summaryrefslogtreecommitdiffstats
path: root/utils/conntrack_get.c
diff options
context:
space:
mode:
author/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org </C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org>2007-05-13 23:42:43 +0000
committer/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org </C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org>2007-05-13 23:42:43 +0000
commit8ca32474125483ae58e93e2822a8e5af9f9b72ab (patch)
tree67b7c84eae3de91297ead087d7b017fe3dad3331 /utils/conntrack_get.c
parent84f120b150d14adb1cefec601e28b2522612a620 (diff)
- split new_api_test.c into several conntrack_*.c files to learn much easier how the new API works
Diffstat (limited to 'utils/conntrack_get.c')
-rw-r--r--utils/conntrack_get.c56
1 files changed, 56 insertions, 0 deletions
diff --git a/utils/conntrack_get.c b/utils/conntrack_get.c
new file mode 100644
index 0000000..68ee2fd
--- /dev/null
+++ b/utils/conntrack_get.c
@@ -0,0 +1,56 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <errno.h>
+
+#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
+#include <libnetfilter_conntrack/libnetfilter_conntrack_tcp.h>
+
+static int cb(enum nf_conntrack_msg_type type,
+ struct nf_conntrack *ct,
+ void *data)
+{
+ char buf[1024];
+
+ nfct_snprintf(buf, 1024, ct, NFCT_T_UNKNOWN, NFCT_O_DEFAULT, NFCT_OF_SHOW_LAYER3);
+ printf("%s\n", buf);
+
+ return NFCT_CB_CONTINUE;
+}
+
+int main()
+{
+ int ret;
+ struct nfct_handle *h;
+ struct nf_conntrack *ct;
+
+ ct = nfct_new();
+ if (!ct) {
+ perror("nfct_new");
+ return 0;
+ }
+
+ nfct_set_attr_u8(ct, ATTR_L3PROTO, AF_INET);
+ nfct_set_attr_u32(ct, ATTR_IPV4_SRC, inet_addr("1.1.1.1"));
+ nfct_set_attr_u32(ct, ATTR_IPV4_DST, inet_addr("2.2.2.2"));
+
+ nfct_set_attr_u8(ct, ATTR_L4PROTO, IPPROTO_TCP);
+ nfct_set_attr_u16(ct, ATTR_PORT_SRC, htons(20));
+ nfct_set_attr_u16(ct, ATTR_PORT_DST, htons(10));
+
+ h = nfct_open(CONNTRACK, 0);
+ if (!h) {
+ perror("nfct_open");
+ return -1;
+ }
+
+ nfct_callback_register(h, NFCT_T_ALL, cb, NULL);
+
+ ret = nfct_query(h, NFCT_Q_GET, ct);
+
+ printf("TEST: get conntrack (%d)(%s)\n", ret, strerror(errno));
+
+ if (ret == -1)
+ exit(EXIT_FAILURE);
+
+ nfct_close(h);
+}