iptrap 1.0.9

A fast, stateless TCP sinkhole
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use std::hash::{Hash, Hasher};

use rand;
use siphasher;

use self::siphasher::sip::SipHasher13;

#[derive(Copy, Clone)]
pub struct SipHashKey {
    k1: u64,
    k2: u64,
}

impl Default for SipHashKey {
    fn default() -> Self {
        Self::new()
    }
}

impl SipHashKey {
    pub fn new() -> SipHashKey {
        SipHashKey {
            k1: rand::random(),
            k2: rand::random(),
        }
    }
}

#[derive(Hash)]
struct CookieInput {
    ip_src: [u8; 4],
    ip_dst: [u8; 4],
    th_sport: u16,
    th_dport: u16,
    uts: u64,
}

#[allow(unused_must_use)]
pub fn tcp(
    ip_src: [u8; 4],
    ip_dst: [u8; 4],
    th_sport: u16,
    th_dport: u16,
    sk: SipHashKey,
    uts: u64,
) -> u32 {
    let input = CookieInput {
        ip_src,
        ip_dst,
        th_sport,
        th_dport,
        uts,
    };
    let sip = &mut SipHasher13::new_with_keys(sk.k1, sk.k2);
    input.hash(sip);
    sip.finish() as u32
}