().
typedef gboolean(* fbListenerAppInit_fn) (fbListener_t *listener, void **ctx, int fd, struct sockaddr *peer, size_t peerlen, GError **err) |
Application context initialization function type for fbListener_t.
Pass this function as the appinit
parameter when creating the fbListener_t with fbListenerAlloc().
Fixbuf calls this function after accept(2)
for TCP or SCTP with the peer address in the peer
argument. For UDP, it is called during fbListener_t initialization and the peer address is NULL. If the Collector is in UDP multi-session mode, the function is called again when a new UDP connection occurs with the peer address, similiar to the TCP case. Use fbCollectorSetUDPMultiSession() to turn on multi-session mode (off by default).
The application may veto fbCollector_t creation by having this function return FALSE. In multi-session mode, if the connection is to be ignored, the application should set error code FB_ERROR_NLREAD on the err
and return FALSE. If the function returns FALSE, fixbuf will maintain information about that peer, and will reject connections from that peer until shutdown or until that session times out. Fixbuf will return FB_ERROR_NLREAD for previously rejected sessions.
The context (returned via out-parameter ctx
) is stored in the fbCollector_t, and it is retrievable via fbCollectorGetContext(). If not in multi-session mode and using the appinit fn, the ctx will be associated with all UDP sessions.
typedef void(* fbListenerAppFree_fn) (void *ctx) |
Application context free function type for fbListener_t.
Pass this function as the appfree
parameter when creating the fbListener_t with fbListenerAlloc().
For TCP and SCTP collectors, this is called when the connection is closed. If a UDP Collector is in multi-session mode (see fbListenerAppInit_fn), this function is called if a session is timed out (does not receive a UDP message for more than 30 minutes.) Called during fbCollector_t cleanup.
Defines the values returned by fbTemplatesSetCompare() when checking whether one fbTemplate_t is a subset of another.
typedef int(* fbRecordValueCallback_fn) (const fbRecord_t *parent_record, const fbBasicList_t *parent_bl, const fbInfoElement_t *field, const fbRecordValue_t *value, void *ctx) |
Signature of the callback function required by fbRecordFindAllElementValues().
The function is called with parent_record
being the Record that holds the field, parent_bl
is either NULL or the basicList that holds items matching the desired fbInfoElement_t, field
is the InfoElement searched for, value
is the value for the desired InfoElement, and ctx
is the user-supplied context. The function should return 0 success, and non-zero on failure.
typedef int(* fbRecordSubRecordCallback_fn) (const fbRecord_t *record, void *ctx) |
Signature of the callback function required by fbRecordFindAllSubRecords().
The function is called with record
being a Record whose fbTemplate_t matches the desired Template ID and ctx
holding the user-supplied context. The function should return 0 success, and non-zero on failure.
#define FIXBUF_CHECK_VERSION | ( | major, | |
minor, | |||
release | |||
) |
Evaluates to a non-zero value if the version number of libfixbuf is at least major.minor.release.
#define FB_ERROR_DOMAIN g_quark_from_string("fixbufError") |
All fixbuf errors are returned within the FB_ERROR_DOMAIN domain.
#define FB_ERROR_TMPL 1 |
No template was available for the given template ID, the session's template table is full, an attempt was made to modify a template that was previously added to a session, or the template is at its maximum size.
#define FB_ERROR_EOM 2 |
End of IPFIX message.
Either there are no more records present in the message on read, or the message MTU has been reached on write.
#define FB_ERROR_EOF 3 |
End of IPFIX Message stream.
No more messages are available from the transport layer on read, either because the session has closed, or the file has been processed.
#define FB_ERROR_IPFIX 4 |
Illegal IPFIX message content on read.
The input stream is malformed, or is not an IPFIX Message after all.
#define FB_ERROR_BUFSZ 5 |
A message was received larger than the collector buffer size.
This should only occur when reading from an fBuf_t configured with fBufSetBuffer().
#define FB_ERROR_IMPL 6 |
The requested feature is not yet implemented.
#define FB_ERROR_IO 7 |
An unspecified I/O error occured.
#define FB_ERROR_NLREAD 8 |
No data is available for reading from the transport layer.
Either a transport layer read was interrupted, or timed out.
#define FB_ERROR_NLWRITE 9 |
An attempt to write data to the transport layer failed due to closure of the remote end of the connection.
Currently only occurs with the TCP transport layer.
#define FB_ERROR_NOELEMENT 10 |
The specified Information Element does not exist in the Information Model.
#define FB_ERROR_CONN 11 |
A connection or association could not be established or maintained.
#define FB_ERROR_NETFLOWV9 12 |
Illegal NetflowV9 content on a read.
Can't parse the Netflow header or the stream is not a NetflowV9 stream
#define FB_ERROR_TRANSMISC 13 |
Miscellaneous error occured during translator operation.
#define FB_ERROR_SFLOW 14 |
Illegal sFlow content on a read.
#define FB_ERROR_SETUP 15 |
Setup error.
#define FB_ERROR_LAXSIZE 16 |
Internal template with defaulted (zero) element sizes.
See fbInfoElementSpec_st.
#define FB_IE_INIT_FULL | ( | _name_, | |
_ent_, | |||
_num_, | |||
_len_, | |||
_flags_, | |||
_min_, | |||
_max_, | |||
_type_, | |||
_desc_ | |||
) | { _ent_, _num_, _len_, _flags_, _type_, _min_, _max_, _name_, _desc_ } |
Convenience macro for creating full fbInfoElement_t static initializer.
Used for creating information element arrays suitable for passing to fbInfoModelAddElementArray().
#define FB_IE_INIT_FULL_SPLIT | ( | _name_, | |
_ent_, | |||
_num_, | |||
_len_, | |||
_rev_, | |||
_endian_, | |||
_semantics_, | |||
_units_, | |||
_min_, | |||
_max_, | |||
_type_, | |||
_desc_ | |||
) |
Convenience macro for creating full fbInfoElement_t static initializers.
Used for creating information element arrays suitable for passing to fbInfoModelAddElementArray().
rev and endian are booleans, semantics is a fbInfoElementSemantics_t units is a fbInfoElementUnits_t
#define FB_IE_INIT | ( | _name_, | |
_ent_, | |||
_num_, | |||
_len_, | |||
_flags_ | |||
) | FB_IE_INIT_FULL(_name_, _ent_, _num_, _len_, _flags_, 0, 0, 0, (char *)NULL) |
Convenience macro for creating default fbInfoElement_t static initializers.
Used for creating information element arrays suitable for passing to fbInfoModelAddElementArray().
#define FB_IE_NULL FB_IE_INIT(NULL, 0, 0, 0, 0) |
Convenience macro defining a null fbInfoElement_t initializer to terminate a constant information element array for passing to fbInfoModelAddElementArray().
#define FB_IE_SEMANTIC | ( | flags | ) | ((flags & 0x0000ff00) >> 8) |
Convenience macro for extracting the information element semantic value (fbInfoElementSemantics_t) from the flags member of the fbInfoElement_t struct.
#define FB_IE_UNITS | ( | flags | ) | ((flags & 0xFFFF0000) >> 16) |
Convenience macro for extracting the information element units value (fbInfoElementUnits_t) from the flags member of the fbInfoElement_t struct.
#define FB_IE_F_NONE 0x00000000 |
Default treatment of flags
member in an fbInfoElement_t.
Provided for initializer convenience. Corresponds to octet-array semantics for a non-reversible, non-alien IE.
#define FB_IE_F_ENDIAN 0x00000001 |
Information element endian conversion bit in the flags member of fbInfoElement_t.
If set, IE is an integer and will be endian-converted on transcode.
#define FB_IE_F_REVERSIBLE 0x00000040 |
Information element reversible bit in the flags member of fbInfoElement_t.
Adding the information element via fbInfoModelAddElement() or fbInfoModelAddElementArray() will cause a second, reverse information element to be added to the model following the conventions in IETF RFC 5103. This means that, if there is no enterprise number, the reverse element will get an enterprise number of FB_IE_PEN_REVERSE, and if there is an enterprise number, the reverse element's numeric identifier will have its FB_IE_VENDOR_BIT_REVERSE bit set.
#define FB_IE_F_ALIEN 0x00000080 |
Information element alien bit in the flags member of fbInfoElement_t.
If set, IE is enterprise-specific and was recieved via an external template at a Collecting Process. It is therefore subject to semantic typing via options (not yet implemented). Do not set this flag on information elements added programmatically to an information model via fbInfoModelAddElement() or fbInfoModelAddElementArray().
#define FB_IE_QUANTITY 0x00000100 |
Information Element Semantics - See RFC 5610
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-semantics The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a quantity.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_TOTALCOUNTER 0x00000200 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a totalCounter.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_DELTACOUNTER 0x00000300 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a deltaCounter.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_IDENTIFIER 0x00000400 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as an identifier.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_FLAGS 0x00000500 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a flags element.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_LIST 0x00000600 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a list element.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_SNMPCOUNTER 0x00000700 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as an SNMP counter.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_SNMPGAUGE 0x00000800 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as a SNMP gauge.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_IE_DEFAULT 0x00000000 |
The Information Element Semantics bits within the flags member of an fbInfoElement_t that denote the information element as having no specific semantics.
fbInfoElementGetSemantics() and fbInfoElementSemantics_t provide an alternate interface.
#define FB_UNITS_BITS 0x00010000 |
Information Element Units - See RFC 5610.
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-units The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting bits.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_OCTETS 0x00020000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting octets.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_PACKETS 0x00030000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting packets.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_FLOWS 0x00040000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting flows.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_SECONDS 0x00050000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting seconds.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_MILLISECONDS 0x00060000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting milliseconds.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_MICROSECONDS 0x00070000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting microseconds.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_NANOSECONDS 0x00080000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting nanoseconds.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_WORDS 0x00090000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting 4-octet words.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_MESSAGES 0x000A0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting messages.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_HOPS 0x000B0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting hops.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_ENTRIES 0x000C0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting entries.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_FRAMES 0x000D0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting frames.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_PORTS 0x000E0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as counting ports.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_UNITS_INFERRED 0x000F0000 |
The Information Element Units bits within the flags member of an fbInfoElement_t that denote the information element as having units inferred from some other element.
fbInfoElementGetUnits() and fbInfoElementUnits_t provide an alternate interface.
#define FB_IE_VARLEN 65535 |
Information element length constant for variable-length IE.
#define FB_IE_PEN_REVERSE 29305 |
The Reverse Information Element Private Enterprise Number as defined by RFC 5103 section 6.1.
When an information element having the FB_IE_F_REVERSIBLE flag bit set and a zero enterprise number (i.e., an IANA-assigned information element) is added to a model, the reverse IE is generated by setting the enterprise number to this constant.
#define FB_IE_VENDOR_BIT_REVERSE 0x4000 |
Reverse information element bit for vendor-specific information elements (see RFC 5103 section 6.2).
If an information element with FB_IE_F_REVERSIBLE and a non-zero enterprise number (i.e., a vendor-specific information element) is added to a model, the reverse IE number will be generated by ORing this bit with the given forward information element number.
#define FB_IE_REVERSE_STR "reverse" |
Reverse information element name prefix.
This string is prepended to an information element name, and the first character after this string is capitalized, when generating a reverse information element.
#define FB_IE_REVERSE_STRLEN 7 |
Length of reverse information element name prefix.
#define FB_CISCO_GENERIC 9999 |
Generic Information Element ID for undefined Cisco NetFlow v9 Elements.
#define FB_CISCO_ASA_EVENT_ID 9998 |
Information Element ID for Cisco NSEL Element NF_F_FW_EVENT often exported by Cisco's ASA Device.
This must be converted to a different Information Element ID due to the reverse IE bit in IPFIX. Cisco uses IE ID 40005. http://www.cisco.com/en/US/docs/security/asa/asa82/netflow/netflow.html
#define FB_CISCO_ASA_EVENT_XTRA 9997 |
Information Element ID for Cisco NSEL Element NF_F_FW_EXT_EVENT often exported by Cisco's ASA Device.
This must be converted to a different Information Element ID due to the reverse IE bit in IPFIX. Cisco uses IE ID 33002 http://www.cisco.com/en/US/docs/security/asa/asa82/netflow/netflow.html More Information about event codes can be found here: http://www.cisco.com/en/US/docs/security/asa/asa84/system/netflow/netflow.pdf
#define fbInfoElementCheckIdent | ( | _ie, | |
_enterpriseNumber, | |||
_elementId | |||
) | ((_elementId) == (_ie)->num && (_enterpriseNumber) == (_ie)->ent) |
Returns TRUE if the private enterprise number and element id of fbInfoElement_t match the given values.
#define fbInfoElementGetDescription | ( | _ie | ) | ((_ie)->description) |
Returns the description of an fbInfoElement_t, a C-string.
#define fbInfoElementGetId | ( | _ie | ) | ((_ie)->num) |
Returns the element id of an fbInfoElement_t, a uint16_t.
This value does not include the on-wire enterprise bit. That is, the high-order bit is always 0.
#define fbInfoElementGetLen | ( | _ie | ) | ((_ie)->len) |
Returns the length of an fbInfoElement_t, a uint16_t.
#define fbInfoElementGetMax | ( | _ie | ) | ((_ie)->max) |
Returns the maximum value of an fbInfoElement_t, a uint64_t.
Returns 0 if no range values have been specified for the element.
#define fbInfoElementGetMin | ( | _ie | ) | ((_ie)->min) |
Returns the minimum value of an fbInfoElement_t, a uint64_t.
#define fbInfoElementGetName | ( | _ie | ) | ((_ie)->name) |
Returns the name of an fbInfoElement_t.
#define fbInfoElementGetPEN | ( | _ie | ) | ((_ie)->ent) |
Returns the private enterprise number (PEN) of an fbInfoElement_t, a uint32_t.
#define fbInfoElementGetSemantics | ( | _ie | ) | ((fbInfoElementSemantics_t)(FB_IE_SEMANTIC((_ie)->flags))) |
Returns the semantics of an fbInfoElement_t, an fbInfoElementSemantics_t.
#define fbInfoElementGetType | ( | _ie | ) | ((fbInfoElementDataType_t)((_ie)->type)) |
Returns the data type of an fbInfoElement_t, a fbInfoElementDataType_t.
#define fbInfoElementGetUnits | ( | _ie | ) | ((fbInfoElementUnits_t)(FB_IE_UNITS((_ie)->units))) |
Returns the units of an fbInfoElement_t, an fbInfoElementUnits_t.
#define fbInfoElementIsAlien | ( | _ie | ) | (!!((_ie)->flags & FB_IE_F_ALIEN)) |
Returns TRUE if the fbInfoElement_t is unknown and was received via an external template from a collecting process and FALSE if not.
#define fbInfoElementIsEndian | ( | _ie | ) | (!!((_ie)->flags & FB_IE_F_ENDIAN)) |
Returns TRUE if the fbInfoElement_t should be endian-converted on transcode and FALSE if not.
#define fbInfoElementIsReversible | ( | _ie | ) | (!!((_ie)->flags & FB_IE_F_REVERSIBLE)) |
Returns TRUE if the fbInfoElement_t should be considered reversible and FALSE if not.
#define fbInfoElementIsUnsigned | ( | _ie | ) | ((_ie)->type >= FB_UINT_8 && (_ie)->type <= FB_UINT_64) |
Returns TRUE if the fbInfoElement_t is a unsigned integer type and FALSE if not.
The values of fbInfoElementDataType_t that are unsigned integers are FB_UINT_8, FB_UINT_16, FB_UINT_32, and FB_UINT_64.
Returns TRUE if the fbInfoElement_t is a signed integer type and FALSE if not.
The values of fbInfoElementDataType_t that are signed integers are FB_INT_8, FB_INT_16, FB_INT_32, and FB_INT_64.
Returns TRUE if the fbInfoElement_t is an integer type and FALSE if not.
The values of fbInfoElementDataType_t that are integer types are FB_UINT_8, FB_UINT_16, FB_UINT_32, and FB_UINT_64, FB_INT_8, FB_INT_16, FB_INT_32, and FB_INT_64.
#define fbInfoElementIsFloat | ( | _ie | ) | ((_ie)->type >= FB_FLOAT_32 && (_ie)->type <= FB_FLOAT_64) |
Returns TRUE if the fbInfoElement_t is a floating point type and FALSE if not.
The values of fbInfoElementDataType_t that are floats are FB_FLOAT_32 and FB_FLOAT_64.
#define fbInfoElementIsNumber | ( | _ie | ) | ((_ie)->type >= FB_UINT_8 && (_ie)->type <= FB_FLOAT_64) |
Returns TRUE if the fbInfoElement_t is an unsigned integer type, a signed integer type, or a float type, and FALSE if not.
The values of fbInfoElementDataType_t that are numbers are FB_UINT_8, FB_UINT_16, FB_UINT_32, and FB_UINT_64, FB_INT_8, FB_INT_16, FB_INT_32, FB_INT_64, FB_FLOAT_32, and FB_FLOAT_64.
#define fbInfoElementIsIPAddress | ( | _ie | ) | ((_ie)->type >= FB_IP4_ADDR && (_ie)->type <= FB_IP6_ADDR) |
Returns TRUE if the fbInfoElement_t is an IP Address type, and FALSE if not.
The values of fbInfoElementDataType_t that are numbers are FB_IP4_ADDR and FB_IP6_ADDR.
#define fbInfoElementIsDatetime | ( | _ie | ) | ((_ie)->type >= FB_DT_SEC && (_ie)->type <= FB_DT_NANOSEC) |
Returns TRUE if the fbInfoElement_t is a date-time type, and FALSE if not.
The values of fbInfoElementDataType_t that are date-times are FB_DT_SEC, FB_DT_MILSEC, FB_DT_MICROSEC, and FB_DT_NANOSEC.
#define fbInfoElementIsList | ( | _ie | ) | ((_ie)->type >= FB_BASIC_LIST && (_ie)->type <= FB_SUB_TMPL_MULTI_LIST) |
Returns TRUE if the type of the fbInfoElement_t is a structured data element (a list) and FALSE if not.
The values of fbInfoElementDataType_t that are structured data are FB_BASIC_LIST, FB_SUB_TMPL_LIST, and FB_SUB_TMPL_MULTI_LIST.
#define fbInfoElementIsPadding | ( | _ie | ) | (210 == (_ie)->num && 0 == (_ie)->ent) |
Returns TRUE if the fbInfoElement_t is paddingOctets (IANA defined element 210) and FALSE if not.
#define FB_TEMPLATEFIELD_INIT {NULL, 0, 0, 0, NULL} |
A static initializer for an fbTemplateField_t.
#define fbTemplateFieldCheckIdent | ( | _field, | |
_enterpriseNumber, | |||
_elementId | |||
) |
Returns TRUE if the private enterprise number and element id of fbInfoElement_t used by the fbTemplateField_t match the given values.
#define fbTemplateFieldGetIE | ( | _field | ) | ((_field)->canon) |
Returns the fbInfoElement_t used by an fbTemplateField_t.
#define fbTemplateFieldGetId | ( | _field | ) | ((_field)->canon->num) |
Returns the element ID of the fbInfoElement_t used by an fbTemplateField_t, a uint16_t.
#define fbTemplateFieldGetLen | ( | _field | ) | ((_field)->len) |
Returns the octet length of an fbTemplateField_t, a uint16_t, as specified when the fbTemplate_t was created.
That is, this is the length specified by the fbInfoElementSpec_t or fbInfoElementSpecId_t for Templates created by the user, or the length read from a Collector.
