java.lang.Object
net.i2p.router.web.helpers.SybilRenderer
public class SybilRendererextends Object
Renders Sybil attack analysis and detection information for debugging. Displays router relationships, clustering analysis, and potential attack patterns. Provides visualization of network topology and security metrics. Adapted from NetDbRenderer; may become periodic router monitor.

  • Field Details

    • _context

      private final RouterContext _context
      The router context.

    • _log

      private final Log _log
      Logger for the sybil page.

    • TWO_DECIMALS

      private static final DecimalFormat TWO_DECIMALS
      Formatter for numbers with two decimals.

    • PAIRMAX

      private static final int PAIRMAX
      Maximum pairs counted per router.
      See Also:

    • MAX

      private static final int MAX
      Maximum points counted per router.
      See Also:

    • MIN_CLOSE

      private static final double MIN_CLOSE
      Minimum closeness counted as a match.
      See Also:

    • MIN_DISPLAY_POINTS

      private static final double MIN_DISPLAY_POINTS
      Minimum points shown on the page.
      See Also:

    • HOURS

      private static final int[] HOURS
      Hour ranges offered on the page.

    • DAYS

      private static final int[] DAYS
      Day ranges offered on the page.

  • Constructor Details

    • SybilRenderer

      public SybilRenderer(RouterContext ctx)
      Renders the Sybil analysis tables for the console.
      Parameters:
      ctx - the router context supplying the analysis data and logging

  • Method Details

    • fmt

      private static String fmt(double val)
      Formats a number with two decimals.
      Parameters:
      val - the number to format
      Returns:
      the formatted text

    • getNetDbSummary

      public String getNetDbSummary(Writer out, String nonce, int mode, long date) throws IOException
      Entry point.
      Parameters:
      out - the writer receiving the rendered HTML
      nonce - the CSP nonce the emitted markup references
      mode - what tab to show
      date - only for mode = 12
      Returns:
      the net db summary
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderRouterInfoHTML

      private void renderRouterInfoHTML(Writer out, String nonce, int mode, long date) throws IOException
      The whole thing.
      Parameters:
      out - the writer receiving the rendered HTML
      nonce - the CSP nonce the emitted markup references
      mode - what tab to show
      date - only for mode = 12
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderOverview

      private void renderOverview(Writer out, StringBuilder buf, String nonce, Analysis analysis) throws IOException
      Render the sybil analysis overview section.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      nonce - the CSP nonce the emitted markup references
      analysis - supplies the persister the stored analyses are loaded from
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderRunForm

      private static void renderRunForm(Writer out, StringBuilder buf, String nonce) throws IOException
      Render the form to start a new sybil analysis scan.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      nonce - the CSP nonce the emitted markup references
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderBackgroundForm

      private void renderBackgroundForm(Writer out, StringBuilder buf, String nonce) throws IOException
      Render the configuration form for background sybil analysis.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      nonce - the CSP nonce the emitted markup references
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderFFSummary

      private void renderFFSummary(Writer out, StringBuilder buf, List<RouterInfo> ris, double avgMinDist) throws IOException
      Render the floodfill summary section.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      ris - the known floodfills, counted but not listed here
      avgMinDist - the average closest-floodfill hash distance
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderFamilySummary

      private void renderFamilySummary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the family group summary section.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the family groups
      ris - the routers to group by family tag
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPUsSummary

      private void renderIPUsSummary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the IP group summary for our own IP address.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - groups the routers sharing our IP or prefix
      ris - the routers to test against our addresses
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIP32Summary

      private void renderIP32Summary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the /32 IP group summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the groups of routers sharing one IPv4
      ris - the routers to group by full IPv4 address
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIP24Summary

      private void renderIP24Summary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the /24 IP group summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the groups sharing an IPv4 /24
      ris - the routers to group by IPv4 /24 prefix
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIP16Summary

      private void renderIP16Summary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the /16 IP group summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the groups sharing an IPv4 /16
      ris - the routers to group by IPv4 /16 prefix
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIP64Summary

      private void renderIP64Summary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the /64 IPv6 group summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the groups sharing an IPv6 /64
      ris - the routers to group by IPv6 /64 prefix
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIP48Summary

