summaryrefslogtreecommitdiffstats
path: root/examples
Commit message (Collapse)AuthorAgeFilesLines
* src: avoid using deprecated unspecified argument listsJan Engelhardt2010-10-226-6/+6
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* src: define MNL_SOCKET_BUFFER_SIZE to 8192ULPablo Neira Ayuso2010-10-2110-10/+10
| | | | | | | | | | | | | | | | Davem spotted during the Netfilter Workshop that user-space applications should use 8KB buffers for recv(). I accidentally found that NFLOG is not following this approach (in this case we're using 131072 bytes messages), we have to document this. Anyway, according to linux/netlink.h (and to complete this log message): "skb should fit one page. This choice is good for headerless malloc. But we should limit to 8K so that userspace does not have to use enormous buffer sizes on recvmsg() calls just to avoid MSG_TRUNC when PAGE_SIZE is very large." Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Add .gitignore filesJan Engelhardt2010-10-193-0/+10
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: remove unneeded -dynamic -ldl -nostartfiles flagsJan Engelhardt2010-10-193-10/+0
| | | | | | | | | Besides that -ldl should be in _LDADD (not _LDFLAGS), I do not see any dlopen calls at all that would make the library a requirement. I also see no reason to use -Wc,-nostartfiles. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* examples: put examples files into specific directoriesPablo Neira Ayuso2010-09-0814-50/+55
| | | | | | | put examples files into specific directories according to the Netlink bus they work with. And minor update in the readme file Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* examples: fix byte-order in nfct-eventPablo Neira Ayuso2010-07-101-8/+11
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* examples: fix rtnl-set-linkPablo Neira Ayuso2010-07-101-9/+12
| | | | | | | This patch fixes the example that allows to set up/down the network interface. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add nfct-event examplePablo Neira Ayuso2010-05-092-1/+248
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix rtnl-link-dump3.cPablo Neira Ayuso2010-05-091-1/+1
| | | | | | | commit a5f25889216411ad7492047fafe6de03b8408440 introduced a minor problem in this example. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* relax mnl_attr_type_valid() checkings and change errno valuePablo Neira Ayuso2010-05-097-40/+31
| | | | | | | | This patch relaxes strict attribute checkings in the example files. I have also changed the errno value, now it's EOPNOTSUPP instead of EINVAL. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* statify function in nf-queue.c examplePablo Neira Ayuso2010-05-041-1/+2
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add nf-queue.c example file for nfnetlink_queuePablo Neira Ayuso2010-05-032-1/+257
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add licensing terms of example filesPablo Neira Ayuso2010-05-038-0/+48
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add rtnl-route-add.c to examplesPablo Neira Ayuso2010-04-232-0/+98
| | | | | | | Heavily based on an example from Alejandro Castaño. Untested. Signed-off-by: Alejandro Castaño <alecastanyo@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix lots of compilation warnings in example filesPablo Neira Ayuso2010-04-227-23/+19
| | | | | | They have been spotted by -Wall -Wextra Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add mnl_nlmsg_fprintf() function for debugging purposesPablo Neira Ayuso2010-04-191-1/+1
| | | | | | This function is still quite preliminary, comments welcome! Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove mnl_nlmsg_get_len() functionPablo Neira Ayuso2010-04-127-11/+11
| | | | | | | | | Remove mnl_nlmsg_get_len() since it returns a field of a structure that is public (struct nlmsghdr). We can directly access the header fields and they are not likely to change in the future (at least for this version of Netlink I think). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* more consistency name issues: rename get_data*() to get_payload*()Pablo Neira Ayuso2010-04-056-6/+6
| | | | | | This includes renaming get_tail() to get_payload_tail() Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* rename mnl_attr_type_ok() by mnl_attr_type_valid() for consistencyPablo Neira Ayuso2010-04-056-18/+18
| | | | | | | better to rename this function since its return value is not similar to other _ok() functions, for consistency. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* rename mnl_attr_type_invalid() by mnl_attr_type_ok()Pablo Neira Ayuso2010-04-046-18/+18
| | | | | | And include the prototype in libmnl.h, since it was missing Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* check source of the netlink message and fix sequence tracking logicPablo Neira Ayuso2010-04-047-13/+19
| | | | | | | | | | | | This patch changes the callback handlers to include netlink portID checking. Thus, we avoid that any malicious process can spoof messages. If portid, sequence number of the message is != 0, we check if the message is what we expect. This allows to use the same netlink channel for dumps (portid, seq != 0) and event-based notifications (portid, seq == 0). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add validation infrastructure and rework attribute parsingPablo Neira Ayuso2010-04-037-17/+434
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch includes the new validation infrastructure which is decoupled from the attribute parsing. It is composed of: - mnl_attr_type_invalid: that allows to check if the attribute type is valid (ie. the type is not higher than WXYZ_MAX). - mnl_attr_validate: that allows to validate that there's enough room for the attribute data. The patch includes the rework of the attribute parsers. Now, you don't have to use an array of pointer to store the result of the parsing, you can use whatever data structure instead. The prototype as it follows: typedef int (*mnl_attr_cb_t)(const struct nlattr *attr, void *data); extern int mnl_attr_parse(const struct nlmsghdr *nlh, int offset, mnl_attr_cb_t cb, void *data) There are three versions of rtnl-link-dump.c that show how attribute parsing can be done now. Probably that many examples are not good idea, I may remove some of them from the tree in the future. This patch also merges mnl_attr_parse_at_offset into mnl_attr_parse. This patch modifies MNL_ALIGN so that we can use it in static arrays (the use of mnl_align() is not allowed in compilation time to initialize an array field). I have added the mnl_attr_for_each() macro and I have changed mnl_attr_for_each_nested() to declare the length variable internally. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* revert abcaad6b65ed368c13c353ed71619332f76d9c2aPablo Neira Ayuso2010-04-034-16/+0
| | | | it's deeply broken 8-)
* check portid of received messages in examplesPablo Neira Ayuso2010-04-034-0/+16
| | | | | | | netlink is not connection-oriented, we have to check the origin of the message. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* initial libmnl importPablo Neira Ayuso2010-03-196-0/+589