#define fbTemplateFieldGetMemsize | ( | _field | ) |
Returns the octet length in memory of an fbTemplateField_t, a unit16_t.
For fixed length elements, this is same as fbTemplateFieldGetLen(). For variable-length fields, this is the size of the data structure used by libfixbuf to represent the element in memory.
#define fbTemplateFieldGetName | ( | _field | ) | ((_field)->canon->name) |
Returns the name of the fbInfoElement_t used by an fbTemplateField_t, a const char *.
#define fbTemplateFieldGetOffset | ( | _field | ) | ((_field)->offset) |
Returns the offset of the fbTemplateField_t from the start of an (in meory) record, a uint16_t.
This is the offset of this field in an array of uint8_t's representing a data record.
#define fbTemplateFieldGetPEN | ( | _field | ) | ((_field)->canon->ent) |
Returns the private enterprise number (PEN) of the fbInfoElement_t used by an fbTemplateField_t, a uint32_t.
#define fbTemplateFieldGetType | ( | _field | ) | ((fbInfoElementDataType_t)((_field)->canon->type)) |
Returns the data type of the fbInfoElement_t used by an fbTemplateField_t, a fbInfoElementDataType_t.
#define fbTemplateFieldGetRepeat | ( | _field | ) | ((_field)->midx) |
Returns the repeat index for the fbInfoElement_t used by this fbTemplateField_t in the containing fbTemplate_t.
When an InfoElement is repeated within a Template, the repeat index, also called the multi-use index, is used to distinguish them. The InfoElement with the lowest offset has repeat index 0, the next lowest has index 1, et cetera.
The value can also be considered as the number of times this TemplateField's InfoElement is used in the Template prior to this occurrence.
#define FB_TEMPLATE_ITER_NULL {NULL, UINT16_MAX} |
A static initializer for an fbTemplateIter_t.
#define FB_RECORD_INIT {NULL, NULL, 0, 0, 0} |
A static initializer for an fbRecord_t.
#define FB_RECORD_VALUE_INIT { NULL, NULL, { {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} } } |
A static initializer for an fbRecordValue_t.
#define FB_TID_AUTO 0 |
Template ID argument used when adding an fbTemplate_t to an fbSession_t that automatically assigns a template ID.
Functions that accept this value are fbSessionAddTemplate(), fbSessionAddTemplatesForExport(), fbSessionSetMetadataExportElements(), and fbSessionSetMetadataExportTemplates().
For internal templates, FB_TID_AUTO starts from 65535 and decrements. For external templates, FB_TID_AUTO starts from 256 and increments. This is to avoid inadvertant unrelated external and internal templates having the same ID.
#define FB_TID_TS 2 |
Reserved set ID for template sets, per RFC 7011.
#define FB_TID_OTS 3 |
Reserved set ID for options template sets, per RFC 7011.
#define FB_TID_MIN_DATA 256 |
Minimum non-reserved template ID available for data sets, per RFC 7011.
#define FB_IESPEC_NULL { NULL, 0, 0 } |
Convenience macro defining a null information element specification initializer (fbInfoElementSpec_t) to terminate a constant information element specifier array for passing to fbTemplateAppendSpecArray().
#define FB_IESPECID_NULL { {0, 0}, 0, 0 } |
Convenience macro defining a null information element specification initializer (fbInfoElementSpecId_t) to terminate a constant information element specifier array for passing to fbTemplateAppendArraySpecId().
#define FB_TMPL_MD_LEVEL_0 0 |
Value to use for the parentTid
parameter of fbTemplateInfoInit() to indicate the template is not used as a sub-record (that is, that it is not used in a subTemplateList or subTemplateMultiList).
#define FB_TMPL_MD_LEVEL_1 1 |
Value to use for the parentTid
parameter of fbTemplateInfoInit() to indicate the template is used as a first level sub-record.
#define FB_TMPL_MD_LEVEL_NA 0xFF |
Value set by an fbCollector_t to denote that the version of the received TemplateInfo does not include parent template ID.
#define FB_CONNSPEC_INIT { FB_SCTP, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL } |
Convenience macro defining a null static fbConnSpec_t.
#define fbBLNext | ( | type, | |
basicList, | |||
current | |||
) | ((type *)(fbBasicListGetNextPtr((basicList), (current)))) |
Retrieves the next item from an fbBasicList_t.
Returns a pointer to the element in basicList
that follows current
and casts it to a pointer to type
. If current
is NULL, gets the first item. Returns NULL when there are no more items.
#define fbSTLNext | ( | type, | |
subTemplateList, | |||
current | |||
) | ((type *)(fbSubTemplateListGetNextPtr((subTemplateList), (current)))) |
Retrieves the next record from an fbSubTemplateList_t.
Returns a pointer to the record in subTemplateList
that follows current
and casts it to a pointer to type
. If current
is NULL, gets the first record. Returns NULL when there are no more records.
#define fbSTMLNext | ( | subTemplateMultiList, | |
current | |||
) | fbSubTemplateMultiListGetNextEntry((subTemplateMultiList), (current)) |
Retrieves the next fbSubTemplateMultiListEntry_t from an fbSubTemplateMultiList_t.
Returns a pointer to the entry in subTemplateMultiList
that follows current
. If current
is NULL, gets the first entry. Returns NULL when there are no more entries.
#define fbSTMLEntryNext | ( | type, | |
subTemplateMultiListEntry, | |||
current | |||
) |
Retrieves the next record from an fbSubTemplateMultiListEntry_t.
Returns a pointer to the record in subTemplateMultiListEntry
that follows current
and casts it to a pointer to type
. If current
is NULL, gets the first record. Returns NULL when there are no more records.
#define FB_TMPL_IS_OPTIONS (1u << 0) |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is an options template.
#define FB_TMPL_IS_META_ELEMENT (1u << 1) |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is for describing Information Elements (RFC 5610) (element metadata, fbInfoElementOptRec_t).
#define FB_TMPL_IS_META_TEMPLATE_V1 (1u << 2) |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is for describing a Template as defined by libfixbuf 1.8.0.
Templates matching this may also match FB_TMPL_IS_META_TEMPLATE_V3.
#define FB_TMPL_IS_META_TEMPLATE_V3 (1u << 3) |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is for describing a Template as defined by libfixbuf 3.0.0 (fbTemplateInfo_t).
#define FB_TMPL_IS_META_BASICLIST (1u << 4) |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is for describing the relationship between a BasicList and its contents (fbBasicListInfo_t).
#define FB_TMPL_IS_META_TMPL_ANY |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is related to template metadata (fbTemplateInfo_t or fbBasicListInfo_t).
#define FB_TMPL_IS_META_ANY |
A tests
flag for fbTemplateIsMetadata() to check whether the fbTemplate_t is related to template metadata or element metadata.
#define FB_TMPL_COPY_REMOVE_PADDING 0x01u |
Causes fbTemplatesCopy() to ignore paddingOctets elements while copying the template.
The resulting template will contain no paddingOctets elements.
#define FB_TMPL_COPY_IGNORE_SCOPE 0x04u |
Prevents fbTemplatesCopy() from setting the options scope of the new template.
This can be used to create a template with a different scope count, since a template's scope may not be modified once set.
#define FB_TMPL_CMP_IGNORE_PADDING 0x01u |
Causes fbTemplatesCompare() and fbTemplateSetCompare() to ignore paddingOctets elements when comparing templates.
#define FB_TMPL_CMP_IGNORE_LENGTHS 0x02u |
Causes fbTemplatesCompare() and fbTemplateSetCompare() to ignore the lengths of the elements when comparing templates.
#define FB_TMPL_CMP_IGNORE_SCOPE 0x04u |
Causes fbTemplatesCompare() to ignore the options scope count when comparing templates.
fbInfoElementSemantics_t defines the possible semantics of an fbInfoElement_t.
See RFC 5610
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-semantics
fbInfoElementUnits_t defines the possible units on an fbInfoElement_t.
See RFC 5610
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-element-units
From RFC 5610: A description of the abstract data type of an IPFIX information element as registered in the IANA IPFIX IE Data Type subregistry.
enum fbTransport_en |
Transport protocol for connection specifier.
enum fbListSemantics_en |
fbListSemantics_t defines the possible values for the semantics of the structured Data Types: basicLists, subTemplateLists, and subTemplateMultiLists.
See RFC 6313.
https://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-structured-data-types-semantics
Defines the values returned by fbTemplatesSetCompare() when checking whether one fbTemplate_t is a subset of another.
void fbTemplateIterInit | ( | fbTemplateIter_t * | iter, |
const fbTemplate_t * | tmpl | ||
) |
Initializes a TemplateIter to visit the fbTemplateField_t objects in a Template.
The TemplateFields are visited in the order they appear. Use fbTemplateIterNext() to visit each TemplateField.
iter | The TemplateIter to initialize |
tmpl | The Template to be iterated over |
const fbTemplateField_t * fbTemplateIterGetField | ( | const fbTemplateIter_t * | iter | ) |
Returns the same TemplateField returned by the most recent call to fbTemplateIterNext().
Does not advance the iterator. Returns NULL if fbTemplateIterNext() has not been called or if the iterator has visited all TemplateFields. Assumes fbTemplateIterInit() has been called on iter
.
iter | A TemplateIter |
uint16_t fbTemplateIterGetPosition | ( | const fbTemplateIter_t * | iter | ) |
Returns the position of the fbTemplateField_t returned by the most recent call to fbTemplateIterNext().
Does not advance the iterator. Returns fbTemplateCountElements() if the iterator is exhausted. Returns UINT16_MAX if fbTemplateIterNext() has not been called.
iter | A TemplateIter |
const fbTemplate_t * fbTemplateIterGetTemplate | ( | const fbTemplateIter_t * | iter | ) |
Returns the Template to which the TemplateIter is bound.
iter | A TemplateIter |
const fbTemplateField_t * fbTemplateIterNext | ( | fbTemplateIter_t * | iter | ) |
Returns the next TemplateField in the fbTemplate_t.
Returns the first TemplateField if this is the first call to fbTemplateIterNext() after calling fbTemplateIterInit(). Returns NULL if the iterator is exhausted. Assumes fbTemplateIterInit() has been called on iter
.
To get this same TemplateField, you may call fbTemplateIterGetField().
iter | A TemplateIter |
fbTemplateInfo_t * fbTemplateInfoAlloc | ( | void | ) |
Allocates and returns an empty template metadata information structure.
Exits the application on allocation failure.
void fbTemplateInfoFree | ( | fbTemplateInfo_t * | tmplInfo | ) |
Frees a template metadata structure.
tmplInfo | The object to be freed. |
fbTemplateInfo_t * fbTemplateInfoCopy | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Makes a copy of TemplateInfo.
A TemplateInfo is tied to a fbTemplate_t in a specific fbSession_t. To use it in another Session it should be copied.
tmplInfo | The object to be copied. |
gboolean fbTemplateInfoInit | ( | fbTemplateInfo_t * | tmplInfo, |
const char * | name, | ||
const char * | description, | ||
uint16_t | appLabel, | ||
uint16_t | parentTid | ||
) |
Initializes a template metadata structure.
tmplInfo | the object to initialize |
name | the name of the template, required |
description | a description of the template |
appLabel | the silkAppLabel value this template is associate with |
parentTid | the parent template id. use FB_TMPL_MD_LEVEL_0 if this is top-level and FB_TMPL_MD_LEVEL_1 if this is used immediately below top-level. |
void fbTemplateInfoAddBasicList | ( | fbTemplateInfo_t * | tmplInfo, |
uint32_t | blEnt, | ||
uint16_t | blNum, | ||
uint32_t | contentEnt, | ||
uint16_t | contentNum | ||
) |
Adds a description for an fbBasicList_t that is used by the fbTemplate_t described by tmplInfo
.
tmplInfo | the template info to modify |
blEnt | the enterprise number of the fbInfoElement_t of the the list itself |
blNum | the element number of the fbInfoElement_t of the list itself |
contentEnt | the enterprise number of the fbInfoElement_t for the contents of the list |
contentNum | the element number of the fbInfoElement_t for the contents of the list |
uint16_t fbTemplateInfoGetApplabel | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Returns the applabel
value specified in fbTemplateInfoInit().
uint16_t fbTemplateInfoGetParentTid | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Returns the parentTid
value specified in fbTemplateInfoInit().
const char * fbTemplateInfoGetName | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Returns the name
value specified in fbTemplateInfoInit().
const char * fbTemplateInfoGetDescription | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Returns the description
value specified in fbTemplateInfoInit().
uint16_t fbTemplateInfoGetTemplateId | ( | const fbTemplateInfo_t * | tmplInfo | ) |
Returns the Template ID value associated with this TemplateInfo.
const fbBasicListInfo_t * fbTemplateInfoGetNextBasicList | ( | const fbTemplateInfo_t * | tmplInfo, |
const fbBasicListInfo_t * | blInfo | ||
) |
Returns a description of the next fbBasicList_t that is used by the fbTemplate_t described by tmplInfo
.
Returns NULL when there are no more BasicListInfos. When blInfo
is NULL, returns the the first BasicListInfo.
Use fbTemplateInfoAddBasicList() to add descriptions of BasicLists to an fbTemplateInfo_t.
tmplInfo | the template info to be queried |
blInfo | the value returned on the previous call to this function or NULL for the initial call |
uint16_t fbBasicListInfoGetListIdent | ( | const fbBasicListInfo_t * | blInfo, |
uint32_t * | pen | ||
) |
Gets from blInfo
the element numbers for the fbInfoElement_t used by the BasicList element itself.
That is, this is the element that a fbTemplate_t which uses this BasicList would contain. Returns the element number and sets the referent of pen
to the enterprise number when pen
is not NULL.
blInfo | the BasicListInfo to be queried |
pen | an output parameter filled with the enterprise number if non-NULL |
fbTemplateInfoGetNextBasicList() to get a handle to a BasicListInfo.
uint16_t fbBasicListInfoGetContentIdent | ( | const fbBasicListInfo_t * | blInfo, |
uint32_t * | pen | ||
) |
Gets from blInfo
the element numbers for the fbInfoElement_t that the BasicList contains.
These are the values that would be returned by fbBasicListGetElementIdent(). Returns the element number and sets the referent of pen
to the enterprise number when pen
is not NULL.
blInfo | the BasicListInfo to be queried |
pen | an output parameter filled with the enterprise number if non-NULL |
const fbTemplateInfo_t * fbSessionGetTemplateInfo | ( | const fbSession_t * | session, |
uint16_t | tid | ||
) |
Returns the metadata for template whose ID is tid
in the current domain or NULL if no metadata is available.
session | A session to be queried |
tid | The template ID to search for |
uint16_t fbSessionGetTemplatePath | ( | const fbSession_t * | session, |
const fbTemplateInfo_t * | tmplInfo, | ||
uint16_t | path[], | ||
uint16_t | path_size, | ||
GError ** | err | ||
) |
Finds the template path of the fbTemplate_t described by tmplInfo
.
FIXME: Should the caller supply tmplInfo or TID? If tmplInfo, should we confirm that tmplInfo exists in this session?
The function fills the array path
with the Template IDs starting at tmplInfo
(at position 0), its parent at position 1, and continuing to the top-level template at position "count-1". The function returns the value of count. The caller must supply the number of IDs path
can hold in the path_size
parameter.
To get the count of the Template described by tmplInfo
without getting the template IDs, pass NULL to path
and 0 to path_size
.
If tmplInfo
is for a top-level template, the path[0] is that ID and the return value is 1.
For a first-level template, its ID is in path[0], 0 is in path[1] (meaning any top-level template), and the return value is 2.
If 'path' is not-null and the depth is larger than path_size
, the function sets the err
value and returns 0.
If the metadata for a template ID in the path is not known to the session, the function sets an error and returns 0.
If tmplInfo
does not contain information other then template ID, name, and description, path[0] is FB_TMPL_MD_LEVEL_NA and the return value is 1.
session | The Session in which to find the template path |
tmplInfo | The metadata to start from when finding the path. |
path | An array to be filled in with the template IDs or NULL |
path_size | The number of values path is capable of holding |
err | An error description, set on failure |
path
or 0 on error gboolean fbListSemanticsIsValid | ( | uint8_t | semantic | ) |
Validates the value of a structured data types semantic field, as defined in RFC 6313 and listed at IANA.
semantic | The value of the semantic field to be checked |
fbBasicList_t * fbBasicListAlloc | ( | void | ) |
Allocates and returns an empty BasicList.
Exits the application on allocation failure. Use fbBasicListFree() to free the BasicList.
Given typical usage where list structures are defined as part of a C struct
, this function is not often used.
void * fbBasicListInit | ( | fbBasicList_t * | basicList, |
uint8_t | semantic, | ||
const fbInfoElement_t * | infoElement, | ||
uint16_t | numElements | ||
) |
Initializes a BasicList for export.
This function calls fbBasicListInitWithLength() using the default length of infoElement
as the value for the elementLength
parameter. See that function for more information.
basicList | a pointer to the basic list structure to fill |
semantic | the semantic value to be used in the basic list, a fbListSemantics_t value |
infoElement | a pointer to the info element to be used in the list |
numElements | number of elements in the list |
void * fbBasicListInitWithLength | ( | fbBasicList_t * | basicList, |
uint8_t | semantic, | ||
const fbInfoElement_t * | infoElement, | ||
uint16_t | elementLength, | ||
uint16_t | numElements | ||
) |
Initializes a BasicList for export using a user-specified element length.
Sets the semantic of the list, sets the type of element stored by the list, and allocates a data buffer large enough to hold numElements
elements, each of size elementLength
. Returns a pointer to the newly allocated and zeroed data buffer, or returns NULL if infoElement
does not support elements of length elementLength
.
The function fbBasicListInit() is a convenience function to initalize a BasicList using the default length of infoElement
.
If basicList
has been used previously, it must be cleared with fbBasicListClear() prior to invoking this function. Otherwise the data array will be overwritten without freeing it, resulting in a memory leak.
basicList | a pointer to the basic list structure to fill |
semantic | the semantic value to be used in the basic list, a fbListSemantics_t value |
infoElement | a pointer to the info element to be used in the list |
elementLength | the length for each element in the list |
numElements | number of elements in the list |
void fbBasicListCollectorInit | ( | fbBasicList_t * | basicList | ) |
Initializes a BasicList for collection, setting all properties of the list to 0 or NULL.
This is equivalent to calling
If basicList
has been used previously, it must be cleared with fbBasicListClear() (otherwise a memory leak may occur) and calling this function is not necessary.
basicList | pointer to the basic list to be initialized |
uint16_t fbBasicListGetElementLength | ( | const fbBasicList_t * | basicList | ) |
Returns the octet length of an individual element in the BasicList.
That is, returns the value specified when the list was initialized for export (fbBasicListInitWithLength()) or read from the fbCollector_t.
basicList | pointer to the basic list |
uint16_t fbBasicListCountElements | ( | const fbBasicList_t * | basicList | ) |
Returns the number of elements the basic list is capable of holding.
That is, returns the value specified when the list was initialized for export (fbBasicListInitWithLength()), expanded (fbBasicListAddNewElements()), or read from the fbCollector_t.
basicList | pointer to the basic list |
uint8_t fbBasicListGetSemantic | ( | const fbBasicList_t * | basicList | ) |
Returns the list semantics value (fbListSemantics_t) for a BasicList.
basicList | pointer to the basic list to retrieve the semantic from |
void fbBasicListSetSemantic | ( | fbBasicList_t * | basicList, |
uint8_t | semantic | ||
) |
Sets the list semantics value (fbListSemantics_t) for describing a basic list.
basicList | pointer to the basic list to set the semantic |
semantic | value to set the semantic field to |
const fbInfoElement_t * fbBasicListGetInfoElement | ( | const fbBasicList_t * | basicList | ) |
Returns a pointer to the information element used in the basic list.
