anonfunc/xtables-addons
1
0
Fork 0
mirror of git://git.code.sf.net/p/xtables-addons/xtables-addons synced 2025-09-07 13:15:12 +02:00
Code Issues Releases Wiki Activity

Add xt_LOGMARK (nfmark, ctmark, secmark logger)

Browse Source 
xt_LOGMARK dumps the nfmark (packet mark), ctmark (connection mark)
and/or secmark to syslog.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
This commit is contained in:
Jan Engelhardt
2008-01-30 13:54:57 +01:00
parent f53dc9fbaf
commit 6d2998588d
7 changed files with 308 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

99
extensions/xt_LOGMARK.c Normal file
View File

@@ -0,0 +1,99 @@
/*
* xt_LOGMARK - netfilter mark logging
* useful for debugging
*
* Copyright © CC Computer Consultants, 2007 - 2008
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* version 2 or 3 as published by the Free Software Foundation.
*/
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/netfilter/x_tables.h>
#include <net/netfilter/nf_conntrack.h>
#include "compat_xtables.h"
#include "xt_LOGMARK.h"
static unsigned int
logmark_tg(struct sk_buff *skb, const struct net_device *in,
const struct net_device *out, unsigned int hooknum,
const struct xt_target *target, const void *targinfo)
{
const struct xt_logmark_tginfo *info = targinfo;
printk("<%u>%.*s", info->level, sizeof(info->prefix), info->prefix);
if (info->flags & XT_LOGMARK_NFMARK)
printk(" nfmark=0x%x", skb->mark);
if (info->flags & XT_LOGMARK_CTMARK) {
const struct nf_conn *ct;
enum ip_conntrack_info ctinfo;
ct = nf_ct_get(skb, &ctinfo);
if (ct == NULL)
printk(" ctmark=X");
else
printk(" ctmark=0x%x", ct->mark);
}
if (info->flags & XT_LOGMARK_SECMARK)
printk(" secmark=0x%x", skb->secmark);
printk("\n");
return XT_CONTINUE;
}
static bool
logmark_tg_check(const char *tablename, const void *e,
const struct xt_target *target, void *targinfo,
unsigned int hook_mask)
{
const struct xt_logmark_tginfo *info = targinfo;
if (info->level >= 8) {
pr_debug("LOGMARK: level %u >= 8\n", info->level);
return false;
}
return true;
}
static struct xt_target logmark_tg_reg[] __read_mostly = {
{
.name = "LOGMARK",
.revision = 0,
.family = AF_INET,
.checkentry = logmark_tg_check,
.target = logmark_tg,
.targetsize = sizeof(struct xt_logmark_tginfo),
.me = THIS_MODULE,
},
{
.name = "LOGMARK",
.revision = 0,
.family = AF_INET6,
.checkentry = logmark_tg_check,
.target = logmark_tg,
.targetsize = sizeof(struct xt_logmark_tginfo),
.me = THIS_MODULE,
},
};
static int __init logmark_tg_init(void)
{
return xt_register_targets(logmark_tg_reg, ARRAY_SIZE(logmark_tg_reg));
}
static void __exit logmark_tg_exit(void)
{
xt_unregister_targets(logmark_tg_reg, ARRAY_SIZE(logmark_tg_reg));
}
module_init(logmark_tg_init);
module_exit(logmark_tg_exit);
MODULE_DESCRIPTION("Xtables: netfilter mark logging to syslog");
MODULE_AUTHOR("Jan Engelhardt <jengelh@computergmbh.de>");
MODULE_LICENSE("GPL");
MODULE_ALIAS("ipt_LOGMARK");
MODULE_ALIAS("ip6t_LOGMARK");