1*4dc78e53SAndroid Build Coastguard Worker /* SPDX-License-Identifier: LGPL-2.1-only */
2*4dc78e53SAndroid Build Coastguard Worker /*
3*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2003-2009 Thomas Graf <[email protected]>
4*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2007 Philip Craig <[email protected]>
5*4dc78e53SAndroid Build Coastguard Worker * Copyright (c) 2007 Secure Computing Corporation
6*4dc78e53SAndroid Build Coastguard Worker */
7*4dc78e53SAndroid Build Coastguard Worker
8*4dc78e53SAndroid Build Coastguard Worker #include "nl-default.h"
9*4dc78e53SAndroid Build Coastguard Worker
10*4dc78e53SAndroid Build Coastguard Worker #include <linux/netlink.h>
11*4dc78e53SAndroid Build Coastguard Worker
12*4dc78e53SAndroid Build Coastguard Worker #include <netlink/cli/utils.h>
13*4dc78e53SAndroid Build Coastguard Worker #include <netlink/cli/ct.h>
14*4dc78e53SAndroid Build Coastguard Worker
print_usage(void)15*4dc78e53SAndroid Build Coastguard Worker static void print_usage(void)
16*4dc78e53SAndroid Build Coastguard Worker {
17*4dc78e53SAndroid Build Coastguard Worker printf(
18*4dc78e53SAndroid Build Coastguard Worker "Usage: nf-ct-list [OPTION]... [CONNTRACK ENTRY]\n"
19*4dc78e53SAndroid Build Coastguard Worker "\n"
20*4dc78e53SAndroid Build Coastguard Worker "Options\n"
21*4dc78e53SAndroid Build Coastguard Worker " -f, --format=TYPE Output format { brief | details | stats }\n"
22*4dc78e53SAndroid Build Coastguard Worker " -h, --help Show this help\n"
23*4dc78e53SAndroid Build Coastguard Worker " -v, --version Show versioning information\n"
24*4dc78e53SAndroid Build Coastguard Worker "\n"
25*4dc78e53SAndroid Build Coastguard Worker "Conntrack Selection\n"
26*4dc78e53SAndroid Build Coastguard Worker " -i, --id=NUM Identifier\n"
27*4dc78e53SAndroid Build Coastguard Worker " -p, --proto=PROTOCOL Protocol\n"
28*4dc78e53SAndroid Build Coastguard Worker " --tcp-state=STATE TCP connection state\n"
29*4dc78e53SAndroid Build Coastguard Worker " --orig-src=ADDR Original source address\n"
30*4dc78e53SAndroid Build Coastguard Worker " --orig-sport=PORT Original source port\n"
31*4dc78e53SAndroid Build Coastguard Worker " --orig-dst=ADDR Original destination address\n"
32*4dc78e53SAndroid Build Coastguard Worker " --orig-dport=PORT Original destination port\n"
33*4dc78e53SAndroid Build Coastguard Worker " --reply-src=ADDR Reply source address\n"
34*4dc78e53SAndroid Build Coastguard Worker " --reply-sport=PORT Reply source port\n"
35*4dc78e53SAndroid Build Coastguard Worker " --reply-dst=ADDR Reply destination address\n"
36*4dc78e53SAndroid Build Coastguard Worker " --reply-dport=PORT Reply destination port\n"
37*4dc78e53SAndroid Build Coastguard Worker " -F, --family=FAMILY Address family\n"
38*4dc78e53SAndroid Build Coastguard Worker " --mark=NUM Mark value\n"
39*4dc78e53SAndroid Build Coastguard Worker " --timeout=NUM Timeout value\n"
40*4dc78e53SAndroid Build Coastguard Worker " --refcnt=NUM Use counter value\n"
41*4dc78e53SAndroid Build Coastguard Worker " --flags Flags\n"
42*4dc78e53SAndroid Build Coastguard Worker );
43*4dc78e53SAndroid Build Coastguard Worker exit(0);
44*4dc78e53SAndroid Build Coastguard Worker }
45*4dc78e53SAndroid Build Coastguard Worker