It is mainly used in an fbCollector_t to retrieve information.
basicList | pointer to the basic list to get the infoElement from |
uint16_t fbBasicListGetElementIdent | ( | const fbBasicList_t * | basicList, |
uint32_t * | pen | ||
) |
Gets the element ID and enterprise number for the fbInfoElement_t used by a BasicList.
Returns the element ID and sets the referent of pen
to the enterprise number when pen
is not NULL.
basicList | BasicList from which to get the information |
pen | An output parameter used to get the enterprise number |
const fbTemplateField_t * fbBasicListGetTemplateField | ( | const fbBasicList_t * | basicList | ) |
Returns a simulated TemplateField that describes the data within a basicList.
The TemplateField is not associated with an fbRecord_t, and it must not be used for fbRecordGetValueForField() or similar functions.
basicList | BasicList from which to get the information |
basicList
void * fbBasicListGetDataPtr | ( | const fbBasicList_t * | basicList | ) |
Gets a pointer to the data buffer for the basic list.
basicList | pointer to the basic list to get the data pointer from |
void * fbBasicListGetIndexedDataPtr | ( | const fbBasicList_t * | basicList, |
uint16_t | index | ||
) |
Retrieves the element at position index
in the basic list or returns NULL if index
is out of range.
The first element is at index 0, and the last at fbBasicListCountElements()-1.
basicList | pointer to the basic list to retrieve the dataPtr |
index | the index of the element to retrieve (0-based) |
gboolean fbBasicListGetIndexedRecordValue | ( | const fbBasicList_t * | basicList, |
uint16_t | index, | ||
fbRecordValue_t * | value | ||
) |
Fills a RecordValue from the data for the index
th element in basicList
.
Returns FALSE if index
is invalid; the valid range for index
is 0 to fbBasicListCountElements()-1 inclusive.
basicList | The basicList to get the value from. |
index | Which item to get the value of; 0 is first. |
value | An output parameter to fill with the value. |
basicList
is NULL or index
is out of range. void * fbBasicListGetNextPtr | ( | const fbBasicList_t * | basicList, |
const void * | currentPtr | ||
) |
Retrieves a pointer to the data element in the basicList that follows the one at currentPtr
.
Retrieves the first element if currentPtr
is NULL. Returns NULL when there are no more elements or when currentPtr
is outside the buffer used by the basic list.
basicList | pointer to the basic list |
currentPtr | pointer to the current element being used. Set to NULL to retrieve the first element. |
void * fbBasicListResize | ( | fbBasicList_t * | basicList, |
uint16_t | newCount | ||
) |
Resizes and zeroes the list's internal buffer for elements.
Returns a handle to the new buffer which is capable of holding newCount
total elements. The other properties of the BasicList are unchanged.
May only be called on an initialized BasicList. This function does not free any recursive structured-data records used by the existing buffer before resizing it.
basicList | the BasicList to resize |
newCount | total count of elements the resized list can hold |
void * fbBasicListAddNewElements | ( | fbBasicList_t * | basicList, |
uint16_t | additional | ||
) |
Increases the size of the list's internal data buffer to hold additional
more elements.
Returns a pointer to the first additional element. Any elements in the buffer prior to this call remain unchanged (though they may be in a new memory location). May only be called on an initialized BasicList.
basicList | pointer to the basic list to add elements to |
additional | number of elements to add to the list |
void fbBasicListClear | ( | fbBasicList_t * | basicList | ) |
Frees the data array of basicList
and sets all parameters of basicList
to 0 or NULL.
This function should only be called on a properly initialized basicList, and it leaves the BasicList in the same state as fbBasicListCollectorInit(). To reuse the BasicList for export after this call, re-initialize it with fbBasicListInit().
basicList | pointer to the basic list to clear |
void fbBasicListClearWithoutFree | ( | fbBasicList_t * | basicList | ) |
Sets all parameters of basicList
to 0 or NULL except for the internal data array and its allocated length.
Use of this function is not recommended.
basicList | pointer to the basic list to clear without freeing |
void fbBasicListFree | ( | fbBasicList_t * | basicList | ) |
Frees the data array of basicList
(fbBasicListClear()), then frees basicList
itself.
This is typically paired with fbBasicListAlloc(), and it not often used.
basicList | pointer to the basic list to free |
fbSubTemplateList_t * fbSubTemplateListAlloc | ( | void | ) |
Allocates and returns an empty subTemplateList structure.
Exits the application on allocation failure. Use fbSubTemplateListFree() to free the subTemplateList.
Given typical usage where list structures are defined as part of a C struct
, this function is not often used.
void * fbSubTemplateListInit | ( | fbSubTemplateList_t * | stl, |
uint8_t | semantic, | ||
uint16_t | tmplID, | ||
const fbTemplate_t * | tmpl, | ||
uint16_t | numElements | ||
) |
Initializes stl
with the given parameters and allocates the internal data array to a size capable of holding numElements
records matching tmpl
.
Returns a pointer to the allocated and zeroed data array; exits the application if the allocation fails. Returns NULL only when tmpl
is NULL.
If stl
has been used previously, any sub-lists within it must be cleared, then stl
must be cleared with fbSubTemplateListClear() prior to invoking this function. Otherwise the data array will be overwritten without freeing it, resulting in a memory leak.
This is mainly used when preparing to encode data for output by an fbExporter_t. When reading data, use fbSubTemplateListCollectorInit() to initialize the subTemplateList. The tmpl
should exist on the fbSession_t that will be used when exporting the record holding this subTemplateList.
stl | pointer to the sub template list to initialize |
semantic | the semantic value used to describe the list contents, a fbListSemantics_t value |
tmplID | id of the template used for encoding the list data |
tmpl | pointer to the template struct used for encoding the list data |
numElements | number of elements in the list |
void fbSubTemplateListCollectorInit | ( | fbSubTemplateList_t * | subTemplateList | ) |
Initializes a SubTemplateList for collection, setting all properties of the list to 0 or NULL.
This is equivalent to calling
If stl
has been used previously, any sub-lists within it must be cleared, then stl
must be cleared with fbSubTemplateListClear() (otherwise a memory leak may occur) and calling this function is not necessary.
When using an fbExporter_t, use fbSubTemplateListInit() to initialize the subTemplateList.
subTemplateList | The SubTemplateList to initialize for collection |
void * fbSubTemplateListGetDataPtr | ( | const fbSubTemplateList_t * | subTemplateList | ) |
Returns the pointer to the sub-record data array for the subTemplateList.
subTemplateList | pointer to the STL to get the pointer from |
void * fbSubTemplateListGetIndexedDataPtr | ( | const fbSubTemplateList_t * | subTemplateList, |
uint16_t | index | ||
) |
Returns the data for the record at position index
in the sub template list, or returns NULL if index
is out of range.
The first element is at index 0, the last at fbSubTemplateListCountElements()-1.
subTemplateList | pointer to the STL |
index | The index of the element to be retrieved (0-based) |
void * fbSubTemplateListGetNextPtr | ( | const fbSubTemplateList_t * | subTemplateList, |
const void * | currentPtr | ||
) |
Retrieves a pointer to the data record in the sub template list that follows the one at currentPtr
.
Retrieves the first record if currentPtr
is NULL. Returns NULL when there are no more records or when currentPtr
is outside the buffer used by the sub template list.
subTemplateList | pointer to the STL to get data from |
currentPtr | pointer to the last element accessed. NULL causes the pointer to the first element to be returned |
uint16_t fbSubTemplateListCountElements | ( | const fbSubTemplateList_t * | subTemplateList | ) |
Returns the number of elements (sub-records) the sub template list is capable of holding.
subTemplateList | pointer to the sub template list |
void fbSubTemplateListSetSemantic | ( | fbSubTemplateList_t * | subTemplateList, |
uint8_t | semantic | ||
) |
Sets the list semantics value (fbListSemantics_t) of a SubTemplateList.
subTemplateList | pointer to the sub template list |
semantic | Semantic value for the list |
uint8_t fbSubTemplateListGetSemantic | ( | const fbSubTemplateList_t * | subTemplateList | ) |
Gets the list semantics value (fbListSemantics_t) from a SubTemplateList.
subTemplateList | pointer to the sub template list |
const fbTemplate_t * fbSubTemplateListGetTemplate | ( | const fbSubTemplateList_t * | subTemplateList | ) |
Gets the template pointer from the list structure.
subTemplateList | pointer to the sub template list |
uint16_t fbSubTemplateListGetTemplateID | ( | const fbSubTemplateList_t * | subTemplateList | ) |
Gets the template ID for the template used by the list.
subTemplateList | pointer to the sub template list |
void * fbSubTemplateListResize | ( | fbSubTemplateList_t * | subTemplateList, |
uint16_t | newCount | ||
) |
Resizes and zeroes the list's internal buffer for elements (sub-records).
Returns a handle to the new buffer which is capable of holding newCount
total sub-records. The other properties of the SubTemplateList are unchanged.
This function may only be called on an initialized SubTemplateList. This function does not free any recursive structured-data records used by the existing buffer before resizing it.
subTemplateList | the sub template list to resize |
newCount | total count of sub-records the resized list can hold |
void * fbSubTemplateListAddNewElements | ( | fbSubTemplateList_t * | subTemplateList, |
uint16_t | additional | ||
) |
Increases the size of the list's internal buffer to hold additional
more elements (sub-records).
Returns a pointer to the first additional sub-record. Any sub-records in the buffer prior to this call remain unchanged (though they may be in a new memory location). May only be called on an initialized SubTemplateList.
subTemplateList | pointer to the sub template list |
additional | number of new elements to add to the list |
void fbSubTemplateListClear | ( | fbSubTemplateList_t * | subTemplateList | ) |
Frees the data array of subTemplateList
and sets all parameters of subTemplateList
to 0 or NULL.
This function does not free any structured-data elements used by sub-records in the the data array before freeing it. The caller must do that before invoking this function.
This function should only be called on a properly initalized subTemplateList, and it leaves the subTemplateList in the same state as fbSubTemplateListCollectorInit(). To reuse the BasicList for export after this call, re-initialize it with fbBasicListInit().
This should be used after each call to fBufNext(): If the dataPtr is not NULL in DecodeSubTemplateList, it will not allocate new memory for the new record, which could cause a buffer overflow if the new record has a longer list than the current one. An alternative is to allocate a large buffer and assign it to dataPtr on your own, then never clear it with this. Be certain this buffer is longer than needed for all possible lists
subTemplateList | pointer to the sub template list to clear |
void fbSubTemplateListClearWithoutFree | ( | fbSubTemplateList_t * | subTemplateList | ) |
Sets all parameters of subTemplateList
to 0 or NULL except for the internal data array and its allocated length.
Use of this function is not recommended.
subTemplateList | pointer to the sub template list to clear |
void fbSubTemplateListFree | ( | fbSubTemplateList_t * | subTemplateList | ) |
Frees the data array of subTemplateList
(fbSubTemplateListClear()), then frees subTemplateList
itself.
This is typically paired with fbSubTemplateListAlloc(), and it not often used.
subTemplateList | pointer to the sub template list to free |
fbSubTemplateMultiList_t * fbSubTemplateMultiListAlloc | ( | void | ) |
Allocates and returns an empty subTemplateMultiList structure.
Exits the application on allocation failure. Use fbSubTemplateMultiListFree() to free the returned subTemplateMultiList.
Given typical usage where list structures are defined as part of a C struct
, this function is not often used.
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListInit | ( | fbSubTemplateMultiList_t * | STML, |
uint8_t | semantic, | ||
uint16_t | numElements | ||
) |
Initializes the multi list with the list semantic and allocates a data array to store numElements
entries.
Retuns a pointer to the first entry of the allocated and zeroed data array. Exits the application on allocation failure.
If STML
has been used previously, any sub-lists with it must be cleared, then STML
must be cleared with fbSubTemplateMultiListClear() prior to invoking this function. Otherwise the data array will be overwritten without freeing it, resulting in a memory leak.
STML | pointer to the sub template multi list to initialize |
semantic | value used to describe the entries in the multi list, a fbListSemantics_t value |
numElements | number of entries in the multi list |
uint16_t fbSubTemplateMultiListCountElements | ( | const fbSubTemplateMultiList_t * | STML | ) |
Returns the number of entries the sub template multi list is capable of holding.
STML | pointer to the sub template multi list |
void fbSubTemplateMultiListSetSemantic | ( | fbSubTemplateMultiList_t * | STML, |
uint8_t | semantic | ||
) |
Sets the list semantics value (fbListSemantics_t) for the multi list.
STML | pointer to the sub template multi list |
semantic | Value for the semantic field of the sub template multi list |
uint8_t fbSubTemplateMultiListGetSemantic | ( | const fbSubTemplateMultiList_t * | STML | ) |
Gets the list semantics value (fbListSemantics_t) from the multi list.
STML | pointer to the sub template multi list |
void fbSubTemplateMultiListClear | ( | fbSubTemplateMultiList_t * | STML | ) |
Calls fbSubTemplateMultiListEntryClear() for each Entry in STML
then frees the STML
's data array and sets its parameters to 0 or NULL.
That is, frees its data array used by each Entry in STML
, frees the data array in STML
that held the Entries, and sets the parameters of STML
to 0 or NULL.
This function does not free any recursive structured-data records used by the Entries' data arrays before freeing them. The caller must do that before invoking this function.
This function should only be called on a properly initialized fbSubTemplateMultiList_t.
fbSubTemplateMultiListClearEntries() is similar to this function except it does not free STML
's data array or reset its parameters.
STML | pointer to the sub template multi list to clear |
void fbSubTemplateMultiListClearEntries | ( | fbSubTemplateMultiList_t * | STML | ) |
Calls fbSubTemplateMultiListEntryClear() for each Entry in STML
.
That is, for each Entry in STML
, frees its data array and sets its parameters to 0 or NULL.
This function does not free any recursive structured-data records used by the Entries' data arrays before freeing them. The caller must do that before invoking this function.
This function should only be called on a properly initialized fbSubTemplateMultiList_t.
To free the data array in STML
that holds the Entries in addition to freeing each Entry, use fbSubTemplateMultiListClear().
STML | pointer to the sub template multi list |
void fbSubTemplateMultiListFree | ( | fbSubTemplateMultiList_t * | STML | ) |
Frees the data arrays of each Entry and of STML
(fbSubTemplateMultiListClear()), then frees STML
itself.
This is typically paired with fbSubTemplateMultiListAlloc(), and it not often used.
STML | pointer to the sub template multi list |
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListResize | ( | fbSubTemplateMultiList_t * | STML, |
uint16_t | newCount | ||
) |
Resizes and zeroes the list's internal buffer for entries (fbSubTemplateMultiListEntry_t).
Returns a handle to the new buffer which is capable of holding newCount
total entries. The other properties of the SubTemplateMultiList are unchanged.
This function may only be called on an initialized SubTemplateMultiList. This function does not free any recursive structured-data records used by the existing buffer before resizing it.
STML | the sub template multi list to resize |
newCount | total number of entries the resized list can hold |
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListAddNewEntries | ( | fbSubTemplateMultiList_t * | STML, |
uint16_t | additional | ||
) |
Increases the size of the list's internal buffer to hold additional
more entries.
Returns a pointer to the first additional entry. Any entries in the buffer prior to this call remain unchanged (though they may be in a new memory location). May only be used on an initialized SubTemplateMultiList.
Exits the application on allocation failure.
STML | pointer to the sub template multi list |
additional | number of entries to add to the list |
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListGetFirstEntry | ( | const fbSubTemplateMultiList_t * | STML | ) |
Retrieves the first entry in the multi list.
STML | pointer to the sub template multi list |
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListGetIndexedEntry | ( | const fbSubTemplateMultiList_t * | STML, |
uint16_t | index | ||
) |
Retrieves a pointer to the entry at a specific index, or returns NULL if index
is out of range.
The first entry is at index 0, the last at fbSubTemplateMultiListCountElements()-1.
STML | pointer to the sub template multi list |
index | index of the entry to be returned (0-based) |
fbSubTemplateMultiListEntry_t * fbSubTemplateMultiListGetNextEntry | ( | const fbSubTemplateMultiList_t * | STML, |
const fbSubTemplateMultiListEntry_t * | currentEntry | ||
) |
Retrieves a pointer to the entry in the multi list that follows the one at currentEntry
.
Retrieves the first entry if currentEntry
is NULL. Returns NULL when there are no more entries or when currentEntry
is outside the buffer used by the multi list.
STML | pointer to the sub template multi list to get data from |
currentEntry | pointer to the last element accessed. NULL means none have been accessed yet |
void * fbSubTemplateMultiListEntryInit | ( | fbSubTemplateMultiListEntry_t * | entry, |
uint16_t | tmplID, | ||
const fbTemplate_t * | tmpl, | ||
uint16_t | numElements | ||
) |
Initializes entry
with the given parameters and allocates the internal data array to a size capable of holding numElements
records matching tmpl
.
If entry
has been used previously, any sub-lists with it must be cleared, then entry
must be cleared with fbSubTemplateMultiListEntryClear() prior to invoking this function. Otherwise the data array will be overwritten without freeing it, resulting in a memory leak.
This is mainly used when preparing to encode data for output by an fbExporter_t. The tmpl
should exist on the fbSession_t that will be used when exporting the record holding the subTemplateMultiList.
entry | pointer to the entry to initialize |
tmplID | ID of the template used to structure the data elements |
tmpl | pointer to the template used to structure the data elements |
numElements | number of data elements in the entry |
void * fbSubTemplateMultiListEntryResize | ( | fbSubTemplateMultiListEntry_t * | entry, |
uint16_t | newCount | ||
) |
Resizes and zeroes the entry's internal buffer for elements (sub-records).
Returns a handle to the new buffer which is capable of holding newCount
total sub-records. The other properties of the SubTemplateMultiListEntry are unchanged.
This function may only be called on an initialized SubTemplateMultiListEntry. This function does not free any recursive structured-data records used by the existing buffer before resizing it.
entry | the STML entry to resize |
newCount | total count of sub-records the resized list can hold |
void * fbSubTemplateMultiListEntryAddNewElements | ( | fbSubTemplateMultiListEntry_t * | entry, |
uint16_t | additional | ||
) |
Increases the size of the entry's internal buffer to hold additional
more elements (sub-records).
Returns a pointer to the first additional sub-record. Any sub-records in the buffer prior to this call remain unchanged (though they may be in a new memory location). May only be called on an initialized SubTemplateMultiListEntry.
Exits the application on allocation failure.
entry | pointer to the STML entry to add additional sub-records to |
additional | number of sub-records to add to the STML entry |
void fbSubTemplateMultiListEntryClear | ( | fbSubTemplateMultiListEntry_t * | entry | ) |
Frees the data array that holds the sub-records of entry
and sets all parameters of entry
to 0 or NULL.
This function does not free any recursive structured-data records used by the data array before freeing it. The caller must do that before invoking this function.
This function should only be called on a properly initialized fbSubTemplateMultiListEntry_t.
