Statistics.cpp

Go to the documentation of this file.

#include "bsc/stats/Statistics.hpp"
#include <chrono>
#include <ctime>
#include <iomanip>
#include <sstream>
 
namespace bsc::stats {
namespace {
std::string now_string() {
    auto now = std::chrono::system_clock::now();
    auto t = std::chrono::system_clock::to_time_t(now);
    std::tm tm{}; gmtime_r(&t, &tm);
    std::ostringstream oss; oss << std::put_time(&tm, "%FT%TZ");
    return oss.str();
}
}
 
Statistics::Statistics(std::size_t max_events) : max_events_(max_events) {}
 
void Statistics::record(const bsc::model::Connection& conn, const std::string& action, const std::string& rule_name) {
    std::lock_guard lock(mutex_);
    ++connections_;
    ++by_proto_[conn.protocol];
    ++by_address_[conn.dst_ip];
    if (!conn.dst_host.empty()) ++by_host_[conn.dst_host];
    ++by_port_[std::to_string(conn.dst_port)];
    ++by_uid_[std::to_string(conn.user_id)];
    if (!conn.process_path.empty()) ++by_executable_[conn.process_path];
    if (action == "allow") ++accepted_;
    else if (action == "deny") ++dropped_;
    else ++ignored_;
    if (!rule_name.empty()) { ++rules_; ++rule_hits_; }
    else ++rule_misses_;
    auto now = std::chrono::system_clock::now();
    events_.push_front(Event{now_string(), conn, rule_name, std::chrono::duration_cast<std::chrono::nanoseconds>(now.time_since_epoch()).count()});
    while (events_.size() > max_events_) events_.pop_back();
}
 
std::uint64_t Statistics::connections() const { std::lock_guard lock(mutex_); return connections_; }
std::uint64_t Statistics::accepted() const { std::lock_guard lock(mutex_); return accepted_; }
std::uint64_t Statistics::dropped() const { std::lock_guard lock(mutex_); return dropped_; }
std::uint64_t Statistics::ignored() const { std::lock_guard lock(mutex_); return ignored_; }
std::uint64_t Statistics::rules() const { std::lock_guard lock(mutex_); return rules_; }
void Statistics::note_dns_response() { std::lock_guard lock(mutex_); ++dns_responses_; }
std::uint64_t Statistics::dns_responses() const { std::lock_guard lock(mutex_); return dns_responses_; }
std::uint64_t Statistics::rule_hits() const { std::lock_guard lock(mutex_); return rule_hits_; }
std::uint64_t Statistics::rule_misses() const { std::lock_guard lock(mutex_); return rule_misses_; }
std::map<std::string, std::uint64_t> Statistics::by_proto() const { std::lock_guard lock(mutex_); return by_proto_; }
std::map<std::string, std::uint64_t> Statistics::by_address() const { std::lock_guard lock(mutex_); return by_address_; }
std::map<std::string, std::uint64_t> Statistics::by_host() const { std::lock_guard lock(mutex_); return by_host_; }
std::map<std::string, std::uint64_t> Statistics::by_port() const { std::lock_guard lock(mutex_); return by_port_; }
std::map<std::string, std::uint64_t> Statistics::by_uid() const { std::lock_guard lock(mutex_); return by_uid_; }
std::map<std::string, std::uint64_t> Statistics::by_executable() const { std::lock_guard lock(mutex_); return by_executable_; }
std::deque<Event> Statistics::events() const { std::lock_guard lock(mutex_); return events_; }
 
} // namespace bsc::stats