diff options
author | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org </C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org> | 2008-03-25 14:38:51 +0000 |
---|---|---|
committer | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org </C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org> | 2008-03-25 14:38:51 +0000 |
commit | d687f5a73f266fca38e3a31c912f0c9694da3d4c (patch) | |
tree | a0e8f274720585714cc1a63a9ec30349a7f283a1 /extensions/libct_proto_icmpv6.c | |
parent | 0e82c979fb08611ecb1aff659d9ac0ed056948ea (diff) | |
download | conntrack-tools-d687f5a73f266fca38e3a31c912f0c9694da3d4c.tar.gz conntrack-tools-d687f5a73f266fca38e3a31c912f0c9694da3d4c.zip |
add missing libct_proto_icmpv6.c
Diffstat (limited to 'extensions/libct_proto_icmpv6.c')
-rw-r--r-- | extensions/libct_proto_icmpv6.c | 129 |
1 files changed, 129 insertions, 0 deletions
diff --git a/extensions/libct_proto_icmpv6.c b/extensions/libct_proto_icmpv6.c new file mode 100644 index 0000000..6c1c358 --- /dev/null +++ b/extensions/libct_proto_icmpv6.c @@ -0,0 +1,129 @@ +/* + * (C) 2008 by Krzysztof Piotr Oledzki <ole@ans.pl> + * + * Based on libct_proto_icmp.c: + * (C) 2005-2007 by Pablo Neira Ayuso <pablo@netfilter.org> + * 2005 by Harald Welte <laforge@netfilter.org> + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + */ + +#include "conntrack.h" + +#include <stdio.h> +#include <getopt.h> +#include <stdlib.h> +#include <netinet/in.h> /* For htons */ +#include <netinet/icmp6.h> +#include <libnetfilter_conntrack/libnetfilter_conntrack.h> +#include <libnetfilter_conntrack/libnetfilter_conntrack_icmp.h> + +static struct option opts[] = { + { "icmpv6-type", 1, 0, '1' }, + { "icmpv6-code", 1, 0, '2' }, + { "icmpv6-id", 1, 0, '3' }, + { 0, 0, 0, 0 }, +}; + +#define ICMPV6_NUMBER_OF_OPT 4 + +static const char *icmpv6_optflags[ICMPV6_NUMBER_OF_OPT] = { + "icmpv6-type", "icmpv6-code", "icmpv6-id" +}; + +static char icmpv6_commands_v_options[NUMBER_OF_CMD][ICMPV6_NUMBER_OF_OPT] = +/* Well, it's better than "Re: Maradona vs Pele" */ +{ + /* 1 2 3 */ +/*CT_LIST*/ {2,2,2}, +/*CT_CREATE*/ {1,1,2}, +/*CT_UPDATE*/ {1,1,2}, +/*CT_DELETE*/ {1,1,2}, +/*CT_GET*/ {1,1,2}, +/*CT_FLUSH*/ {0,0,0}, +/*CT_EVENT*/ {2,2,2}, +/*CT_VERSION*/ {0,0,0}, +/*CT_HELP*/ {0,0,0}, +/*EXP_LIST*/ {0,0,0}, +/*EXP_CREATE*/ {0,0,0}, +/*EXP_DELETE*/ {0,0,0}, +/*EXP_GET*/ {0,0,0}, +/*EXP_FLUSH*/ {0,0,0}, +/*EXP_EVENT*/ {0,0,0}, +}; + +static void help(void) +{ + fprintf(stdout, " --icmpv6-type\t\t\ticmpv6 type\n"); + fprintf(stdout, " --icmpv6-code\t\t\ticmpv6 code\n"); + fprintf(stdout, " --icmpv6-id\t\t\ticmpv6 id\n"); +} + +static int parse(char c, + struct nf_conntrack *ct, + struct nf_conntrack *exptuple, + struct nf_conntrack *mask, + unsigned int *flags) +{ + switch(c) { + case '1': + if (!optarg) + break; + + nfct_set_attr_u8(ct, + ATTR_ICMP_TYPE, + atoi(optarg)); + *flags |= ICMP_TYPE; + break; + + case '2': + if (!optarg) + break; + + nfct_set_attr_u8(ct, + ATTR_ICMP_CODE, + atoi(optarg)); + *flags |= ICMP_CODE; + break; + + case '3': + if (!optarg) + break; + + nfct_set_attr_u16(ct, + ATTR_ICMP_ID, + htons(atoi(optarg))); + *flags |= ICMP_ID; + break; + } + return 1; +} + +static void final_check(unsigned int flags, + unsigned int cmd, + struct nf_conntrack *ct) +{ + generic_opt_check(flags, + ICMPV6_NUMBER_OF_OPT, + icmpv6_commands_v_options[cmd], + icmpv6_optflags); +} + +static struct ctproto_handler icmpv6 = { + .name = "icmpv6", + .protonum = IPPROTO_ICMPV6, + .parse_opts = parse, + .final_check = final_check, + .help = help, + .opts = opts, + .version = VERSION, +}; + +void register_icmpv6(void) +{ + register_proto(&icmpv6); +} |