include/uapi/linux/netfilter/nfnetlink_queue.h

   1 #ifndef _NFNETLINK_QUEUE_H
   2 #define _NFNETLINK_QUEUE_H
   3
   4 #include <linux/types.h>
   5 #include <linux/netfilter/nfnetlink.h>
   6
   7 enum nfqnl_msg_types {
   8         NFQNL_MSG_PACKET,               /* packet from kernel to userspace */
   9         NFQNL_MSG_VERDICT,              /* verdict from userspace to kernel */
  10         NFQNL_MSG_CONFIG,               /* connect to a particular queue */
  11         NFQNL_MSG_VERDICT_BATCH,        /* batchv from userspace to kernel */
  12
  13         NFQNL_MSG_MAX
  14 };
  15
  16 struct nfqnl_msg_packet_hdr {
  17         __be32          packet_id;      /* unique ID of packet in queue */
  18         __be16          hw_protocol;    /* hw protocol (network order) */
  19         __u8    hook;           /* netfilter hook */
  20 } __attribute__ ((packed));
  21
  22 struct nfqnl_msg_packet_hw {
  23         __be16          hw_addrlen;
  24         __u16   _pad;
  25         __u8    hw_addr[8];
  26 };
  27
  28 struct nfqnl_msg_packet_timestamp {
  29         __aligned_be64  sec;
  30         __aligned_be64  usec;
  31 };
  32
  33 enum nfqnl_attr_type {
  34         NFQA_UNSPEC,
  35         NFQA_PACKET_HDR,
  36         NFQA_VERDICT_HDR,               /* nfqnl_msg_verdict_hrd */
  37         NFQA_MARK,                      /* __u32 nfmark */
  38         NFQA_TIMESTAMP,                 /* nfqnl_msg_packet_timestamp */
  39         NFQA_IFINDEX_INDEV,             /* __u32 ifindex */
  40         NFQA_IFINDEX_OUTDEV,            /* __u32 ifindex */
  41         NFQA_IFINDEX_PHYSINDEV,         /* __u32 ifindex */
  42         NFQA_IFINDEX_PHYSOUTDEV,        /* __u32 ifindex */
  43         NFQA_HWADDR,                    /* nfqnl_msg_packet_hw */
  44         NFQA_PAYLOAD,                   /* opaque data payload */
  45         NFQA_CT,                        /* nf_conntrack_netlink.h */
  46         NFQA_CT_INFO,                   /* enum ip_conntrack_info */
  47         NFQA_CAP_LEN,                   /* __u32 length of captured packet */
  48         NFQA_SKB_INFO,                  /* __u32 skb meta information */
  49
  50         __NFQA_MAX
  51 };
  52 #define NFQA_MAX (__NFQA_MAX - 1)
  53
  54 struct nfqnl_msg_verdict_hdr {
  55         __be32 verdict;
  56         __be32 id;
  57 };
  58
  59
  60 enum nfqnl_msg_config_cmds {
  61         NFQNL_CFG_CMD_NONE,
  62         NFQNL_CFG_CMD_BIND,
  63         NFQNL_CFG_CMD_UNBIND,
  64         NFQNL_CFG_CMD_PF_BIND,
  65         NFQNL_CFG_CMD_PF_UNBIND,
  66 };
  67
  68 struct nfqnl_msg_config_cmd {
  69         __u8    command;        /* nfqnl_msg_config_cmds */
  70         __u8    _pad;
  71         __be16          pf;             /* AF_xxx for PF_[UN]BIND */
  72 };
  73
  74 enum nfqnl_config_mode {
  75         NFQNL_COPY_NONE,
  76         NFQNL_COPY_META,
  77         NFQNL_COPY_PACKET,
  78 };
  79
  80 struct nfqnl_msg_config_params {
  81         __be32          copy_range;
  82         __u8    copy_mode;      /* enum nfqnl_config_mode */
  83 } __attribute__ ((packed));
  84
  85
  86 enum nfqnl_attr_config {
  87         NFQA_CFG_UNSPEC,
  88         NFQA_CFG_CMD,                   /* nfqnl_msg_config_cmd */
  89         NFQA_CFG_PARAMS,                /* nfqnl_msg_config_params */
  90         NFQA_CFG_QUEUE_MAXLEN,          /* __u32 */
  91         NFQA_CFG_MASK,                  /* identify which flags to change */
  92         NFQA_CFG_FLAGS,                 /* value of these flags (__u32) */
  93         __NFQA_CFG_MAX
  94 };
  95 #define NFQA_CFG_MAX (__NFQA_CFG_MAX-1)
  96
  97 /* Flags for NFQA_CFG_FLAGS */
  98 #define NFQA_CFG_F_FAIL_OPEN                    (1 << 0)
  99 #define NFQA_CFG_F_CONNTRACK                    (1 << 1)
 100 #define NFQA_CFG_F_GSO                          (1 << 2)
 101 #define NFQA_CFG_F_MAX                          (1 << 3)
 102
 103 /* flags for NFQA_SKB_INFO */
 104 /* packet appears to have wrong checksums, but they are ok */
 105 #define NFQA_SKB_CSUMNOTREADY (1 << 0)
 106 /* packet is GSO (i.e., exceeds device mtu) */
 107 #define NFQA_SKB_GSO (1 << 1)
 108 /* csum not validated (incoming device doesn't support hw checksum, etc.) */
 109 #define NFQA_SKB_CSUM_NOTVERIFIED (1 << 2)
 110
 111 #endif /* _NFNETLINK_QUEUE_H */