1*d56f51eaSDavid van Moolenbroek /* $NetBSD: nflog.h,v 1.2 2014/11/19 19:33:31 christos Exp $ */ 2*d56f51eaSDavid van Moolenbroek 3*d56f51eaSDavid van Moolenbroek /* 4*d56f51eaSDavid van Moolenbroek * Copyright (c) 2013, Petar Alilovic, 5*d56f51eaSDavid van Moolenbroek * Faculty of Electrical Engineering and Computing, University of Zagreb 6*d56f51eaSDavid van Moolenbroek * All rights reserved 7*d56f51eaSDavid van Moolenbroek * 8*d56f51eaSDavid van Moolenbroek * Redistribution and use in source and binary forms, with or without 9*d56f51eaSDavid van Moolenbroek * modification, are permitted provided that the following conditions are met: 10*d56f51eaSDavid van Moolenbroek * 11*d56f51eaSDavid van Moolenbroek * * Redistributions of source code must retain the above copyright notice, 12*d56f51eaSDavid van Moolenbroek * this list of conditions and the following disclaimer. 13*d56f51eaSDavid van Moolenbroek * * Redistributions in binary form must reproduce the above copyright 14*d56f51eaSDavid van Moolenbroek * notice, this list of conditions and the following disclaimer in the 15*d56f51eaSDavid van Moolenbroek * documentation and/or other materials provided with the distribution. 16*d56f51eaSDavid van Moolenbroek * 17*d56f51eaSDavid van Moolenbroek * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY 18*d56f51eaSDavid van Moolenbroek * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 19*d56f51eaSDavid van Moolenbroek * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 20*d56f51eaSDavid van Moolenbroek * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY 21*d56f51eaSDavid van Moolenbroek * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 22*d56f51eaSDavid van Moolenbroek * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 23*d56f51eaSDavid van Moolenbroek * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 24*d56f51eaSDavid van Moolenbroek * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25*d56f51eaSDavid van Moolenbroek * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26*d56f51eaSDavid van Moolenbroek * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH 27*d56f51eaSDavid van Moolenbroek * DAMAGE. 28*d56f51eaSDavid van Moolenbroek */ 29*d56f51eaSDavid van Moolenbroek 30*d56f51eaSDavid van Moolenbroek #ifndef _PCAP_NFLOG_H__ 31*d56f51eaSDavid van Moolenbroek #define _PCAP_NFLOG_H__ 32*d56f51eaSDavid van Moolenbroek 33*d56f51eaSDavid van Moolenbroek /* 34*d56f51eaSDavid van Moolenbroek * Structure of an NFLOG header and TLV parts, as described at 35*d56f51eaSDavid van Moolenbroek * http://www.tcpdump.org/linktypes/LINKTYPE_NFLOG.html 36*d56f51eaSDavid van Moolenbroek * 37*d56f51eaSDavid van Moolenbroek * The NFLOG header is big-endian. 38*d56f51eaSDavid van Moolenbroek * 39*d56f51eaSDavid van Moolenbroek * The TLV length and type are in host byte order. The value is either 40*d56f51eaSDavid van Moolenbroek * big-endian or is an array of bytes in some externally-specified byte 41*d56f51eaSDavid van Moolenbroek * order (text string, link-layer address, link-layer header, packet 42*d56f51eaSDavid van Moolenbroek * data, etc.). 