require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
+require "${General::swroot}/geoip-functions.pl";
my $colour_multicast = "#A0A0A0";
+# sort arguments for connection tracking table
+# the sort field. eg. 1=src IP, 2=dst IP, 3=src port, 4=dst port
+my $SORT_FIELD = 0;
+# the sort order. (a)scending orr (d)escending
+my $SORT_ORDER = 0;
+# cgi query arguments
+my %cgiin;
+# debug mode
+my $debug = 0;
+
+# retrieve query arguments
+# note: let a-z A-Z and 0-9 pass as value only
+if (length ($ENV{'QUERY_STRING'}) > 0){
+ my $name;
+ my $value;
+ my $buffer = $ENV{'QUERY_STRING'};
+ my @pairs = split(/&/, $buffer);
+ foreach my $pair (@pairs){
+ ($name, $value) = split(/=/, $pair);
+ $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; # e.g. "%20" => " "
+ $value =~ s/[^a-zA-Z0-9]*//g; # a-Z 0-9 will pass
+ $cgiin{$name} = $value;
+ }
+}
+
&Header::showhttpheaders();
my @network=();
my %netsettings=();
&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
+# output cgi query arrguments to browser on debug
+if ( $debug ){
+ &Header::openbox('100%', 'center', 'DEBUG');
+ my $debugCount = 0;
+ foreach my $line (sort keys %cgiin) {
+ print "$line = '$cgiin{$line}'<br />\n";
+ $debugCount++;
+ }
+ print " Count: $debugCount\n";
+ &Header::closebox();
+}
+
#workaround to suppress a warning when a variable is used only once
my @dummy = ( ${Header::table1colour} );
undef (@dummy);
-# Read the connection tracking table.
-open(CONNTRACK, "/usr/local/bin/getconntracktable | sort -k 5,5 --numeric-sort --reverse |") or die "Unable to read conntrack table";
+# check sorting arguments
+if ( $cgiin{'sort_field'} ~~ [ '1','2','3','4','5','6','7','8','9' ] ) {
+ $SORT_FIELD = $cgiin{'sort_field'};
+
+ if ( $cgiin{'sort_order'} ~~ [ 'a','d','A','D' ] ) {
+ $SORT_ORDER = lc($cgiin{'sort_order'});
+ }
+}
+
+# Read and sort the connection tracking table
+# do sorting
+if ($SORT_FIELD and $SORT_ORDER) {
+ # field sorting when sorting arguments are sane
+ open(CONNTRACK, "/usr/local/bin/getconntracktable | /usr/local/bin/consort.sh $SORT_FIELD $SORT_ORDER |") or die "Unable to read conntrack table";
+} else {
+ # default sorting with no query arguments
+ open(CONNTRACK, "/usr/local/bin/getconntracktable | sort -k 5,5 --numeric-sort --reverse |") or die "Unable to read conntrack table";
+}
my @conntrack = <CONNTRACK>;
close(CONNTRACK);
}
}
+# Add OpenVPN net for custom OVPNs
+if (-e "${General::swroot}/ovpn/ccd.conf") {
+ open(OVPNSUB, "${General::swroot}/ovpn/ccd.conf");
+ my @ovpnsub = <OVPNSUB>;
+ close(OVPNSUB);
+
+ foreach (@ovpnsub) {
+ my ($network, $mask) = split '/', (split ',', $_)[2];
+
+ $mask = ipv4_cidr2msk($mask) unless &General::validip($mask);
+
+ push(@network, $network);
+ push(@masklen, $mask);
+ push(@colour, ${Header::colourovpn});
+ }
+}
+
open(IPSEC, "${General::swroot}/vpn/config");
my @ipsec = <IPSEC>;
close(IPSEC);
foreach my $line (@ipsec) {
my @vpn = split(',', $line);
- my ($network, $mask) = split("/", $vpn[12]);
- if (!&General::validip($mask)) {
- $mask = ipv4_cidr2msk($mask);
- }
+ my @subnets = split(/\|/, $vpn[12]);
+ for my $subnet (@subnets) {
+ my ($network, $mask) = split("/", $subnet);
- push(@network, $network);
- push(@masklen, $mask);
- push(@colour, ${Header::colourvpn});
+ if (!&General::validip($mask)) {
+ $mask = ipv4_cidr2msk($mask);
+ }
+
+ push(@network, $network);
+ push(@masklen, $mask);
+ push(@colour, ${Header::colourvpn});
