1 #include <linux/kernel.h>
2 #include <linux/init.h>
3 #include <linux/module.h>
4 #include <linux/proc_fs.h>
5 #include <linux/skbuff.h>
6 #include <linux/netfilter.h>
7 #include <linux/seq_file.h>
8 #include <net/protocol.h>
9 #include <net/netfilter/nf_log.h>
11 #include "nf_internals.h"
13 /* Internal logging interface, which relies on the real
16 #define NF_LOG_PREFIXLEN 128
17 #define NFLOGGER_NAME_LEN 64
19 static const struct nf_logger __rcu
*nf_loggers
[NFPROTO_NUMPROTO
] __read_mostly
;
20 static struct list_head nf_loggers_l
[NFPROTO_NUMPROTO
] __read_mostly
;
21 static DEFINE_MUTEX(nf_log_mutex
);
23 static struct nf_logger
*__find_logger(int pf
, const char *str_logger
)
27 list_for_each_entry(t
, &nf_loggers_l
[pf
], list
[pf
]) {
28 if (!strnicmp(str_logger
, t
->name
, strlen(t
->name
)))
35 /* return EEXIST if the same logger is registred, 0 on success. */
36 int nf_log_register(u_int8_t pf
, struct nf_logger
*logger
)
38 const struct nf_logger
*llog
;
41 if (pf
>= ARRAY_SIZE(nf_loggers
))
44 for (i
= 0; i
< ARRAY_SIZE(logger
->list
); i
++)
45 INIT_LIST_HEAD(&logger
->list
[i
]);
47 mutex_lock(&nf_log_mutex
);
49 if (pf
== NFPROTO_UNSPEC
) {
50 for (i
= NFPROTO_UNSPEC
; i
< NFPROTO_NUMPROTO
; i
++)
51 list_add_tail(&(logger
->list
[i
]), &(nf_loggers_l
[i
]));
53 /* register at end of list to honor first register win */
54 list_add_tail(&logger
->list
[pf
], &nf_loggers_l
[pf
]);
55 llog
= rcu_dereference_protected(nf_loggers
[pf
],
56 lockdep_is_held(&nf_log_mutex
));
58 rcu_assign_pointer(nf_loggers
[pf
], logger
);
61 mutex_unlock(&nf_log_mutex
);
65 EXPORT_SYMBOL(nf_log_register
);
67 void nf_log_unregister(struct nf_logger
*logger
)
69 const struct nf_logger
*c_logger
;
72 mutex_lock(&nf_log_mutex
);
73 for (i
= 0; i
< ARRAY_SIZE(nf_loggers
); i
++) {
74 c_logger
= rcu_dereference_protected(nf_loggers
[i
],
75 lockdep_is_held(&nf_log_mutex
));
76 if (c_logger
== logger
)
77 rcu_assign_pointer(nf_loggers
[i
], NULL
);
78 list_del(&logger
->list
[i
]);
80 mutex_unlock(&nf_log_mutex
);
84 EXPORT_SYMBOL(nf_log_unregister
);
86 int nf_log_bind_pf(u_int8_t pf
, const struct nf_logger
*logger
)
88 mutex_lock(&nf_log_mutex
);
89 if (__find_logger(pf
, logger
->name
) == NULL
) {
90 mutex_unlock(&nf_log_mutex
);
93 rcu_assign_pointer(nf_loggers
[pf
], logger
);
94 mutex_unlock(&nf_log_mutex
);
97 EXPORT_SYMBOL(nf_log_bind_pf
);
99 void nf_log_unbind_pf(u_int8_t pf
)
101 mutex_lock(&nf_log_mutex
);
102 rcu_assign_pointer(nf_loggers
[pf
], NULL
);
103 mutex_unlock(&nf_log_mutex
);
105 EXPORT_SYMBOL(nf_log_unbind_pf
);
107 void nf_log_packet(u_int8_t pf
,
108 unsigned int hooknum
,
109 const struct sk_buff
*skb
,
110 const struct net_device
*in
,
111 const struct net_device
*out
,
112 const struct nf_loginfo
*loginfo
,
113 const char *fmt
, ...)
