+/* =============================================================== */\r
+/* == Prometheus QoS - you can "steal fire" from your ISP == */\r
+/* == "fair-per-IP" quality of service (QoS) utility == */\r
+/* == requires Linux 2.4.x or 2.6.x with HTB support == */\r
+/* == Copyright(C) 2005-2008 Michael Polak (xChaos) == */\r
+/* == iptables-restore support Copyright(C) 2007-2008 ludva == */\r
+/* == Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf == */\r
+/* =============================================================== */\r
+\r
+/* Modified: xChaos, 20080201\r
+ ludva, 20071227\r
+\r
+ Prometheus QoS is free software; you can redistribute it and/or\r
+ modify it under the terms of the GNU General Public License as \r
+ published by the Free Software Foundation; either version 2.1 of \r
+ the License, or (at your option) any later version.\r
+\r
+ Prometheus QoS is distributed in the hope that it will be useful,\r
+ but WITHOUT ANY WARRANTY; without even the implied warranty of\r
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\r
+ General Public License for more details.\r
+\r
+ You should have received a copy of the GNU General Public License
+ along with Prometheus Qos; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA \r
+ \r
+ GNU General Public License is located in file COPYING */
+\r
+#define STRLEN 256\r
+#define FIRSTGROUPID 1024\r
+#define FIRSTIPCLASS 2048\r
+#undef DEBUG\r
+\r
+#include "cll1-0.6.h"\r
+\r
+const char *version="0.7.8"; /*0.7.9 will be last development, 0.8.0 first stable */\r
+\r
+/* ======= Help screen is hopefuly self-documenting part of code :-) ======= */\r
+\r
+void help(void)\r
+{\r
+ puts("Command line switches:\n\\r
+\n\\r
+-?, --help this help screen\n\\r
+-v, --version show version number of this utility and exit\n\\r
+-c filename force alternative /etc/prometheus.conf filename\n\\r
+-h filename force alternative /etc/hosts filename (overrides hosts keyword)\n\\r
+-f just flush iptables and tc classes and exit (stop shaping)\n\\r
+-9 emergency iptables flush (do not read data transfer statistics)\n\\r
+-p just generate preview of data transfer statistics and exit\n\\r
+-n no delay (overrides qos-free-delay keyword)\n\\r
+-d dry run (preview tc and iptables commands on stdout)\n\\r
+");\r
+}\r
+\r
+/* === Configuraration file values defaults - stored in global variables ==== */\r
+\r
+int filter_type=1; /*1 mark, 2 classify*/\r
+char *mark="MARK";\r
+char *mark_iptables="MARK --set-mark ";\r
+int dry_run=0; /* preview - use puts() instead of system() */\r
+char *config="/etc/prometheus/prometheus.conf"; /* main configuration file */\r
+char *hosts="/etc/prometheus/hosts"; /* line bandwidth definition file */\r
+char *tc="/sbin/tc"; /* requires tc with HTB support */\r
+char *iptables="/sbin/iptables"; /* requires iptables utility */\r
+char *iptablessave="/sbin/iptables-save"; /* new */\r
+char *iptablesrestore="/sbin/iptables-restore"; /* new */\r
+char *iptablesfile="/var/spool/prometheus.iptables"; /* new; file for iptables-restore*/\r
+char *iptablespreamble="*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";\r
+FILE *iptables_file=NULL;\r
+char *html="/var/www/traffic.html"; /* hall of fame filename */\r
+char *preview="/var/www/preview.html"; /* hall of fame preview */\r
+char *cmdlog="/var/log/prometheus"; /* command log filename */\r
+char *credit="/var/run/prometheus.credit"; /* credit log file */\r
+int enable_credit=1; /* enable credit file */\r
+int use_credit=0; /* use credit file (if enabled)*/\r
+char *log_dir="/var/www/logs/"; /* log directory pathname */\r
+char *log_url="logs/"; /* log directory URL prefix */\r
+char *title="Hall of Fame - Greatest Suckers"; /* hall of fame title */\r
+int hall_of_fame=1; /* enable hall of fame */\r
+char *lan="eth0"; /* LAN interface */\r
+char *lan_medium="100Mbit"; /* 10Mbit/100Mbit ethernet */\r
+char *wan="eth1"; /* WAN/ISP interface */\r
+char *wan_medium="100Mbit"; /* 10Mbit/100Mbit ethernet */\r
+char *qos_leaf="sfq perturb 5"; /* leaf discipline */\r
+char *qos_free_zone=NULL; /* QoS free zone */\r
+int qos_proxy=1; /* include proxy port to QoS */\r
+int include_upload=1; /* upload+download=total traffic */\r
+char *proxy_ip="192.168.1.1/32"; /* our IP with proxy port */\r
+int proxy_port=3128; /* proxy port number */\r
+long long int line=1024; /* WAN/ISP download in kbps */\r
+long long int up=1024; /* WAN/ISP upload in kbps */\r