+ }
}
if (-e "${General::swroot}/ovpn/n2nconf") {
# Print legend.
print <<END;
- <table width='100%'>
+ <table style='width:100%'>
<tr>
- <td align='center'>
- <b>$Lang::tr{'legend'} : </b>
+ <td style='text-align:center;'>
+ <b>$Lang::tr{'legend'} :</b>
</td>
- <td align='center' bgcolor='${Header::colourgreen}'>
- <b><font color='#FFFFFF'>$Lang::tr{'lan'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourgreen}; font-weight:bold;'>
+ <b>$Lang::tr{'lan'}</b>
</td>
- <td align='center' bgcolor='${Header::colourred}'>
- <b><font color='#FFFFFF'>$Lang::tr{'internet'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourred};'>
+ <b>$Lang::tr{'internet'}</b>
</td>
- <td align='center' bgcolor='${Header::colourorange}'>
- <b><font color='#FFFFFF'>$Lang::tr{'dmz'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourorange};'>
+ <b>$Lang::tr{'dmz'}</b>
</td>
- <td align='center' bgcolor='${Header::colourblue}'>
- <b><font color='#FFFFFF'>$Lang::tr{'wireless'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourblue};'>
+ <b>$Lang::tr{'wireless'}</b>
</td>
- <td align='center' bgcolor='${Header::colourfw}'>
- <b><font color='#FFFFFF'>IPFire</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourfw};'>
+ <b>IPFire</b>
</td>
- <td align='center' bgcolor='${Header::colourvpn}'>
- <b><font color='#FFFFFF'>$Lang::tr{'vpn'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourvpn};'>
+ <b>$Lang::tr{'vpn'}</b>
</td>
- <td align='center' bgcolor='${Header::colourovpn}'>
- <b><font color='#FFFFFF'>$Lang::tr{'OpenVPN'}</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:${Header::colourovpn};'>
+ <b>$Lang::tr{'OpenVPN'}</b>
</td>
- <td align='center' bgcolor='$colour_multicast'>
- <b><font color='#FFFFFF'>Multicast</font></b>
+ <td style='text-align:center; color:#FFFFFF; background-color:$colour_multicast;'>
+ <b>Multicast</b>
</td>
</tr>
</table>
<br>
END
+if ($SORT_FIELD and $SORT_ORDER) {
+ my @sort_field_name = (
+ $Lang::tr{'source ip'},
+ $Lang::tr{'destination ip'},
+ $Lang::tr{'source port'},
+ $Lang::tr{'destination port'},
+ $Lang::tr{'protocol'},
+ $Lang::tr{'connection'}.' '.$Lang::tr{'status'},
+ $Lang::tr{'expires'}.' ('.$Lang::tr{'seconds'}.')',
+ $Lang::tr{'download'},
+ $Lang::tr{'upload'}
+ );
+ my $sort_order_name;
+ if (lc($SORT_ORDER) eq "a") {
+ $sort_order_name = $Lang::tr{'sort ascending'};
+ } else {
+ $sort_order_name = $Lang::tr{'sort descending'};
+ }
+
+print <<END
+ <div style="font-weight:bold;margin:10px;font-size: 70%">
+ $sort_order_name: $sort_field_name[$SORT_FIELD-1]
+ </div>
+END
+;