main(int argc,char * argv[])46*4dc78e53SAndroid Build Coastguard Worker int main(int argc, char *argv[])
47*4dc78e53SAndroid Build Coastguard Worker {
48*4dc78e53SAndroid Build Coastguard Worker struct nl_sock *sock;
49*4dc78e53SAndroid Build Coastguard Worker struct nl_cache *ct_cache;
50*4dc78e53SAndroid Build Coastguard Worker struct nfnl_ct *ct;
51*4dc78e53SAndroid Build Coastguard Worker struct nl_dump_params params = {
52*4dc78e53SAndroid Build Coastguard Worker .dp_type = NL_DUMP_LINE,
53*4dc78e53SAndroid Build Coastguard Worker .dp_fd = stdout,
54*4dc78e53SAndroid Build Coastguard Worker };
55*4dc78e53SAndroid Build Coastguard Worker
56*4dc78e53SAndroid Build Coastguard Worker ct = nl_cli_ct_alloc();
57*4dc78e53SAndroid Build Coastguard Worker
58*4dc78e53SAndroid Build Coastguard Worker for (;;) {
59*4dc78e53SAndroid Build Coastguard Worker int c, optidx = 0;
60*4dc78e53SAndroid Build Coastguard Worker enum {
61*4dc78e53SAndroid Build Coastguard Worker ARG_MARK = 257,
62*4dc78e53SAndroid Build Coastguard Worker ARG_TCP_STATE = 258,
63*4dc78e53SAndroid Build Coastguard Worker ARG_ORIG_SRC,
64*4dc78e53SAndroid Build Coastguard Worker ARG_ORIG_SPORT,
65*4dc78e53SAndroid Build Coastguard Worker ARG_ORIG_DST,
66*4dc78e53SAndroid Build Coastguard Worker ARG_ORIG_DPORT,
67*4dc78e53SAndroid Build Coastguard Worker ARG_REPLY_SRC,
68*4dc78e53SAndroid Build Coastguard Worker ARG_REPLY_SPORT,
69*4dc78e53SAndroid Build Coastguard Worker ARG_REPLY_DST,
70*4dc78e53SAndroid Build Coastguard Worker ARG_REPLY_DPORT,
71*4dc78e53SAndroid Build Coastguard Worker ARG_TIMEOUT,
72*4dc78e53SAndroid Build Coastguard Worker ARG_REFCNT,
73*4dc78e53SAndroid Build Coastguard Worker ARG_FLAGS,
74*4dc78e53SAndroid Build Coastguard Worker };
75*4dc78e53SAndroid Build Coastguard Worker static struct option long_opts[] = {
76*4dc78e53SAndroid Build Coastguard Worker { "format", 1, 0, 'f' },
77*4dc78e53SAndroid Build Coastguard Worker { "help", 0, 0, 'h' },
78*4dc78e53SAndroid Build Coastguard Worker { "version", 0, 0, 'v' },
79*4dc78e53SAndroid Build Coastguard Worker { "id", 1, 0, 'i' },
80*4dc78e53SAndroid Build Coastguard Worker { "proto", 1, 0, 'p' },
81*4dc78e53SAndroid Build Coastguard Worker { "tcp-state", 1, 0, ARG_TCP_STATE },
82*4dc78e53SAndroid Build Coastguard Worker { "orig-src", 1, 0, ARG_ORIG_SRC },
83*4dc78e53SAndroid Build Coastguard Worker { "orig-sport", 1, 0, ARG_ORIG_SPORT },
84*4dc78e53SAndroid Build Coastguard Worker { "orig-dst", 1, 0, ARG_ORIG_DST },
85*4dc78e53SAndroid Build Coastguard Worker { "orig-dport", 1, 0, ARG_ORIG_DPORT },
86*4dc78e53SAndroid Build Coastguard Worker { "reply-src", 1, 0, ARG_REPLY_SRC },
87*4dc78e53SAndroid Build Coastguard Worker { "reply-sport", 1, 0, ARG_REPLY_SPORT },
88*4dc78e53SAndroid Build Coastguard Worker { "reply-dst", 1, 0, ARG_REPLY_DST },
89*4dc78e53SAndroid Build Coastguard Worker { "reply-dport", 1, 0, ARG_REPLY_DPORT },
90*4dc78e53SAndroid Build Coastguard Worker { "family", 1, 0, 'F' },
91*4dc78e53SAndroid Build Coastguard Worker { "mark", 1, 0, ARG_MARK },
92*4dc78e53SAndroid Build Coastguard Worker { "timeout", 1, 0, ARG_TIMEOUT },
93*4dc78e53SAndroid Build Coastguard Worker { "refcnt", 1, 0, ARG_REFCNT },
94*4dc78e53SAndroid Build Coastguard Worker { 0, 0, 0, 0 }
95*4dc78e53SAndroid Build Coastguard Worker };