Use fbSubTemplateMultiListClearEntries() to clear all entries in an fbSubTemplateMultiList_t, and fbSubTemplateMultiListClear() to clear the entire fbSubTemplateMultiList_t.
entry | pointer to the entry to be cleared |
void * fbSubTemplateMultiListEntryGetDataPtr | ( | const fbSubTemplateMultiListEntry_t * | entry | ) |
Retrieves the data pointer for this entry.
entry | pointer to the entry to get the data pointer from |
void * fbSubTemplateMultiListEntryNextDataPtr | ( | const fbSubTemplateMultiListEntry_t * | entry, |
const void * | currentPtr | ||
) |
Retrieves a pointer to the data record in this entry that follows the one at currentPtr
.
Retrieves the first record if currentPtr
is NULL. Returns NULL when there are no more records or when currentPtr
is outside the buffer used by the multi list entry.
entry | pointer to the entry to get the next element from |
currentPtr | pointer to the last element accessed. NULL means return a pointer to the first element. |
void * fbSubTemplateMultiListEntryGetIndexedPtr | ( | const fbSubTemplateMultiListEntry_t * | entry, |
uint16_t | index | ||
) |
Retrieves a pointer to the data element in the entry at position index
, or returns NULL when index
is out of range.
The first element is at index 0, the last at fbSubTemplateMultiListEntryCountElements()-1.
entry | pointer to the entry to get a data pointer from. |
index | the number of the element in the list to return |
uint16_t fbSubTemplateMultiListEntryCountElements | ( | const fbSubTemplateMultiListEntry_t * | entry | ) |
Returns the number of entries the sub template multi list entry is capable of holding.
entry | pointer to the sub template multi list entry |
const fbTemplate_t * fbSubTemplateMultiListEntryGetTemplate | ( | const fbSubTemplateMultiListEntry_t * | entry | ) |
Retrieves the template pointer used to structure the data elements.
entry | pointer to the entry to get the template from |
uint16_t fbSubTemplateMultiListEntryGetTemplateID | ( | const fbSubTemplateMultiListEntry_t * | entry | ) |
Retrieves the template ID for the template used to structure the data.
entry | pointer to the entry to get the template ID from |
void fBufListFree | ( | const fbTemplate_t * | tmpl, |
uint8_t * | record | ||
) |
Frees all of the memory that fixbuf allocated during transcode of this record.
That is, it frees all of the memory allocated for list structures, recursively, when fixbuf was encoding or decoding the record. This function does not free the record
array itself.
The tmpl
argument MUST be the internal template that was set using fBufSetInternalTemplate() on the fBuf_t before fBufNext() or fBufAppend() was called with the data.
This is equivalent to doing a depth-first traversal of the record and calling fbSubTemplateMultiListClear(), fbSubTemplateListClear(), or fbBasicListClear() on each structured data element.
tmpl | pointer to the internal template that MUST match the record |
record | pointer to the data |
fbListenerGroup_t * fbListenerGroupAlloc | ( | void | ) |
Allocates and returns an empty ListenerGroup.
Use fbListenerGroupAddListener() to populate the ListenerGroup, fbListenerGroupWait() to wait for connections on those listeners, and fbListenerGroupFree() when the ListenerGroup is no longer needed.
Exits the application on allocation failure.
void fbListenerGroupFree | ( | fbListenerGroup_t * | group | ) |
Frees a listener group.
group | fbListenerGroup |
int fbListenerGroupAddListener | ( | fbListenerGroup_t * | group, |
const fbListener_t * | listener | ||
) |
Adds a previously allocated listener to the previously allocated group.
The listener is placed at the head of the list
group | pointer to the allocated group to add the listener to |
listener | pointer to the listener structure to add to the group |
int fbListenerGroupDeleteListener | ( | fbListenerGroup_t * | group, |
const fbListener_t * | listener | ||
) |
Removes the listener from the group.
IT DOES NOT FREE THE LISTENER OR THE GROUP
group | pointer to the group to remove from the listener from |
listener | pointer to the listener to remove from the group |
fbListenerGroupResult_t * fbListenerGroupWait | ( | fbListenerGroup_t * | group, |
GError ** | err | ||
) |
Accepts connections for multiple listeners.
Works similarly to fbListenerWait(), except that is looks for connections for any listener that is part of a previously allocated and filled listener group. It returns a pointer to the head of a list of listenerGroupResults. The caller is responsible for freeing the listenerGroupResult (fbListenerFreeGroupResult()).
group | pointer to the group of listeners to wait on |
err | error string structure seen throughout fixbuf |
void fbListenerFreeGroupResult | ( | fbListenerGroupResult_t * | result | ) |
Frees the listener group result returned from fbListenerGroupWait().
result | A listener group result |
fBuf_t * fbListenerOwnSocketCollectorTCP | ( | fbListener_t * | listener, |
int | sock, | ||
GError ** | err | ||
) |
Returns an fBuf wrapped around an independently managed socket and a properly created listener for TCP connections.
The caller is only responsible for creating the socket. The existing collector code will close the socket and cleanup everything.
listener | pointer to the listener to wrap around the socket |
sock | the socket descriptor of the independently managed socket |
err | standard fixbuf err structure pointer |
fBuf_t * fbListenerOwnSocketCollectorTLS | ( | fbListener_t * | listener, |
int | sock, | ||
GError ** | err | ||
) |
Same as fbListenerOwnSocketCollectorTCP() but for TLS (not tested)
listener | pointer to the listener to wait on |
sock | independently managed socket descriptor |
err | standard fixbuf err structure pointer |
void fBufInterruptSocket | ( | fBuf_t * | fbuf | ) |
Interrupts the select call of a specific collector by way of its fBuf.
This is mainly used by fbListenerInterrupt() to interrupt all of the collector sockets well.
gboolean fBufSetInternalTemplate | ( | fBuf_t * | fbuf, |
uint16_t | int_tid, | ||
GError ** | err | ||
) |
Sets the internal template on a buffer to the given template ID.
The internal template describes the format of the record pointed to by the recbase parameter to fBufAppend() (for export) and fBufNext() (for collection). The given template ID must identify a current internal template in the buffer's associated session.
An internal template must be set on a buffer before calling fBufAppend() or fBufNext().
fbuf | an IPFIX message buffer |
int_tid | template ID of the new internal template |
err | An error description, set on failure. |
gboolean fBufSetExportTemplate | ( | fBuf_t * | fbuf, |
uint16_t | ext_tid, | ||
GError ** | err | ||
) |
Sets the external template for export on a buffer to the given template ID.
The external template describes the record that will be written to the IPFIX message. The buffer must be initialized for export. The given ID is scoped to the observation domain of the associated session (see fbSessionSetDomain()), and must identify a current external template for the current domain in the buffer's associated session.
An export template must be set on a buffer before calling fBufAppend().
fbuf | an IPFIX message buffer |
ext_tid | template ID of the new external template within the current domain. |
err | An error description, set on failure. |
gboolean fBufSetTemplatesForExport | ( | fBuf_t * | fbuf, |
uint16_t | tid, | ||
GError ** | err | ||
) |
Sets the internal and external templates on a Buffer to the given template ID.
This is a convenience function that invokes fBufSetExportTemplate() and fBufSetInternalTemplate().
fbuf | an IPFIX message buffer |
tid | template ID used to find the internal and external templates for the buffer |
err | An error description, set on failure. |
void fBufSetAutomaticNextMessage | ( | fBuf_t * | fbuf, |
gboolean | automatic | ||
) |
Sets the automatic next-message mode flag on a Buffer.
Buffers are created in automatic next-message mode by default.
For a Buffer allocated for export (fBufAllocForExport()) that is in automatic next-message mode, a call to fBufAppend(), fbSessionAddTemplate(), or fbSessionExportTemplates() that overruns the available space in the Buffer causes the current message to be emitted (fBufEmit()) to the fbExporter_t and a new message started.
For a Buffer allocated for reading (fBufAllocForCollection() or fbListenerWait()) that is in automatic next-message mode, a call to fBufNext() that reaches the end of Buffer causes the next message to be read (fBufNextMessage()) from the fbCollector_t.
In manual next-message mode, the end of message on any buffer export/read call causes the call to return an error with a GError code of FB_ERROR_EOM.
fbuf | an IPFIX message buffer |
automatic | TRUE for this buffer to be automatic, FALSE for manual |
void fBufSetAutomaticMode | ( | fBuf_t * | fbuf, |
gboolean | automatic | ||
) |
Deprecated.
Use fBufSetAutomaticNextMessage() instead.
gboolean fBufSetAutomaticElementInsert | ( | fBuf_t * | fbuf, |
GError ** | err | ||
) |
Enables automatic insertion of RFC 5610 elements read from a Buffer.
RFC 5610 records allow an application to retrieve information about a non-standard information elements. By default, automatic insertion mode is disabled.
In automatic insertion mode, when the buffer reads an information element type record that has a non-zero value for the privateEnterpriseNumber and that is not already present in the buffer's session's information model, a new information element (fbInfoElement_t) is created and added to the information model (fbInfoModel_t). This function creates the internal template for the Info Element Type Record (fbInfoElementOptRec_t) and calls fbInfoElementAddOptRecElement() to add it to the buffer's session.
For export of RFC 5610 elements, use fbSessionSetMetadataExportElements().
fbuf | an IPFIX message buffer |
err | Gerror pointer |
gboolean fBufSetAutomaticInsert | ( | fBuf_t * | fbuf, |
GError ** | err | ||
) |
A deprecated alias for fBufSetAutomaticElementInsert().
fbuf | an IPFIX message buffer |
err | Gerror pointer |
gboolean fBufSetAutomaticMetadataAttach | ( | fBuf_t * | fbuf, |
GError ** | err | ||
) |
Instructes a collection Buffer to process Template Metadata records.
Template Metadata records allow the exporter to provide a name and a description to a template. As of libfixbuf 3.0.0, the Template Metadata also includes relationships among templates (for example, some are used in a fbSubTemplateList_t or a fbSubTemplateMultiList_t) and the fbInfoElement_t used by each fbBasicList_t in the Template.
Once the fbCollector_t sees the template metadata records, they may be queried using fbSessionGetTemplateInfo(), fbSessionGetTemplatePath(), and fbTemplateInfoGetNextBasicList(). See fbTemplateInfo_t and fbBasicListInfo_t for more information.
This function enables recognition of these records and defines two internal templates for reading the data.
To export Template Metadata records, use fbSessionSetMetadataExportTemplates() and provide the metadata with the fbTemplate_t to fbSessionAddTemplate().
fbuf | An IPFIX message buffer. |
err | An error description. |
fbSession_t * fBufGetSession | ( | const fBuf_t * | fbuf | ) |
Retrieves the session associated with a buffer.
fbuf | an IPFIX message buffer |
void fBufFree | ( | fBuf_t * | fbuf | ) |
Frees a buffer.
Also frees any associated session, exporter, or collector, closing exporting process or collecting process endpoint connections and removing collecting process endpoints from any listeners, as necessary.
fbuf | an IPFIX message buffer |
fBuf_t * fBufAllocForExport | ( | fbSession_t * | session, |
fbExporter_t * | exporter | ||
) |
Allocates a new buffer for export.
Associates the buffer with a given session and exporting process endpoint; these become owned by the buffer. Session and Exporter are freed by fBufFree(). Must never be freed by the user. Use fBufAppend() to add data to the buffer, and use fBufEmit() to flush the buffer.
Exits the application on allocation failure.
session | a session initialized with appropriate internal and external templates |
exporter | an exporting process endpoint |
fbExporter_t * fBufGetExporter | ( | const fBuf_t * | fbuf | ) |
Retrieves the exporting process endpoint associated with a buffer.
The buffer must have been allocated with fBufAllocForExport(); otherwise, returns NULL.
fbuf | an IPFIX message buffer |
void fBufSetExporter | ( | fBuf_t * | fbuf, |
fbExporter_t * | exporter | ||
) |
Associates an exporting process endpoint with a buffer.
The exporter will be used to write IPFIX messgaes to a transport. The exporter becomes owned by the buffer; any previous exporter associated with the buffer is closed if necessary and freed.
fbuf | an IPFIX message buffer |
exporter | an exporting process endpoint |
size_t fBufRemaining | ( | fBuf_t * | fbuf | ) |
When using fBufSetBuffer(), returns the number of unprocessed octets in the octet array.
An IPFIX collector that is not using libfixbuf to handle connections would use this function upon receiving an FB_ERROR_BUFSZ error from fBufNext(), fBufNextCollectionTemplate(), or fBufNextRecord(). The remaining data is the beginning of the next IPFIX message.
fbuf | an IPFIX message buffer |
void fBufSetBuffer | ( | fBuf_t * | fbuf, |
uint8_t * | buf, | ||
size_t | buflen | ||
) |
Sets an octet array on an fBuf for collection.
This may be used by applications that want to handle their own connections, file reading, etc. This call should be made after the call to read() and before calling fBufNext(), fBufNextCollectionTemplate(), or fBufNextRecord(). These functions return FB_ERROR_BUFSZ when there is not enough data in the octet array to read a complete IPFIX message. Upon receipt of FB_ERROR_BUFSZ, the application should call fBufRemaining() to get the number of octets in the array that were not processed.
fbuf | an IPFIX message buffer |
buf | the octet array containing IPFIX data to be processed |
buflen | the length of IPFIX data in buf |
gboolean fBufAppend | ( | fBuf_t * | fbuf, |
uint8_t * | recbase, | ||
size_t | recsize, | ||
GError ** | err | ||
) |
Appends a record to a buffer.
Uses the present internal template set via fBufSetInternalTemplate() to describe the record of size recsize located in memory at recbase. Uses the present export template set via fBufSetExportTemplate() to describe the record structure to be written to the buffer. Information Elements present in the external template that are not present in the internal template are transcoded into the message as zeroes. If the buffer is in automatic mode, may cause a message to be emitted via fBufEmit() if there is insufficient space in the buffer for the record.
If the internal template contains any variable length Information Elements, those must be represented in the record by fbVarfield_t structures.
fbuf | an IPFIX message buffer |
recbase | pointer to internal record |
recsize | size of internal record in bytes |
err | an error description, set on failure. Must not be NULL, as it is used internally in automatic mode to detect message restart. |
gboolean fBufEmit | ( | fBuf_t * | fbuf, |
GError ** | err | ||
) |
Emits the message currently in a buffer using the associated exporting process endpoint.
fbuf | an IPFIX message buffer |
err | an error description, set on failure. |
void fBufSetExportTime | ( | fBuf_t * | fbuf, |
uint32_t | extime | ||
) |
Sets the export time on the message currently in a buffer.
This will be used as the export time of the message created by the first call to fBufAppend() after the current message, if any, is emitted. Use 0 for the export time to cause the export time to be taken from the system clock at message creation time.
fbuf | an IPFIX message buffer |
extime | the export time in epoch seconds. |
fBuf_t * fBufAllocForCollection | ( | fbSession_t * | session, |
fbCollector_t * | collector | ||
) |
Allocates a new buffer for collection.
Associates the buffer with a given session and collecting process endpoint; these become owned by the buffer and must not be freed by the user. The session and collector are freed by fBufFree(). Use fBufNext() to read data from the buffer, and fBufNextMessage() to move the buffer to the next IPFIX message.
To process an octet array of IPFIX data (see fBufSetBuffer()), invoke this function with a NULL collector.
Exits the application on allocation failure.
session | a session initialized with appropriate internal templates |
collector | an collecting process endpoint |
fbCollector_t * fBufGetCollector | ( | const fBuf_t * | fbuf | ) |
Retrieves the collecting process endpoint associated with a buffer.
The buffer must have been allocated with fBufAllocForCollection(); otherwise, returns NULL.
fbuf | an IPFIX message buffer |
void fBufSetCollector | ( | fBuf_t * | fbuf, |
fbCollector_t * | collector | ||
) |
Associates an collecting process endpoint with a buffer.
The collector will be used to read IPFIX messgaes from a transport. The collector becomes owned by the buffer; any previous collector associated with the buffer is closed if necessary and freed.
fbuf | an IPFIX message buffer |
collector | an collecting process endpoint |
gboolean fBufNext | ( | fBuf_t * | fbuf, |
uint8_t * | recbase, | ||
size_t * | recsize, | ||
GError ** | err | ||
) |
Retrieves a record from a Buffer associated with a collecting process.
Uses the external template taken from the message to read the next record available from a data set in the message. Copies the record to the data buffer at recbase
, with a maximum record size pointed to by recsize
, described by the present internal template previous set via fBufSetInternalTemplate(). Updates recsize
to hold the number of bytes written into the buffer.
Information Elements present in the internal template that are not present in the external template are transcoded into the record at recbase
as zeros. Elements in the external template that are not present in the internal template are ignored.
The external fbTemplate_t and ID that were used to read this record are available via fBufGetCollectionTemplate().
Reads and processes any templates and options templates between the last record read (or the beginning of the message) and the next data record. If the buffer is in automatic mode, may cause a message to be read via fBufNextMessage() if there are no more records available in the message buffer.
If the internal template contains Information Elements of type FB_BASIC_LIST, FB_SUB_TMPL_LIST, and FB_SUB_TMPL_MULTI_LIST, they must be represented in the record at recbase
by fbBasicList_t, fbSubTemplateList_t, and fbSubTemplateMultiList_t structures, respectively. If it contains any other variable length Information Elements, those must be represented in the record at recbase
by fbVarfield_t structures.
fbuf | an IPFIX message buffer |
recbase | pointer to internal record buffer; will contain record data after call. |
recsize | On call, pointer to size of internal record buffer in bytes. Contains number of bytes actually transcoded at end of call. |
err | an error description, set on failure. Must not be NULL, as it is used internally in automatic mode to detect message restart. |
gboolean fBufNextRecord | ( | fBuf_t * | fbuf, |
fbRecord_t * | record, | ||
GError ** | err | ||
) |
Sets the internal template on a Buffer and gets its next record.
Sets the internal template of fbuf
to the value specified by the tid
member of record
(fBufSetInternalTemplate()) and fills the rec
member (whose size is specified by reccapacity
) with the next record from the Buffer (fBufNext()). Returns TRUE on success, or sets err
and returns FALSE otherwise.
Before calling this function, the caller must set the tid
member to the template to use and ensure that the rec
and reccapacity
members have been initialized.
On a successful call, the tmpl
member points to the internal template, the rec
member holds the record's data, and recsize
is the length of that data.
fbuf | an IPFIX message buffer |
record | an object to be updated with the record's data |
err | an error description, set on failure. |
gboolean fBufNextMessage | ( | fBuf_t * | fbuf, |
GError ** | err | ||
) |
Reads a new message into a buffer using the associated collecting process endpoint.
Called by fBufNext() on end of message in automatic mode; should be called after an FB_ERROR_EOM return from fBufNext() in manual mode, or to skip the current message and go on to the next in the stream.
fbuf | an IPFIX message buffer |
err | an error description, set on failure. |
uint32_t fBufGetExportTime | ( | const fBuf_t * | fbuf | ) |
Retrieves the export time on the message currently in a buffer.
fbuf | an IPFIX message buffer |
fbTemplate_t * fBufGetCollectionTemplate | ( | const fBuf_t * | fbuf, |
uint16_t * | ext_tid | ||
) |
Retrieves the external template used to read the last record from the buffer.
If no record has been read, returns NULL. Stores the external template ID within the current domain in ext_tid, if not NULL.
This routine is not particularly useful to applications, as it would be called after the record described by the external template had been transcoded, and as such could not be used to select an appropriate internal template for a given external template. However, it is used by fBufNextCollectionTemplate(), and may be useful in certain contexts, so is made public.