+}
+
# Print table header.
print <<END;
- <table width='100%'>
+ <table style='width:100%'>
+ <tr>
+ <th style='text-align:center'>
+ <a href="?sort_field=5&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=5&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ <th style='text-align:center' colspan='2'>
+ <a href="?sort_field=1&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=1&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+
+ <a href="?sort_field=3&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=3&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ <th> </th>
+ <th style='text-align:center' colspan='2'>
+ <a href="?sort_field=2&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=2&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+
+ <a href="?sort_field=4&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=4&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ <th> </th>
+ <th style='text-align:center'>
+ <a href="?sort_field=8&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=8&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+
+ <a href="?sort_field=9&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=9&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ <th style='text-align:center'>
+ <a href="?sort_field=6&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=6&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ <th style='text-align:center'>
+ <a href="?sort_field=7&sort_order=d"><img style="width:10px" src="/images/up.gif" alt=""></a>
+ <a href="?sort_field=7&sort_order=a"><img style="width:10px" src="/images/down.gif" alt=""></a>
+ </th>
+ </tr>
<tr>
- <th align='center'>
+ <th style='text-align:center'>
$Lang::tr{'protocol'}
</th>
- <th align='center'>
+ <th style='text-align:center' colspan='2'>
$Lang::tr{'source ip and port'}
</th>
- <th> </th>
- <th align='center'>
+ <th style='text-align:center'>
+ $Lang::tr{'country'}
+ </th>
+ <th style='text-align:center' colspan='2'>
$Lang::tr{'dest ip and port'}
</th>
- <th> </th>
- <th align='center'>
+ <th style='text-align:center'>
+ $Lang::tr{'country'}
+ </th>
+ <th style='text-align:center'>
$Lang::tr{'download'} /
<br>$Lang::tr{'upload'}
</th>
- <th align='center'>
+ <th style='text-align:center'>
$Lang::tr{'connection'}<br>$Lang::tr{'status'}
</th>
- <th align='center'>
+ <th style='text-align:center'>
$Lang::tr{'expires'}<br>($Lang::tr{'seconds'})
</th>
</tr>
}
my $sip_colour = ipcolour($sip);
- my $dip_colour = ipcolour($dip);
+ # use colour of destination network for DNAT
+ my $dip_colour = $dip ne $dip_ret ? ipcolour($dip_ret) : ipcolour($dip);
my $sserv = '';
if ($sport < 1024) {
my $bytes_in = format_bytes($bytes[0]);
my $bytes_out = format_bytes($bytes[1]);
+ # enumerate GeoIP information
+ my $srcccode = &GeoIP::lookup($sip_ret);
+ my $src_flag_icon = &GeoIP::get_flag_icon($srcccode);
+ my $dstccode = &GeoIP::lookup($dip_ret);
+ my $dst_flag_icon = &GeoIP::get_flag_icon($dstccode);
+
# Format TTL
$ttl = format_time($ttl);
my $sip_extra;
- if ($sip ne $sip_ret) {
- $sip_extra = "<font color='#FFFFFF'>></font> ";
+ if ($sip_ret && $sip ne $sip_ret) {
+ $sip_extra = "<span style='color:#FFFFFF;'>></span> ";
$sip_extra .= "<a href='/cgi-bin/ipinfo.cgi?ip=$sip_ret'>";
- $sip_extra .= " <font color='#FFFFFF'>$sip_ret</font>";
+ $sip_extra .= " <span style='color:#FFFFFF;'>$sip_ret</span>";
$sip_extra .= "</a>";
}
my $dip_extra;
- if ($dip ne $dip_ret) {
- $dip_extra = "<font color='#FFFFFF'>></font> ";
+ if ($dip_ret && $dip ne $dip_ret) {
