1/* Define to empty if the keyword does not work. */ 2#undef const 3 4/* Define as __inline if that's what the C compiler calls it. */ 5#undef inline 6 7/* Define as the return type of signal handlers (int or void). */ 8#undef RETSIGTYPE 9 10/* Define if you have the ANSI C header files. */ 11#undef STDC_HEADERS 12 13/* Define if you have the pcap library (-lpcap). */ 14#undef HAVE_LIBPCAP 15 16#ifndef HAVE_LIBPCAP 17#error Get libpcap from ftp.ee.lbl.gov 18#endif 19 20 21/* End Autoconf Section */ 22 23/* 24 * Set this to the rate of echo reply packets required to start logging 25 * pps = packets/sec, both pps & kbps must be met to begin logging 26 * kbps = kilobytes/sec not kilobits. If you want kilobits get a Cisco. :P 27 */ 28#define THRESHOLD_PPS 100 29#define THRESHOLD_KBPS 50 30 31/* 32 * This is the maximium number of broadcasts that will be logged during any 33 * one attack. A limit is required to prevent potential denial of service 34 * attacks against the logger. The memory required for the entire list is 35 * allocated once up front. During a real smurf attack you are never going 36 * to go over a reasonable number of broadcasts (such as 500). The memory 37 * required is 4 bytes * MAX_LOGABLE, so if you use the default of 500 the 38 * memory requirement is 2k. Under the old system memory usage could go as 39 * high as 4*(256*256*256) bytes or 64MB. 40 */ 41#define MAX_LOGABLE 500 42 43/* 44 * 45 */ 46#define RESET_SECONDS 5 47 48/* Logging Options 49 * 50 * 0 = Log broadcasts only (why?) 51 * 1 = Log broadcasts + attack begin/end. (for slow systems) 52 * 2 = Log broadcasts + attack begin/end + max kbps/pps reached 53 * 3 = Log broadcasts + attack begin/end + max kbps/pps + kbps/pps every sec 54 */ 55#define LOGGING_OPTIONS 2 56