Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
baf7b1e1 PM |
2 | /* |
3 | * Copyright (c) 2006 Patrick McHardy <kaber@trash.net> | |
baf7b1e1 PM |
4 | */ |
5 | ||
6 | #include <linux/module.h> | |
7 | #include <linux/init.h> | |
8 | #include <linux/skbuff.h> | |
9 | ||
10 | #include <linux/netfilter/x_tables.h> | |
11 | #include <linux/netfilter/xt_NFLOG.h> | |
f01ffbd6 | 12 | #include <net/netfilter/nf_log.h> |
baf7b1e1 PM |
13 | |
14 | MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>"); | |
2ae15b64 | 15 | MODULE_DESCRIPTION("Xtables: packet logging to netlink using NFLOG"); |
baf7b1e1 PM |
16 | MODULE_LICENSE("GPL"); |
17 | MODULE_ALIAS("ipt_NFLOG"); | |
18 | MODULE_ALIAS("ip6t_NFLOG"); | |
19 | ||
20 | static unsigned int | |
4b560b44 | 21 | nflog_tg(struct sk_buff *skb, const struct xt_action_param *par) |
baf7b1e1 | 22 | { |
7eb35586 | 23 | const struct xt_nflog_info *info = par->targinfo; |
613dbd95 | 24 | struct net *net = xt_net(par); |
baf7b1e1 PM |
25 | struct nf_loginfo li; |
26 | ||
27 | li.type = NF_LOG_TYPE_ULOG; | |
28 | li.u.ulog.copy_len = info->len; | |
29 | li.u.ulog.group = info->group; | |
30 | li.u.ulog.qthreshold = info->threshold; | |
6d19375b | 31 | li.u.ulog.flags = 0; |
baf7b1e1 | 32 | |
7643507f VP |
33 | if (info->flags & XT_NFLOG_F_COPY_LEN) |
34 | li.u.ulog.flags |= NF_LOG_F_COPY_LEN; | |
35 | ||
ce20cdf4 TY |
36 | nf_log_packet(net, xt_family(par), xt_hooknum(par), skb, xt_in(par), |
37 | xt_out(par), &li, "%s", info->prefix); | |
38 | ||
baf7b1e1 PM |
39 | return XT_CONTINUE; |
40 | } | |
41 | ||
135367b8 | 42 | static int nflog_tg_check(const struct xt_tgchk_param *par) |
baf7b1e1 | 43 | { |
af5d6dc2 | 44 | const struct xt_nflog_info *info = par->targinfo; |
baf7b1e1 PM |
45 | |
46 | if (info->flags & ~XT_NFLOG_MASK) | |
d6b00a53 | 47 | return -EINVAL; |
baf7b1e1 | 48 | if (info->prefix[sizeof(info->prefix) - 1] != '\0') |
d6b00a53 | 49 | return -EINVAL; |
ce20cdf4 TY |
50 | |
51 | return nf_logger_find_get(par->family, NF_LOG_TYPE_ULOG); | |
52 | } | |
53 | ||
54 | static void nflog_tg_destroy(const struct xt_tgdtor_param *par) | |
55 | { | |
56 | nf_logger_put(par->family, NF_LOG_TYPE_ULOG); | |
baf7b1e1 PM |
57 | } |
58 | ||
92f3b2b1 JE |
59 | static struct xt_target nflog_tg_reg __read_mostly = { |
60 | .name = "NFLOG", | |
61 | .revision = 0, | |
62 | .family = NFPROTO_UNSPEC, | |
63 | .checkentry = nflog_tg_check, | |
ce20cdf4 | 64 | .destroy = nflog_tg_destroy, |
92f3b2b1 JE |
65 | .target = nflog_tg, |
66 | .targetsize = sizeof(struct xt_nflog_info), | |
67 | .me = THIS_MODULE, | |
baf7b1e1 PM |
68 | }; |
69 | ||
d3c5ee6d | 70 | static int __init nflog_tg_init(void) |
baf7b1e1 | 71 | { |
92f3b2b1 | 72 | return xt_register_target(&nflog_tg_reg); |
baf7b1e1 PM |
73 | } |
74 | ||
d3c5ee6d | 75 | static void __exit nflog_tg_exit(void) |
baf7b1e1 | 76 | { |
92f3b2b1 | 77 | xt_unregister_target(&nflog_tg_reg); |
baf7b1e1 PM |
78 | } |
79 | ||
d3c5ee6d JE |
80 | module_init(nflog_tg_init); |
81 | module_exit(nflog_tg_exit); |