+ $dip_extra = "<span style='color:#FFFFFF;'>></span> ";
$dip_extra .= "<a href='/cgi-bin/ipinfo.cgi?ip=$dip_ret'>";
- $dip_extra .= " <font color='#FFFFFF'>$dip_ret</font>";
+ $dip_extra .= " <span style='color:#FFFFFF;'>$dip_ret</span>";
$dip_extra .= "</a>";
}
$sserv_ret = uc(getservbyport($sport_ret, lc($l4proto)));
}
- $sport_extra = "<font color='#FFFFFF'>></font> ";
+ $sport_extra = "<span style='color:#FFFFFF;'>></span> ";
$sport_extra .= "<a href='http://isc.sans.org/port_details.php?port=$sport_ret' target='top' title='$sserv_ret'>";
- $sport_extra .= " <font color='#FFFFFF'>$sport_ret</font>";
+ $sport_extra .= " <span style='color:#FFFFFF;'>$sport_ret</span>";
$sport_extra .= "</a>";
}
$dserv_ret = uc(getservbyport($dport_ret, lc($l4proto)));
}
- $dport_extra = "<font color='#FFFFFF'>></font> ";
+ $dport_extra = "<span style='color:#FFFFFF;'>></span> ";
$dport_extra .= "<a href='http://isc.sans.org/port_details.php?port=$dport_ret' target='top' title='$dserv_ret'>";
- $dport_extra .= " <font color='#FFFFFF'>$dport_ret</font>";
+ $dport_extra .= " <span style='color:#FFFFFF;'>$dport_ret</span>";
$dport_extra .= "</a>";
}
print <<END;
<tr>
- <td align='center'>$l4proto</td>
- <td align='center' bgcolor='$sip_colour'>
+ <td style='text-align:center'>$l4proto</td>
+ <td style='text-align:center; background-color:$sip_colour;'>
<a href='/cgi-bin/ipinfo.cgi?ip=$sip'>
- <font color='#FFFFFF'>$sip</font>
+ <span style='color:#FFFFFF;'>$sip</span>
</a>
$sip_extra
</td>
- <td align='center' bgcolor='$sip_colour'>
+ <td style='text-align:center; background-color:$sip_colour;'>
<a href='http://isc.sans.org/port_details.php?port=$sport' target='top' title='$sserv'>
- <font color='#FFFFFF'>$sport</font>
+ <span style='color:#FFFFFF;'>$sport</span>
</a>
$sport_extra
</td>
- <td align='center' bgcolor='$dip_colour'>
+ <td style='text-align:center; background-color:$sip_colour;'>
+ <a href='country.cgi#$srcccode'><img src='$src_flag_icon' border='0' align='absmiddle' alt='$srcccode' title='$srcccode' /></a>
+ </td>
+ <td style='text-align:center; background-color:$dip_colour;'>
<a href='/cgi-bin/ipinfo.cgi?ip=$dip'>
- <font color='#FFFFFF'>$dip</font>
+ <span style='color:#FFFFFF;'>$dip</span>
</a>
$dip_extra
</td>
- <td align='center' bgcolor='$dip_colour'>
+ <td style='text-align:center; background-color:$dip_colour;'>
<a href='http://isc.sans.org/port_details.php?port=$dport' target='top' title='$dserv'>
- <font color='#FFFFFF'>$dport</font>
+ <span style='color:#FFFFFF;'>$dport</span>
</a>
$dport_extra
</td>
- <td align='center'>
+ <td style='text-align:center; background-color:$sip_colour;'>
+ <a href='country.cgi#$dstccode'><img src='$dst_flag_icon' border='0' align='absmiddle' alt='$dstccode' title='$dstccode' /></a>
+ </td>
+ <td style='text-align:center'>
$bytes_in / $bytes_out
</td>
- <td align='center'>$state</td>
- <td align='center'>$ttl</td>
+ <td style='text-align:center'>$state</td>
+ <td style='text-align:center'>$ttl</td>
</tr>
END
}
my ($ip) = $_[0];
my $found = 0;
- foreach my $line (@network) {
- if ($network[$id] eq '') {
- $id++;
- } else {
- if (!$found && ipv4_in_network($network[$id], $masklen[$id], $ip) ) {
- $found = 1;
- $colour = $colour[$id];
+ if ($ip) {
+ foreach my $line (@network) {
+ if ($network[$id] eq '') {
+ $id++;
+ } else {
+ if (!$found && ipv4_in_network($network[$id], $masklen[$id], $ip) ) {
+ $found = 1;
+ $colour = $colour[$id];
+ }
+ $id++;
}
- $id++;
}
}
projects / ipfire-2.x.git / blobdiff