Usually, you'll want to use fBufNextCollectionTemplate() instead.
fbuf | an IPFIX message buffer |
ext_tid | pointer to external template ID storage, or NULL. |
fbTemplate_t * fBufNextCollectionTemplate | ( | fBuf_t * | fbuf, |
uint16_t * | ext_tid, | ||
GError ** | err | ||
) |
Retrieves the external template that will be used to read the next record from the buffer.
If no next record is available, returns NULL. Stores the external template ID within the current domain in ext_tid, if not NULL. Reads and processes any templates and options templates between the last record read (or beginning of message) and the next data record. If the buffer is in automatic mode, may cause a message to be read via fBufNextMessage() if there are no more records available in the message buffer.
fbuf | an IPFIX message buffer |
ext_tid | pointer to external template ID storage, or NULL. |
err | an error description, set on failure. Must not be NULL, as it is used internally in automatic mode to detect message restart. |
fbInfoModel_t * fbInfoModelAlloc | ( | void | ) |
Allocates a new information model.
The information model contains all the default information elements in the IANA-managed number space, and may be extended via fbInfoModelAddElement(), fbInfoModelAddElementArray(), fbInfoModelReadXMLFile(), and fbInfoModelReadXMLData().
An Information Model is required to create Templates and Sessions. Each application should have only one Information Model.
Exits the application on allocation failure.
void fbInfoModelFree | ( | fbInfoModel_t * | model | ) |
Frees an information model.
Must not be called until all sessions and templates depending on the information model have also been freed; i.e., at application cleanup time.
model | An information model |
void fbInfoModelAddElement | ( | fbInfoModel_t * | model, |
const fbInfoElement_t * | ie | ||
) |
Adds a single information element to an information model.
The information element is assumed to be in "canonical" form; that is, its ref.name field should contain the information element name. The information element and its name are copied into the model; the caller may free or reuse its storage after this call.
See fbInfoModelAddElementArray() for a more convenient method of statically adding information elements to information models.
model | An information model |
ie | Pointer to an information element to copy into the model |
void fbInfoModelAddElementArray | ( | fbInfoModel_t * | model, |
const fbInfoElement_t * | ie | ||
) |
Adds multiple information elements in an array to an information model.
The information elements are assumed to be in "canonical" form; that is, their ref.name fields should contain the information element name. Each information element and its name are copied into the model; the caller may free or reuse its storage after this call.
The ie parameter points to the first information element in an array, usually statically initialized with an array of FB_IE_INIT_FULL macros followed by an FB_IE_NULL macro.
model | An information model |
ie | Pointer to an IE array to copy into the model |
gboolean fbInfoModelReadXMLFile | ( | fbInfoModel_t * | model, |
const gchar * | filename, | ||
GError ** | err | ||
) |
Adds information specified in the given XML file to the information model.
The XML file is expected to be in the format used by the IANA IPFIX Entities registry, with the following two additions:
<cert:enterpriseId>
field may be used to mark the enterprise ID for an element.<cert:reversible>
field may be used to mark an element as reversible (as per RFC 5103). Valid values for this field are true, false, yes, no, 1, and 0.If the XML being parsed contains registries for the element data types, semantics, or units, those will be parsed and used to interpret the corresponding fields in the element records. (These registries exist in IANA's registry.)
A parsed element that already exists in the given InfoModel will be replace the existing element.
model | An information model |
filename | The file containing the XML description |
err | Return location for a GError |
FALSE
if an error occurred, TRUE on success gboolean fbInfoModelReadXMLData | ( | fbInfoModel_t * | model, |
const gchar * | xml_data, | ||
gssize | xml_data_len, | ||
GError ** | err | ||
) |
Adds information specified in the given XML data to the information model.
The XML data is expected to be in the format used by the IANA IPFIX Entities registry, with the following two additions:
<cert:enterpriseId>
field may be used to mark the enterprise ID for an element.<cert:reversible>
field may be used to mark an element as reversible (as per RFC 5103). Valid values for this field are true, false, yes, no, 1, and 0.If the XML being parsed contains registries for the element data types, semantics, or units, those will be parsed and used to interpret the corresponding fields in the element records. (These registries exist in IANA's registry.)
A parsed element that already exists in the given InfoModel will be replace the existing element.
model | An information model |
xml_data | A pointer to the XML data |
xml_data_len | The length of xml_data in bytes |
err | Return location for a GError |
FALSE
if an error occurred, TRUE on success const fbInfoElement_t * fbInfoModelGetElementByName | ( | const fbInfoModel_t * | model, |
const char * | name | ||
) |
Returns a pointer to the canonical information element within an information model given the information element name.
The returned information element is owned by the information model and must not be modified.
model | An information model |
name | The name of the information element to look up |
const fbInfoElement_t * fbInfoModelGetElementByID | ( | const fbInfoModel_t * | model, |
uint16_t | id, | ||
uint32_t | ent | ||
) |
Returns a pointer to the canonical information element within an information model given the information element ID and enterprise ID.
The returned information element is owned by the information model and must not be modified.
model | An information model |
id | An information element id |
ent | An enterprise id |
gboolean fbInfoModelContainsElement | ( | const fbInfoModel_t * | model, |
const fbInfoElement_t * | element | ||
) |
Returns TRUE if element
is present in the information model either by name or by element and enterprise id.
model | An information model |
element | An information element |
element is in
model`. guint fbInfoModelCountElements | ( | const fbInfoModel_t * | model | ) |
Returns the number of information elements in the information model.
model | An information model |
void fbInfoModelIterInit | ( | fbInfoModelIter_t * | iter, |
const fbInfoModel_t * | model | ||
) |
Initializes an information model iterator for iteration over the information elements (fbInfoElement_t) in the model.
The caller uses fbInfoModelIterNext() to visit the elements.
iter | A pointer to the iterator to initialize |
model | An information model |
const fbInfoElement_t * fbInfoModelIterNext | ( | fbInfoModelIter_t * | iter | ) |
Returns a pointer to the next information element in the information model.
Returns NULL once all information elements have been returned.
iter | An information model iterator |
fbTemplate_t * fbInfoElementAllocTypeTemplate | ( | fbInfoModel_t * | model, |
GError ** | err | ||
) |
Allocates and returns the Options Template that will be used to define Information Element Type Records.
This function does not add the template to the session or fbuf. This function allocates the template, appends the appropriate elements to the template, and sets the scope on the template. See RFC 5610 for more info.
model | A pointer to an existing info model |
err | GError |
gboolean fbInfoElementWriteOptionsRecord | ( | fBuf_t * | fbuf, |
const fbInfoElement_t * | model_ie, | ||
uint16_t | itid, | ||
uint16_t | etid, | ||
GError ** | err | ||
) |
Exports an options record to the given fbuf with information element type information about the given information element.
See RFC 5610 for details. Use fbInfoElementAllocTypeTemplate() and add the returned template to the session, before calling this function.
fbuf | An existing fbuf |
model_ie | A pointer to the information element to export type info |
itid | The internal template id of the Options Template. |
etid | The external template id of the Options Template. |
err | GError |
etid
parameter was added. gboolean fbInfoElementAddOptRecElement | ( | fbInfoModel_t * | model, |
const fbInfoElementOptRec_t * | rec | ||
) |
Adds an element that we received via an RFC 5610 Options Record to the given info model.
Returns TRUE if the element was added to the model or FALSE if it was not added because it either already exists in the model or has an privateEnterpriseNumber of 0 or FB_IE_PEN_REVERSE.
model | An information model |
rec | A pointer to the received fbInfoElementOptRec. |
gboolean fbTemplateIsMetadata | ( | const fbTemplate_t * | tmpl, |
uint32_t | tests | ||
) |
Checks to see if a template describes a meta-data record according to the bit-field value in tests
.
With the exception of FB_TMPL_IS_OPTIONS
, this function returns TRUE if any test is true—that is, you may check multiple aspects of a template. If tests
includes FB_TMPL_IS_OPTIONS
and the template is not an options template, the function immediately returns false and no other tests are performed.
Values for tests
are:
FB_TMPL_IS_OPTIONS - Checks whether the template is an options template.
FB_TMPL_IS_META_ELEMENT - Checks whether the template contains all of the elements required by RFC 5610 for describing an information element type (type metadata). See fbInfoElementOptRec_t and fbInfoElementAddOptRecElement().
FB_TMPL_IS_META_TEMPLATE_v3 - Checks whether the template contains the elements requred to describe a template as used in libfixbuf 3.0.0. This includes those in FB_TMPL_IS_META_TEMPLATE_V1 and silkAppLabel, a second templateId, and a subTemplateList. See fbTemplateInfo_t.
FB_TMPL_IS_META_BASICLIST - Checks whether the template contains the elements requred to describe a basicList as part of the template metadata. See fbBasicListInfo_t.
FB_TMPL_IS_META_TEMPLATE_V1 - Checks whether the template contains the elements requred to describe a template as defined in libfixbuf 1.8.0. Specifically, it checks whether the Template contains templateId, templateName, and templateDescription. Templates matching this may also match FB_TMPL_IS_META_TEMPLATE_V3.
tmpl | A pointer to the template |
tests | A bitfield specifing which tests to check |
fbTemplate_t * fbTemplateAlloc | ( | fbInfoModel_t * | model | ) |
Allocates a new empty template.
The template will be associated with the given Information Model, and only able to use Information Elements defined within that Information Model. Templates may be associated with multiple sessions, with different template IDs each time, and as such are reference counted and owned by sessions. A template must be associated with at least one session or it will be leaked; each template is freed after its last associated session is freed. To free a template that has not yet been added to a session, use fbTemplateFreeUnused().
Use fbTemplateAppend(), fbTemplateAppendSpec(), fbTemplateAppendSpecId(), fbTemplateAppendSpecArray(), and fbTemplateAppendArraySpecId() to "fill in" a template after creating it, and before associating it with any session.
Exits the application on allocation failure.
model | An information model |
gboolean fbTemplateAppend | ( | fbTemplate_t * | tmpl, |
const fbInfoElement_t * | ex_ie, | ||
GError ** | err | ||
) |
Appends an information element to a template.
The ex_ie
information element parameter is used as an example. Its enterprise and element numbers are used to find the canonical element from the template's fbInfoModel_t, and the length in ex_ie
is used as the length of appended fbTemplateField_t.
If no matching information element exists in the template's model, a new element is created, given the name "_alienInformationElement", given the datatype FB_OCTET_ARRAY, and added to the model.
The primary use of this function is by fBuf_t's template reader, but the function may be used to simulate receipt of templates over the wire. Typically templates are built with fbTemplateAppendSpec(), fbTemplateAppendSpecArray(), fbTemplateAppendSpecId(), and fbTemplateAppendArraySpecId().
Returns TRUE on success. Fills err
and returns FALSE if tmpl
is already associated with an fbSession_t (fbSessionAddTemplate()), if ex_ie
names an existing element and the length in ex_ie
is illegal for the datatype, or if tmpl
is at its maximum size.
tmpl | Template to append information element to |
ex_ie | Example IE to add to the template |
err | an error description, set on failure. |
gboolean fbTemplateAppendSpec | ( | fbTemplate_t * | tmpl, |
const fbInfoElementSpec_t * | spec, | ||
uint32_t | wantedFlags, | ||
GError ** | err | ||
) |
Potentially appends an information element described by the specifier to a template.
If the high bits in the wantedFlags
parameter include all the high bits of the specifier's flags
member, the fbInfoElement_t named by the specifier is copied from the template's associated fbInfoModel_t and the element's length is set to that from the specifier.
When the specifier's flags
member is 0, the element is always included; otherwise the following must by true: (wantedFlags
&& flags
) == flags
. The wantedFlags
parameter and flags
member support building multiple templates with different information element features from a single specifier.
If wantedFlags
prevents the element from being added to the template, no other checks of spec
are performed and the function returns TRUE.
Fills err
and returns FALSE if spec
names an unknown element, if the len_override
value in spec
is illegal for the fbInfoElementDataType_t of the element, if tmpl
is associated with a fbSession_t (fbSessionAddTemplate()), or if tmpl
is at its maximum size.
tmpl | Template to append the information element to. |
spec | Specifier describing information element to append. |
wantedFlags | Flags on whether to append the info element specifier. |
err | An error description, set on failure. |
gboolean fbTemplateAppendSpecArray | ( | fbTemplate_t * | tmpl, |
const fbInfoElementSpec_t * | spec, | ||
uint32_t | wantedFlags, | ||
GError ** | err | ||
) |
Appends information elements described by a specifier array to a template.
Calls fbTemplateAppendSpec() for each member of the array until the FB_IESPEC_NULL convenience macro is encountered.
tmpl | Template to append the information elements to. |
spec | Pointer to first specifier in specifier array to append. |
wantedFlags | Flags on whether to append each info element specifier. |
err | An error description, set on failure. |
gboolean fbTemplateAppendSpecId | ( | fbTemplate_t * | tmpl, |
const fbInfoElementSpecId_t * | spec, | ||
uint32_t | wantedFlags, | ||
GError ** | err | ||
) |
Potentially appends an information element described by the specifier to a template.
If the high bits in the wantedFlags
parameter include all the high bits of the specifier's flags
member, the fbInfoElement_t referenced by the specifier is copied from the template's associated fbInfoModel_t and the element's length is set to that from the specifier.
When the specifier's flags
member is 0, the element is always included; otherwise the following must by true: (wantedFlags
&& flags
) == flags
. The wantedFlags
parameter and flags
member support building multiple templates with different information element features from a single specifier.
If wantedFlags
prevents the element from being added to the template, no other checks of spec
are performed and the function returns TRUE.
Fills err
and returns FALSE if the enterpriseId and elementId of spec
reference an unknown element, if the len_override
value in spec
is illegal for the fbInfoElementDataType_t of the element, if tmpl
is already associated with a fbSession_t (fbSessionAddTemplate()), or if tmpl
is at its maximum size.
tmpl | Template to append the information element to. |
spec | Specifier describing the information element to append. |
wantedFlags | Flags on whether to append the info element specifier. |
err | An error description, set on failure. |
gboolean fbTemplateAppendArraySpecId | ( | fbTemplate_t * | tmpl, |
const fbInfoElementSpecId_t * | spec, | ||
uint32_t | wantedFlags, | ||
GError ** | err | ||
) |
Appends information elements described by a specifier array to a template.
Calls fbTemplateAppendSpecId() for each member of the array until the FB_IESPECID_NULL convenience macro is encountered.
tmpl | Template to append the information elements to. |
spec | Pointer to first specifier in specifier array to append. |
wantedFlags | Flags on whether to append each info element specifier. |
err | An error description, set on failure. |
fbTemplate_t * fbTemplateCopy | ( | const fbTemplate_t * | tmpl, |
uint32_t | flags | ||
) |
Creates a new template that is a copy of tmpl
perhaps modified by the values specified in flags
.
If flags
is 0, the new template is an exact copy, having the same elements in the same order, having the same number of scope elements, and the elements having the same lengths.
When flags
includes FB_TMPL_COPY_REMOVE_PADDING, the new templace does not contain the paddingOctets elements that were present in tmpl
, if any. This may be used when exporting data to create a compact external template from an existing internal template.
When flags
includes FB_TMPL_COPY_IGNORE_SCOPE, the options scope of the new template is not set.
tmpl | Template to copy |
flags | Controls features of the new template |
uint16_t fbTemplateCountElements | ( | const fbTemplate_t * | tmpl | ) |
Determines number of information elements in a template.
tmpl | A template |
gboolean fbTemplateSetOptionsScope | ( | fbTemplate_t * | tmpl, |
uint16_t | scope_count | ||
) |
Sets the number of information elements in a template that are scope.
This causes the template to become an options template. This function may be called after all the scope information elements have been appended to the template and before the template has been added to an fbSession_t.
A scope_count argument of zero sets the scope count to the number of IEs.
Returns TRUE on success. Returns FALSE if a scope was previously set for tmpl
, if the scope_count
is larger than the number of elements, if tmpl
is already associated with a fbSession_t (fbSessionAddTemplate()), or if the template contains no elements.
tmpl | Template to set scope on |
scope_count | Number of scope information elements |
uint16_t fbTemplateGetOptionsScope | ( | const fbTemplate_t * | tmpl | ) |
Determines number of scope information elements in a template.
The template is an options template if nonzero.
tmpl | A template |
gboolean fbTemplateContainsElement | ( | const fbTemplate_t * | tmpl, |
const fbInfoElement_t * | element | ||
) |
Determines if a template contains a given information element.
Matches against information element private enterprise number and number. Returns FALSE if either parameter is NULL.
tmpl | Template to search |
element | Pointer to an information element to search for |
const fbTemplateField_t * fbTemplateFindFieldByElement | ( | const fbTemplate_t * | tmpl, |
const fbInfoElement_t * | ie, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches a Template for an Information Element and returns a TemplateField if found.
If position
is non-NULL, the search begins from the position it references (where the first position is 0); on success, its referent is updated with the position of the found element. When skip
is non-zero, the (skip
+1)'th field matching ie
is returned.
To visit all fields f
in template t
that use element ie
, use a construct like:
tmpl | The template to be searched |
ie | The info element to search for |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching fields to ignore before returning |
ie
or NULL if not found const fbTemplateField_t * fbTemplateFindFieldByIdent | ( | const fbTemplate_t * | tmpl, |
uint32_t | ent, | ||
uint16_t | num, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches a Template for a TemplateField by an fbInfoElement_t's private enterprise number and element number.
If position
is non-NULL, the search begins from the position it references (where the first position is 0); on success, its referent is updated with the position of the found element. When skip
is non-zero, the (skip
+1)'th field matching datatype
is returned.
To visit all fields f
in template t
having a particular ident, use a construct like:
tmpl | The template to be searched |
ent | The private enterprise number of the element to search for |
num | The element number of the element to search for |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching fields to ignore before returning |
const fbTemplateField_t * fbTemplateFindFieldByDataType | ( | const fbTemplate_t * | tmpl, |
fbInfoElementDataType_t | datatype, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches a Template for a TemplateField by an fbInfoElement_t's datatype.
If position
is non-NULL, the search begins from the position it references (where the first position is 0); on success, its referent is updated with the position of the found element. When skip
is non-zero, the (skip
+1)'th field matching datatype
is returned.
To visit all fields f
in template t
of type dt
, use a construct like:
tmpl | The template to be searched |
datatype | The type of the info element to search for |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching fields to ignore before returning |
datatype
or NULL if not found gboolean fbTemplateContainsElementByName | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpec_t * | spec | ||
) |
Determines if a template contains at least one instance of a given information element (fbInfoElement_t), specified by name in the template's information model (fbInfoModel_t).
Returns FALSE if tmpl
is NULL or if the name in spec
does not name a known element.
The len_override
and flags
members of spec
are ignored.
tmpl | Template to search |
spec | Specifier of information element to search for |
gboolean fbTemplateContainsAllElementsByName | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpec_t * | spec | ||
) |
Determines if a template contains at least one instance of each fbInfoElement_t in a given information element specifier array.
The array must be terminated by an empty specifier (FB_IESPEC_NULL). Returns TRUE if the array contains only FB_IESPEC_NULL. Returns FALSE if any names used in spec
are unknown by the template's fbInfoModel_t.
Repeating an element's name in spec
does not test whether the element appears multiple times in the template. Use fbTemplateFindFieldByElement() to test for multiple occurrences of an element.
