|
Packit Service |
3880ab |
/*
|
|
Packit Service |
3880ab |
* m_simple.c simple action
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* This program is free software; you can distribute it and/or
|
|
Packit Service |
3880ab |
* modify it under the terms of the GNU General Public License
|
|
Packit Service |
3880ab |
* as published by the Free Software Foundation; either version
|
|
Packit Service |
3880ab |
* 2 of the License, or (at your option) any later version.
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* Authors: J Hadi Salim <jhs@mojatatu.com>
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* Pedagogical example. Adds a string that will be printed every time
|
|
Packit Service |
3880ab |
* the simple instance is hit.
|
|
Packit Service |
3880ab |
* Use this as a skeleton action and keep modifying it to meet your needs.
|
|
Packit Service |
3880ab |
* Look at linux/tc_act/tc_defact.h for the different components ids and
|
|
Packit Service |
3880ab |
* definitions used in this actions
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* example use, yell "Incoming ICMP!" every time you see an incoming ICMP on
|
|
Packit Service |
3880ab |
* eth0. Steps are:
|
|
Packit Service |
3880ab |
* 1) Add an ingress qdisc point to eth0
|
|
Packit Service |
3880ab |
* 2) Start a chain on ingress of eth0 that first matches ICMP then invokes
|
|
Packit Service |
3880ab |
* the simple action to shout.
|
|
Packit Service |
3880ab |
* 3) display stats and show that no packet has been seen by the action
|
|
Packit Service |
3880ab |
* 4) Send one ping packet to google (expect to receive a response back)
|
|
Packit Service |
3880ab |
* 5) grep the logs to see the logged message
|
|
Packit Service |
3880ab |
* 6) display stats again and observe increment by 1
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
hadi@noma1:$ tc qdisc add dev eth0 ingress
|
|
Packit Service |
3880ab |
hadi@noma1:$tc filter add dev eth0 parent ffff: protocol ip prio 5 \
|
|
Packit Service |
3880ab |
u32 match ip protocol 1 0xff flowid 1:1 action simple "Incoming ICMP"
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
hadi@noma1:$ sudo tc -s filter ls dev eth0 parent ffff:
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32 fh 800: ht divisor 1
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1
|
|
Packit Service |
3880ab |
match 00010000/00ff0000 at 8
|
|
Packit Service |
3880ab |
action order 1: Simple <Incoming ICMP>
|
|
Packit Service |
3880ab |
index 4 ref 1 bind 1 installed 29 sec used 29 sec
|
|
Packit Service |
3880ab |
Action statistics:
|
|
Packit Service |
3880ab |
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
|
|
Packit Service |
3880ab |
backlog 0b 0p requeues 0
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
hadi@noma1$ ping -c 1 www.google.ca
|
|
Packit Service |
3880ab |
PING www.google.ca (74.125.225.120) 56(84) bytes of data.
|
|
Packit Service |
3880ab |
64 bytes from ord08s08-in-f24.1e100.net (74.125.225.120): icmp_req=1 ttl=53 time=31.3 ms
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
--- www.google.ca ping statistics ---
|
|
Packit Service |
3880ab |
1 packets transmitted, 1 received, 0% packet loss, time 0ms
|
|
Packit Service |
3880ab |
rtt min/avg/max/mdev = 31.316/31.316/31.316/0.000 ms
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
hadi@noma1$ dmesg | grep simple
|
|
Packit Service |
3880ab |
[135354.473951] simple: Incoming ICMP_1
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
hadi@noma1$ sudo tc/tc -s filter ls dev eth0 parent ffff:
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32 fh 800: ht divisor 1
|
|
Packit Service |
3880ab |
filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1
|
|
Packit Service |
3880ab |
match 00010000/00ff0000 at 8
|
|
Packit Service |
3880ab |
action order 1: Simple <Incoming ICMP>
|
|
Packit Service |
3880ab |
index 4 ref 1 bind 1 installed 206 sec used 67 sec
|
|
Packit Service |
3880ab |
Action statistics:
|
|
Packit Service |
3880ab |
Sent 84 bytes 1 pkt (dropped 0, overlimits 0 requeues 0)
|
|
Packit Service |
3880ab |
backlog 0b 0p requeues 0
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <stdio.h>
|
|
Packit Service |
3880ab |
#include <stdlib.h>
|
|
Packit Service |
3880ab |
#include <unistd.h>
|
|
Packit Service |
3880ab |
#include <fcntl.h>
|
|
Packit Service |
3880ab |
#include <sys/socket.h>
|
|
Packit Service |
3880ab |
#include <netinet/in.h>
|
|
Packit Service |
3880ab |
#include <arpa/inet.h>
|
|
Packit Service |
3880ab |
#include <string.h>
|
|
Packit Service |
3880ab |
#include "utils.h"
|
|
Packit Service |
3880ab |
#include "tc_util.h"
|
|
Packit Service |
3880ab |
#include <linux/tc_act/tc_defact.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#ifndef SIMP_MAX_DATA
|
|
Packit Service |
3880ab |
#define SIMP_MAX_DATA 32
