From 9f28b685b473b2424524d0443ef1e0ed8ba276de Mon Sep 17 00:00:00 2001 From: Fernando Fernandez Mancera Date: Fri, 3 Aug 2018 23:47:11 +0200 Subject: src: introduce passive OS fingerprint matching Add support for "osf" expression. Example: table ip foo { chain bar { type filter hook input priority 0; policy accept; osf name "Linux" counter packets 3 bytes 132 } } Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso --- include/expression.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'include/expression.h') diff --git a/include/expression.h b/include/expression.h index 2bb51e53..f2c5c1ad 100644 --- a/include/expression.h +++ b/include/expression.h @@ -25,6 +25,7 @@ * @EXPR_EXTHDR: exthdr expression * @EXPR_META: meta expression * @EXPR_SOCKET: socket expression + * @EXPR_OSF: osf expression * @EXPR_CT: conntrack expression * @EXPR_CONCAT: concatenation * @EXPR_LIST: list of expressions @@ -52,6 +53,7 @@ enum expr_types { EXPR_EXTHDR, EXPR_META, EXPR_SOCKET, + EXPR_OSF, EXPR_CT, EXPR_CONCAT, EXPR_LIST, @@ -191,6 +193,7 @@ enum expr_flags { #include #include #include +#include /** * struct expr -- cgit v1.2.3