The len_override
and flags
members of InfoElementSpec are ignored.
tmpl | Template to search |
spec | Pointer to specifier array to search for |
gboolean fbTemplateContainsAllFlaggedElementsByName | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpec_t * | spec, | ||
uint32_t | wantedFlags | ||
) |
Determines if a template contains at least one instance of each information element in a given information element specifier array that match the given wantedFlags
argument.
Returns TRUE if wantedFlags
do not match any of the element specifiers in the array or if the array contains only FB_IESPEC_NULL.
Repeating an element's name in spec
does not test whether the element appears multiple times in the template. Use fbTemplateFindFieldByElement() to test for multiple occurrences of an element.
The len_override
member of InfoElementSpec is ignored.
tmpl | Template to search |
spec | Pointer to specifier array to search for |
wantedFlags | Flags to choose info element specifiers. Specifier elements whose flags member is non-zero and contains high bits that are not present in wantedFlags are not checked. |
gboolean fbTemplateContainsSpecId | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpecId_t * | spec | ||
) |
Determines if a template contains at least one instance of a given information element (fbInfoElement_t), specified by the element's enterpriseId and elementId.
The len_override
and flags
members of spec
are ignored.
tmpl | Template to search |
spec | Specifier of information element to search for |
gboolean fbTemplateContainsAllArraySpecId | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpecId_t * | spec | ||
) |
Determines if a template contains at least one instance of each fbInfoElement_t in a specifier array.
The array must be terminated by an empty specifier (FB_IESPECID_NULL). Returns TRUE if the array contains only FB_IESPECID_NULL.
Repeating an {enterpriseId, elementId} pair in spec
does not test whether the element appears multiple times in the template. Use fbTemplateFindFieldByIdent() to test for multiple occurrences of an element.
The len_override
and flags
members of InfoElementSpecId are ignored.
tmpl | Template to search |
spec | Pointer to specifier array to search for |
gboolean fbTemplateContainsAllFlaggedArraySpecId | ( | const fbTemplate_t * | tmpl, |
const fbInfoElementSpecId_t * | spec, | ||
uint32_t | wantedFlags | ||
) |
Determines if a template contains at least one instance of each fbInfoElement_t in a specifier array that match the given wantedFlags
argument.
Returns TRUE if wantedFlags
do not match any of the element specifiers in the array or if the array contains only FB_IESPECID_NULL.
Repeating an {enterpriseId, elementId} pair in spec
does not test whether the element appears multiple times in the template. Use fbTemplateFindFieldByIdent() to test for multiple occurrences of an element.
The len_override
member of InfoElementSpecId is ignored.
tmpl | Template to search |
spec | Pointer to specifier array to search for |
wantedFlags | Flags to choose info element specifiers. Specifier elements whose flags member is non-zero and contains high bits that are not present in wantedFlags are not checked. |
const fbTemplateField_t * fbTemplateGetFieldByPosition | ( | const fbTemplate_t * | tmpl, |
uint16_t | position | ||
) |
Returns a field in a template at a specific position.
The positions of the first and last fields are 0 and one less than fbTemplateCountElements().
tmpl | Pointer to the template |
position | Index of the field to return |
position
, or NULL if position
is greater than number of elements. const fbTemplateField_t * fbTemplateGetIndexedIE | ( | const fbTemplate_t * | tmpl, |
uint16_t | position | ||
) |
Deprecated alias for fbTemplateGetFieldByPosition.
tmpl | Pointer to the template |
position | Index of the field to return |
position
, or NULL if position
is greater than number of elements. fbInfoModel_t * fbTemplateGetInfoModel | ( | const fbTemplate_t * | tmpl | ) |
Returns the information model, as understood by the template.
tmpl | Template Pointer |
void fbTemplateFreeUnused | ( | fbTemplate_t * | tmpl | ) |
Frees a template if it is not currently in use by any Session.
Use this to clean up while creating templates in case of error.
tmpl | template to free |
void * fbTemplateGetContext | ( | const fbTemplate_t * | tmpl | ) |
Gets the context pointer associated with a Template.
The context pointer is set during the fbNewTemplateCallback_fn when the new template is received or by fbTemplateSetContext().
tmpl | Template Pointer |
void fbTemplateSetContext | ( | fbTemplate_t * | tmpl, |
void * | tmpl_ctx, | ||
void * | app_ctx, | ||
fbTemplateCtxFree_fn | ctx_free | ||
) |
Sets the context pointers on a Template.
If there is an existing context pointer on the Template, its free function (fbTemplateCtxFree_fn) is called before overwriting the existing values.
tmpl | The Template to update. |
tmpl_ctx | The context pointer to set, may be NULL. |
app_ctx | The application context pointer to set, may be NULL. |
ctx_free | The function to be called to free tmpl_ctx , may be NULL. |
uint16_t fbTemplateGetIELenOfMemBuffer | ( | const fbTemplate_t * | tmpl | ) |
Returns the number of octets required for a data buffer (an octet array) to store a data record described by this template.
Another description is this is the length of the record when this template is used as an internal template.
tmpl | The Template to query. |
gboolean fbTemplatesAreEqual | ( | const fbTemplate_t * | tmpl1, |
const fbTemplate_t * | tmpl2 | ||
) |
Returns TRUE when templates tmpl1
and tmpl2
are equal.
To be equal, the templates must have same set of fbInfoElement_t's in the same order, each element pair must have the same length, and the templates must have the same options scope.
tmpl1 | A template to compare |
tmpl2 | A template to compare |
int fbTemplatesCompare | ( | const fbTemplate_t * | tmpl1, |
const fbTemplate_t * | tmpl2, | ||
unsigned int | flags | ||
) |
Compares templates tmpl1
and tmpl2
according to flags
and returns 0 if the are the same and non-zero otherwise.
Currently the return value cannot be used for ordering templates since it may return any non-zero value when the templates differ. In the future, the function will be modified to return a value suitable for ordering the templates.
If flags
is 0, this function is similar to fbTemplatesAreEqual(): the templates must have the same elements in the same order, matching elements must have the same length, and the scope counts must be the same.
The following values may be ORed and passed as flags
to affect the comparison:
FB_TMPL_CMP_IGNORE_PADDING - Causes the comparison to ignore any paddingOctets elements in the templates.
FB_TMPL_CMP_IGNORE_LENGTHS - Causes the comparison to ignore the lengths when comparing elements between the templates.
FB_TMPL_CMP_IGNORE_SCOPE - Causes the comparison to ignore the options scope count when comparing the templates.
tmpl1 | A template to compare |
tmpl2 | A template to compare |
flags | Controls what aspects of the templates are checked |
fbTemplatesSetCompareStatus_t fbTemplatesSetCompare | ( | const fbTemplate_t * | tmpl1, |
const fbTemplate_t * | tmpl2, | ||
uint16_t * | matching_fields, | ||
unsigned int | flags | ||
) |
Compares two Templates to determine if one is a subset of the other.
(This description uses "subset" and "superset", but Templates may contain repeated elements and are therefore "multisets". The function tests whether one Template is sub-multiset of the other.)
To be a subset, all elements in one tmpl1
must be contained in tmpl2
with at least their multiplicity in tmpl1
. If tmpl2
is a subset of tmpl1
, then tmpl1
is a superset of tmpl2
.
When comparing elements, the lengths must be identical unless FB_TMPL_CMP_IGNORE_LENGTHS is included in flags
. Elements of type paddingOctets are compared unless FB_TMPL_CMP_IGNORE_PADDING is included in flags
.
When matching_fields
is non-NULL, its referent is set to the number of elements the templates have in common.
tmpl1 | The first template to compare |
tmpl2 | The second template to compare |
flags | Controls what aspects of the templates are checked |
matching_fields | Output value to get the number of elements they have in common; may be NULL |
tmpl1
is a strict subset of tmpl2
, FB_TMPL_SETCMP_SUPERSET if tmpl1
is a strict superset of tmpl2
, FB_TMPL_SETCMP_COMMON if the templates have at least one common element, FB_TMPL_SETCMP_DISJOINT if the templates have no elements in common uint16_t fbRecordGetFieldCount | ( | const fbRecord_t * | record | ) |
Returns the number of fields in a record.
record | The record to get the field count of |
void fbRecordFreeLists | ( | fbRecord_t * | record | ) |
Releases all of the memory allocated during transcode of this record, freeing the list structures, recursively, allocated when fixbuf was encoding or decoding the record.
Does not free the memory referenced by the rec
member of record
.
record | The record to be cleared. |
void fbRecordValueClear | ( | fbRecordValue_t * | value | ) |
Releases any memory used by the string buffer on value
(that is used to store the fbVarfield_t) and re-initializes value
.
Does nothing if value
is NULL.
Does not release any memory associated with the list structures.
value | The value to be cleared. |
value
while taking ownership of the string buffer, use fbRecordValueTakeVarfieldBuf(). fbRecordValue_t * fbRecordValueCopy | ( | fbRecordValue_t * | dstValue, |
const fbRecordValue_t * | srcValue | ||
) |
Copies srcValue
to dstValue
and returns dstValue
.
If the fbInfoElementDataType_t of the fbInfoElement_t referenced by srcValue
is string (FB_STRING) or octetArray (FB_OCTET_ARRAY), creates a new string buffer on dstValue
to hold the value. Otherwise, does a shallow copy of the value. Note that lists are NOT recursively copied by this function.
The caller should fbRecordValueClear() dstValue
once it is no longer needed.
The function assumes dstValue
is empty. If it previously held a string buffer, call fbRecordValueClear() on it before calling this function.
dstValue | The location to store the copied value. |
srcValue | The value to be copied. |
gchar * fbRecordValueTakeVarfieldBuf | ( | fbRecordValue_t * | value | ) |
Returns a pointer to the string buffer used by value
to store fbVarfield_t values and transfers ownership of that buffer to the caller.
The caller must use g_free() to release the memory when it is no longer needed. Returns NULL if value
is NULL or if there is no string buffer on value
.
gboolean fbRecordGetValueForField | ( | const fbRecord_t * | record, |
const fbTemplateField_t * | field, | ||
fbRecordValue_t * | value | ||
) |
Gets the value from a Record given a Field used by the Record's fbTemplate_t.
The value is returned via an fbRecordValue_t structure.
If field
is owned by the fbTemplate_t currently associated with record
, fills the referent of value
with that field's value in record
and returns TRUE. Otherwise leaves value
unchanged and returns FALSE. If field
is NULL, returns FALSE.
When getting a value of type FB_STRING or FB_OCTET_ARRAY, the value is copied into a buffer on value
. Use fbRecordValueClear() to free this memory or fbRecordValueTakeVarfieldBuf() to take ownership of it.
To get a TemplateField from a Template, use fbTemplateGetFieldByPosition(), fbTemplateFindFieldByElement(), fbTemplateFindFieldByDataType(), and fbTemplateFindFieldByIdent().
record | The record to get the value from. |
field | The field to get the value of. |
value | An output parameter to fill with the value. |
field
is NULL or not owned by the Template of record
gboolean fbRecordCopyFieldValue | ( | const fbRecord_t * | record, |
const fbTemplateField_t * | field, | ||
void * | dest, | ||
size_t | destlen | ||
) |
Copies the value from a Record given a Field used by the Record's fbTemplate_t.
The value is copied to the specified destination.
If field
is owned by the Template currently associated with record
and the destlen
value has exactly the correct value, copies the value of the field to dest
and returns TRUE. Otherwise leaves dest
unchanged and returns FALSE.
The correct value of destlen
depends on the fbInfoElementDataType_t of the Field:
FB_OCTET_ARRAY, FB_STRING – sizeof(fbVarfield_t); dest
should be treated as an fbVarfield_t regardless of how the value is represented in libfixbuf. There is no guarantee that the value is NUL terminated.
FB_UINT_8, FB_INT_8, FB_BOOL – 1
FB_UINT_16, FB_INT_16 – 2
FB_UINT_32, FB_INT_32, FB_IP4_ADDR, FB_DT_SEC, FB_FLOAT_32 – 4
FB_MAC_ADDR – 6
FB_UINT_64, FB_INT_64, FB_DT_MILSEC, FB_FLOAT_64 – 8
FB_DT_MICROSEC, FB_DT_NANOSEC – sizeof(struct timespec); dest
should be treated as struct timespec
.
FB_IP6_ADDR – 16
FB_BASIC_LIST – sizeof(fbBasicList_t *); dest
should be treated as a pointer to an fbBasicList_t.
FB_SUB_TMPL_LIST – sizeof(fbSubTemplateList_t *); dest
should be treated as a pointer to an fbSubTemplateList_t.
FB_SUB_TMPL_MULTI_LIST – sizeof(fbSubTemplateMultiList_t *); dest
should be treated as a pointer to an fbSubTemplateMultiList_t.
To get a TemplateField from a Template, use fbTemplateGetFieldByPosition(), fbTemplateFindFieldByElement(), fbTemplateFindFieldByDataType(), and fbTemplateFindFieldByIdent().
record | The record to get the value from. |
field | The field to get the value of. |
dest | The destination where the value should be copied. |
destlen | The length of the destination which must exactly match the required length for the data type. |
field
is NULL, field
is not owned by the Template of record
, or destlen
is incorrect. gboolean fbRecordFindValueForInfoElement | ( | const fbRecord_t * | record, |
const fbInfoElement_t * | ie, | ||
fbRecordValue_t * | value, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches a Record for an Element and gets its Value.
This function is a convenience wrapper over fbTemplateFindFieldByElement() and fbRecordGetValueForField().
record | The record to get the value from. |
ie | The info element to search for |
value | An output parameter to fill with the value. |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching IEs to ignore before returning |
const fbBasicList_t * fbRecordFindBasicListOfIE | ( | const fbRecord_t * | record, |
const fbInfoElement_t * | contentsElement, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches record
for a basicList of contentsElement
values.
Specifically, searches record
for element whose type is FB_BASIC_LIST, where the list contains contentsElement
items; if found, returns the basicList. If not found, returns NULL.
If position
is non-NULL, the search begins from that element position (where the first position is 0); on success, its referent is updated with the position of the found element. When skip
is non-zero, the (skip
+1)'th basicList whose contents matches contentsElement
is returned.
record | The Record to be searched |
contentsElement | The element to search for |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching lists to ignore before returning |
const fbSubTemplateList_t * fbRecordFindStlOfTemplate | ( | const fbRecord_t * | record, |
const fbTemplate_t * | tmpl, | ||
uint16_t * | position, | ||
uint16_t | skip | ||
) |
Searches record
for a subTemplateList that uses tmpl
.
Specifically, searches record
for element whose type is FB_SUB_TMPL_LIST, where the list uses the template tmpl
; if found, returns the subTemplateList. If not found, returns NULL.
If position
is non-NULL, the search begins from that element position (where the first position is 0); on success, its referent is updated with the position of the found element. When skip
is non-zero, the (skip
+1)'th subTemplateList that uses tmpl
is returned.
record | The Record to be searched |
tmpl | The Template to search for |
position | The starting position for search if non-NULL; updated with location of found field |
skip | The number of matching lists to ignore before returning |
int fbRecordFindAllElementValues | ( | const fbRecord_t * | record, |
const fbInfoElement_t * | ie, | ||
unsigned int | flags, | ||
fbRecordValueCallback_fn | callback, | ||
void * | ctx | ||
) |
Recursively searches a Record and all its sub-records for an Info Element.
Checks the fbTemplate_t of record
for elements that match ie
. For each one found, callback
is invoked with the record, the field, the value of that element in record
, and a user-provided context.
The InfoElement used by each BasicList on record
is checked, for any that match ie
, callback
is invoked as described above and includes a reference to the BasicList.
The function also recurses into each SubTemplateList and SubTemplateMultiList on record
looking for matching elements.
If any invocation of callback
returns a non-zero value, recursion stops and that return value is passed to the previous invocation and eventually to the caller.
record | The Record to be searched |
ie | The Information Element to search for |
flags | Ignored (place to tailor how the recursion happens) |
callback | The function invoked on each value found |
ctx | A context for the caller's use |
callback
or 0. int fbRecordFindAllSubRecords | ( | const fbRecord_t * | record, |
uint16_t | tid, | ||
unsigned int | flags, | ||
fbRecordSubRecordCallback_fn | callback, | ||
void * | ctx | ||
) |
Recursively searches a Record for uses of a fbTemplate_t having a particular ID.
Checks whether the fbTemplate_t of record
has ID tid
. If so, callback
is invoked with the record and a user-provided context.
The function also recurses into each BasicList, SubTemplateList, and SubTemplateMultiList on record
looking for uses of the Template ID.
If any invocation of callback
returns a non-zero value, recursion stops and that return value is passed to the previous invocation and eventually to the caller.
record | The Record to be searched |
tid | The Template ID to search for |
flags | Ignored (place to tailor how the recursion happens) |
callback | The function invoked on each record found |
ctx | A context for the caller's use |
callback
or 0. gboolean fbRecordCopyToTemplate | ( | const fbRecord_t * | srcRec, |
fbRecord_t * | dstRec, | ||
const fbTemplate_t * | tmpl, | ||
uint16_t | tid, | ||
GError ** | err | ||
) |
Copies a Record to a destination Record that uses a different Template.
Given a source Record srcRec
, a destination Record dstRec
that has a valid rec
buffer, and a destination Template tmpl
, this function copies the values from srcRec
to dstRec
for the fields the Records have in common. Fields in tmpl
that do not have a match in srcRec
are left initialized to 0 or NULL. The tmpl
and tid
parameters are assigned to the 'tmpl' and tid
members of dstRec
; the tid
value is not otherwise used.
srcRec
and dstRec
must be different fbRecord_t objects that use different buffers.
When copying an fbVarfield_t, the dstRec
is set to point at the data in srcRec
. Reusing the srcRec
will affect the data in dstRec
.
For structured data items (lists), the list object on dstRec
is initialized with the same element type (fbBasicList_t) or template (fbSubTemplateList_t) as on srcRec
, but the dstRec
is initialized with size 0. The caller must manually resize the list and copy the data between the lists as desired, including re-initializing the list if needed.
srcRec | The Record to be copied. |
dstRec | The destination Record to copy srcRec into. |
tmpl | The Template for the destination Record. |
tid | The Template ID for the destination Record. |
err | An error description, set on error. |
fbSession_t * fbSessionAlloc | ( | fbInfoModel_t * | model | ) |
Allocates an empty transport session state container.
The new session is associated with the given information model, contains no templates, and is usable either for collection or export.
Each fbExporter_t, fbListener_t, and fbCollector_t must have its own session; session state cannot be shared.
The fbSession_t returned by this function is not freed by calling fBufFree() or fbListenerFree(). It should be freed by the application by calling fbSessionFree().
Exits the application on allocation failure.
model | An information model. Not freed by fbSessionFree(). Must be freed by user after calling fbSessionFree(). |
uint16_t fbSessionSetMetadataExportElements | ( | fbSession_t * | session, |
gboolean | enabled, | ||
uint16_t | tid, | ||
GError ** | err | ||
) |
Configures a session to export type information for enterprise-specific information elements as options records according to RFC 5610.
Regardless of the enabled
value, this function creates the type information template and adds it to the session with the template ID tid
(removing the existing template having that id, if any) or an arbitrary ID when tid
is FB_TID_AUTO.
If enabled
is TRUE, the information metadata is exported each time fbSessionExportTemplates() is called.