      private void renderIP48Summary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the /48 IPv6 group summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the groups sharing an IPv6 /48
      ris - the routers to group by IPv6 /48 prefix
      points - updated with threat points for grouped routers
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderPairSummary

      private void renderPairSummary(Writer out, StringBuilder buf, Analysis analysis, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the pairwise distance summary.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - computes the closest floodfill pairs
      ris - the floodfills whose pairwise hash distances are measured
      points - updated with threat points for close pairs
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderCloseSummary

      private void renderCloseSummary(Writer out, StringBuilder buf, Analysis analysis, double avgMinDist, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the closest floodfills to our routing key.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - scores the floodfills close to our routing key
      avgMinDist - the average minimum floodfill hash distance
      ris - the floodfills, sorted in place by distance to our key
      points - updated with threat points for close floodfills
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderCloseTmrwSummary

      private void renderCloseTmrwSummary(Writer out, StringBuilder buf, Analysis analysis, Hash us, double avgMinDist, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the closest floodfills to tomorrow's routing key.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - scores the floodfills close to tomorrow's key
      us - our router hash, the base tomorrow's routing key is derived from
      avgMinDist - the average minimum floodfill hash distance
      ris - the floodfills, sorted in place by distance to that key
      points - updated with threat points for close floodfills
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderDHTSummary

      private void renderDHTSummary(Writer out, StringBuilder buf, Analysis analysis, Hash us, double avgMinDist, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the closest floodfills to our router hash.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - scores the floodfills close to our router hash
      us - our router hash, the reference the distances are measured from
      avgMinDist - the average minimum floodfill hash distance
      ris - the floodfills, sorted in place by distance to our hash
      points - updated with threat points for close floodfills
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderDestSummary

      private void renderDestSummary(Writer out, StringBuilder buf, Analysis analysis, double avgMinDist, List<RouterInfo> ris, Map<Hash,Points> points) throws IOException
      Render the closest floodfills to our published destinations.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      analysis - scores the floodfills close to each destination key
      avgMinDist - the average minimum floodfill hash distance
      ris - the floodfills, re-sorted in place for each destination key
      points - updated with threat points for close floodfills
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderThreatsHTML

      private void renderThreatsHTML(Writer out, StringBuilder buf, long date, Map<Hash,Points> points) throws IOException
      Render the threats analysis HTML section.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      date - ms since the epoch of the analysis being displayed
      points - threat points per router hash, only those at or above the display threshold are rendered
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderPairDistance

      private void renderPairDistance(Writer out, StringBuilder buf, List<Pair> pairs, double avg) throws IOException
      Render the floodfill pairwise distance table.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      pairs - the closest floodfill pairs, sorted by ascending hash distance and capped at PAIRMAX; the loop breaks once MIN_CLOSE is passed
      avg - the average pairwise floodfill hash distance, shown in the header
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroupsUs

      private void renderIPGroupsUs(Writer out, StringBuilder buf, List<RouterInfo> ri32, List<RouterInfo> ri24, List<RouterInfo> ri16, List<RouterInfo> ri64, List<RouterInfo> ri48) throws IOException
      Render the HTML for IP groups matching our own IP address.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      ri32 - routers sharing our exact IPv4 address
      ri24 - routers sharing our IPv4 /24
      ri16 - routers sharing our IPv4 /16
      ri64 - routers sharing our IPv6 /64
      ri48 - routers sharing our IPv6 /48
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroups32

      private void renderIPGroups32(Writer out, StringBuilder buf, Map<Integer, List<RouterInfo>> map) throws IOException
      Render the HTML for /32 IP groups (same IPv4 address).
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - groups of 2 or more routers sharing one IPv4, keyed by that address
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroups24

      private void renderIPGroups24(Writer out, StringBuilder buf, Map<Integer, List<RouterInfo>> map) throws IOException
      Render the HTML for /24 IP groups.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - groups of 2 or more routers sharing an IPv4 /24, keyed by the prefix
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroups16

      private void renderIPGroups16(Writer out, StringBuilder buf, Map<Integer, List<RouterInfo>> map) throws IOException
      Render the HTML for /16 IP groups.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - groups of 4 or more routers sharing an IPv4 /16, keyed by the prefix
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroups64

