#ifndef _NETFILTER_API_H #define _NETFILTER_API_H #include #include #include typedef struct nfapi_socket nfapi_socket; typedef struct nfapi_buf nfapi_buf; typedef struct { const char *(*rule)(const int8_t *, size_t, void *userdata); const char *(*chain)(const int8_t *, size_t, void *userdata); const char *(*expression)(const char *, const int8_t *, size_t, void *userdata); void (*handle)(int64_t, void *userdata); void (*comment)(const char *, void *userdata); } nfapi_callbacks; nfapi_socket *nfapi_socket_open(void); void nfapi_socket_close(nfapi_socket *); const char *nfapi_err_msg(nfapi_socket *); nfapi_buf *nfapi_buf_new(nfapi_socket *); void nfapi_buf_free(nfapi_buf *); __attribute__ ((format(printf, 5, 6))) void nfapi_add_msg(nfapi_buf *, uint16_t type, uint16_t family, uint16_t flags, const char *fmt, ...); __attribute__ ((format(printf, 5, 6))) void nfapi_add_attr(nfapi_buf *b, uint16_t type, const void *data, size_t len, const char *fmt, ...); #define nfapi_add_str_attr(b, t, s, f, ...) \ nfapi_add_attr(b, t, s, strlen(s) + 1, f, ##__VA_ARGS__) #define nfapi_add_u32_attr(b, t, u, f, ...) do { \ uint32_t __u = (u); \ nfapi_add_attr(b, t, &__u, sizeof(__u), f, ##__VA_ARGS__); \ } while (0) #define nfapi_add_u64_attr(b, t, u, f, ...) do { \ uint64_t __u = (u); \ nfapi_add_attr(b, t, &__u, sizeof(__u), f, ##__VA_ARGS__); \ } while (0) #define nfapi_add_binary_str_attr(b, type, s, fmt, ...) \ nfapi_add_attr(b, type, &(struct { \ uint16_t len; \ char buf[sizeof(s)]; \ }) { \ .len = htons(sizeof(s)), \ .buf = s, \ }, 2 + sizeof(s), \ fmt, ##__VA_ARGS__) void nfapi_nested_begin(nfapi_buf *, uint16_t type, const char *name); void nfapi_nested_end(nfapi_buf *); void nfapi_batch_begin(nfapi_buf *); void nfapi_batch_end(nfapi_buf *); bool nfapi_send_buf(nfapi_socket *, nfapi_buf *); const char *nfapi_recv_iter(nfapi_socket *, const nfapi_callbacks *, void *userdata); const char *nfapi_rule_iter(const int8_t *, size_t, const nfapi_callbacks *, void *userdata); const char *nfapi_get_immediate_chain(const int8_t *, size_t); const char *nfapi_get_target(const int8_t *, size_t, void *info, size_t *info_len); G_DEFINE_AUTOPTR_CLEANUP_FUNC(nfapi_socket, nfapi_socket_close); G_DEFINE_AUTOPTR_CLEANUP_FUNC(nfapi_buf, nfapi_buf_free); #endif