+int free_min=32; /* minimum guaranted bandwidth for all undefined hosts */\r
+int free_max=64; /* maximum allowed bandwidth for all undefined hosts */\r
+int qos_free_delay=0; /* seconds to sleep before applying new QoS rules */\r
+int digital_divide=2; /* controls digital divide weirdness ratio, 1...3 */ \r
+int max_nesting=3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */\r
+int htb_r2q=1; \r
+int burst=8; /* HTB burst (in kbits) */\r
+int burst_main=64;\r
+int burst_group=32;\r
+int magic_priorities=8; /* number of priority levels (soft shaping) */\r
+int magic_treshold=8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */\r
+int keywordcount=0;\r
+\r
+/* not yet implemented:\r
+ int fixed_packets=0; maximum number of pps per IP address (not class!) \r
+ int packet_limit=5; maximum number of pps to htn CEIL, not rate !!! \r
+*/\r
+FILE *log_file=NULL;\r
+\r
+char *kwd="via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */\r
+\r
+const int idxtable_treshold1=24; /* this is no longer configurable */\r
+const int idxtable_treshold2=12; /* this is no longer configurable */\r
+const int idxtable_bitmask1=3; /* this is no longer configurable */\r
+const int idxtable_bitmask2=3; /* this is no longer configurable */\r
+\r
+\r
+/* not yet implemented:\r
+-s start shaping! (keep data transfer statistics - but apply shaping)\n\\r
+-r just reload configuration (...and keep data transfer statistics)\n\\r
+*/\r
+\r
+/* ==== This is C<<1 stuff - learn C<<1 first! http://cll1.arachne.cz ==== */\r
+\r
+struct IP\r
+{\r
+ char *addr;\r
+ char *name;\r
+ char *sharing;\r
+ int min;\r
+ int desired;\r
+ int max;\r
+ int mark;\r
+ int prio;\r
+ int fixedprio;\r
+ int group;\r
+ unsigned long long direct;\r
+ unsigned long long proxy;\r
+ unsigned long long upload;\r
+ unsigned long long traffic;\r
+ unsigned long long credit;\r
+ unsigned long pktsup;\r
+ unsigned long pktsdown;\r
+ struct Keyword *keyword;\r
+ list(IP);\r
+} *ips=NULL, *ip, *sharedip;\r
+\r
+struct Group\r
+{\r
+ int min;\r
+ int count;\r
+ int desired;\r
+ int id;\r
+ list(Group);\r
+} *groups=NULL, *group;\r
+\r
+struct Index\r
+{\r
+ char *addr;\r
+ char *id;\r
+ struct Index *parent;\r
+ int bitmask;\r
+ int children;\r
+ list(Index);\r
+} *idxs=NULL, *idx, *metaindex;\r
+\r
+struct Keyword\r
+{\r
+ char *key;\r
+ \r
+ int asymetry_ratio; /* ratio for ADSL-like upload */\r
+ int asymetry_fixed; /* fixed treshold for ADSL-like upload */\r
+ int data_limit; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
+ int data_prio; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
+ long fixed_limit; /* fixed data limit for setting lower HTB ceil */\r
+ long fixed_prio; /* fixed data lmit for setting lower HTB prio */\r
+ int reserve_min; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
+ int reserve_max; /* malus for nominal HTB ceil (in kbps) */\r
+// int divide_max; /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */\r
+// int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */\r
+ int default_prio; /* default HTB priority for this keyword */\r
+ char *html_color;\r
+ int ip_count;\r
+ char *leaf_discipline;\r
+ \r
+ list(Keyword);\r
+} *keyword,*defaultkeyword=NULL,*keywords=NULL;\r
+\r
+/* Damned, this must be object oriented! This looks almost like constructor ;-) */\r
+\r
+void TheIP(void)\r
+{\r
+ create(ip,IP);\r
+ ip->name="";\r
+ ip->addr="";\r
+ ip->sharing=NULL;\r
+ ip->prio=1;\r
+ ip->fixedprio=0;\r
+ ip->mark=ip->min=ip->max=ip->desired=ip->credit=0;\r
+ ip->upload=ip->proxy=ip->direct=ip->traffic=0;\r
+ ip->pktsup=ip->pktsdown=0;\r
+ ip->keyword=keywords;\r
+ push(ip,ips);\r
+}\r
+\r
+/* ====== Iptables indexes are used to reduce complexity to log8(N) ===== */\r
+\r
+char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)\r
+{\r
+ /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/\r
+ int dot=0,n;\r
+ char *ip,*outip,*outptr,*fmt;\r
+\r
+ duplicate(inip,ip);\r
+ /* debug printf("(%s,%d) -> ",ip,bitmask); */\r
+\r
+ if(ip && *ip && bitmask>=0 && bitmask<=32)\r
+ string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */\r
+ else \r
+ /* should never exit here */\r
+ return "undefined";\r
+ outptr=outip;\r
+ while(ip && *ip)\r
+ {\r
+ if(*ip=='.')\r
+ {\r
+ if(dot<(bitmask/8-1)) \r
+ {\r
+ if(format_as_chainname)\r
+ *outptr='_';\r
+ else\r
+ *outptr='.';\r
+ outptr++;\r
+ dot++;\r
+ }\r
+ else\r
+ {\r
+ char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/\r
+ if(cutdot)*cutdot='\0';\r
+ if(format_as_chainname)\r
