intronet.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _INTRO_NET_H_
#define _INTRO_NET_H_

#include "lixprocess.h"
#include "winprocess.h"

#define INTRONET_MIN_BUFFER_SIZE       (sizeof("[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]"))

typedef union _INTRONET_ADDRESS
{
    BYTE                Ipv6[16];   
    BYTE                Ipv4[4];    
} INTRONET_ADDRESS;

typedef WORD INTRONET_PORT;

typedef struct _INTRONET_ENDPOINT
{
    INTRO_NET_AF            AddressFamily;

    INTRO_NET_STATE         State;

    INTRONET_ADDRESS        LocalAddress;
    INTRONET_PORT           LocalPort;

    INTRONET_ADDRESS        RemoteAddress;
    INTRONET_PORT           RemotePort;

    union
    {
        LIX_TASK_OBJECT     *OwnerTask;
        WIN_PROCESS_OBJECT  *OwnerProcess;
    };

    QWORD                   Endpoint;
} INTRONET_ENDPOINT;


//
// IntNetStateToString
//
__forceinline const char *
IntNetStateToString(
    _In_ INTRO_NET_STATE State
    )
{
    switch (State)
    {
    case introNetStateClosed:
        return "CLOSED";
    case introNetStateListening:
        return "LISTENING";
    case introNetStateSynSent:
        return "SYN-SENT";
    case introNetStateSynRecv:
        return "SYN-RECV";
    case introNetStateEstablished:
        return "ESTABLISHED";
    case introNetStateFinWait:
        return "FIN-WAIT";
    case introNetStateFinWait2:
        return "FIN-WAIT2";
    case introNetStateCloseWait:
        return "CLOSE-WAIT";
    case introNetStateClosing:
        return "CLOSING";
    case introNetStateLastAck:
        return "LAST-ACK";
    case introNetStateTimeWait:
        return "TIME-WAIT";
    case introNetStateDeleteTcb:
        return "DELETE-TCB";
    default:
        return "UNKNOWN";
    }
}

INTRO_NET_STATE
IntNetConvertState(
    _In_ const DWORD State
    );

_Success_(return > 0)
DWORD
IntNetAddrToStr(
    _In_ const INTRO_NET_AF Family,
    _In_ const INTRONET_ADDRESS *Address,
    _Out_writes_(INTRONET_MIN_BUFFER_SIZE) CHAR *String
    );

#endif // _INTRO_NET_H