      private void renderIPGroups64(Writer out, StringBuilder buf, Map<Long, List<RouterInfo>> map) throws IOException
      Render the HTML for /64 IPv6 groups.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - groups of 2 or more routers sharing an IPv6 /64, keyed by the prefix
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroups48

      private void renderIPGroups48(Writer out, StringBuilder buf, Map<Long, List<RouterInfo>> map) throws IOException
      Render the HTML for /48 IPv6 groups.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - groups of 4 or more routers sharing an IPv6 /48, keyed by the prefix
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderIPGroupsFamily

      private void renderIPGroupsFamily(Writer out, StringBuilder buf, Map<String, List<RouterInfo>> map) throws IOException
      Render the HTML for router family groups.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      map - routers grouped by family tag, single-member families not displayed
      Throws:
      IOException - if the HTML cannot be written to the output

    • renderRouterInfoHTML

      private void renderRouterInfoHTML(Writer out, StringBuilder buf, Hash us, double avgMinDist, List<RouterInfo> ris) throws IOException
      Render routers closer than MIN_CLOSE up to MAX routers.
      Parameters:
      out - the writer receiving the rendered HTML
      buf - the scratch buffer the markup is built in
      us - the reference hash distances are measured from, or null to omit the distance row
      avgMinDist - the average minimum floodfill hash distance, the threshold the sybil warnings compare against
      ris - the routers to render, sorted closest first
      Throws:
      IOException - if the HTML cannot be written to the output

    • writeBuf

      private static void writeBuf(Writer out, StringBuilder buf) throws IOException
      Writes the buffer out and clears it.
      Parameters:
      out - where the text is written
      buf - the buffer to write
      Throws:
      IOException - if the write fails

    • getTranslatedCountry

      private String getTranslatedCountry(String code)
      Countries now in a separate bundle.
      Parameters:
      code - two-letter country code
      Returns:
      the translated country

    • renderRouterInfo

      private double renderRouterInfo(StringBuilder buf, RouterInfo info, Hash us, boolean isUs, boolean full)
      Be careful to use stripHTML for any displayed routerInfo data to prevent vulnerabilities.
      Parameters:
      buf - the scratch buffer the router-info table markup is built in
      info - the router to render
      us - ROUTING KEY or null
      isUs - true to render this as our own router info, omitting the family, country and profile-history links
      full - unused; vestigial, every caller passes false and the body never reads it
      Returns:
      the log2 hash distance to us, or 0 if us is null

    • renderSybilHTML

      public static void renderSybilHTML(Writer out, RouterContext ctx, List<Hash> sybils, String victim) throws IOException
      Called from NetDbRenderer.
      Parameters:
      out - the writer receiving the rendered HTML
      ctx - the router context supplying the key generator and clock
      sybils - the hashes to compare, sorted in place by XOR distance
      victim - the base64 hash to measure from instead of our own, or null
      Throws:
      IOException - if the HTML cannot be written to the output

    • writeDistance

      private static void writeDistance(Writer out, BigInteger dist) throws IOException
      Write a network distance in human units.
      Parameters:
      out - the writer receiving the formatted distance
      dist - the raw XOR hash distance, written as log2 and highlighted in red below MIN_CLOSE
      Throws:
      IOException - if the text cannot be written to the output

    • _t

      private String _t(String s)
      Translate a string.
      Parameters:
      s - the translation key, holding the English text when untranslated
      Returns:
      the translated string, or s itself when no translation exists

    • _x

      private static final String _x(String s)
      Tag only.
      Parameters:
      s - the English text, marked for translators but not translated here
      Returns:
      the untranslated string, identical to s

    • _t

      private String _t(String s, Object o)
      Translate a string with a parameter This is a lot more expensive than _t(s), so use sparingly.
      Parameters:
      s - string to be translated containing {0} The {0} will be replaced by the parameter. Single quotes must be doubled, i.e. ' -> '' in the string.
      o - parameter, not translated. To translate parameter also, use _t("foo {0} bar", _t("baz")) Do not double the single quotes in the parameter. Use autoboxing to call with ints, longs, floats, etc.
      Returns:
      the translated string, with {0} replaced by the parameter