+ fmt="_%d_%d";\r
+ else\r
+ fmt=".%d";\r
+ if(bitmask%8)\r
+ n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));\r
+ else\r
+ n=0;\r
+\r
+ /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */\r
+ sprintf(outptr,fmt,n,bitmask);\r
+ if(!format_as_chainname) while(bitmask<24)\r
+ {\r
+ strcat(outip,".0");\r
+ bitmask+=8;\r
+ }\r
+ /* debug printf("[%s]\n",outip); */\r
+ return outip;\r
+ }\r
+ }\r
+ else \r
+ {\r
+ *outptr=*ip;\r
+ outptr++;\r
+ }\r
+ ip++;\r
+ }\r
+ /*should never exit here*/\r
+ *outptr='\0';\r
+ return outip;\r
+}\r
+\r
+char *hash_id(char *ip,int bitmask)\r
+{ return very_ugly_ipv4_code(ip,bitmask,1); }\r
+\r
+char *subnet_id(char *ip,int bitmask)\r
+{ return very_ugly_ipv4_code(ip,bitmask,0); }\r
+\r
+/* ================= Let's parse configuration file here =================== */\r
+\r
+void reject_config_and_exit(char *filename)\r
+{\r
+ printf("Configuration file %s rejected - abnormal exit.",filename);\r
+ exit(-1);\r
+}\r
+\r
+void get_config(char *config_filename)\r
+{\r
+ char *cnf="mark";\r
+ \r
+ printf("Configured keywords: ");\r
+ parse(config_filename)\r
+ {\r
+ option("keyword",kwd);\r
+ if(kwd)\r
+ {\r
+ printf("%s ",kwd);\r
+\r
+ create(keyword,Keyword);\r
+ keyword->key=kwd;\r
+ keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */\r
+ keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */\r
+ keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
+ keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
+ keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */\r
+ keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */\r
+ keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
+ keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */\r
+/* obsolete:\r
+ keyword->divide_max=0; relative malus: new_ceil=rate+(old_ceil-rate)/divide_max\r
+ keyword->htb_ceil_bonus_divide=0; relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide\r
+*/\r
+ keyword->default_prio=1;\r
+ keyword->html_color="000000";\r
+ keyword->ip_count=0;\r
+ keyword->leaf_discipline="";\r
+\r
+ push(keyword,keywords);\r
+ if(!defaultkeyword) defaultkeyword=keyword;\r
+ keywordcount++;\r
+ \r
+ kwd=NULL;\r
+ }\r
+ else every(keyword,keywords)\r
+ {\r
+ int l=strlen(keyword->key);\r
+\r
+\r
+ if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)\r
+ {\r
+ char *tmptr=_; /* <---- l+1 ----> */\r
+ _+=l+1; /* via-prometheus-asymetry-ratio, etc. */\r
+ ioption("asymetry-ratio",keyword->asymetry_ratio);\r
+ ioption("asymetry-treshold",keyword->asymetry_fixed);\r
+ ioption("magic-relative-limit",keyword->data_limit);\r
+ ioption("magic-relative-prio",keyword->data_prio);\r
+ loption("magic-fixed-limit",keyword->fixed_limit);\r
+ loption("magic-fixed-prio",keyword->fixed_prio);\r
+ ioption("htb-default-prio",keyword->default_prio);\r
+ ioption("htb-rate-bonus",keyword->reserve_min);\r
+ ioption("htb-ceil-malus",keyword->reserve_max);\r
+/* obsolete:\r
+ ioption("htb-ceil-divide",keyword->divide_max);\r
+ ioption("htb-ceil-bonus-divide",keyword->htb_ceil_bonus_divide);\r
+*/\r
+ option("leaf-discipline",keyword->leaf_discipline);\r
+ option("html-color",keyword->html_color);\r
+ _=tmptr;\r
+ \r
+ if(keyword->data_limit || keyword->fixed_limit || \r
+ keyword->data_prio || keyword->fixed_prio)\r
+ use_credit=1;\r
+ \r
+\r
+ }\r
+ }\r
+\r
+ option("tc",tc);\r
+ option("iptables",iptables);\r
+ option("iptables-save",iptablessave); /* new */\r
+ option("iptables-restore",iptablesrestore); /* new */\r
+ option("iptables-file",iptablesfile); /* new */\r
+ option("hosts",hosts);\r
+ option("lan-interface",lan);\r
+ option("wan-interface",wan);\r
+ option("lan-medium",lan_medium);\r
+ option("wan-medium",wan_medium);\r
+ lloption("wan-download",line);\r
+ lloption("wan-upload",up);\r
+ ioption("hall-of-fame-enable",hall_of_fame);\r
+ option("hall-of-fame-title",title);\r
+ option("hall-of-fame-filename",html);\r
+ option("hall-of-fame-preview",preview);\r
+ option("log-filename",cmdlog);\r
+ option("credit-filename",credit);\r
+ ioption("credit-enable",enable_credit);\r
+ option("log-traffic-directory",log_dir);\r
+ option("log-traffic-url-path",log_url);\r
+ option("qos-free-zone",qos_free_zone);\r
+ ioption("qos-free-delay",qos_free_delay);\r
+ ioption("qos-proxy-enable",qos_proxy);\r
+ option("qos-proxy-ip",proxy_ip);\r
+ option("htb-leaf-discipline",qos_leaf);\r
+ ioption("qos-proxy-port",proxy_port);\r
+ ioption("free-rate",free_min);\r
+ ioption("free-ceil",free_max);\r
