xt_NFLOG.c revision 92f3b2b1bc968caaabee8cd78bee75ab7c4af74e
1/* 2 * Copyright (c) 2006 Patrick McHardy <kaber@trash.net> 3 * 4 * This program is free software; you can redistribute it and/or modify 5 * it under the terms of the GNU General Public License version 2 as 6 * published by the Free Software Foundation. 7 */ 8 9#include <linux/module.h> 10#include <linux/init.h> 11#include <linux/skbuff.h> 12 13#include <linux/netfilter/x_tables.h> 14#include <linux/netfilter/xt_NFLOG.h> 15#include <net/netfilter/nf_log.h> 16 17MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>"); 18MODULE_DESCRIPTION("Xtables: packet logging to netlink using NFLOG"); 19MODULE_LICENSE("GPL"); 20MODULE_ALIAS("ipt_NFLOG"); 21MODULE_ALIAS("ip6t_NFLOG"); 22 23static unsigned int 24nflog_tg(struct sk_buff *skb, const struct xt_target_param *par) 25{ 26 const struct xt_nflog_info *info = par->targinfo; 27 struct nf_loginfo li; 28 29 li.type = NF_LOG_TYPE_ULOG; 30 li.u.ulog.copy_len = info->len; 31 li.u.ulog.group = info->group; 32 li.u.ulog.qthreshold = info->threshold; 33 34 nf_log_packet(par->family, par->hooknum, skb, par->in, 35 par->out, &li, "%s", info->prefix); 36 return XT_CONTINUE; 37} 38 39static bool nflog_tg_check(const struct xt_tgchk_param *par) 40{ 41 const struct xt_nflog_info *info = par->targinfo; 42 43 if (info->flags & ~XT_NFLOG_MASK) 44 return false; 45 if (info->prefix[sizeof(info->prefix) - 1] != '\0') 46 return false; 47 return true; 48} 49 50static struct xt_target nflog_tg_reg __read_mostly = { 51 .name = "NFLOG", 52 .revision = 0, 53 .family = NFPROTO_UNSPEC, 54 .checkentry = nflog_tg_check, 55 .target = nflog_tg, 56 .targetsize = sizeof(struct xt_nflog_info), 57 .me = THIS_MODULE, 58}; 59 60static int __init nflog_tg_init(void) 61{ 62 return xt_register_target(&nflog_tg_reg); 63} 64 65static void __exit nflog_tg_exit(void) 66{ 67 xt_unregister_target(&nflog_tg_reg); 68} 69 70module_init(nflog_tg_init); 71module_exit(nflog_tg_exit); 72