summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2011-10-16 17:50:55 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2011-10-16 21:28:13 +0200
commit1cfe3cf24db29bd9274c2e59587cc0960e9db47c (patch)
tree4e71628daab46e7197d15960cbfd7618a5976db2 /src
intial import of libnetfilter_acct
Diffstat (limited to 'src')
-rw-r--r--src/Makefile.am8
-rw-r--r--src/internal.h12
-rw-r--r--src/libnetfilter_acct.c154
-rw-r--r--src/libnetfilter_acct.map15
4 files changed, 189 insertions, 0 deletions
diff --git a/src/Makefile.am b/src/Makefile.am
new file mode 100644
index 0000000..bbcfe51
--- /dev/null
+++ b/src/Makefile.am
@@ -0,0 +1,8 @@
+include $(top_srcdir)/Make_global.am
+lib_LTLIBRARIES = libnetfilter_acct.la
+
+libnetfilter_acct_la_LIBADD = ${LIBMNL_LIBS}
+libnetfilter_acct_la_LDFLAGS = -Wl,--version-script=$(srcdir)/libnetfilter_acct.map -version-info $(LIBVERSION)
+libnetfilter_acct_la_SOURCES = libnetfilter_acct.c \
+ libnetfilter_acct.map \
+ internal.h
diff --git a/src/internal.h b/src/internal.h
new file mode 100644
index 0000000..3a88d1a
--- /dev/null
+++ b/src/internal.h
@@ -0,0 +1,12 @@
+#ifndef INTERNAL_H
+#define INTERNAL_H 1
+
+#include "config.h"
+#ifdef HAVE_VISIBILITY_HIDDEN
+# define __visible __attribute__((visibility("default")))
+# define EXPORT_SYMBOL(x) typeof(x) (x) __visible
+#else
+# define EXPORT_SYMBOL
+#endif
+
+#endif
diff --git a/src/libnetfilter_acct.c b/src/libnetfilter_acct.c
new file mode 100644
index 0000000..5311430
--- /dev/null
+++ b/src/libnetfilter_acct.c
@@ -0,0 +1,154 @@
+/*
+ * (C) 2011 by Pablo Neira Ayuso <pablo@netfilter.org>
+ * (C) 2011 by Intra2net AG <http://www.intra2net.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the Lesser GNU General Public License as published
+ * by the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ */
+#include "internal.h"
+
+#include <time.h>
+#include <libmnl/libmnl.h>
+#include <linux/netfilter/nfnetlink.h>
+#include <linux/netfilter/nfnetlink_acct.h>
+
+#include <libnetfilter_acct/libnetfilter_acct.h>
+
+struct nlmsghdr *nfacct_add(char *buf, struct nfacct *nfacct)
+{
+ struct nlmsghdr *nlh;
+ struct nfgenmsg *nfh;
+
+ nlh = mnl_nlmsg_put_header(buf);
+ nlh->nlmsg_type = (NFNL_SUBSYS_ACCT << 8) | NFNL_MSG_ACCT_NEW;
+ nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_ACK;
+ nlh->nlmsg_seq = time(NULL);
+
+ nfh = mnl_nlmsg_put_extra_header(nlh, sizeof(struct nfgenmsg));
+ nfh->nfgen_family = AF_UNSPEC;
+ nfh->version = NFNETLINK_V0;
+ nfh->res_id = 0;
+
+ mnl_attr_put_strz(nlh, NFACCT_NAME, nfacct->name);
+ mnl_attr_put_u64(nlh, NFACCT_PKTS, nfacct->pkts);
+ mnl_attr_put_u64(nlh, NFACCT_PKTS, nfacct->bytes);
+
+ return nlh;
+}
+EXPORT_SYMBOL(nfacct_add);
+
+struct nlmsghdr *nfacct_list(char *buf)
+{
+ struct nlmsghdr *nlh;
+ struct nfgenmsg *nfh;
+
+ nlh = mnl_nlmsg_put_header(buf);
+ nlh->nlmsg_type = (NFNL_SUBSYS_ACCT << 8) | NFNL_MSG_ACCT_GET;
+ nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP;
+ nlh->nlmsg_seq = time(NULL);
+