+ ioption("htb-burst",burst);\r
+ ioption("htb-burst-main",burst_main);\r
+ ioption("htb-burst-group",burst_group);\r
+ ioption("htb-nesting-limit",max_nesting);\r
+ ioption("htb-r2q",htb_r2q);\r
+ ioption("magic-include-upload",include_upload);\r
+ ioption("magic-priorities",magic_priorities);\r
+ ioption("magic-treshold",magic_treshold);\r
+ \r
+ option("filter-type", cnf);\r
+ \r
+/* not yet implemented:\r
+ ioption("magic-fixed-packets",fixed_packets);\r
+ ioption("magic-relative-packets",packet_limit);\r
+*/\r
+ }\r
+ fail\r
+ { \r
+ perror(config_filename);\r
+ puts("Warning - using built-in defaults instead ...");\r
+ }\r
+ done;\r
+ printf("\n");\r
+ \r
+ /*leaf discipline for keywords*/\r
+ every(keyword,keywords)\r
+ {\r
+ if (!strcmpi(keyword->leaf_discipline, "")){\r
+ keyword->leaf_discipline = qos_leaf;\r
+ }\r
+ }\r
+\r
+ if (strcmpi(cnf, "mark")){\r
+ filter_type = 2;\r
+ mark = "CLASSIFY";\r
+ mark_iptables = "CLASSIFY --set-class 1:";\r
+ }else{\r
+ filter_type = 1;\r
+ mark = "MARK";\r
+ mark_iptables = "MARK --set-mark ";\r
+ }\r
+\r
+ /* are supplied values meaningful ?*/\r
+ if(line<=0 || up<=0)\r
+ {\r
+ puts("Illegal value of wan bandwidth: 0 kbps.");\r
+ reject_config_and_exit(config_filename);\r
+ }\r
+}\r
+\r
+/* ===================== traffic analyser - uses iptables ================ */ \r
+\r
+void get_traffic_statistics(void)\r
+{\r
+ char *str,*cmd;\r
+ int downloadflag=0;\r
+\r
+ textfile(Pipe,str) *line,*lines=NULL;\r
+ string(str,STRLEN);\r
+ string(cmd,STRLEN);\r
+\r
+ sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);\r
+ shell(cmd);\r
+ input(str,STRLEN)\r
+ {\r
+ create(line,Pipe);\r
+ line->str=str;\r
+ string(str,STRLEN);\r
+ append(line,lines);\r
+ }\r
+\r
+ every(line,lines)\r
+ {\r
+ int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0; \r
+ unsigned long long traffic=0;\r
+ unsigned long pkts=0;\r
+ char *ipaddr=NULL,*ptr;\r
+ \r
+ /* debug puts(line->str); */\r
+ valid_columns(ptr,line->str,' ',col) \r
+ if(valid) switch(col)\r
+ { \r
+ case 1: if(eq(ptr,"Chain"))\r
+ setchainname=1;\r
+ else if(eq(ptr,"pkts")) \r
+ valid=0;\r
+ else\r
+ sscanf(ptr,"%lu",&pkts); \r
+ break;\r
+ case 2: if(setchainname)\r
+ {\r
+ if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))\r
+ downloadflag=1; \r
+ else \r
+ if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))\r
+ downloadflag=0;\r
+ \r
+ if(eq(ptr,"post_common") || eq(ptr,"forw_common"))\r
+ commonflag=1;\r
+ }\r
+ else\r
+ sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;\r
+ break;\r
+ case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)\r
+ accept=eq(ptr,mark);\r
+ /*if (filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/\r
+ break;\r
+ case 8: if(downloadflag)\r
+ { \r
+ if(strstr(proxy_ip,ptr))proxyflag=1; \r
+ }\r
+ else\r
+ ipaddr=ptr; \r
+ break;\r
+ case 9: if(downloadflag)ipaddr=ptr;break;\r
+ }\r
+ \r
+ if(accept && traffic>0 && ipaddr)\r
+ {\r
+ if(proxyflag)printf("(proxy) ");\r
+ else if(!downloadflag) printf("(upload) ");\r
+ printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);\r
+ find(ip,ips,eq(ip->addr,ipaddr)); \r
+ else \r
+ {\r
+ TheIP();\r
+ ip->addr=ipaddr;\r
+ if(eq(ip->addr,"0.0.0.0/0"))\r
+ {\r
+ ip->name="(unregistered)";\r
+ ip->min=free_min;\r
+ ip->max=ip->desired=free_max;\r
+ }\r
+ }\r
+ \r
+ if(downloadflag)\r
+ {\r
+ if(proxyflag)\r
+ ip->proxy=traffic;\r
+ else\r
+ ip->traffic+=traffic;\r
+ ip->direct=ip->traffic-ip->upload-ip->proxy;\r
+ ip->pktsdown=pkts;\r
+ }\r
+ else\r
+ {\r
+ ip->upload=traffic;\r
+ ip->pktsup=pkts;\r
+ if(include_upload)\r
+ ip->traffic+=traffic;\r
+ else \r
+ if(traffic>ip->traffic)\r
+ ip->traffic=traffic; \r
+ }\r
+ } \r
+ }\r
+\r
+\r
+ free(cmd);\r
+}\r
+ \r
+/* ========== This function executes, logs OR ALSO prints command ========== */\r
+\r
+void safe_run(char *cmd)\r
+{\r
+ if(dry_run) printf("\n=>%s\n",cmd); else system(cmd);\r
+ if(log_file) fprintf(log_file,"%s\n",cmd);\r
+}\r
+\r
+void save_line(char *line)\r
+{\r
+ fprintf(iptables_file,"%s\n",line);\r
+}\r
+\r
+void run_restore(void)\r
+{\r
+ char *restor, *str;\r
+ string(restor,STRLEN);\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);\r
+ /*-----------------------------------------------------------------*/\r
+ \r
+ save_line("COMMIT");\r
+ fclose(iptables_file);\r
+ if(dry_run) {\r
+ parse(iptablesfile)\r
+ {\r
+ str=_;\r
+ printf("%s\n", str);\r
+ }done;\r
+ }else{\r
+ //sprintf(restor,"cat %s",iptablesfile); else \r
+ sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);\r
+ system(restor);\r
+ };\r
+ \r
+ free(restor);\r
+}\r
+\r
+/* == This function strips extra characters after IP address and stores it = */\r
+\r
+void parse_ip(char *str)\r
+{\r
+ char *ptr=str,*ipaddr=NULL,*ipname=NULL;;\r
+ \r
+ while(*ptr && *ptr!=' ' && *ptr!=9)\r
+ ptr++;\r
+ \r
+ *ptr=0;\r
+ ipaddr=str;\r
+ ptr++;\r
+ while(*ptr && (*ptr==' ' || *ptr==9))\r
+ ptr++;\r
+ ipname=ptr; \r
+ while(*ptr && *ptr!=' ' && *ptr!=9)\r
+ ptr++;\r
+ *ptr=0;\r
+\r
+ find(ip,ips,eq(ip->addr,ipaddr)); else TheIP();\r
+ ip->addr=ipaddr;\r
+ ip->name=ipname;\r
+}\r
+\r
+char *parse_datafile_line(char *str)\r
+{\r
+ char *ptr=strchr(str,' ');\r
+\r
+ if(ptr)\r
+ {\r
+ *ptr=0;\r
+ ptr++;\r
+ return ptr;\r
+ } \r
+ else \r
+ return NULL;\r
+}\r
+\r
+/*-----------------------------------------------------------------*/\r
+/* Are you looking for int main (int argc, char **argv) ? :-)) */\r
+/*-----------------------------------------------------------------*/\r
+\r
+program\r
+{\r
+ int i=0;\r
+ FILE *f=NULL;\r
+ char *str, *ptr, *d;\r
+ char *substring;\r
+ int class_count=0,ip_count=0;\r
+ int parent=1;\r
+ int just_flush=0;\r
+ int nodelay=0;\r
+ int just_preview=0; /* preview - generate just stats */\r
+ char *chain_forward, *chain_postrouting;\r
+ char *althosts=NULL;\r
+ \r
+ printf("\n\\r
+Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\\r
+Version %s - Copyright (C)2005-2008 Michael Polak (xChaos)\n\\r
+iptables-restore & burst tunning & classify modification 0.7d by Ludva\n\\r
+Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);\r
+\r
+ /*----- Boring... we have to check command line options first: ----*/\r
+ \r
+ arguments\r
+ {\r
+ argument("-c") { nextargument(config); }\r
+ argument("-h") { nextargument(althosts);}\r
+ argument("-d") { dry_run=1; }\r
+ argument("-f") { just_flush=1; }\r
+ argument("-9") { just_flush=9; }\r
+ argument("-p") { just_preview=1; }\r
+ argument("-n") { nodelay=1; }\r
+ argument("-?") { help(); exit(0); }\r
+ argument("--help") { help(); exit(0); }\r
+ argument("-v") { exit(0); } \r
+ argument("--version") { exit(0); } \r
+ }\r
+\r
+ if(dry_run)\r
+ puts("*** THIS IS JUST DRY RUN ! ***\n");\r
+\r
+ date(d); /* this is typical cll1.h macro */\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing configuration file %s ...\n", config);\r
+ /*-----------------------------------------------------------------*/\r
+ get_config(config);\r
+\r
+ if(althosts) hosts=althosts;\r
+\r
+ if(just_flush<9)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Parsing iptables verbose output ...");\r
+ /*-----------------------------------------------------------------*/\r
+ get_traffic_statistics();\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing class defintion file %s ...\n", hosts);\r
+ /*-----------------------------------------------------------------*/\r
+ int groupidx = FIRSTGROUPID;\r
+ parse(hosts)\r
+ {\r
+ str=_;\r
+\r
+ if(*str<'0' || *str>'9')\r
+ continue;\r
+ \r
+ //Does this IP share QoS class with some other ?\r
+ substring=strstr(str,"sharing-");\r
+ if(substring)\r
+ { \r
+ substring+=8; //"sharing-"\r
+ parse_ip(str);\r
+ ip_count++;\r
+ ip->sharing=substring;\r
+ ip->keyword=defaultkeyword; /* settings for default keyword */\r
+ while(*substring && *substring!='\n')\r
+ substring++;\r
+ *substring=0; \r
+ }\r
+ else\r
+ {\r
+ //Do we have to create new QoS class for this IP ?\r
+\r
+ find(keyword,keywords,(substring=strstr(str,keyword->key)))\r
+ {\r
+ parse_ip(str);\r
+ ip_count++;\r
+ ip->keyword=keyword;\r
+ keyword->ip_count++;\r
+ ip->prio=keyword->default_prio;\r
+ substring+=strlen(keyword->key)+1;\r
+ ptr=substring;\r
+ while(*ptr && *ptr!='-')\r
+ ptr++;\r
+ if(*ptr=='-')\r
+ {\r
+ *ptr=0;\r
+ ip->max=ip->desired=atoi(ptr+1);\r
+ }\r
+ ip->min=atoi(substring);\r
+ if(ip->min<=0)\r
+ {\r
+ puts("Illegal value of minimum bandwidth: 0 kbps.");\r
+ reject_config_and_exit(hosts);\r
+ }\r
+ if(ip->max<=ip->min)\r
+ {\r
+ ip->fixedprio=1;\r
+ ip->max=ip->min+ip->keyword->reserve_min;\r
+ }\r
+ else \r
+ {\r
+ ip->max-=ip->keyword->reserve_max;\r
+\r
+/*\r
+ if(ip->keyword->divide_max>1)\r
+ ip->max=ip->min+(ip->max-ip->min)/ip->keyword->divide_max;\r
+ if(ip->keyword->htb_ceil_bonus_divide>0)\r
+ ip->max+=ip->max/ip->keyword->htb_ceil_bonus_divide;\r
+*/\r
+ if(ip->max<ip->min)\r
+ ip->max=ip->min;\r
+ }\r
+ ip->mark=FIRSTIPCLASS+1+class_count++;\r
+\r
+ find(group,groups,group->min==ip->min) \r
