From 4bdf0ae602c4f53b05b8fe903981a92f8f2a65b0 Mon Sep 17 00:00:00 2001 From: Liping Zhang Date: Wed, 8 Jun 2016 20:47:03 +0800 Subject: extensions: libxt_TRACE: Add translation to nft For example: # iptables-translate -t raw -A PREROUTING -j TRACE nft add rule ip raw PREROUTING counter nftrace set 1 Signed-off-by: Liping Zhang Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_TRACE.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/extensions/libxt_TRACE.c b/extensions/libxt_TRACE.c index 0282e6ff..7cb3585b 100644 --- a/extensions/libxt_TRACE.c +++ b/extensions/libxt_TRACE.c @@ -7,12 +7,20 @@ #include #include +static int trace_xlate(const void *ip, const struct xt_entry_target *target, + struct xt_xlate *xl, int numeric) +{ + xt_xlate_add(xl, "nftrace set 1"); + return 1; +} + static struct xtables_target trace_target = { .family = NFPROTO_UNSPEC, .name = "TRACE", .version = XTABLES_VERSION, .size = XT_ALIGN(0), .userspacesize = XT_ALIGN(0), + .xlate = trace_xlate, }; void _init(void) -- cgit v1.2.3