module Aoandon::DynamicRule::Less1024

Constants

MESSAGE
PROTO_TCP
PROTO_UDP
WELL_KNOWN_PORTS

Public Class Methods

control?(packet) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 11
def self.control?(packet)
  (tcp?(packet) || (udp?(packet) && different_ports?(packet.sport, packet.dport))) &&
    less_1024?(packet.sport) && less_1024?(packet.dport)
end
different_ports?(src_port, dst_port) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 20
def self.different_ports?(src_port, dst_port)
  src_port != dst_port
end
less_1024?(port) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 24
def self.less_1024?(port)
  WELL_KNOWN_PORTS.include?(port)
end
logging?(_packet) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 16
def self.logging?(_packet)
  true
end
tcp?(packet) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 28
def self.tcp?(packet)
  packet.ip_proto == PROTO_TCP
end
udp?(packet) click to toggle source
# File lib/aoandon/dynamic_rule/less1024.rb, line 32
def self.udp?(packet)
  packet.ip_proto == PROTO_UDP
end