14 #include <arpa/inet.h>
18 #include <linux/netfilter/nf_tables.h>
21 #include <libmnl/libmnl.h>
22 #include <libnftnl/expr.h>
23 #include <libnftnl/rule.h>
32 nft_rule_expr_counter_set(
struct nft_rule_expr *e, uint16_t type,
33 const void *data, uint32_t data_len)
38 case NFT_EXPR_CTR_BYTES:
39 ctr->bytes = *((uint64_t *)data);
41 case NFT_EXPR_CTR_PACKETS:
42 ctr->pkts = *((uint64_t *)data);
51 nft_rule_expr_counter_get(
const struct nft_rule_expr *e, uint16_t type,
57 case NFT_EXPR_CTR_BYTES:
58 *data_len =
sizeof(ctr->bytes);
60 case NFT_EXPR_CTR_PACKETS:
61 *data_len =
sizeof(ctr->pkts);
67 static int nft_rule_expr_counter_cb(
const struct nlattr *attr,
void *data)
69 const struct nlattr **tb = data;
70 int type = mnl_attr_get_type(attr);
72 if (mnl_attr_type_valid(attr, NFTA_COUNTER_MAX) < 0)
76 case NFTA_COUNTER_BYTES:
77 case NFTA_COUNTER_PACKETS:
78 if (mnl_attr_validate(attr, MNL_TYPE_U64) < 0) {
79 perror(
"mnl_attr_validate");
90 nft_rule_expr_counter_build(
struct nlmsghdr *nlh,
struct nft_rule_expr *e)
94 if (e->flags & (1 << NFT_EXPR_CTR_BYTES))
95 mnl_attr_put_u64(nlh, NFTA_COUNTER_BYTES, htobe64(ctr->bytes));
96 if (e->flags & (1 << NFT_EXPR_CTR_PACKETS))
97 mnl_attr_put_u64(nlh, NFTA_COUNTER_PACKETS, htobe64(ctr->pkts));
101 nft_rule_expr_counter_parse(
struct nft_rule_expr *e,
struct nlattr *attr)
104 struct nlattr *tb[NFTA_COUNTER_MAX+1] = {};
106 if (mnl_attr_parse_nested(attr, nft_rule_expr_counter_cb, tb) < 0)
109 if (tb[NFTA_COUNTER_BYTES]) {
110 ctr->bytes = be64toh(mnl_attr_get_u64(tb[NFTA_COUNTER_BYTES]));
111 e->flags |= (1 << NFT_EXPR_CTR_BYTES);
113 if (tb[NFTA_COUNTER_PACKETS]) {
114 ctr->pkts = be64toh(mnl_attr_get_u64(tb[NFTA_COUNTER_PACKETS]));
115 e->flags |= (1 << NFT_EXPR_CTR_PACKETS);
122 nft_rule_expr_counter_json_parse(
struct nft_rule_expr *e, json_t *root,
123 struct nft_parse_err *err)
128 if (nft_jansson_parse_val(root,
"pkts", NFT_TYPE_U64, &uval64,
130 nft_rule_expr_set_u64(e, NFT_EXPR_CTR_PACKETS, uval64);
132 if (nft_jansson_parse_val(root,
"bytes", NFT_TYPE_U64, &uval64,
134 nft_rule_expr_set_u64(e, NFT_EXPR_CTR_BYTES, uval64);
144 nft_rule_expr_counter_xml_parse(
struct nft_rule_expr *e, mxml_node_t *tree,
145 struct nft_parse_err *err)
148 uint64_t pkts, bytes;
150 if (nft_mxml_num_parse(tree,
"pkts", MXML_DESCEND_FIRST, BASE_DEC,
151 &pkts, NFT_TYPE_U64, NFT_XML_MAND, err) == 0)
152 nft_rule_expr_set_u64(e, NFT_EXPR_CTR_PACKETS, pkts);
154 if (nft_mxml_num_parse(tree,
"bytes", MXML_DESCEND_FIRST, BASE_DEC,
155 &bytes, NFT_TYPE_U64, NFT_XML_MAND, err) == 0)
156 nft_rule_expr_set_u64(e, NFT_EXPR_CTR_BYTES, bytes);
164 static int nft_rule_expr_counter_snprintf_json(
char *buf,
size_t len,
165 struct nft_rule_expr *e)
167 int ret, size = len, offset = 0;
170 if (e->flags & (1 << NFT_EXPR_CTR_PACKETS)) {
171 ret = snprintf(buf, len,
"\"pkts\":%"PRIu64
",", ctr->pkts);
172 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
174 if (e->flags & (1 << NFT_EXPR_CTR_BYTES)) {
175 ret = snprintf(buf + offset, len,
"\"bytes\":%"PRIu64
",", ctr->bytes);
176 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
186 static int nft_rule_expr_counter_snprintf_xml(
char *buf,
size_t len,
187 struct nft_rule_expr *e)
189 int ret, size = len, offset = 0;
192 if (e->flags & (1 << NFT_EXPR_CTR_PACKETS)) {
193 ret = snprintf(buf, len,
"<pkts>%"PRIu64
"</pkts>", ctr->pkts);
194 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
196 if (e->flags & (1 << NFT_EXPR_CTR_BYTES)) {
197 ret = snprintf(buf + offset, len,
"<bytes>%"PRIu64
"</bytes>",
199 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
205 static int nft_rule_expr_counter_snprintf_default(
char *buf,
size_t len,
206 struct nft_rule_expr *e)
210 return snprintf(buf, len,
"pkts %"PRIu64
" bytes %"PRIu64
" ",
211 ctr->pkts, ctr->bytes);
214 static int nft_rule_expr_counter_snprintf(
char *buf,
size_t len, uint32_t type,
216 struct nft_rule_expr *e)
219 case NFT_OUTPUT_DEFAULT:
220 return nft_rule_expr_counter_snprintf_default(buf, len, e);
222 return nft_rule_expr_counter_snprintf_xml(buf, len, e);
223 case NFT_OUTPUT_JSON:
224 return nft_rule_expr_counter_snprintf_json(buf, len, e);
231 struct expr_ops expr_ops_counter = {
234 .max_attr = NFTA_COUNTER_MAX,
235 .set = nft_rule_expr_counter_set,
236 .get = nft_rule_expr_counter_get,
237 .parse = nft_rule_expr_counter_parse,
238 .build = nft_rule_expr_counter_build,
239 .snprintf = nft_rule_expr_counter_snprintf,
240 .xml_parse = nft_rule_expr_counter_xml_parse,
241 .json_parse = nft_rule_expr_counter_json_parse,
244 static void __init expr_counter_init(
void)
246 nft_expr_ops_register(&expr_ops_counter);