Blame view

net/netfilter/xt_NFLOG.c 1.96 KB
81f7e3824   Eric Lee   Initial Release, ...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
  /*
   * Copyright (c) 2006 Patrick McHardy <kaber@trash.net>
   *
   * This program is free software; you can redistribute it and/or modify
   * it under the terms of the GNU General Public License version 2 as
   * published by the Free Software Foundation.
   */
  
  #include <linux/module.h>
  #include <linux/init.h>
  #include <linux/skbuff.h>
  
  #include <linux/netfilter/x_tables.h>
  #include <linux/netfilter/xt_NFLOG.h>
  #include <net/netfilter/nf_log.h>
  #include <net/netfilter/nfnetlink_log.h>
  
  MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
  MODULE_DESCRIPTION("Xtables: packet logging to netlink using NFLOG");
  MODULE_LICENSE("GPL");
  MODULE_ALIAS("ipt_NFLOG");
  MODULE_ALIAS("ip6t_NFLOG");
  
  static unsigned int
  nflog_tg(struct sk_buff *skb, const struct xt_action_param *par)
  {
  	const struct xt_nflog_info *info = par->targinfo;
  	struct net *net = xt_net(par);
  	struct nf_loginfo li;
  
  	li.type		     = NF_LOG_TYPE_ULOG;
  	li.u.ulog.copy_len   = info->len;
  	li.u.ulog.group	     = info->group;
  	li.u.ulog.qthreshold = info->threshold;
  	li.u.ulog.flags	     = 0;
  
  	if (info->flags & XT_NFLOG_F_COPY_LEN)
  		li.u.ulog.flags |= NF_LOG_F_COPY_LEN;
  
  	nfulnl_log_packet(net, xt_family(par), xt_hooknum(par), skb,
  			  xt_in(par), xt_out(par), &li, info->prefix);
  	return XT_CONTINUE;
  }
  
  static int nflog_tg_check(const struct xt_tgchk_param *par)
  {
  	const struct xt_nflog_info *info = par->targinfo;
  
  	if (info->flags & ~XT_NFLOG_MASK)
  		return -EINVAL;
  	if (info->prefix[sizeof(info->prefix) - 1] != '\0')
  		return -EINVAL;
  	return 0;
  }
  
  static struct xt_target nflog_tg_reg __read_mostly = {
  	.name       = "NFLOG",
  	.revision   = 0,
  	.family     = NFPROTO_UNSPEC,
  	.checkentry = nflog_tg_check,
  	.target     = nflog_tg,
  	.targetsize = sizeof(struct xt_nflog_info),
  	.me         = THIS_MODULE,
  };
  
  static int __init nflog_tg_init(void)
  {
  	return xt_register_target(&nflog_tg_reg);
  }
  
  static void __exit nflog_tg_exit(void)
  {
  	xt_unregister_target(&nflog_tg_reg);
  }
  
  module_init(nflog_tg_init);
  module_exit(nflog_tg_exit);