1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
|
/*
* (C) 2006 by Pablo Neira Ayuso <pablo@netfilter.org>
*
* This software may be used and distributed according to the terms
* of the GNU General Public License, incorporated herein by reference.
*
* WARNING: Do *NOT* ever include this file, only for internal use!
* Use the set/get API in order to set/get the conntrack attributes
*/
#ifndef __LIBNETFILTER_CONNTRACK_INTERNAL__
#define __LIBNETFILTER_CONNTRACK_INTERNAL__
#include <stdio.h>
#include <stdlib.h>
#include <stdarg.h>
#include <string.h>
#include <sys/types.h>
#include <arpa/inet.h>
#include <errno.h>
#include <libnfnetlink/libnfnetlink.h>
#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
struct nfct_handle;
typedef void (*set_attr)(struct nf_conntrack *ct, const void *value);
typedef const void *(*get_attr)(const struct nf_conntrack *ct);
extern set_attr set_attr_array[];
extern get_attr get_attr_array[];
typedef int (*nfct_handler)(struct nfct_handle *cth, struct nlmsghdr *nlh,
void *arg);
struct nfct_handle {
struct nfnl_handle *nfnlh;
struct nfnl_subsys_handle *nfnlssh_ct;
struct nfnl_subsys_handle *nfnlssh_exp;
nfct_callback callback; /* user callback */
void *callback_data; /* user data for callback */
nfct_handler handler; /* netlink handler */
/* callback handler for the new API */
struct nfnl_callback nfnl_cb;
int(*cb)(enum nf_conntrack_msg_type type,
struct nf_conntrack *ct,
void *data);
};
union __nfct_l4 {
/* Add other protocols here. */
u_int16_t all;
struct {
u_int16_t port;
} tcp;
struct {
u_int16_t port;
} udp;
struct {
u_int8_t type, code;
u_int16_t id;
} icmp;
struct {
u_int16_t port;
} sctp;
};
union __nfct_address {
u_int32_t v4;
struct in6_addr v6;
};
struct __nfct_tuple {
union __nfct_address src;
union __nfct_address dst;
u_int8_t l3protonum;
u_int8_t protonum;
union __nfct_l4 l4src;
union __nfct_l4 l4dst;
};
union __nfct_protoinfo {
struct {
u_int8_t state;
} tcp;
};
struct __nfct_counters {
u_int64_t packets;
u_int64_t bytes;
};
struct __nfct_nat {
u_int32_t min_ip, max_ip;
union __nfct_l4 l4min, l4max;
};
#define __DIR_ORIG 0
#define __DIR_REPL 1
#define __DIR_MAX __DIR_REPL+1
struct nf_conntrack {
struct __nfct_tuple tuple[__DIR_MAX];
u_int32_t timeout;
u_int32_t mark;
u_int32_t status;
u_int32_t use;
u_int32_t id;
union __nfct_protoinfo protoinfo;
struct __nfct_counters counters[__DIR_MAX];
struct __nfct_nat snat;
struct __nfct_nat dnat;
u_int32_t set[2];
};
/* container used to pass data to nfnl callbacks */
struct __data_container {
struct nfct_handle *h;
enum nf_conntrack_msg_type type;
void *data;
};
static inline void set_bit(int nr, u_int32_t *addr)
{
addr[nr >> 5] |= (1UL << (nr & 31));
}
static inline void unset_bit(int nr, u_int32_t *addr)
{
addr[nr >> 5] &= ~(1UL << (nr & 31));
}
static inline int test_bit(int nr, const u_int32_t *addr)
{
return ((1UL << (nr & 31)) & (addr[nr >> 5])) != 0;
}
int __build_conntrack(struct nfnl_subsys_handle *ssh, struct nfnlhdr *req, size_t size, u_int16_t type, u_int16_t flags, const struct nf_conntrack *ct);
int __parse_message_type(const struct nlmsghdr *nlh);
void __parse_conntrack(const struct nlmsghdr *nlh, const struct nfattr *cda[], struct nf_conntrack *ct);
int __snprintf_conntrack(char *buf, unsigned int len, const struct nf_conntrack *ct, unsigned int type, unsigned int msg_output, unsigned int flags);
int __callback(struct nlmsghdr *nlh, struct nfattr *nfa[], void *data);
int __setobjopt(struct nf_conntrack *ct, unsigned int option);
int __getobjopt(const struct nf_conntrack *ct, unsigned int option);
#endif
|
