18a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <stdio.h>
28a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <stdlib.h>
38a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <unistd.h>
48a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <time.h>
58a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <arpa/inet.h>
68a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
78a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <libmnl/libmnl.h>
88a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
98a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
108a44513648da0c5f5551f96b329cf56b66f5b303pkanwar#include <linux/netfilter/nf_conntrack_tcp.h>
118a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
128a44513648da0c5f5551f96b329cf56b66f5b303pkanwarint main(void)
138a44513648da0c5f5551f96b329cf56b66f5b303pkanwar{
148a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	struct mnl_socket *nl;
158a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	struct nlmsghdr *nlh;
168a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	struct nfgenmsg *nfh;
178a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	char buf[MNL_SOCKET_BUFFER_SIZE];
188a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	unsigned int seq, portid;
198a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	int ret;
208a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
218a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nl = mnl_socket_open(NETLINK_NETFILTER);
228a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	if (nl == NULL) {
238a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		perror("mnl_socket_open");
248a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		exit(EXIT_FAILURE);
258a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	}
268a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
278a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	if (mnl_socket_bind(nl, 0, MNL_SOCKET_AUTOPID) < 0) {
288a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		perror("mnl_socket_bind");
298a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		exit(EXIT_FAILURE);
308a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	}
318a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	portid = mnl_socket_get_portid(nl);
328a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
338a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nlh = mnl_nlmsg_put_header(buf);
348a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nlh->nlmsg_type = (NFNL_SUBSYS_CTNETLINK << 8) | IPCTNL_MSG_CT_DELETE;
358a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nlh->nlmsg_flags = NLM_F_REQUEST|NLM_F_ACK;
368a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nlh->nlmsg_seq = seq = time(NULL);
378a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
388a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nfh = mnl_nlmsg_put_extra_header(nlh, sizeof(struct nfgenmsg));
398a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nfh->nfgen_family = AF_INET;
408a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nfh->version = NFNETLINK_V0;
418a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	nfh->res_id = 0;
428a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
438a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	ret = mnl_socket_sendto(nl, nlh, nlh->nlmsg_len);
448a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	if (ret == -1) {
458a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		perror("mnl_socket_recvfrom");
468a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		exit(EXIT_FAILURE);
478a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	}
488a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
498a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
508a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	while (ret > 0) {
518a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		ret = mnl_cb_run(buf, ret, seq, portid, NULL, NULL);
528a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		if (ret <= MNL_CB_STOP)
538a44513648da0c5f5551f96b329cf56b66f5b303pkanwar			break;
548a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
558a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	}
568a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	if (ret == -1) {
578a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		perror("mnl_socket_recvfrom");
588a44513648da0c5f5551f96b329cf56b66f5b303pkanwar		exit(EXIT_FAILURE);
598a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	}
608a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
618a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	mnl_socket_close(nl);
628a44513648da0c5f5551f96b329cf56b66f5b303pkanwar
638a44513648da0c5f5551f96b329cf56b66f5b303pkanwar	return 0;
648a44513648da0c5f5551f96b329cf56b66f5b303pkanwar}
65