+ { \r
+ group->count++; \r
+ group->desired+=ip->min;\r
+ ip->group = group->id; \r
+ }\r
+ else\r
+ {\r
+ create(group,Group);\r
+ group->min=ip->min;\r
+ group->id = groupidx++;\r
+ ip->group = group->id;\r
+\r
+ if(group->min<8) group->min=8;\r
+ /* Warning - this is maybe because of primitive tc namespace, can be fixed */\r
+ /* it is because class IDs are derived from min. bandwidth. - xCh */\r
+ //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;\r
+ \r
+ group->count=1;\r
+ group->desired=ip->min; \r
+ insert(group,groups,desc_order_by,min);\r
+ }\r
+ }//endif keyword-\r
+ }//endif sharing-\r
+ }\r
+ fail\r
+ {\r
+ perror(hosts);\r
+ exit(-1);\r
+ }\r
+ done;\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ /* cll1.h - let's allocate brand new character buffer... */\r
+ /*-----------------------------------------------------------------*/\r
+ string(str,STRLEN); \r
+\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Resolving shared connections ...");\r
+ /*-----------------------------------------------------------------*/\r
+ search(ip,ips,ip->sharing)\r
+ {\r
+ search(sharedip,ips,eq(sharedip->name,ip->sharing))\r
+ {\r
+ sharedip->traffic+=ip->traffic;\r
+ ip->traffic=0;\r
+ ip->mark=sharedip->mark; \r
+ break;\r
+ }\r
+ if(!sharedip)\r
+ printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);\r
+ }\r
+\r
+ if(enable_credit && just_flush<9)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing credit file %s ...\n", credit);\r
+ /*-----------------------------------------------------------------*/\r
+ parse(credit)\r
+ {\r
+ ptr=parse_datafile_line(_);\r
+ if(ptr)\r
+ {\r
+ find(ip,ips,eq(ip->addr,_))\r
+ sscanf(ptr,"%Lu",&(ip->credit));\r
+ }\r
+ }\r
+ done;\r
+ }\r
+\r
+ if(!just_preview)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Initializing iptables and tc classes ...");\r
+ /*-----------------------------------------------------------------*/\r
+ \r
+ iptables_file=fopen(iptablesfile,"w");\r
+ if (iptables_file == NULL) {\r
+ puts("Cannot open iptablesfile!");\r
+ exit(-1);\r
+ }\r
+ \r
+ log_file=fopen(cmdlog,"w");\r
+ if (log_file == NULL) {\r
+ puts("Cannot open logfile!");\r
+ exit(-1);\r
+ }\r
+ \r
+ save_line(iptablespreamble);\r
+ run_restore();\r
+ \r
+ sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);\r
+ safe_run(str);\r
+ \r
+ iptables_file=fopen(iptablesfile,"w");\r
+ save_line(iptablespreamble);\r
+\r
+ if(qos_free_zone && *qos_free_zone!='0')\r
+ {\r
+ char *chain;\r
+ \r
+ sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);\r
+ save_line(str);\r
+ \r
+ if(qos_proxy)\r
+ {\r
+ save_line(":post_noproxy - [0:0]");\r
+ sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);\r
+ save_line(str); \r
+ sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);\r
+ save_line(str); \r
+ sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);\r
+ save_line(str); \r
+\r
+ chain="post_noproxy"; \r
+ }\r
+ else\r
+ chain="POSTROUTING";\r
+ \r
+ sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);\r
+ save_line(str);\r
+ }\r
+ \r
+ if(ip_count>idxtable_treshold1 && !just_flush)\r
+ {\r
+ int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */\r
+ char *subnet, *buf;\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ save_line(":post_common - [0:0]");\r
+ save_line(":forw_common - [0:0]");\r
+\r
+ search(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))\r
+ {\r
+ buf=hash_id(ip->addr,bitmask);\r
+ find(idx,idxs,eq(idx->id,buf))\r
+ idx->children++;\r
+ else\r
+ {\r
+ create(idx,Index);\r
+ idx->addr=ip->addr;\r
+ idx->id=buf;\r
+ idx->bitmask=bitmask;\r
+ idx->parent=NULL;\r
+ idx->children=0;\r
+ idxcount++;\r
+ push(idx,idxs);\r
+ }\r
+ }\r
+\r
+ /* brutal perfomance optimalization */\r
+ while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)\r
+ {\r
+ bitmask-=idxtable_bitmask2;\r
+ idxcount=0;\r
+ search(idx,idxs,idx->parent==NULL)\r
+ {\r
+ buf=hash_id(idx->addr,bitmask);\r
+ find(metaindex,idxs,eq(metaindex->id,buf))\r
+ metaindex->children++; \r
+ else\r
+ {\r
+ create(metaindex,Index);\r
+ metaindex->addr=idx->addr;\r
+ metaindex->id=buf;\r
+ metaindex->bitmask=bitmask;\r
+ metaindex->parent=NULL;\r
+ metaindex->children=0;\r
+ idxcount++;\r
+ push(metaindex,idxs);\r
+ }\r
+ idx->parent=metaindex;\r
+ }\r
+ }\r
+\r
+ /* this should slightly optimize throughout ... */\r
+ sort(idx,idxs,desc_order_by,children);\r
+ sort(idx,idxs,order_by,bitmask);\r
+\r
+ i=0;\r
+ every(idx,idxs)\r
+ {\r