96*4dc78e53SAndroid Build Coastguard Worker
97*4dc78e53SAndroid Build Coastguard Worker c = getopt_long(argc, argv, "46f:hvi:p:F:", long_opts, &optidx);
98*4dc78e53SAndroid Build Coastguard Worker if (c == -1)
99*4dc78e53SAndroid Build Coastguard Worker break;
100*4dc78e53SAndroid Build Coastguard Worker
101*4dc78e53SAndroid Build Coastguard Worker switch (c) {
102*4dc78e53SAndroid Build Coastguard Worker case '?': exit(NLE_INVAL);
103*4dc78e53SAndroid Build Coastguard Worker case '4': nfnl_ct_set_family(ct, AF_INET); break;
104*4dc78e53SAndroid Build Coastguard Worker case '6': nfnl_ct_set_family(ct, AF_INET6); break;
105*4dc78e53SAndroid Build Coastguard Worker case 'f': params.dp_type = nl_cli_parse_dumptype(optarg); break;
106*4dc78e53SAndroid Build Coastguard Worker case 'h': print_usage(); break;
107*4dc78e53SAndroid Build Coastguard Worker case 'v': nl_cli_print_version(); break;
108*4dc78e53SAndroid Build Coastguard Worker case 'i': nl_cli_ct_parse_id(ct, optarg); break;
109*4dc78e53SAndroid Build Coastguard Worker case 'p': nl_cli_ct_parse_protocol(ct, optarg); break;
110*4dc78e53SAndroid Build Coastguard Worker case ARG_TCP_STATE: nl_cli_ct_parse_tcp_state(ct, optarg); break;
111*4dc78e53SAndroid Build Coastguard Worker case ARG_ORIG_SRC: nl_cli_ct_parse_src(ct, 0, optarg); break;
112*4dc78e53SAndroid Build Coastguard Worker case ARG_ORIG_SPORT: nl_cli_ct_parse_src_port(ct, 0, optarg); break;
113*4dc78e53SAndroid Build Coastguard Worker case ARG_ORIG_DST: nl_cli_ct_parse_dst(ct, 0, optarg); break;
114*4dc78e53SAndroid Build Coastguard Worker case ARG_ORIG_DPORT: nl_cli_ct_parse_dst_port(ct, 0, optarg); break;
115*4dc78e53SAndroid Build Coastguard Worker case ARG_REPLY_SRC: nl_cli_ct_parse_src(ct, 1, optarg); break;
116*4dc78e53SAndroid Build Coastguard Worker case ARG_REPLY_SPORT: nl_cli_ct_parse_src_port(ct, 1, optarg); break;
117*4dc78e53SAndroid Build Coastguard Worker case ARG_REPLY_DST: nl_cli_ct_parse_dst(ct, 1, optarg); break;
118*4dc78e53SAndroid Build Coastguard Worker case ARG_REPLY_DPORT: nl_cli_ct_parse_dst_port(ct, 1, optarg); break;
119*4dc78e53SAndroid Build Coastguard Worker case 'F': nl_cli_ct_parse_family(ct, optarg); break;
120*4dc78e53SAndroid Build Coastguard Worker case ARG_MARK: nl_cli_ct_parse_mark(ct, optarg); break;
121*4dc78e53SAndroid Build Coastguard Worker case ARG_TIMEOUT: nl_cli_ct_parse_timeout(ct, optarg); break;
122*4dc78e53SAndroid Build Coastguard Worker case ARG_REFCNT: nl_cli_ct_parse_use(ct, optarg); break;
123*4dc78e53SAndroid Build Coastguard Worker case ARG_FLAGS: nl_cli_ct_parse_status(ct, optarg); break;
124*4dc78e53SAndroid Build Coastguard Worker }
125*4dc78e53SAndroid Build Coastguard Worker }
126*4dc78e53SAndroid Build Coastguard Worker
127*4dc78e53SAndroid Build Coastguard Worker sock = nl_cli_alloc_socket();
128*4dc78e53SAndroid Build Coastguard Worker nl_cli_connect(sock, NETLINK_NETFILTER);
129*4dc78e53SAndroid Build Coastguard Worker ct_cache = nl_cli_ct_alloc_cache(sock);
130*4dc78e53SAndroid Build Coastguard Worker
131*4dc78e53SAndroid Build Coastguard Worker nl_cache_dump_filter(ct_cache, ¶ms, OBJ_CAST(ct));
132*4dc78e53SAndroid Build Coastguard Worker
133*4dc78e53SAndroid Build Coastguard Worker return 0;
134*4dc78e53SAndroid Build Coastguard Worker }
135