+ nfh = mnl_nlmsg_put_extra_header(nlh, sizeof(struct nfgenmsg));
+ nfh->nfgen_family = AF_UNSPEC;
+ nfh->version = NFNETLINK_V0;
+ nfh->res_id = 0;
+
+ return nlh;
+}
+EXPORT_SYMBOL(nfacct_list);
+
+static int nfacct_list_attr_cb(const struct nlattr *attr, void *data)
+{
+ const struct nlattr **tb = data;
+ int type = mnl_attr_get_type(attr);
+
+ if (mnl_attr_type_valid(attr, NFACCT_MAX) < 0)
+ return MNL_CB_OK;
+
+ switch(type) {
+ case NFACCT_NAME:
+ if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0) {
+ perror("mnl_attr_validate");
+ return MNL_CB_ERROR;
+ }
+ break;
+ case NFACCT_PKTS:
+ if (mnl_attr_validate(attr, MNL_TYPE_U64) < 0) {
+ perror("mnl_attr_validate");
+ return MNL_CB_ERROR;
+ }
+ break;
+ case NFACCT_BYTES:
+ if (mnl_attr_validate(attr, MNL_TYPE_U64) < 0) {
+ perror("mnl_attr_validate");
+ return MNL_CB_ERROR;
+ }
+ break;
+ }
+ tb[type] = attr;
+ return MNL_CB_OK;
+}
+
+int nfacct_list_cb(const struct nlmsghdr *nlh, void *data)
+{
+ struct nlattr *tb[NFACCT_MAX+1] = {};
+ struct nfgenmsg *nfg = mnl_nlmsg_get_payload(nlh);
+ bool *full = data;
+
+ mnl_attr_parse(nlh, sizeof(*nfg), nfacct_list_attr_cb, tb);
+ if (!tb[NFACCT_NAME] && !tb[NFACCT_PKTS] && !tb[NFACCT_BYTES])
+ return MNL_CB_OK;
+
+ if (*full) {
+ printf("%s = { pkts = %.12llu,\tbytes = %.12llu }; \n",
+ mnl_attr_get_str(tb[NFACCT_NAME]),
+ mnl_attr_get_u64(tb[NFACCT_PKTS]),
+ mnl_attr_get_u64(tb[NFACCT_BYTES]));
+ } else {
+ printf("%s\n", mnl_attr_get_str(tb[NFACCT_NAME]));
+ }
+
+ return MNL_CB_OK;
+}
+EXPORT_SYMBOL(nfacct_list_cb);
+
+struct nlmsghdr *nfacct_flush(char *buf)
+{
+ struct nlmsghdr *nlh;
+ struct nfgenmsg *nfh;
+
+ nlh = mnl_nlmsg_put_header(buf);
+ nlh->nlmsg_type = (NFNL_SUBSYS_ACCT << 8) | NFNL_MSG_ACCT_DEL;
+ nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_ACK;
+ nlh->nlmsg_seq = time(NULL);
+
+ nfh = mnl_nlmsg_put_extra_header(nlh, sizeof(struct nfgenmsg));
+ nfh->nfgen_family = AF_UNSPEC;
+ nfh->version = NFNETLINK_V0;
+ nfh->res_id = 0;
+
+ return nlh;
+}
+EXPORT_SYMBOL(nfacct_flush);
+
+struct nlmsghdr *nfacct_delete(char *buf, const char *filter_name)
+{
+ struct nlmsghdr *nlh;
+ struct nfgenmsg *nfh;
+
+ nlh = mnl_nlmsg_put_header(buf);
+ nlh->nlmsg_type = (NFNL_SUBSYS_ACCT << 8) | NFNL_MSG_ACCT_DEL;
+ nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_ACK;
+ nlh->nlmsg_seq = time(NULL);
+
+ nfh = mnl_nlmsg_put_extra_header(nlh, sizeof(struct nfgenmsg));
+ nfh->nfgen_family = AF_UNSPEC;
+ nfh->version = NFNETLINK_V0;
+ nfh->res_id = 0;
+
+ mnl_attr_put_strz(nlh, NFACCT_NAME, filter_name);
+
+ return nlh;
+}
+EXPORT_SYMBOL(nfacct_delete);
diff --git a/src/libnetfilter_acct.map b/src/libnetfilter_acct.map
new file mode 100644
index 0000000..f5c3172
--- /dev/null
+++ b/src/libnetfilter_acct.map
@@ -0,0 +1,15 @@
+LIBNETFILTER_ACCT_1.0 {
+global:
+ nfacct_add;
+ nfacct_list;
+ nfacct_list_cb;
+ nfacct_flush;
+ nfacct_delete;
+ nfacct_list;
+
+local: *;
+};
+
+#LIBNETFILTER_ACCT_1.1 {
+# _my_new_func;
+#} LIBNETFILTER_ACCT_1.0;