1*4dc78e53SAndroid Build Coastguard Worker /* SPDX-License-Identifier: LGPL-2.1-only */
2*4dc78e53SAndroid Build Coastguard Worker /*
3*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2003-2008 Thomas Graf <[email protected]>
4*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2007 Philip Craig <[email protected]>
5*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2007 Secure Computing Corporation
6*4dc78e53SAndroid Build Coastguard Worker */
7*4dc78e53SAndroid Build Coastguard Worker
8*4dc78e53SAndroid Build Coastguard Worker #include "nl-default.h"
9*4dc78e53SAndroid Build Coastguard Worker
10*4dc78e53SAndroid Build Coastguard Worker #include <linux/netfilter/nfnetlink_log.h>
11*4dc78e53SAndroid Build Coastguard Worker #include <linux/netlink.h>
12*4dc78e53SAndroid Build Coastguard Worker
13*4dc78e53SAndroid Build Coastguard Worker #include <netlink/cli/utils.h>
14*4dc78e53SAndroid Build Coastguard Worker #include <netlink/cli/link.h>
15*4dc78e53SAndroid Build Coastguard Worker #include <netlink/netfilter/nfnl.h>
16*4dc78e53SAndroid Build Coastguard Worker #include <netlink/netfilter/log.h>
17*4dc78e53SAndroid Build Coastguard Worker
alloc_log(void)18*4dc78e53SAndroid Build Coastguard Worker static struct nfnl_log *alloc_log(void)
19*4dc78e53SAndroid Build Coastguard Worker {
20*4dc78e53SAndroid Build Coastguard Worker struct nfnl_log *log;
21*4dc78e53SAndroid Build Coastguard Worker
22*4dc78e53SAndroid Build Coastguard Worker log = nfnl_log_alloc();
23*4dc78e53SAndroid Build Coastguard Worker if (!log)
24*4dc78e53SAndroid Build Coastguard Worker nl_cli_fatal(ENOMEM, "Unable to allocate log object");
25*4dc78e53SAndroid Build Coastguard Worker
26*4dc78e53SAndroid Build Coastguard Worker return log;
27*4dc78e53SAndroid Build Coastguard Worker }
28*4dc78e53SAndroid Build Coastguard Worker
obj_input(struct nl_object * obj,void * arg)29*4dc78e53SAndroid Build Coastguard Worker static void obj_input(struct nl_object *obj, void *arg)
30*4dc78e53SAndroid Build Coastguard Worker {
31*4dc78e53SAndroid Build Coastguard Worker struct nl_dump_params dp = {
32*4dc78e53SAndroid Build Coastguard Worker .dp_type = NL_DUMP_STATS,
33*4dc78e53SAndroid Build Coastguard Worker .dp_fd = stdout,
34*4dc78e53SAndroid Build Coastguard Worker .dp_dump_msgtype = 1,
35*4dc78e53SAndroid Build Coastguard Worker };
36*4dc78e53SAndroid Build Coastguard Worker
37*4dc78e53SAndroid Build Coastguard Worker nl_object_dump(obj, &dp);
38*4dc78e53SAndroid Build Coastguard Worker }
39*4dc78e53SAndroid Build Coastguard Worker
event_input(struct nl_msg * msg,void * arg)40*4dc78e53SAndroid Build Coastguard Worker static int event_input(struct nl_msg *msg, void *arg)
41*4dc78e53SAndroid Build Coastguard Worker {
42*4dc78e53SAndroid Build Coastguard Worker if (nl_msg_parse(msg, &obj_input, NULL) < 0)
43*4dc78e53SAndroid Build Coastguard Worker fprintf(stderr, "<<EVENT>> Unknown message type\n");
44*4dc78e53SAndroid Build Coastguard Worker
45*4dc78e53SAndroid Build Coastguard Worker /* Exit nl_recvmsgs_def() and return to the main select() */
46*4dc78e53SAndroid Build Coastguard Worker return NL_STOP;
47*4dc78e53SAndroid Build Coastguard Worker }
48*4dc78e53SAndroid Build Coastguard Worker