When collecting, use fBufSetAutomaticElementInsert() to automatically update the information model with these RFC 5610 elements.
session | A session state container |
enabled | TRUE to enable type metadata export, FALSE to disable |
tid | The template id to use for type-information records or FB_TID_AUTO to assign an arbitrary id. |
err | An error descriptor, set on failure |
uint16_t fbSessionSetMetadataExportTemplates | ( | fbSession_t * | session, |
gboolean | enabled, | ||
uint16_t | tmplInfoTid, | ||
uint16_t | blInfoTid, | ||
GError ** | err | ||
) |
Configures a Session to export template metadata (fbTemplateInfo_t) as options records.
Template metadata includes the name of a Template and optionally additional information as described by fbTemplateInfoInit() and fbTemplateInfoAddBasicList().
If enabled, the metadata is exported each time fbSessionExportTemplates() or fbSessionExportTemplate() is called. In addition, the metadata is exported when fbSessionAddTemplate() is called if the tmplInfo
parameter is not NULL and the Session is associated with an fbExporter_t.
Regardless of the enabled
value, this function creates the template-metadata template and adds it to the session with the template ID tid
(removing the existing template having that id, if any) or an arbitrary ID when tid
is FB_TID_AUTO.
When collecting, use fBufSetAutomaticMetadataAttach() to recognize the Template Metadata records.
session | A session state container |
enabled | TRUE to enable template metadata export, FALSE to disable |
tmplInfoTid | The template id to use for TemplateInfo records or FB_TID_AUTO to assign an arbitrary id. |
blInfoTid | The template id to use for the fbBasicListInfo_t subrecords or FB_TID_AUTO to assign an arbitrary id. |
err | An error descriptor, set on failure |
blInfoTid
. fbInfoModel_t * fbSessionGetInfoModel | ( | const fbSession_t * | session | ) |
Gets the info model for the session.
session |
void fbSessionAddNewTemplateCallback | ( | fbSession_t * | session, |
fbNewTemplateCallback_fn | callback, | ||
void * | app_ctx | ||
) |
This function sets the callback that allows the application to set its own context variable with a new incoming template.
Assigning a callback is not required and is only useful if the application either needs to store some information about the template or to prevent certain nested templates from being transcoded. If the application's template contains a subTemplateMultiList or subTemplateList and the callback is not used, all incoming templates contained in these lists will be fully transcoded and the application is responsible for freeing any nested lists contained within those objects.
This function should be called after fbSessionAlloc(). Fixbuf often clones sessions upon receiving a connection. In the TCP case, the application has access to the session right after fbListenerWait() returns by calling fBufGetSession(). In the UDP case, the application does not have access to the fbSession until after a call to fBufNext() for fBufNextCollectionTemplate() and by this time the application may have already received some templates. Therefore, it is important to call this function before fBufNext(). Any callbacks added to the session will be carried over to cloned sessions.
session | pointer session to assign the callback to |
callback | the function that should be called when a new template is received |
app_ctx | parameter that gets passed into the callback function. This can be used to pass session-specific information state information to the callback function. |
void fbSessionSetCallbackCopyTemplates | ( | fbSession_t * | incomingSession, |
fbSession_t * | exportSession | ||
) |
Arranges for templates read by incomingSession
to be copied to exportSession
by setting the new template callback.
This is a convenience function that sets the new template callback function (see fbSessionAddNewTemplateCallback()) on incomingSession
to fbSessionCopyIncomingTemplatesCallback(), using exportSession
as the value for the app_ctx
paramter.
incomingSession | Session reading the templates to be copied |
exportSession | Session where the templates are to be copied |
void fbSessionCopyIncomingTemplatesCallback | ( | fbSession_t * | incomingSession, |
uint16_t | tid, | ||
fbTemplate_t * | tmpl, | ||
void * | exportSession, | ||
void ** | tmpl_ctx, | ||
fbTemplateCtxFree_fn * | tmpl_ctx_free_fn | ||
) |
Arranges for templates read by incomingSession
to be copied to exportSession
.
This function may be used as the value of the callback
parameter to fbSessionAddNewTemplateCallback(). The caller should use exportSession
as the value for the app_ctx
parameter to that function. (See fbSessionSetCallbackCopyTemplates() that simplies this process.)
When invoked, the function calls fbSessionAddTemplatesForExport() using the exportSession
, tid
, and tmpl
as the value for the first three parameters.
incomingSession | Session reading the templates to be copied |
tid | ID for the template that was received |
tmpl | Template that was received |
exportSession | Session where the templates are to be copied |
tmpl_ctx | Unused |
tmpl_ctx_free_fn | Unused |
void fbSessionAddTemplatePair | ( | fbSession_t * | session, |
uint16_t | ext_tid, | ||
uint16_t | int_tid | ||
) |
Adds an external-internal fbTemplate_t mapping pair for list elements in a Session.
When used on a Session connected to an fbCollector_t, it tells the Session that any sub-records in a an fbSubTemplateList_t or fbSubTemplateMultiList_t that use the incoming external template ext_tid
should be mapped to (transcoded into) the internal template int_tid
.
If the value of int_tid
is 0, the Session does not decode any list where the external template is ext_tid
. This allows a collector to specify which templates that are used in lists it wishes handle.
For any other int_tid
, the Session transcodes list sub-records that use ext_tid
to the Template whose ID is int_tid
. If int_tid
equals ext_tid
and the Session does not contain a Template for int_tid
, the transcoder uses the external template as the internal template.
The template pair is not added if int_tid
has a value other than ext_tid
or 0 and session
does not have an internal template for int_tid
.
Once any template pair has been added to a Session, the default behavior is that all unspecified incoming external template IDs used by lists are ignored. If no template pairs exist for a Session, the default behavior is that all incoming external templates used by lists are fully decoded.
When the Session is used by an fbExporter_t, the template mapping pairs set by this function are not used.
session | pointer to the session to add the pair to |
ext_tid | the external template ID |
int_tid | the internal template ID used to decode the data when the associated external template is used |
void fbSessionRemoveTemplatePair | ( | fbSession_t * | session, |
uint16_t | ext_tid | ||
) |
Removes a template mapping pair for list sub-records from the Session.
This is called by fixbuf when a template is revoked from the session by the node on the other end of the connection.
session | pointer to the session to remove the pair from |
ext_tid | the external template ID for the pair |
uint16_t fbSessionLookupTemplatePair | ( | const fbSession_t * | session, |
uint16_t | ext_tid | ||
) |
Finds the internal template ID to use for sub-records in a list that use the external template ext_tid
in session
.
Returns the internal ID for ext_tid
as set by fbSessionAddTemplatePair(). If no template pairs have been specified for the Session, returns ext_tid
. If template pairs exist and ext_tid
is not found, returns 0.
session | pointer to the session used to find the pair |
ext_tid | external template ID used to find a pair |
void fbSessionFree | ( | fbSession_t * | session | ) |
Frees a transport session state container.
This is done automatically when freeing the listener or buffer with which the session is associated. Use this call if a session needs to be destroyed before it is associated.
session | session state container to free. |
void fbSessionResetExternal | ( | fbSession_t * | session | ) |
Resets the external state (sequence numbers and templates) in a session state container.
FIXME: Verify that this call actually makes sense; either that a session is reassociatable with a new collector, or that you need to do this when reassociating a collector with a connection. Once this is done, rewrite this documentation
session | session state container to reset |
void fbSessionSetDomain | ( | fbSession_t * | session, |
uint32_t | domain | ||
) |
Sets the current observation domain on a session.
The domain is used to scope sequence numbers and external templates. This is called automatically during collection, but must be called to set the domain for export before adding external templates or writing records.
Notice that a domain change does not automatically cause any associated export buffers to emit messages; a domain change takes effect with the next message started. Therefore, call fBufEmit() before setting the domain on the buffer's associated session.
session | a session state container |
domain | ID of the observation domain to set |
uint32_t fbSessionGetDomain | ( | const fbSession_t * | session | ) |
Retrieves the current domain on a session.
session | a session state container |
uint16_t fbSessionGetLargestInternalTemplateSize | ( | fbSession_t * | session | ) |
Gets the largest decoded size of an internal template in the session.
This is the number of bytes needed by store the largest record described by an internal template in the session.
session | a session |
fbCollector_t * fbSessionGetCollector | ( | const fbSession_t * | session | ) |
Retrieves the Collector that was associated with session
by an explicit call to fBufAllocForCollection() or implicitly by fbListenerWait().
Returns NULL if session
is not associated with a Collector (for example, it is being used for export).
One place this function is helpful is in the function assigned to fbSessionAddNewTemplateCallback() so that the callback may access the Collector and its context.
session | a session state container |
gboolean fbSessionExportTemplate | ( | fbSession_t * | session, |
uint16_t | tid, | ||
GError ** | err | ||
) |
Exports a single external fbTemplate_t in the current domain of a given Session.
Writes the template to the associated export fBuf_t. May cause a message to be emitted if the associated export buffer is in automatic mode, or return with FB_ERROR_EOM if the associated export buffer is not in automatic mode.
Also exports an options record containing the template's metadata if a fbTemplateInfo_t was specified to fbSessionAddTemplate() and metadata export is enabled (fbSessionSetMetadataExportTemplates()).
session | a session state container associated with an export buffer |
tid | template ID within current domain to export |
err | an error description, set on failure. |
gboolean fbSessionExportTemplates | ( | fbSession_t * | session, |
GError ** | err | ||
) |
Exports all external templates in the current domain of a given session.
Writes templates to the associated export buffer. May cause a message to be emitted if the associated export buffer is in automatic mode, or return with FB_ERROR_EOM if the associated export buffer is not in automatic mode.
When template and/or information element metadata is enabled, those options records are also exported.
All external templates are exported each time this function is called.
session | a session state container associated with an export buffer |
err | an error description, set on failure. |
uint16_t fbSessionAddTemplate | ( | fbSession_t * | session, |
gboolean | internal, | ||
uint16_t | tid, | ||
fbTemplate_t * | tmpl, | ||
fbTemplateInfo_t * | tmplInfo, | ||
GError ** | err | ||
) |
Adds a Template to a Session.
Gives the Template the ID specified in tid
(removing the existing template having that ID, if any) or assigns the Template an arbitrary ID if tid
is FB_TID_AUTO.
If the Template is external (internal
is false), adds the Template to the current domain and exports the Template if the Session is already associated with an export buffer (fBuf_t).
The tmplInfo
parameter, which may be NULL, provides information about the Template including a name, and this data is exported as Option Records when the Session has been configured to do so (fbSessionSetMetadataExportTemplates()). When internal
is TRUE, the tmplInfo
parameter is ignored. When internal
is FALSE and tmplInfo
is provided, it must have a valid name. If the Session is associated with an export buffer and metadata export is enabled, the TemplateInfo is exported prior to exporting the Template.
After this call, the Session owns the TemplateInfo and will free it when the Session is freed. TemplateInfo may exist in exactly one Session; use fbTemplateInfoCopy() to add a copy of TemplateInfo to a different Session.
Calling this function twice with the same parameters may cause the Template to be freed and the Session to keep a handle to the invalid Template. If necessary, first use fbSessionGetTemplate() to check for the presence of the Template on the Session.
session | A session state container |
internal | TRUE if the template is internal, FALSE if external. |
tid | Template ID to assign, replacing any current template in case of collision; or FB_TID_AUTO to assign a new tId. |
tmpl | Template to add |
tmplInfo | The TemplateInfo for tmpl or NULL. |
err | An error description, set on failure |
tmplInfo
parameter. uint16_t fbSessionAddTemplatesForExport | ( | fbSession_t * | session, |
uint16_t | tid, | ||
fbTemplate_t * | tmpl, | ||
fbTemplateInfo_t * | tmplInfo, | ||
GError ** | err | ||
) |
Adds a Template to a Session being used for export as both an internal template and an external template.
This is a convenience function to save the caller from invoking fbSessionAddTemplate() multiple times. See that function for descriptions of the parameters.
If tmpl
contains paddingOctets element(s), the function creates a copy of tmpl
without padding by calling fbTemplateCopy() with flags
parameter as FB_TMPL_COPY_REMOVE_PADDING. It calls fbSessionAddTemplate() twice, first to add the copy (or the original) an external template on session
with template ID tid
, and second to add the original tmpl
as an internal template using the template ID returned when the external template was added.
session | A session state container |
tid | Template ID to assign, replacing any current template in case of collision; or FB_TID_AUTO for a new tId. |
tmpl | Template to add |
tmplInfo | Template metadata |
err | error description, set on error |
gboolean fbSessionRemoveTemplate | ( | fbSession_t * | session, |
gboolean | internal, | ||
uint16_t | tid, | ||
GError ** | err | ||
) |
Removes a template from a session.
If external, removes the template from the current domain, and exports a template revocation set if the session is associated with an export buffer.
session | A session state container |
internal | TRUE if the template is internal, FALSE if external. |
tid | Template ID to remove. |
err | An error description, set on failure |
fbTemplate_t * fbSessionGetTemplate | ( | const fbSession_t * | session, |
gboolean | internal, | ||
uint16_t | tid, | ||
GError ** | err | ||
) |
Retrieves a template from a session by ID.
If external, retrieves the template within the current domain.
session | A session state container |
internal | TRUE if the template is internal, FALSE if external. |
tid | ID of the template to retrieve. |
err | An error description, set on failure. May be NULL. |
fbExporter_t * fbExporterAllocNet | ( | const fbConnSpec_t * | spec | ) |
Allocates an exporting process endpoint for a network connection.
The remote collecting process is specified by the given connection specifier. The underlying socket connection is not opened until the first message is emitted from the buffer associated with the exporter.
Exits the application on allocation failure or if libfixbuf does not support the network connection type.
spec | remote endpoint connection specifier. A copy is made for the exporter, it is freed later. User is responsible for original spec pointer |
fbExporter_t * fbExporterAllocFile | ( | const char * | path | ) |
Allocates an exporting process endpoint for a named file.
The underlying file will not be opened until the first message is emitted from the buffer associated with the exporter.
Exits the application on allocation failure.
path | pathname of the IPFIX File to write, or "-" to open standard output. Path is duplicated and handled. Original pointer is up to the user. |
fbExporter_t * fbExporterAllocBuffer | ( | uint8_t * | buf, |
uint16_t | bufsize | ||
) |
Allocates an exporting process to use the existing buffer buf
having the specified size.
Each call to fBufEmit() copies data into buf
starting at buf[0]
; use fbExporterGetMsgLen() to get the number of bytes copied into buf
.
Exits the application on allocation failure.
buf | existing buffer that IPFIX messages are copied to |
bufsize | size of the buffer |
fbExporter_t * fbExporterAllocFP | ( | FILE * | fp | ) |
Allocates an exporting process endpoint for an opened ANSI C file pointer.
Exits the application on allocation failure.
fp | open file pointer to write to. File pointer is created and freed outside of the Exporter functions. |
void fbExporterSetStream | ( | fbExporter_t * | exporter, |
int | sctp_stream | ||
) |
Sets the SCTP stream for the next message exported.
To change the SCTP stream used for export, first emit any message in the exporter's associated buffer with fbufEmit(), then use this call to set the stream for the next message. This call cancels automatic stream selection, use fbExporterAutoStream() to re-enable it. This call is a no-op for non-SCTP exporters.
exporter | an exporting process endpoint. |
sctp_stream | SCTP stream to use for next message. |
void fbExporterAutoStream | ( | fbExporter_t * | exporter | ) |
Enables automatic SCTP stream selection for the next message exported.
Automatic stream selection is the default; use this call to re-enable it on a given exporter after using fbExporterSetStream(). With automatic stream selection, the minimal behavior specified in the original IPFIX protocol (RFC xxxx) is used: all templates and options templates are exported on stream 0, and all data is exported on stream 1. This call is a no-op for non-SCTP exporters.
exporter | an exporting process endpoint. |
void fbExporterClose | ( | fbExporter_t * | exporter | ) |
Forces the file or socket underlying an exporting process endpoint to close.
No effect on open file endpoints. The file or socket may be reopened on a subsequent message emission from the associated buffer.
exporter | an exporting process endpoint. |
size_t fbExporterGetMsgLen | ( | const fbExporter_t * | exporter | ) |
Gets the (transcoded) message length that was copied to the exporting buffer upon fBufEmit() when using fbExporterAllocBuffer().
exporter | an exporting process endpoint. |
size_t fbExporterGetOctetCount | ( | const fbExporter_t * | exporter | ) |
Gets the number of octets that have been written to the exporter's file, socket, or buffer since the exporter was opened (allocated for FP
exporters) or the counter was last reset.
The returned value does not include any partial messages in an fBuf_t that have not yet been emitted to the exporter.
exporter | an exporting process endpoint. |
size_t fbExporterGetOctetCountAndReset | ( | fbExporter_t * | exporter | ) |
Gets the number of octets that have been written to the exporter's file, socket, or buffer since the exporter was opened (allocated for FP
exporters) or the counter was last reset and resets the counter.
exporter | an exporting process endpoint. |
void fbExporterResetOctetCount | ( | fbExporter_t * | exporter | ) |
Resets the counter that holds the number of octets written to the exporter's file, socket, or buffer.
exporter | an exporting process endpoint. |
fbCollector_t * fbCollectorAllocFile | ( | void * | ctx, |
const char * | path, | ||
GError ** | err | ||
) |
Allocates a collecting process endpoint for a named file.
The underlying file will be opened immediately.
Exits the application on allocation failure.
ctx | application context; for application use, retrievable by fbCollectorGetContext() |
path | path of file to read, or "-" to read standard input. Used to get fp, user creates and frees. |
err | An error description, set on failure. |
fbCollector_t * fbCollectorAllocFP | ( | void * | ctx, |
FILE * | fp | ||
) |
Allocates a collecting process endpoint for an open file.
Exits the application on allocation failure.
ctx | application context; for application use, retrievable by fbCollectorGetContext() |
fp | file pointer to file to read. Created and freed by user. Must be kept around for the life of the collector. |
void * fbCollectorGetContext | ( | const fbCollector_t * | collector | ) |
Retrieves the application context associated with a collector.
This context is taken from the ctx
argument of fbCollectorAllocFile() or fbCollectorAllocFP(), or passed out via the ctx
argument of the appinit
function argument (fbListenerAppInit_fn) to fbListenerAlloc().
collector | a collecting process endpoint. |
void fbCollectorClose | ( | fbCollector_t * | collector | ) |
Closes the file or socket underlying a collecting process endpoint.
No effect on open file endpoints. If the collector is attached to a buffer managed by a listener, the buffer will be removed from the listener (that is, it will not be returned by subsequent fbListenerWait() calls).
collector | a collecting process endpoint. |
void fbCollectorSetAcceptOnly | ( | fbCollector_t * | collector, |
struct sockaddr * | address, | ||
size_t | address_length | ||
) |
Sets the collector to only receive from the given IP address over UDP.
The port will be ignored. Use fbListenerGetCollector() to get the pointer to the collector after calling fbListenerAlloc(). ONLY valid for UDP. Set the address family in address.
collector | pointer to collector |
address | pointer to sockaddr struct with IP address and family. |
address_length | address length |
fbListener_t * fbListenerAlloc | ( | const fbConnSpec_t * | spec, |
fbSession_t * | session, | ||
fbListenerAppInit_fn | appinit, | ||
fbListenerAppFree_fn | appfree, | ||
GError ** | err | ||
) |
Allocates a listener.
The listener will listen on a specified local endpoint, and create a new collecting process endpoint and collection buffer for each incoming connection. Each new buffer will be associated with a clone of a given session state container.
The application may associate context with each created collecting process endpoint, or veto a connection attempt, via a function colled on each connection attempt passed in via the appinit parameter. If this function will create application context, provide a function via the appfree parameter which will free it.
The fbListener_t returned should be freed by the application by calling fbListenerFree().