|
|
Packit Service |
3880ab |
#endif
|
|
Packit Service |
3880ab |
static void explain(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"Usage:... simple [sdata STRING] [index INDEX] [CONTROL]\n"
|
|
Packit Service |
3880ab |
"\tSTRING being an arbitrary string\n"
|
|
Packit Service |
3880ab |
"\tINDEX := optional index value used\n"
|
|
Packit Service |
3880ab |
"\tCONTROL := reclassify|pipe|drop|continue|ok\n");
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void usage(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
explain();
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int
|
|
Packit Service |
3880ab |
parse_simple(struct action_util *a, int *argc_p, char ***argv_p, int tca_id,
|
|
Packit Service |
3880ab |
struct nlmsghdr *n)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct tc_defact sel = {};
|
|
Packit Service |
3880ab |
int argc = *argc_p;
|
|
Packit Service |
3880ab |
char **argv = *argv_p;
|
|
Packit Service |
3880ab |
int ok = 0;
|
|
Packit Service |
3880ab |
struct rtattr *tail;
|
|
Packit Service |
3880ab |
char *simpdata = NULL;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while (argc > 0) {
|
|
Packit Service |
3880ab |
if (matches(*argv, "simple") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "sdata") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
ok += 1;
|
|
Packit Service |
3880ab |
simpdata = *argv;
|
|
Packit Service |
3880ab |
argc--;
|
|
Packit Service |
3880ab |
argv++;
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "help") == 0) {
|
|
Packit Service |
3880ab |
usage();
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_action_control_dflt(&argc, &argv, &sel.action, false,
|
|
Packit Service |
3880ab |
TC_ACT_PIPE);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc) {
|
|
Packit Service |
3880ab |
if (matches(*argv, "index") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (get_u32(&sel.index, *argv, 10)) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "simple: Illegal \"index\" (%s)\n",
|
|
Packit Service |
3880ab |
*argv);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
ok += 1;
|
|
Packit Service |
3880ab |
argc--;
|
|
Packit Service |
3880ab |
argv++;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!ok) {
|
|
Packit Service |
3880ab |
explain();
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (simpdata && (strlen(simpdata) > (SIMP_MAX_DATA - 1))) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "simple: Illegal string len %zu <%s>\n",
|
|
Packit Service |
3880ab |
strlen(simpdata), simpdata);
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
tail = addattr_nest(n, MAX_MSG, tca_id);
|
|
Packit Service |
3880ab |
addattr_l(n, MAX_MSG, TCA_DEF_PARMS, &sel, sizeof(sel));
|
|
Packit Service |
3880ab |
if (simpdata)
|
|
Packit Service |
3880ab |
addattr_l(n, MAX_MSG, TCA_DEF_DATA, simpdata, SIMP_MAX_DATA);
|
|
Packit Service |
3880ab |
addattr_nest_end(n, tail);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
*argc_p = argc;
|
|
Packit Service |
3880ab |
*argv_p = argv;
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int print_simple(struct action_util *au, FILE *f, struct rtattr *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct tc_defact *sel;
|
|
Packit Service |
3880ab |
struct rtattr *tb[TCA_DEF_MAX + 1];
|
|
Packit Service |
3880ab |
char *simpdata;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (arg == NULL)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_rtattr_nested(tb, TCA_DEF_MAX, arg);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[TCA_DEF_PARMS] == NULL) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Missing simple parameters\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
sel = RTA_DATA(tb[TCA_DEF_PARMS]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[TCA_DEF_DATA] == NULL) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Missing simple string\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
simpdata = RTA_DATA(tb[TCA_DEF_DATA]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fprintf(f, "Simple <%s>\n", simpdata);
|
|
Packit Service |
3880ab |
fprintf(f, "\t index %u ref %d bind %d", sel->index,
|
|
Packit Service |
3880ab |
sel->refcnt, sel->bindcnt);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (show_stats) {
|
|
Packit Service |
3880ab |
if (tb[TCA_DEF_TM]) {
|
|
Packit Service |
3880ab |
struct tcf_t *tm = RTA_DATA(tb[TCA_DEF_TM]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_tm(f, tm);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
print_nl();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
struct action_util simple_action_util = {
|
|
Packit Service |
3880ab |
.id = "simple",
|
|
Packit Service |
3880ab |
.parse_aopt = parse_simple,
|
|
Packit Service |
3880ab |
.print_aopt = print_simple,
|
|
Packit Service |
3880ab |
};
|