main(int argc,char * argv[])49*4dc78e53SAndroid Build Coastguard Worker int main(int argc, char *argv[])
50*4dc78e53SAndroid Build Coastguard Worker {
51*4dc78e53SAndroid Build Coastguard Worker struct nl_sock *nf_sock;
52*4dc78e53SAndroid Build Coastguard Worker struct nl_sock *rt_sock;
53*4dc78e53SAndroid Build Coastguard Worker struct nfnl_log *log;
54*4dc78e53SAndroid Build Coastguard Worker int copy_mode;
55*4dc78e53SAndroid Build Coastguard Worker uint32_t copy_range;
56*4dc78e53SAndroid Build Coastguard Worker int err;
57*4dc78e53SAndroid Build Coastguard Worker int family;
58*4dc78e53SAndroid Build Coastguard Worker
59*4dc78e53SAndroid Build Coastguard Worker nf_sock = nl_cli_alloc_socket();
60*4dc78e53SAndroid Build Coastguard Worker nl_socket_disable_seq_check(nf_sock);
61*4dc78e53SAndroid Build Coastguard Worker nl_socket_modify_cb(nf_sock, NL_CB_VALID, NL_CB_CUSTOM, event_input, NULL);
62*4dc78e53SAndroid Build Coastguard Worker
63*4dc78e53SAndroid Build Coastguard Worker if ((argc > 1 && !strcasecmp(argv[1], "-h")) || argc < 3) {
64*4dc78e53SAndroid Build Coastguard Worker printf("Usage: nf-log family group [ copy_mode ] "
65*4dc78e53SAndroid Build Coastguard Worker "[copy_range] \n");
66*4dc78e53SAndroid Build Coastguard Worker return 2;
67*4dc78e53SAndroid Build Coastguard Worker }
68*4dc78e53SAndroid Build Coastguard Worker
69*4dc78e53SAndroid Build Coastguard Worker nl_cli_connect(nf_sock, NETLINK_NETFILTER);
70*4dc78e53SAndroid Build Coastguard Worker
71*4dc78e53SAndroid Build Coastguard Worker family = nl_str2af(argv[1]);
72*4dc78e53SAndroid Build Coastguard Worker if (family == AF_UNSPEC)
73*4dc78e53SAndroid Build Coastguard Worker nl_cli_fatal(NLE_INVAL, "Unknown family \"%s\": %s",
74*4dc78e53SAndroid Build Coastguard Worker argv[1], nl_geterror(family));
75*4dc78e53SAndroid Build Coastguard Worker
76*4dc78e53SAndroid Build Coastguard Worker nfnl_log_pf_unbind(nf_sock, family);
77*4dc78e53SAndroid Build Coastguard Worker if ((err = nfnl_log_pf_bind(nf_sock, family)) < 0)
78*4dc78e53SAndroid Build Coastguard Worker nl_cli_fatal(err, "Unable to bind logger: %s",
79*4dc78e53SAndroid Build Coastguard Worker nl_geterror(err));
80*4dc78e53SAndroid Build Coastguard Worker
81*4dc78e53SAndroid Build Coastguard Worker log = alloc_log();
82*4dc78e53SAndroid Build Coastguard Worker nfnl_log_set_group(log, atoi(argv[2]));
83*4dc78e53SAndroid Build Coastguard Worker
84*4dc78e53SAndroid Build Coastguard Worker copy_mode = NFNL_LOG_COPY_META;
85*4dc78e53SAndroid Build Coastguard Worker if (argc > 3) {
86*4dc78e53SAndroid Build Coastguard Worker copy_mode = nfnl_log_str2copy_mode(argv[3]);
87*4dc78e53SAndroid Build Coastguard Worker if (copy_mode < 0)
88*4dc78e53SAndroid Build Coastguard Worker nl_cli_fatal(copy_mode,
89*4dc78e53SAndroid Build Coastguard Worker "Unable to parse copy mode \"%s\": %s",
90*4dc78e53SAndroid Build Coastguard Worker argv[3], nl_geterror(copy_mode));
91*4dc78e53SAndroid Build Coastguard Worker }
92*4dc78e53SAndroid Build Coastguard Worker nfnl_log_set_copy_mode(log, copy_mode);
93*4dc78e53SAndroid Build Coastguard Worker
94*4dc78e53SAndroid Build Coastguard Worker copy_range = 0xFFFF;