+ subnet=subnet_id(idx->addr,idx->bitmask);\r
+ printf("%d: %s/%d\n",++i,subnet,idx->bitmask);\r
+ \r
+ sprintf(str,":post_%s - [0:0]", idx->id);\r
+ save_line(str);\r
+\r
+ sprintf(str,":forw_%s - [0:0]", idx->id);\r
+ save_line(str);\r
+\r
+ if(idx->parent)\r
+ {\r
+ string(buf,strlen(idx->parent->id)+6);\r
+ sprintf(buf,"post_%s",idx->parent->id);\r
+ }\r
+ else\r
+ buf="POSTROUTING";\r
+\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);\r
+ save_line(str);\r
+\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);\r
+ save_line(str);\r
+\r
+ if(idx->parent)\r
+ {\r
+ string(buf,strlen(idx->parent->id)+6);\r
+ sprintf(buf,"forw_%s",idx->parent->id);\r
+ }\r
+ else\r
+ buf="FORWARD";\r
+\r
+ sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);\r
+ save_line(str);\r
+\r
+ sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);\r
+ save_line(str);\r
+ }\r
+ printf("Total indexed iptables chains created: %d\n", i);\r
+\r
+ sprintf(str,"-A FORWARD -o %s -j forw_common", wan);\r
+ save_line(str);\r
+ \r
+ sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);\r
+ save_line(str);\r
+ }\r
+ \r
+ }\r
+\r
+ if(just_flush)\r
+ {\r
+ fclose(iptables_file);\r
+ if (log_file) fclose(log_file);\r
+ puts("Just flushed iptables and tc classes - now exiting ...");\r
+ exit(0);\r
+ }\r
+\r
+ if(!just_preview)\r
+ {\r
+ if(!dry_run && !nodelay && qos_free_delay)\r
+ {\r
+ printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);\r
+ sleep(qos_free_delay);\r
+ }\r
+\r
+ sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,lan,htb_r2q);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio 0",tc,lan,lan_medium,lan_medium,burst_main);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio 0",tc,lan,line,line,burst_main);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio 0",tc,wan,wan_medium,wan_medium,burst_main);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio 0",tc,wan,up,up,burst_main);\r
+ safe_run(str);\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Locating suckers and generating root classes ...");\r
+ /*-----------------------------------------------------------------*/\r
+ sort(ip,ips,desc_order_by,traffic);\r
+ \r
+\r
+ /*-----------------------------------------------------------------*/\r
+ /* sub-scope - local variables */ \r
+ {\r
+ long long int rate=line;\r
+ long long int max=line;\r
+ int group_count=0;\r
+ FILE *credit_file=NULL;\r
+ \r
+ if(!just_preview && !dry_run && enable_credit) credit_file=fopen(credit,"w");\r
+ \r
+ every(group,groups)\r
+ {\r
+ if(!just_preview)\r
+ {\r
+ \r
+ //download\r
+ sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio 1 #down desired %d", \r
+ tc, lan, parent, group->id, rate, max, burst_group, group->desired);\r
+ safe_run(str);\r
+ \r
+ //upload\r
+ sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio 1 #up desired %d", \r
+ tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, group->desired);\r
+ safe_run(str);\r
+ }\r
+ \r
+ if(group_count++<max_nesting) parent=group->id;\r
+ \r
+ rate-=digital_divide*group->min;\r
+ if(rate<group->min)rate=group->min;\r
+ \r
+ /*shaping of aggresive downloaders, with credit file support */\r
+ if(use_credit)\r
+ {\r
+ int group_rate=group->min, priority_sequence=magic_priorities+1;\r
+ \r
+ search(ip, ips, ip->min==group->min && ip->max>ip->min)\r
+ {\r
+ if( ip->keyword->data_limit && !ip->fixedprio &&\r
+ ip->traffic>ip->credit+\r
+ (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)) )\r
+ {\r
+ if(group_rate<ip->max) ip->max=group_rate;\r
+ group_rate+=magic_treshold;\r
+ ip->prio=magic_priorities+2;\r
+ if(ip->prio<3) ip->prio=3;\r
+ }\r
+ else\r
+ {\r
+ if( ip->keyword->data_prio && !ip->fixedprio &&\r
+ ip->traffic>ip->credit+\r
+ (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20)) )\r
+ {\r
+ ip->prio=priority_sequence--;\r
+ if(ip->prio<2) ip->prio=2;\r
+ }\r
+ \r
+ if(credit_file)\r
+ {\r
+ unsigned long long lcredit=0;\r
+ \r
+ if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic) \r
+ lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;\r
+ fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);\r
+ }\r
+ }\r
+ }\r
+ \r
+ }\r
+ }\r
+ if(credit_file)fclose(credit_file);\r
+ }\r
+\r
+ if(just_preview)\r
+ {\r
+ f=fopen(preview,"w");\r
+ ptr=preview; \r
+ }\r
+ else if(!dry_run && !just_flush)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Writing data transfer database ...\n");\r
+ /*-----------------------------------------------------------------*/\r
