diff options
author | Florian Westphal <fw@strlen.de> | 2018-05-10 23:25:27 +0200 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2018-06-25 11:51:29 +0200 |
commit | db84371beafd011e1f1cbe9688241c4dff1649f7 (patch) | |
tree | 07e655d24fd693336f0127f2a8692b99823d9d12 /iptables/nft.c | |
parent | 20eac2ad174e43a3d4a4275c3d44f99c12bd04b9 (diff) |
xtables: translate nft meta trace set 1 to -j TRACE
nft meta expr enables the nfnetlink based trace infrastruvture, so
prefer to use that rather than xt_TRACE.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'iptables/nft.c')
-rw-r--r-- | iptables/nft.c | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/iptables/nft.c b/iptables/nft.c index 08cbdc86..64307375 100644 --- a/iptables/nft.c +++ b/iptables/nft.c @@ -929,11 +929,36 @@ static int __add_target(struct nftnl_expr *e, struct xt_entry_target *t) return 0; } +static int add_meta_nftrace(struct nftnl_rule *r) +{ + struct nftnl_expr *expr; + + expr = nftnl_expr_alloc("immediate"); + if (expr == NULL) + return -ENOMEM; + + nftnl_expr_set_u32(expr, NFTNL_EXPR_IMM_DREG, NFT_REG32_01); + nftnl_expr_set_u8(expr, NFTNL_EXPR_IMM_DATA, 1); + nftnl_rule_add_expr(r, expr); + + expr = nftnl_expr_alloc("meta"); + if (expr == NULL) + return -ENOMEM; + nftnl_expr_set_u32(expr, NFTNL_EXPR_META_KEY, NFT_META_NFTRACE); + nftnl_expr_set_u32(expr, NFTNL_EXPR_META_SREG, NFT_REG32_01); + + nftnl_rule_add_expr(r, expr); + return 0; +} + int add_target(struct nftnl_rule *r, struct xt_entry_target *t) { struct nftnl_expr *expr; int ret; + if (strcmp(t->u.user.name, "TRACE") == 0) + return add_meta_nftrace(r); + expr = nftnl_expr_alloc("target"); if (expr == NULL) return -ENOMEM; |