From c44b4657fa84d66423c19a4e60e5ef9d1633daeb Mon Sep 17 00:00:00 2001 From: Ken-ichirou MATSUZAWA Date: Fri, 13 Mar 2015 07:21:40 +0900 Subject: conntrack: add mark event filter This patch adds mark filter for event listener, using same struct nfct_filter_dump_mark at dump. Signed-off-by: Ken-ichirou MATSUZAWA Signed-off-by: Florian Westphal --- include/internal/object.h | 7 +++++++ include/libnetfilter_conntrack/libnetfilter_conntrack.h | 1 + 2 files changed, 8 insertions(+) (limited to 'include') diff --git a/include/internal/object.h b/include/internal/object.h index 540ad0d..1259467 100644 --- a/include/internal/object.h +++ b/include/internal/object.h @@ -263,6 +263,13 @@ struct nfct_filter { u_int32_t mask[4]; } l3proto_ipv6[2][__FILTER_IPV6_MAX]; + u_int32_t mark_elems; + struct { +#define __FILTER_MARK_MAX 127 + u_int32_t val; + u_int32_t mask; + } mark[__FILTER_MARK_MAX]; + u_int32_t set[1]; }; diff --git a/include/libnetfilter_conntrack/libnetfilter_conntrack.h b/include/libnetfilter_conntrack/libnetfilter_conntrack.h index d04a0c6..cea9a78 100644 --- a/include/libnetfilter_conntrack/libnetfilter_conntrack.h +++ b/include/libnetfilter_conntrack/libnetfilter_conntrack.h @@ -499,6 +499,7 @@ enum nfct_filter_attr { NFCT_FILTER_DST_IPV4, /* struct nfct_filter_ipv4 */ NFCT_FILTER_SRC_IPV6, /* struct nfct_filter_ipv6 */ NFCT_FILTER_DST_IPV6, /* struct nfct_filter_ipv6 */ + NFCT_FILTER_MARK, /* struct nfct_filter_dump_mark */ NFCT_FILTER_MAX }; -- cgit v1.2.3