struct nflog_handle *nflog_open_nfnl(struct nfnl_handle *nfnlh)
{
struct nflog_handle *h;
int err;
h = malloc(sizeof(*h));
if (!h)
return NULL;
memset(h, 0, sizeof(*h));
h->nfnlh = nfnlh;
h->nfnlssh = nfnl_subsys_open(h->nfnlh, NFNL_SUBSYS_ULOG,
NFULNL_MSG_MAX, 0);
if (!h->nfnlssh) {
/* FIXME: nflog_errno */
goto out_free;
}
pkt_cb.data = h;
err = nfnl_callback_register(h->nfnlssh, NFULNL_MSG_PACKET, &pkt_cb);
if (err < 0) {
nflog_errno = err;
goto out_close;
}
return h;
out_close:
nfnl_close(h->nfnlh);
out_free:
free(h);
return NULL;
}
int main(int argc, char *argv[])
{
int ch, del = 0, err;
char *fingerprints = NULL;
while ((ch = getopt(argc, argv, "f:dh")) != -1) {
switch (ch) {
case 'f':
fingerprints = optarg;
break;
case 'd':
del = 1;
break;
default:
fprintf(stderr,
"Usage: %s -f fingerprints -d <del rules> -h\n",
argv[0]);
return -1;
}
}
if (!fingerprints) {
err = -ENOENT;
goto err_out_exit;
}
nfnlh = nfnl_open();
if (!nfnlh) {
err = -EINVAL;
ulog_err("Failed to create nfnl handler");
goto err_out_exit;
}
#ifndef NFNL_SUBSYS_OSF
#define NFNL_SUBSYS_OSF 5
#endif
nfnlssh = nfnl_subsys_open(nfnlh, NFNL_SUBSYS_OSF, OSF_MSG_MAX, 0);
if (!nfnlssh) {
err = -EINVAL;
ulog_err("Faied to create nfnl subsystem");
goto err_out_close;
}
err = osf_load_entries(fingerprints, del);
if (err)
goto err_out_close_subsys;
nfnl_subsys_close(nfnlssh);
nfnl_close(nfnlh);
return 0;
err_out_close_subsys:
nfnl_subsys_close(nfnlssh);
err_out_close:
nfnl_close(nfnlh);
err_out_exit:
return err;
}
struct nfct_handle *nfct_open_nfnl(struct nfnl_handle *nfnlh,
u_int8_t subsys_id,
unsigned int subscriptions)
{
struct nfct_handle *cth;
cth = (struct nfct_handle *) malloc(sizeof(struct nfct_handle));
if (!cth)
return NULL;
memset(cth, 0, sizeof(*cth));
cth->nfnlh = nfnlh;
if (subsys_id == 0 || subsys_id == NFNL_SUBSYS_CTNETLINK) {
cth->nfnlssh_ct = nfnl_subsys_open(cth->nfnlh,
NFNL_SUBSYS_CTNETLINK,
IPCTNL_MSG_MAX,
subscriptions);
if (!cth->nfnlssh_ct)
goto out_free;
}
if (subsys_id == 0 || subsys_id == NFNL_SUBSYS_CTNETLINK_EXP) {
cth->nfnlssh_exp = nfnl_subsys_open(cth->nfnlh,
NFNL_SUBSYS_CTNETLINK_EXP,
IPCTNL_MSG_EXP_MAX,
subscriptions);
if (!cth->nfnlssh_exp)
goto out_free;
}
return cth;
out_free:
if (cth->nfnlssh_exp) {
nfnl_subsys_close(cth->nfnlssh_exp);
cth->nfnlssh_exp = NULL;
}
if (cth->nfnlssh_ct) {
nfnl_subsys_close(cth->nfnlssh_ct);
cth->nfnlssh_ct = NULL;
}
free(cth);
return NULL;
}