+ f=fopen("/var/run/prometheus.previous","w");\r
+ if(f)\r
+ {\r
+ search(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)\r
+ fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);\r
+ fclose(f);\r
+ }\r
+\r
+ f=fopen(html,"w");\r
+ ptr=html;\r
+ }\r
+\r
+ if(f)\r
+ {\r
+ int total=0;\r
+ int count=1;\r
+ i=0;\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Sorting data and generating statistics page %s ...\n",ptr);\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);\r
+ fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);\r
+ fputs("</tr>\n",f);\r
+ every(group,groups) \r
+ { \r
+#ifdef DEBUG\r
+ printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);\r
+#endif\r
+ fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);\r
+ fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);\r
+\r
+ every(keyword,keywords)\r
+ fprintf(f,"<td align=\"right\"><font color=\"#%s\">%d M</font></td>",keyword->html_color,group->min*keyword->data_limit); \r
+ \r
+ i+=group->desired; \r
+ total+=group->count;\r
+ count++; \r
+ }\r
+#ifdef DEBUG\r
+ printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);\r
+#endif\r
+ fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %Ld k</td>",line);\r
+ fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);\r
+\r
+ every(keyword,keywords)\r
+ fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count); \r
+\r
+ fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));\r
+ fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);\r
+\r
+ fputs("</table>\n",f);\r
+ }\r
+ else if(!dry_run && !just_flush) \r
+ perror(html);\r
+\r
+ i=1;\r
+ if(f)\r
+ {\r
+ unsigned long long total=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;\r
+ int active_classes=0;\r
+ int colspan;\r
+ FILE *iplog;\r
+ struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;\r
+\r
+ if(qos_proxy)\r
+ colspan=12;\r
+ else \r
+ colspan=11;\r
+ \r
+ fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);\r
+ fprintf(f," (%s)</th></tr>\n", d);\r
+ fputs("<tr><td align=\"right\">#</td><td>hostname</td>\\r
+ <td align=\"right\">credit</td>\\r
+ <td align=\"right\">limit</td>\\r
+ <td align=\"right\">total</td>\\r
+ <td align=\"right\">direct</td>\n",f);\r
+ if(qos_proxy)\r
+ fputs("<td align=\"right\">proxy</td>\n",f);\r
+ fputs("<td align=\"right\">upload</td>\\r
+ <td align=\"right\">minimum</td>\\r
+ <td align=\"right\">desired</td>\\r
+ <td align=\"right\">maximum</td>\\r
+ <td>prio</td></tr>\n",f); \r
+\r
+ every(ip,ips)\r
+ {\r
+ char *f1="", *f2="";\r
+ if(ip->max<ip->desired)\r
+ {\r
+ f1="<font color=\"red\">";\r
+ f2="</font>";\r
+ }\r
+ else if(ip->prio>1)\r
+ {\r
+ f1="<font color=\"brown\">";\r
+ f2="</font>";\r
+ }\r
+\r
+#ifdef DEBUG\r
+ printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max); \r
+#endif\r
+ fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a></td><td align=\"right\">%Lu M</td>\n",\r
+ ip->name, i, log_url, ip->name, ip->name, ip->credit);\r
+ fprintf(f,"<td align=\"right\"><font color=\"#%s\">%Lu M</font></td>",ip->keyword->html_color,ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));\r
+ fprintf(f,"<td align=\"right\">%s%Lu M%s</td><td align=\"right\">%Lu M</td>\n", f1, ip->traffic, f2, ip->direct);\r
+ if(qos_proxy)\r
+ fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);\r
+ fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->upload);\r
+ fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);\r
+ total+=ip->traffic;\r
+ total_direct+=ip->direct;\r
+ total_proxy+=ip->proxy;\r
+ total_upload+=ip->upload;\r
+ if(ip->traffic>0)\r
+ {\r
+ active_classes++;\r
+ tmp_sum+=ip->traffic;\r
+ create(sum,Sum);\r
+ sum->l=tmp_sum;\r
+ sum->i=active_classes;\r
+ insert(sum,sums,order_by,i);\r
+ }\r
+ \r
+ i++;\r
+ \r
+ if(!just_preview)\r
+ {\r
+ sprintf(str,"%s%s.log",log_dir,ip->name);\r
+ iplog=fopen(str,"a");\r
+ if(iplog)\r
+ {\r
+ fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%s",time(NULL),ip->name,ip->traffic, ip->direct, ip->proxy, ip->upload,d);\r
+ fclose(iplog);\r
+ }\r
+ }\r
+\r
+ }\r
+ fprintf(f,"<tr><th colspan=\"4 \"align=\"left\">SUMMARY:</td>");\r
+ fprintf(f,"<th align=\"right\">%Lu M</th>\\r
+ <th align=\"right\">%Lu M</th>\n", total, total_direct);\r
+ if(qos_proxy)\r
+ fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);\r
+ fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);\r
+ fputs("<td colspan=\"4\"></td></th>\n</table>\n",f);\r
+\r
+ if(active_classes>10)\r