1 /* Accouting handling for netfilter. */
4 * (C) 2008 Krzysztof Piotr Oledzki <ole@ans.pl>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/netfilter.h>
12 #include <linux/kernel.h>
13 #include <linux/moduleparam.h>
15 #include <net/netfilter/nf_conntrack.h>
16 #include <net/netfilter/nf_conntrack_extend.h>
17 #include <net/netfilter/nf_conntrack_acct.h>
19 #ifdef CONFIG_NF_CT_ACCT
20 #define NF_CT_ACCT_DEFAULT 1
22 #define NF_CT_ACCT_DEFAULT 0
25 int nf_ct_acct __read_mostly
= NF_CT_ACCT_DEFAULT
;
26 EXPORT_SYMBOL_GPL(nf_ct_acct
);
28 module_param_named(acct
, nf_ct_acct
, bool, 0644);
29 MODULE_PARM_DESC(acct
, "Enable connection tracking flow accounting.");
32 static struct ctl_table_header
*acct_sysctl_header
;
33 static struct ctl_table acct_sysctl_table
[] = {
35 .ctl_name
= CTL_UNNUMBERED
,
36 .procname
= "nf_conntrack_acct",
38 .maxlen
= sizeof(unsigned int),
40 .proc_handler
= &proc_dointvec
,
44 #endif /* CONFIG_SYSCTL */
47 seq_print_acct(struct seq_file
*s
, const struct nf_conn
*ct
, int dir
)
49 struct nf_conn_counter
*acct
;
51 acct
= nf_conn_acct_find(ct
);
55 return seq_printf(s
, "packets=%llu bytes=%llu ",
56 (unsigned long long)acct
[dir
].packets
,
57 (unsigned long long)acct
[dir
].bytes
);
59 EXPORT_SYMBOL_GPL(seq_print_acct
);
61 static struct nf_ct_ext_type acct_extend __read_mostly
= {
62 .len
= sizeof(struct nf_conn_counter
[IP_CT_DIR_MAX
]),
63 .align
= __alignof__(struct nf_conn_counter
[IP_CT_DIR_MAX
]),
67 int nf_conntrack_acct_init(void)
71 #ifdef CONFIG_NF_CT_ACCT
72 printk(KERN_WARNING
"CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Plase use\n");
73 printk(KERN_WARNING
"nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or\n");
74 printk(KERN_WARNING
"sysctl net.netfilter.nf_conntrack_acct=1 to enable it.\n");
77 ret
= nf_ct_extend_register(&acct_extend
);
79 printk(KERN_ERR
"nf_conntrack_acct: Unable to register extension\n");
84 acct_sysctl_header
= register_sysctl_paths(nf_net_netfilter_sysctl_path
,
87 if (!acct_sysctl_header
) {
88 nf_ct_extend_unregister(&acct_extend
);
90 printk(KERN_ERR
"nf_conntrack_acct: can't register to sysctl.\n");
98 void nf_conntrack_acct_fini(void)
101 unregister_sysctl_table(acct_sysctl_header
);
103 nf_ct_extend_unregister(&acct_extend
);