1
2
3
4
5
6
7
8
9
10#ifndef _NF_CONNTRACK_L4PROTO_H
11#define _NF_CONNTRACK_L4PROTO_H
12#include <linux/netlink.h>
13#include <net/netlink.h>
14#include <net/netfilter/nf_conntrack.h>
15
16struct seq_file;
17
18struct nf_conntrack_l4proto
19{
20
21 u_int16_t l3proto;
22
23
24 u_int8_t l4proto;
25
26
27
28 bool (*pkt_to_tuple)(const struct sk_buff *skb, unsigned int dataoff,
29 struct nf_conntrack_tuple *tuple);
30
31
32
33
34 bool (*invert_tuple)(struct nf_conntrack_tuple *inverse,
35 const struct nf_conntrack_tuple *orig);
36
37
38 int (*packet)(struct nf_conn *ct,
39 const struct sk_buff *skb,
40 unsigned int dataoff,
41 enum ip_conntrack_info ctinfo,
42 u_int8_t pf,
43 unsigned int hooknum);
44
45
46
47 bool (*new)(struct nf_conn *ct, const struct sk_buff *skb,
48 unsigned int dataoff);
49
50
51 void (*destroy)(struct nf_conn *ct);
52
53 int (*error)(struct net *net, struct sk_buff *skb, unsigned int dataoff,
54 enum ip_conntrack_info *ctinfo,
55 u_int8_t pf, unsigned int hooknum);
56
57
58 int (*print_tuple)(struct seq_file *s,
59 const struct nf_conntrack_tuple *);
60
61
62 int (*print_conntrack)(struct seq_file *s, struct nf_conn *);
63
64
65 int (*to_nlattr)(struct sk_buff *skb, struct nlattr *nla,
66 struct nf_conn *ct);
67
68 int (*nlattr_size)(void);
69
70
71 int (*from_nlattr)(struct nlattr *tb[], struct nf_conn *ct);
72
73 int (*tuple_to_nlattr)(struct sk_buff *skb,
74 const struct nf_conntrack_tuple *t);
75
76 int (*nlattr_tuple_size)(void);
77 int (*nlattr_to_tuple)(struct nlattr *tb[],
78 struct nf_conntrack_tuple *t);
79 const struct nla_policy *nla_policy;
80
81 size_t nla_size;
82
83#ifdef CONFIG_SYSCTL
84 struct ctl_table_header **ctl_table_header;
85 struct ctl_table *ctl_table;
86 unsigned int *ctl_table_users;
87#ifdef CONFIG_NF_CONNTRACK_PROC_COMPAT
88 struct ctl_table_header *ctl_compat_table_header;
89 struct ctl_table *ctl_compat_table;
90#endif
91#endif
92
93 const char *name;
94
95
96 struct module *me;
97};
98
99
100extern struct nf_conntrack_l4proto nf_conntrack_l4proto_generic;
101
102#define MAX_NF_CT_PROTO 256
103
104extern struct nf_conntrack_l4proto *
105__nf_ct_l4proto_find(u_int16_t l3proto, u_int8_t l4proto);
106
107
108extern int nf_conntrack_l4proto_register(struct nf_conntrack_l4proto *proto);
109extern void nf_conntrack_l4proto_unregister(struct nf_conntrack_l4proto *proto);
110
111
112extern int nf_ct_port_tuple_to_nlattr(struct sk_buff *skb,
113 const struct nf_conntrack_tuple *tuple);
114extern int nf_ct_port_nlattr_to_tuple(struct nlattr *tb[],
115 struct nf_conntrack_tuple *t);
116extern int nf_ct_port_nlattr_tuple_size(void);
117extern const struct nla_policy nf_ct_port_nla_policy[];
118
119#ifdef CONFIG_SYSCTL
120#ifdef DEBUG_INVALID_PACKETS
121#define LOG_INVALID(net, proto) \
122 ((net)->ct.sysctl_log_invalid == (proto) || \
123 (net)->ct.sysctl_log_invalid == IPPROTO_RAW)
124#else
125#define LOG_INVALID(net, proto) \
126 (((net)->ct.sysctl_log_invalid == (proto) || \
127 (net)->ct.sysctl_log_invalid == IPPROTO_RAW) \
128 && net_ratelimit())
129#endif
130#else
131static inline int LOG_INVALID(struct net *net, int proto) { return 0; }
132#endif
133
134#endif
135