Exits the application on allocation failure.
spec | local endpoint connection specifier. A copy is made of this, which is freed by listener. Original pointer freeing is up to the user. |
session | session state container to clone for each collection buffer created by the listener. Not freed by listener. Must be kept alive while listener exists. |
appinit | application connection initiation function. Called on each collection attempt; vetoes connection attempts and creates application context. |
appfree | application context free function. |
err | An error description, set on failure. |
void fbListenerFree | ( | fbListener_t * | listener | ) |
Frees a listener.
Stops listening on the local endpoint, and frees any open buffers still managed by the listener.
listener | a listener |
fBuf_t * fbListenerWait | ( | fbListener_t * | listener, |
GError ** | err | ||
) |
Waits on a listener.
Accepts pending connections from exporting processes. Returns the next collection buffer with available data to read; if the collection buffer returned by the last call to fbListenerWait() is available, it is preferred. Blocks forever (or until fbListenerInterrupt() is called) if no messages or connections are available.
To effectively use fbListenerWait(), the application should set up an session state container with internal templates, call fbListenerWait() to accept a first connection, then read records from the collector buffer to end of message (FB_ERROR_EOM). At end of message, the application should then call fbListenerWait() to accept pending connections or switch to another collector buffer with available data. Note that each collection buffer returned created by fbListenerWait() is set automatically read the next message and not to raise FB_ERROR_EOM. To modify this behavior, call fBufSetAutomaticNextMessage() on the fBuf_t returned from this function with FALSE as the second parameter.
listener | a listener |
err | An error description, set on failure. |
fBuf_t * fbListenerWaitNoCollectors | ( | fbListener_t * | listener, |
GError ** | err | ||
) |
Waits for an incoming connection, just like fbListenerWait(), except that this function does not monitor active collectors.
This allows for a multi-threaded application to have one thread monitoring the listeners, and one keeping track of Collectors.
listener | The listener to wait for connections on |
err | An error description, set on failure. |
void fbListenerInterrupt | ( | fbListener_t * | listener | ) |
Causes the current or next call to fbListenerWait() to unblock and return.
Use this from a thread or a signal handler to interrupt a blocked listener.
listener | listener to interrupt. |
gboolean fbListenerGetCollector | ( | const fbListener_t * | listener, |
fbCollector_t ** | collector, | ||
GError ** | err | ||
) |
If a collector is associated with the listener class, this will return a handle to the collector state structure.
listener | handle to the listener state |
collector | pointer to a collector state pointer, set on return if there is no error |
err | a GError structure holding an error message on error |
gboolean fbCollectorClearTranslator | ( | fbCollector_t * | collector, |
GError ** | err | ||
) |
Removes an input translator from a given collector such that it will operate on IPFIX protocol again.
collector | the collector on which to remove the translator |
err | when an error occurs, a GLib GError structure is set with an error description |
gboolean fbCollectorSetNetflowV9Translator | ( | fbCollector_t * | collector, |
GError ** | err | ||
) |
Sets the collector input translator to convert NetFlowV9 into IPFIX for the given collector.
collector | pointer to the collector state to perform Netflow V9 conversion on |
err | GError structure that holds the error message if an error occurs |
gboolean fbCollectorSetSFlowTranslator | ( | fbCollector_t * | collector, |
GError ** | err | ||
) |
Sets the collector input translator to convert SFlow into IPFIX for the given collector.
collector | pointer to the collector state to perform SFlow conversion on |
err | GError structure that holds the error message if an error occurs |
uint32_t fbCollectorGetNetflowMissed | ( | const fbCollector_t * | collector, |
const struct sockaddr * | peer, | ||
size_t | peerlen, | ||
uint32_t | obdomain | ||
) |
Returns the number of potential missed export packets of the Netflow v9 session that is currently set on the collector (the session is set on the collector when an export packet is received) if peer is NULL.
If peer is set, this will look up the session for that peer/obdomain pair and return the missed export packets associated with that peer and obdomain. If peer/obdomain pair doesn't exist, this function returns 0. This can't return the number of missed flow records since Netflow v9 increases sequence numbers by the number of export packets it has sent, NOT the number of flow records (like IPFIX and netflow v5 does).
collector | |
peer | [OPTIONAL] peer address of NetFlow v9 exporter |
peerlen | size of peer object |
obdomain | observation domain of NetFlow v9 exporter |
uint32_t fbCollectorGetSFlowMissed | ( | const fbCollector_t * | collector, |
const struct sockaddr * | peer, | ||
size_t | peerlen, | ||
uint32_t | obdomain | ||
) |
Returns the number of potential missed export packets of the SFlow session that is identified with the given ip/agentID.
The agent ID is a field that is in the sFlow header and is sent with every packet. Fixbuf keeps track of sequence numbers for sFlow sessions per agent ID.
collector | |
peer | address of exporter to lookup |
peerlen | sizeof(peer) |
obdomain | observation domain of peer exporter |
const struct sockaddr * fbCollectorGetPeer | ( | const fbCollector_t * | collector | ) |
Retrieves information about the node connected to this collector.
collector | pointer to the collector to get peer information from |
uint32_t fbCollectorGetObservationDomain | ( | const fbCollector_t * | collector | ) |
Retrieves the observation domain of the node connected to the UDP collector.
The observation domain only gets set on the collector when collecting via UDP. If the collector is using another mode of transport, use fbSessionGetDomain().
collector |
void fbCollectorSetUDPMultiSession | ( | fbCollector_t * | collector, |
gboolean | multi_session | ||
) |
Enables or disables multi-session mode for a fbCollector_t associated with a UDP fbListener_t.
The default setting is that multi-session mode is disabled.
When multi-session mode is enabled, libfixbuf invokes the appinit
callback (fbListenerAppInit_fn) set on fbListenerAlloc() when a new UDP connection occurs, allowing the callback to examine the peer address and set a context for that UDP address. In addition, the appfree
callback (fbListenerAppFree_fn) is invoked when the fbSession_t for that collector times-out.
Regardless of the multi-session mode setting, libfixbuf always calls the appinit
function when a UDP listener is created, passing NULL as the peer address.
The caller may use fbListenerGetCollector() to get the collector given a listener.
collector | pointer to collector associated with listener. |
multi_session | TRUE to enable multi-session, FALSE to disable |
struct fbBasicList_st |
fbBasicList_t provides the internal representation of an fbInfoElement_t of type basicList (FB_BASIC_LIST).
field
member and removed the infoElement
member. Data Fields | ||
---|---|---|
uint8_t * | dataPtr | Pointer to the memory that stores the elements in the list. |
fbTemplateField_t | field |
The description of one element in the list.
|
uint16_t | numElements | The number of elements in the list. |
uint16_t | dataLength | The length of the buffer used to store the elements in the list. |
uint8_t | semantic | The semantic value to describe the contents of the list, a value defined in fbListSemantics_t. |
struct fbConnSpec_st |
Connection specifier.
Used to define a peer address for fbExporter_t, or a passive address for fbListener_t.
Data Fields | ||
---|---|---|
fbTransport_t | transport | Transport protocol to use. |
char * | host |
Hostname to connect/listen to. NULL to listen on all interfaces. |
char * | svc | Service name or port number to connect/listen to. |
char * | ssl_ca_file |
Path to certificate authority file. Only used for OpenSSL transport. |
char * | ssl_cert_file |
Path to certificate file. Only used for OpenSSL transport. |
char * | ssl_key_file |
Path to private key file. Only used for OpenSSL transport. |
char * | ssl_key_pass |
Private key decryption password. Only used for OpenSSL transport. |
void * | vai |
Pointer to address info cache. Initialize to NULL. For fixbuf internal use only. |
void * | vssl_ctx |
Pointer to SSL context cache. Initialize to NULL. For fixbuf internal use only. |
struct fbInfoElement_st |
A single IPFIX Information Element definition.
An Information Element describes the standard properties for a field in a record. This structure is contained in an fbInfoModel_t. As of libfixbuf 3.0.0, an fbTemplateField_t represents an fbInfoElement_t when used in an fbTemplate_t.
name
member and removed the midx
and ref
members. Data Fields | ||
---|---|---|
uint32_t | ent |
Private Enterprise Number. Set to 0 for IETF-defined IEs. |
uint16_t | num |
Information Element number. Does not include the on-wire enterprise bit; i.e. num & 0x8000 == 0 even if ent > 0. |
uint16_t | len | Standard information element length in octets; FB_IE_VARLEN for strings, octetArrays, and structured data (lists). |
uint32_t | flags |
Flags. Bitwise OR of FB_IE_F_* constants. Use Macros to get units and semantic |
uint8_t | type | Data Type, an fbInfoElementDataType_t. |
uint64_t | min | range min |
uint64_t | max | range max |
const char * | name |
Information element name. Storage for this is managed by fbInfoModel.
|
const char * | description | Element description. |
struct fbInfoElementOptRec_st |
The corresponding C struct for a record whose template is the RFC 5610 Information Element Type Options Template.
If collecting this record, use the function fbInfoElementAddOptRecElement() to add the fbInfoElement_t it describes to the fbInfoModel_t.
To export RFC5610 elements, use fbSessionSetMetadataExportElements().
Data Fields | ||
---|---|---|
uint32_t | ie_pen | private enterprise number |
uint16_t | ie_id | information element id |
uint8_t | ie_type | ie data type (fbInfoElementDataType_t) |
uint8_t | ie_semantic | ie semantic (fbInfoElementSemantics_t) |
uint16_t | ie_units | ie units (fbInfoElementUnits_t) |
uint8_t | padding[6] | padding to align within the template |
uint64_t | ie_range_begin | ie range min |
uint64_t | ie_range_end | ie range max |
fbVarfield_t | ie_name | information element name |
fbVarfield_t | ie_desc | information element description |
struct fbInfoElementSpec_st |
A single IPFIX Information Element specification.
Used to name an information element (fbInfoElement_t) for inclusion in an fbTemplate_t by fbTemplateAppendSpecArray() and for querying whether a template contains an element via fbTemplateContainsElementByName().
Data Fields | ||
---|---|---|
const char * | name | Information element name. |
uint16_t | len_override |
The size of the information element in bytes. For internal templates, this is the size of the memory location that will be filled by the transcoder (i.e., the size of a field in a struct). As of libfixbuf 2.0, zero may not be used as the size of elements used in internal templates except as noted below. (Attempting to do so returns FB_ERROR_LAXSIZE.) This restriction is so changes in the default length of the element (as defined in the Information Model) will not silently be different then the sizes of fields in an internal struct definition. Zero may be used as the size of FB_IE_VARLEN elements, which is the same as specifying FB_IE_VARLEN. Because of this, fixbuf does not allow an FB_OCTET_ARRAY or FB_STRING field to have a fixed length of zero despite RFC 7011 allowing it. This field can also be used to specify reduced-length encoding. |
uint32_t | flags |
Application flags word. If nonzero, then the |
struct fbInfoElementSpecId_st |
A single IPFIX Information Element specification using the element's numeric identifier and private enterprise number.
Used to name an information element (fbInfoElement_t) for inclusion in an fbTemplate_t by fbTemplateAppendArraySpecId().
Data Fields | ||
---|---|---|
struct fbInfoElementSpecIdIdent_st | ident | |
uint16_t | len_override |
The size of the information element in bytes. For internal templates, this is the size of the memory location that will be filled by the transcoder (i.e., the size of a field in a struct). As of libfixbuf 2.0, zero may not be used as the size of elements used in internal templates except as noted below. (Attempting to do so returns FB_ERROR_LAXSIZE.) This restriction is so changes in the default length of the element (as defined in the Information Model) will not silently be different then the sizes of fields in an internal struct definition. Zero may be used as the size of FB_IE_VARLEN elements, which is the same as specifying FB_IE_VARLEN. Because of this, fixbuf does not allow an FB_OCTET_ARRAY or FB_STRING field to have a fixed length of zero despite RFC 7011 allowing it. This field can also be used to specify reduced-length encoding. |
uint32_t | flags |
Application flags word. If nonzero, then the |
struct fbInfoElementSpecId_st::fbInfoElementSpecIdIdent_st |
struct fbListenerEntry_st |
ListenerEntry's make up an fbListenerGroup_t as a linked list.
Data Fields | ||
---|---|---|
struct fbListenerEntry_st * | next | pointer to the next listener entry in the linked list |
struct fbListenerEntry_st * | prev | pointer to the previous listener entry in the linked list |
fbListener_t * | listener | pointer to the listener to add to the list |
struct fbListenerGroupResult_st |
A ListenerGroupResult contains the fbListener whose listening socket got a new connection (cf.
fbListenerGroupWait()). It is tied to the fBuf_t that is produced for the connection. These comprise a linked list.
Data Fields | ||
---|---|---|
struct fbListenerGroupResult_st * | next | Pointer to the next listener group result. |
fbListener_t * | listener | pointer to the listener that received a new connection |
fBuf_t * | fbuf | pointer to the fbuf created for that new connection |
struct fbRecord_st |
fbRecord_t maintains a buffer holding an IPFIX record's data, the fbTemplate_t that describes that data and the template's ID.
The caller should initialize rec
with an data buffer and store the length of that buffer in reccapacity
. All fixbuf functions treat reccapacity
as constant. FIXME—We could allow the fbRecord_t to maintain this buffer itself.
Before each call to fBufNextRecord(), the caller sets tid
to the template to use to read the record. fBufNextRecord() updates tmpl
and recsize
reads the data into rec
.
The caller is responsible for calling fbRecordFreeLists() before reusing the record. FIXME—We should probably change this.
Data Fields | ||
---|---|---|
const fbTemplate_t * | tmpl |
The template that describes the bytes in rec . |
uint8_t * | rec | The buffer holding the data for a record. |
size_t | reccapacity |
The number of bytes allocated for the rec buffer. |
size_t | recsize |
The number of bytes used by the record current in rec . |
uint16_t | tid |
The template ID for tmpl . |
struct fbRecordValue_st |
fbRecordValue_t is used to access the value of a single Element (or Field) in an fbRecord_t.
When an fbRecordValue_t is created on the stack, it should be initialized with FB_RECORD_VALUE_INIT.
If you use it to access FB_STRING or FB_OCTET_ARRAY data, call either fbRecordValueClear() to ensure its internal string buffer is freed or fbRecordValueTakeVarfieldBuf() to take ownship of the internal string buffer before the RecordValue leaves scope.
Data Fields | ||
---|---|---|
const fbInfoElement_t * | ie | The element that describes this data. |
GString * | stringbuf |
An internal buffer used to store the varfield value. |
union v_un | v |
struct fbSubTemplateList_st |
fbSubTemplateList_t provides the internal representation of an fbInfoElement_t of type subTemplateList (FB_SUB_TMPL_LIST).
Data Fields | ||
---|---|---|
const fbTemplate_t * | tmpl | The pointer to the template used to structure the data in this list. |
uint8_t * | dataPtr | The pointer to the buffer used to hold the data in this list. |
uint32_t | dataLength |
The octet length of the allocated buffer used to hold the data.
|
uint32_t | recordLength |
The octet length of a record (in memory) described by the template.
|
uint16_t | numElements | The number of elements (sub-records) in the list. |
uint16_t | tmplID | The ID of the template used to structure the data. |
uint8_t | semantic | The semantic value to describe the contents of the list, a value defined in fbListSemantics_t. |
struct fbSubTemplateMultiList_st |
fbSubTemplateMultiList_t provides the internal representation of an fbInfoElement_t of type subTemplateMultiList (FB_SUB_TMPL_MULTI_LIST).
Data Fields | ||
---|---|---|
fbSubTemplateMultiListEntry_t * | firstEntry | The pointer to the first entry in the multi list. |
uint16_t | numElements | The number of sub template lists in the multi list. |
uint8_t | semantic | The semantic value to describe the contents of the list, a value defined in fbListSemantics_t. |
struct fbSubTemplateMultiListEntry_st |
fbSubTemplateMultiListEntry_t represents structured data instances within a fbSubTemplateMultiList_t that share the same fbTemplate_t.
Data Fields | ||
---|---|---|
const fbTemplate_t * | tmpl | The pointer to the template used to structure the data in this entry. |
uint8_t * | dataPtr | The pointer to the buffer used to hold the data in this entry. |
uint32_t | dataLength | The octet length of the buffer used to hold the data in this entry. |
uint32_t | recordLength |
The octet length of a record (in memory) described by the template.
|
uint16_t | numElements | The number of elements (sub-records) in this entry. |
uint16_t | tmplID | The ID of the template used to structure the data in this entry. |
struct fbTemplateField_st |
fbTemplateField_t represents an fbInfoElement_t that has been added to an fbTemplate_t.
Data Fields | ||
---|---|---|
const fbInfoElement_t * | canon | Pointer to canonical IE. |
uint16_t | midx |
Multiple IE index. Defines the ordering of identical IEs in templates. Set and managed automatically by the fbTemplate_t routines. |
uint16_t | len | Octet-length of this field as specified by the template specification. |
uint16_t | offset |
Octet-offset of this field in a record. Calculated by template. |
fbTemplate_t * | tmpl |
Octet-length of this IE in memory. Is this needed? Position of this field in the template. Is this needed? Pointer to the template that own this field. Is this needed? |
struct fbTemplateIter_st |
fbTemplateIter_t iterates over the fbTemplateField_t objects in an fbTemplate_t.
To use, define the fbTemplateIter_t on the stack, using FB_TEMPLATE_ITER_NULL to zero it if desired. Bind it to a Template with fbTemplateIterInit(), iterate over the TemplateFields with fbTemplateIterNext() until that function returns NULL.
Data Fields | ||
---|---|---|
const fbTemplate_t * | tmpl | |
uint16_t | pos |
struct fbVarfield_st |
A variable-length field value.
Variable-length information element content is represented by an fbVarfield_t on the internal side of the transcoder; that is, variable length fields in an IPFIX Message must be represented by this structure within the application record.
Data Fields | ||
---|---|---|
size_t | len | Length of content in buffer. |
uint8_t * | buf |
Content buffer. In network byte order as appropriate. On write, this buffer will be copied into the message buffer. On read, this buffer points into the message buffer and must be copied by the caller before any call to fBufNext(). |
union fbRecordValue_st::v_un |
The value depending on the type of ie
.
Data Fields | ||
---|---|---|
uint8_t | ip6[16] |
Used when ie is FB_IP6_ADDR. |
const fbBasicList_t * | bl |
Used when ie is FB_BASIC_LIST. |
const fbSubTemplateList_t * | stl |
Used when ie is FB_SUB_TMPL_LIST. |
const fbSubTemplateMultiList_t * | stml |
Used when ie is FB_SUB_TMPL_MULTI_LIST. |
fbVarfield_t | varfield |
Used when ie is FB_STRING or FB_OCTET_ARRAY. The |
struct timespec | dt |
Used when ie is FB_DT_SEC, FB_DT_MILSEC, FB_DT_MICROSEC, or FB_DT_NANOSEC.
|
uint32_t | ip4 |
Used when ie is FB_IP4_ADDR. |
uint64_t | u64 |
Used when ie is FB_UINT_8, FB_UINT_16, FB_UINT_32, FB_UINT_64, or FB_BOOL (0 == false, 1 == true). |
int64_t | s64 |
Used when ie is FB_INT_8, FB_INT_16, FB_INT_32, or FB_INT_64. |
double | dbl |
Used when ie is FB_FLOAT_64 or FB_FLOAT_32. |
uint8_t | mac[6] |
Used when ie is FB_MAC_ADDR. |