116 char prefix
[NF_LOG_PREFIXLEN
];
117 const struct nf_logger
*logger
;
120 logger
= rcu_dereference(nf_loggers
[pf
]);
123 vsnprintf(prefix
, sizeof(prefix
), fmt
, args
);
125 logger
->logfn(pf
, hooknum
, skb
, in
, out
, loginfo
, prefix
);
129 EXPORT_SYMBOL(nf_log_packet
);
131 #ifdef CONFIG_PROC_FS
132 static void *seq_start(struct seq_file
*seq
, loff_t
*pos
)
134 mutex_lock(&nf_log_mutex
);
136 if (*pos
>= ARRAY_SIZE(nf_loggers
))
142 static void *seq_next(struct seq_file
*s
, void *v
, loff_t
*pos
)
146 if (*pos
>= ARRAY_SIZE(nf_loggers
))
152 static void seq_stop(struct seq_file
*s
, void *v
)
154 mutex_unlock(&nf_log_mutex
);
157 static int seq_show(struct seq_file
*s
, void *v
)
160 const struct nf_logger
*logger
;
164 logger
= rcu_dereference_protected(nf_loggers
[*pos
],
165 lockdep_is_held(&nf_log_mutex
));
168 ret
= seq_printf(s
, "%2lld NONE (", *pos
);
170 ret
= seq_printf(s
, "%2lld %s (", *pos
, logger
->name
);
175 list_for_each_entry(t
, &nf_loggers_l
[*pos
], list
[*pos
]) {
176 ret
= seq_printf(s
, "%s", t
->name
);
179 if (&t
->list
[*pos
] != nf_loggers_l
[*pos
].prev
) {
180 ret
= seq_printf(s
, ",");
186 return seq_printf(s
, ")\n");
189 static const struct seq_operations nflog_seq_ops
= {
196 static int nflog_open(struct inode
*inode
, struct file
*file
)
198 return seq_open(file
, &nflog_seq_ops
);
201 static const struct file_operations nflog_file_ops
= {
202 .owner
= THIS_MODULE
,
206 .release
= seq_release
,
213 static struct ctl_path nf_log_sysctl_path
[] = {
214 { .procname
= "net", },
215 { .procname
= "netfilter", },
216 { .procname
= "nf_log", },
220 static char nf_log_sysctl_fnames
[NFPROTO_NUMPROTO
-NFPROTO_UNSPEC
][3];
221 static struct ctl_table nf_log_sysctl_table
[NFPROTO_NUMPROTO
+1];
222 static struct ctl_table_header
*nf_log_dir_header
;
224 static int nf_log_proc_dostring(ctl_table
*table
, int write
,
225 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
227 const struct nf_logger
*logger
;
228 char buf
[NFLOGGER_NAME_LEN
];
231 int tindex
= (unsigned long)table
->extra1
;
234 if (size
> sizeof(buf
))
236 if (copy_from_user(buf
, buffer
, size
))
239 if (!strcmp(buf
, "NONE")) {
240 nf_log_unbind_pf(tindex
);
243 mutex_lock(&nf_log_mutex
);
244 logger
= __find_logger(tindex
, buf
);
245 if (logger
== NULL
) {
246 mutex_unlock(&nf_log_mutex
);
249 rcu_assign_pointer(nf_loggers
[tindex
], logger
);
250 mutex_unlock(&nf_log_mutex
);
252 mutex_lock(&nf_log_mutex
);
253 logger
= rcu_dereference_protected(nf_loggers
[tindex
],
254 lockdep_is_held(&nf_log_mutex
));
256 table
->data
= "NONE";
258 table
->data
= logger
->name
;
259 r
= proc_dostring(table
, write
, buffer
, lenp
, ppos
);
260 mutex_unlock(&nf_log_mutex
);
266 static __init
int netfilter_log_sysctl_init(void)
270 for (i
= NFPROTO_UNSPEC
; i
< NFPROTO_NUMPROTO
; i
++) {
271 snprintf(nf_log_sysctl_fnames
[i
-NFPROTO_UNSPEC
], 3, "%d", i
);
272 nf_log_sysctl_table
[i
].procname
=
273 nf_log_sysctl_fnames
[i
-NFPROTO_UNSPEC
];
274 nf_log_sysctl_table
[i
].data
= NULL
;
275 nf_log_sysctl_table
[i
].maxlen
=
276 NFLOGGER_NAME_LEN
* sizeof(char);
277 nf_log_sysctl_table
[i
].mode
= 0644;
278 nf_log_sysctl_table
[i
].proc_handler
= nf_log_proc_dostring
;
279 nf_log_sysctl_table
[i
].extra1
= (void *)(unsigned long) i
;
282 nf_log_dir_header
= register_sysctl_paths(nf_log_sysctl_path
,
283 nf_log_sysctl_table
);
284 if (!nf_log_dir_header
)
290 static __init
int netfilter_log_sysctl_init(void)
294 #endif /* CONFIG_SYSCTL */
296 int __init
netfilter_log_init(void)
299 #ifdef CONFIG_PROC_FS
300 if (!proc_create("nf_log", S_IRUGO
,
301 proc_net_netfilter
, &nflog_file_ops
))
305 /* Errors will trigger panic, unroll on error is unnecessary. */
306 r
= netfilter_log_sysctl_init();
310 for (i
= NFPROTO_UNSPEC
; i
< NFPROTO_NUMPROTO
; i
++)
311 INIT_LIST_HEAD(&(nf_loggers_l
[i
]));