95*4dc78e53SAndroid Build Coastguard Worker if (argc > 4)
96*4dc78e53SAndroid Build Coastguard Worker copy_range = atoi(argv[4]);
97*4dc78e53SAndroid Build Coastguard Worker nfnl_log_set_copy_range(log, copy_range);
98*4dc78e53SAndroid Build Coastguard Worker
99*4dc78e53SAndroid Build Coastguard Worker if ((err = nfnl_log_create(nf_sock, log)) < 0)
100*4dc78e53SAndroid Build Coastguard Worker nl_cli_fatal(err, "Unable to bind instance: %s",
101*4dc78e53SAndroid Build Coastguard Worker nl_geterror(err));
102*4dc78e53SAndroid Build Coastguard Worker
103*4dc78e53SAndroid Build Coastguard Worker {
104*4dc78e53SAndroid Build Coastguard Worker struct nl_dump_params dp = {
105*4dc78e53SAndroid Build Coastguard Worker .dp_type = NL_DUMP_STATS,
106*4dc78e53SAndroid Build Coastguard Worker .dp_fd = stdout,
107*4dc78e53SAndroid Build Coastguard Worker .dp_dump_msgtype = 1,
108*4dc78e53SAndroid Build Coastguard Worker };
109*4dc78e53SAndroid Build Coastguard Worker
110*4dc78e53SAndroid Build Coastguard Worker printf("log params: ");
111*4dc78e53SAndroid Build Coastguard Worker nl_object_dump((struct nl_object *) log, &dp);
112*4dc78e53SAndroid Build Coastguard Worker }
113*4dc78e53SAndroid Build Coastguard Worker
114*4dc78e53SAndroid Build Coastguard Worker rt_sock = nl_cli_alloc_socket();
115*4dc78e53SAndroid Build Coastguard Worker nl_cli_connect(rt_sock, NETLINK_ROUTE);
116*4dc78e53SAndroid Build Coastguard Worker nl_cli_link_alloc_cache(rt_sock);
117*4dc78e53SAndroid Build Coastguard Worker
118*4dc78e53SAndroid Build Coastguard Worker while (1) {
119*4dc78e53SAndroid Build Coastguard Worker fd_set rfds;
120*4dc78e53SAndroid Build Coastguard Worker int nffd, rtfd, maxfd, retval;
121*4dc78e53SAndroid Build Coastguard Worker
122*4dc78e53SAndroid Build Coastguard Worker FD_ZERO(&rfds);
123*4dc78e53SAndroid Build Coastguard Worker
124*4dc78e53SAndroid Build Coastguard Worker maxfd = nffd = nl_socket_get_fd(nf_sock);
125*4dc78e53SAndroid Build Coastguard Worker FD_SET(nffd, &rfds);
126*4dc78e53SAndroid Build Coastguard Worker
127*4dc78e53SAndroid Build Coastguard Worker rtfd = nl_socket_get_fd(rt_sock);
128*4dc78e53SAndroid Build Coastguard Worker FD_SET(rtfd, &rfds);
129*4dc78e53SAndroid Build Coastguard Worker if (maxfd < rtfd)
130*4dc78e53SAndroid Build Coastguard Worker maxfd = rtfd;
131*4dc78e53SAndroid Build Coastguard Worker
132*4dc78e53SAndroid Build Coastguard Worker /* wait for an incoming message on the netlink nf_socket */
133*4dc78e53SAndroid Build Coastguard Worker retval = select(maxfd+1, &rfds, NULL, NULL, NULL);
134*4dc78e53SAndroid Build Coastguard Worker
135*4dc78e53SAndroid Build Coastguard Worker if (retval) {
136*4dc78e53SAndroid Build Coastguard Worker if (FD_ISSET(nffd, &rfds))
137*4dc78e53SAndroid Build Coastguard Worker nl_recvmsgs_default(nf_sock);
138*4dc78e53SAndroid Build Coastguard Worker if (FD_ISSET(rtfd, &rfds))
139*4dc78e53SAndroid Build Coastguard Worker nl_recvmsgs_default(rt_sock);
140*4dc78e53SAndroid Build Coastguard Worker }
141*4dc78e53SAndroid Build Coastguard Worker }
142*4dc78e53SAndroid Build Coastguard Worker
143*4dc78e53SAndroid Build Coastguard Worker return 0;
144*4dc78e53SAndroid Build Coastguard Worker }
145