1
2
3
4
5
6
7
8
9
10#ifndef _NF_CONNTRACK_TUPLE_H
11#define _NF_CONNTRACK_TUPLE_H
12
13#include <linux/netfilter/nf_conntrack_tuple_common.h>
14
15
16
17
18
19
20
21
22
23#define NF_CT_TUPLE_L3SIZE 4
24
25
26
27union nf_conntrack_address {
28 u_int32_t all[NF_CT_TUPLE_L3SIZE];
29 __be32 ip;
30 __be32 ip6[4];
31};
32
33
34
35union nf_conntrack_man_proto
36{
37
38 __be16 all;
39
40 struct {
41 __be16 port;
42 } tcp;
43 struct {
44 __be16 port;
45 } udp;
46 struct {
47 __be16 id;
48 } icmp;
49 struct {
50 __be16 port;
51 } sctp;
52 struct {
53 __be16 key;
54 } gre;
55};
56
57
58struct nf_conntrack_man
59{
60 union nf_conntrack_address u3;
61 union nf_conntrack_man_proto u;
62
63 u_int16_t l3num;
64};
65
66
67struct nf_conntrack_tuple
68{
69 struct nf_conntrack_man src;
70
71
72 struct {
73 union nf_conntrack_address u3;
74 union {
75
76 __be16 all;
77
78 struct {
79 __be16 port;
80 } tcp;
81 struct {
82 __be16 port;
83 } udp;
84 struct {
85 u_int8_t type, code;
86 } icmp;
87 struct {
88 __be16 port;
89 } sctp;
90 struct {
91 __be16 key;
92 } gre;
93 } u;
94
95
96 u_int8_t protonum;
97
98
99 u_int8_t dir;
100 } dst;
101};
102
103struct nf_conntrack_tuple_mask
104{
105 struct {
106 union nf_conntrack_address u3;
107 union nf_conntrack_man_proto u;
108 } src;
109};
110
111
112
113#define NF_CT_TUPLE_U_BLANK(tuple) \
114 do { \
115 (tuple)->src.u.all = 0; \
116 (tuple)->dst.u.all = 0; \
117 memset(&(tuple)->src.u3, 0, sizeof((tuple)->src.u3)); \
118 memset(&(tuple)->dst.u3, 0, sizeof((tuple)->dst.u3)); \
119 } while (0)
120
121#ifdef __KERNEL__
122
123#define NF_CT_DUMP_TUPLE(tp) \
124pr_debug("tuple %p: %u %u " NIP6_FMT " %hu -> " NIP6_FMT " %hu\n", \
125 (tp), (tp)->src.l3num, (tp)->dst.protonum, \
126 NIP6(*(struct in6_addr *)(tp)->src.u3.all), ntohs((tp)->src.u.all), \
127 NIP6(*(struct in6_addr *)(tp)->dst.u3.all), ntohs((tp)->dst.u.all))
128
129
130#define NF_CT_DIRECTION(h) \
131 ((enum ip_conntrack_dir)(h)->tuple.dst.dir)
132
133
134struct nf_conntrack_tuple_hash
135{
136 struct hlist_node hnode;
137 struct nf_conntrack_tuple tuple;
138};
139
140#endif
141
142static inline int nf_ct_tuple_src_equal(const struct nf_conntrack_tuple *t1,
143 const struct nf_conntrack_tuple *t2)
144{
145 return (t1->src.u3.all[0] == t2->src.u3.all[0] &&
146 t1->src.u3.all[1] == t2->src.u3.all[1] &&
147 t1->src.u3.all[2] == t2->src.u3.all[2] &&
148 t1->src.u3.all[3] == t2->src.u3.all[3] &&
149 t1->src.u.all == t2->src.u.all &&
150 t1->src.l3num == t2->src.l3num &&
151 t1->dst.protonum == t2->dst.protonum);
152}
153
154static inline int nf_ct_tuple_dst_equal(const struct nf_conntrack_tuple *t1,
155 const struct nf_conntrack_tuple *t2)
156{
157 return (t1->dst.u3.all[0] == t2->dst.u3.all[0] &&
158 t1->dst.u3.all[1] == t2->dst.u3.all[1] &&
159 t1->dst.u3.all[2] == t2->dst.u3.all[2] &&
160 t1->dst.u3.all[3] == t2->dst.u3.all[3] &&
161 t1->dst.u.all == t2->dst.u.all &&
162 t1->src.l3num == t2->src.l3num &&
163 t1->dst.protonum == t2->dst.protonum);
164}
165
166static inline int nf_ct_tuple_equal(const struct nf_conntrack_tuple *t1,
167 const struct nf_conntrack_tuple *t2)
168{
169 return nf_ct_tuple_src_equal(t1, t2) && nf_ct_tuple_dst_equal(t1, t2);
170}
171
172static inline int nf_ct_tuple_mask_equal(const struct nf_conntrack_tuple_mask *m1,
173 const struct nf_conntrack_tuple_mask *m2)
174{
175 return (m1->src.u3.all[0] == m2->src.u3.all[0] &&
176 m1->src.u3.all[1] == m2->src.u3.all[1] &&
177 m1->src.u3.all[2] == m2->src.u3.all[2] &&
178 m1->src.u3.all[3] == m2->src.u3.all[3] &&
179 m1->src.u.all == m2->src.u.all);
180}
181
182static inline int nf_ct_tuple_src_mask_cmp(const struct nf_conntrack_tuple *t1,
183 const struct nf_conntrack_tuple *t2,
184 const struct nf_conntrack_tuple_mask *mask)
185{
186 int count;
187
188 for (count = 0; count < NF_CT_TUPLE_L3SIZE; count++) {
189 if ((t1->src.u3.all[count] ^ t2->src.u3.all[count]) &
190 mask->src.u3.all[count])
191 return 0;
192 }
193
194 if ((t1->src.u.all ^ t2->src.u.all) & mask->src.u.all)
195 return 0;
196
197 if (t1->src.l3num != t2->src.l3num ||
198 t1->dst.protonum != t2->dst.protonum)
199 return 0;
200
201 return 1;
202}
203
204static inline int nf_ct_tuple_mask_cmp(const struct nf_conntrack_tuple *t,
205 const struct nf_conntrack_tuple *tuple,
206 const struct nf_conntrack_tuple_mask *mask)
207{
208 return nf_ct_tuple_src_mask_cmp(t, tuple, mask) &&
209 nf_ct_tuple_dst_equal(t, tuple);
210}
211
212#endif
213