43*d56f51eaSDavid van Moolenbroek */ 44*d56f51eaSDavid van Moolenbroek typedef struct nflog_hdr { 45*d56f51eaSDavid van Moolenbroek u_int8_t nflog_family; /* address family */ 46*d56f51eaSDavid van Moolenbroek u_int8_t nflog_version; /* version */ 47*d56f51eaSDavid van Moolenbroek u_int16_t nflog_rid; /* resource ID */ 48*d56f51eaSDavid van Moolenbroek } nflog_hdr_t; 49*d56f51eaSDavid van Moolenbroek 50*d56f51eaSDavid van Moolenbroek typedef struct nflog_tlv { 51*d56f51eaSDavid van Moolenbroek u_int16_t tlv_length; /* tlv length */ 52*d56f51eaSDavid van Moolenbroek u_int16_t tlv_type; /* tlv type */ 53*d56f51eaSDavid van Moolenbroek /* value follows this */ 54*d56f51eaSDavid van Moolenbroek } nflog_tlv_t; 55*d56f51eaSDavid van Moolenbroek 56*d56f51eaSDavid van Moolenbroek typedef struct nflog_packet_hdr { 57*d56f51eaSDavid van Moolenbroek u_int16_t hw_protocol; /* hw protocol */ 58*d56f51eaSDavid van Moolenbroek u_int8_t hook; /* netfilter hook */ 59*d56f51eaSDavid van Moolenbroek u_int8_t pad; /* padding to 32 bits */ 60*d56f51eaSDavid van Moolenbroek } nflog_packet_hdr_t; 61*d56f51eaSDavid van Moolenbroek 62*d56f51eaSDavid van Moolenbroek typedef struct nflog_hwaddr { 63*d56f51eaSDavid van Moolenbroek u_int16_t hw_addrlen; /* address length */ 64*d56f51eaSDavid van Moolenbroek u_int16_t pad; /* padding to 32-bit boundary */ 65*d56f51eaSDavid van Moolenbroek u_int8_t hw_addr[8]; /* address, up to 8 bytes */ 66*d56f51eaSDavid van Moolenbroek } nflog_hwaddr_t; 67*d56f51eaSDavid van Moolenbroek 68*d56f51eaSDavid van Moolenbroek typedef struct nflog_timestamp { 69*d56f51eaSDavid van Moolenbroek u_int64_t sec; 70*d56f51eaSDavid van Moolenbroek u_int64_t usec; 71*d56f51eaSDavid van Moolenbroek } nflog_timestamp_t; 72*d56f51eaSDavid van Moolenbroek 73*d56f51eaSDavid van Moolenbroek /* 74*d56f51eaSDavid van Moolenbroek * TLV types. 75*d56f51eaSDavid van Moolenbroek */ 76*d56f51eaSDavid van Moolenbroek #define NFULA_PACKET_HDR 1 /* nflog_packet_hdr_t */ 77*d56f51eaSDavid van Moolenbroek #define NFULA_MARK 2 /* packet mark from skbuff */ 78*d56f51eaSDavid van Moolenbroek #define NFULA_TIMESTAMP 3 /* nflog_timestamp_t for skbuff's time stamp */ 79*d56f51eaSDavid van Moolenbroek #define NFULA_IFINDEX_INDEV 4 /* ifindex of device on which packet received (possibly bridge group) */ 80*d56f51eaSDavid van Moolenbroek #define NFULA_IFINDEX_OUTDEV 5 /* ifindex of device on which packet transmitted (possibly bridge group) */ 81*d56f51eaSDavid van Moolenbroek #define NFULA_IFINDEX_PHYSINDEV 6 /* ifindex of physical device on which packet received (not bridge group) */ 82*d56f51eaSDavid van Moolenbroek #define NFULA_IFINDEX_PHYSOUTDEV 7 /* ifindex of physical device on which packet transmitted (not bridge group) */ 83*d56f51eaSDavid van Moolenbroek #define NFULA_HWADDR 8 /* nflog_hwaddr_t for hardware address */ 84*d56f51eaSDavid van Moolenbroek #define NFULA_PAYLOAD 9 /* packet payload */ 85*d56f51eaSDavid van Moolenbroek #define NFULA_PREFIX 10 /* text string - null-terminated, count includes NUL */ 86*d56f51eaSDavid van Moolenbroek #define NFULA_UID 11 /* UID owning socket on which packet was sent/received */ 87*d56f51eaSDavid van Moolenbroek #define NFULA_SEQ 12 /* sequence number of packets on this NFLOG socket */ 88*d56f51eaSDavid van Moolenbroek #define NFULA_SEQ_GLOBAL 13 /* sequence number of pakets on all NFLOG sockets */ 89*d56f51eaSDavid van Moolenbroek #define NFULA_GID 14 /* GID owning socket on which packet was sent/received */ 90*d56f51eaSDavid van Moolenbroek #define NFULA_HWTYPE 15 /* ARPHRD_ type of skbuff's device */ 91*d56f51eaSDavid van Moolenbroek #define NFULA_HWHEADER 16 /* skbuff's MAC-layer header */ 92*d56f51eaSDavid van Moolenbroek #define NFULA_HWLEN 17 /* length of skbuff's MAC-layer header */ 93*d56f51eaSDavid van Moolenbroek 94*d56f51eaSDavid van Moolenbroek #endif 95