module Aoandon::DynamicRule::Less1024
Constants
- MESSAGE
- PROTO_TCP
- PROTO_UDP
- WELL_KNOWN_PORTS
Public Class Methods
control?(packet)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 11 def self.control?(packet) (tcp?(packet) || (udp?(packet) && different_ports?(packet.sport, packet.dport))) && less_1024?(packet.sport) && less_1024?(packet.dport) end
different_ports?(src_port, dst_port)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 20 def self.different_ports?(src_port, dst_port) src_port != dst_port end
less_1024?(port)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 24 def self.less_1024?(port) WELL_KNOWN_PORTS.include?(port) end
logging?(_packet)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 16 def self.logging?(_packet) true end
tcp?(packet)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 28 def self.tcp?(packet) packet.ip_proto == PROTO_TCP end
udp?(packet)
click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 32 def self.udp?(packet) packet.ip_proto == PROTO_UDP end