| /linux/net/netfilter/ |
| H A D | nfnetlink_cttimeout.c | 71 const struct nf_conntrack_l4proto *l4proto, in ctnl_timeout_parse_policy() argument
77 tb = kcalloc(l4proto->ctnl_timeout.nlattr_max + 1, sizeof(*tb), in ctnl_timeout_parse_policy()
84 l4proto->ctnl_timeout.nlattr_max, in ctnl_timeout_parse_policy()
86 l4proto->ctnl_timeout.nla_policy, in ctnl_timeout_parse_policy()
91 ret = l4proto->ctnl_timeout.nlattr_to_obj(tb, net, timeout); in ctnl_timeout_parse_policy()
105 const struct nf_conntrack_l4proto *l4proto; in cttimeout_new_timeout() local
137 matching->timeout.l4proto->l4proto != l4num) in cttimeout_new_timeout()
141 matching->timeout.l4proto, in cttimeout_new_timeout()
149 l4proto = nf_ct_l4proto_find(l4num); in cttimeout_new_timeout()
152 if (l4proto->l4proto != l4num) { in cttimeout_new_timeout()
[all …]
|
| H A D | nft_ct.c | 29 u8 l4proto; member
869 const struct nf_conntrack_l4proto *l4proto, in nft_ct_timeout_parse_policy() argument
875 tb = kcalloc(l4proto->ctnl_timeout.nlattr_max + 1, sizeof(*tb), in nft_ct_timeout_parse_policy()
882 l4proto->ctnl_timeout.nlattr_max, in nft_ct_timeout_parse_policy()
884 l4proto->ctnl_timeout.nla_policy, in nft_ct_timeout_parse_policy()
889 ret = l4proto->ctnl_timeout.nlattr_to_obj(tb, net, timeouts); in nft_ct_timeout_parse_policy()
898 u8 l4proto; member
910 if (priv->l4proto != pkt->tprot) in nft_ct_timeout_obj_eval()
940 const struct nf_conntrack_l4proto *l4proto; in nft_ct_timeout_obj_init() local
954 priv->l4proto = l4num; in nft_ct_timeout_obj_init()
[all …]
|
| H A D | nf_conntrack_timeout.c | 99 if (timeout->l4proto->l4proto != l4num) { in nf_ct_set_timeout()
103 timeout_name, 4, timeout->l4proto->l4proto); in nf_ct_set_timeout()
|
| H A D | nft_inner.c | 133 ctx->l4proto = iph->protocol; in nft_inner_parse_l2l3()
141 int l4proto; in nft_inner_parse_l2l3() local
154 l4proto = ipv6_find_hdr(pkt->skb, &thoff, -1, &fragoff, &fh_flags); in nft_inner_parse_l2l3()
155 if (l4proto < 0 || thoff > U16_MAX) in nft_inner_parse_l2l3()
162 ctx->l4proto = l4proto; in nft_inner_parse_l2l3()
|
| H A D | nf_conntrack_bpf.c | 52 u8 l4proto; member
117 err = bpf_nf_ct_tuple_parse(bpf_tuple, tuple_len, opts->l4proto, in __bpf_nf_ct_alloc_entry()
122 err = bpf_nf_ct_tuple_parse(bpf_tuple, tuple_len, opts->l4proto, in __bpf_nf_ct_alloc_entry()
161 if (unlikely(opts->l4proto != IPPROTO_TCP && opts->l4proto != IPPROTO_UDP)) in __bpf_nf_ct_lookup()
166 err = bpf_nf_ct_tuple_parse(bpf_tuple, tuple_len, opts->l4proto, in __bpf_nf_ct_lookup()
|
| H A D | nft_tproxy.c | 96 int l4proto; in nft_tproxy_eval_v6() local
105 l4proto = pkt->tprot; in nft_tproxy_eval_v6()
117 sk = nf_tproxy_get_sock_v6(nft_net(pkt), skb, thoff, l4proto, in nft_tproxy_eval_v6()
134 sk = nf_tproxy_handle_time_wait6(skb, l4proto, thoff, in nft_tproxy_eval_v6()
144 l4proto, &iph->saddr, &taddr, in nft_tproxy_eval_v6()
|
| H A D | nf_conntrack_standalone.c | 36 const struct nf_conntrack_l4proto *l4proto) in print_tuple() argument
51 switch (l4proto->l4proto) { in print_tuple()
296 const struct nf_conntrack_l4proto *l4proto; in ct_seq_show() local
319 l4proto = nf_ct_l4proto_find(nf_ct_protonum(ct)); in ct_seq_show()
324 l4proto_name(l4proto->l4proto), nf_ct_protonum(ct)); in ct_seq_show()
329 if (l4proto->print_conntrack) in ct_seq_show()
330 l4proto->print_conntrack(s, ct); in ct_seq_show()
333 l4proto); in ct_seq_show()
345 print_tuple(s, &ct->tuplehash[IP_CT_DIR_REPLY].tuple, l4proto); in ct_seq_show()
|
| H A D | nf_conntrack_proto_icmp.c | 109 u8 l4proto, union nf_inet_addr *outer_daddr) in nf_conntrack_inet_error() argument
174 l4proto, in nf_conntrack_inet_error()
179 l4proto, in nf_conntrack_inet_error()
367 .l4proto = IPPROTO_ICMP,
|
| H A D | xt_CT.c | 108 const struct nf_conntrack_l4proto *l4proto; in xt_ct_set_timeout() local
117 l4proto = nf_ct_l4proto_find(proto); in xt_ct_set_timeout()
118 return nf_ct_set_timeout(par->net, ct, par->family, l4proto->l4proto, in xt_ct_set_timeout()
|
| H A D | nf_conntrack_netlink.c | 70 const struct nf_conntrack_l4proto *l4proto) in ctnetlink_dump_tuples_proto() argument
81 if (likely(l4proto->tuple_to_nlattr)) in ctnetlink_dump_tuples_proto()
82 ret = l4proto->tuple_to_nlattr(skb, tuple); in ctnetlink_dump_tuples_proto()
140 const struct nf_conntrack_l4proto *l4proto; in ctnetlink_dump_tuples() local
147 l4proto = nf_ct_l4proto_find(tuple->dst.protonum); in ctnetlink_dump_tuples()
148 ret = ctnetlink_dump_tuples_proto(skb, tuple, l4proto); in ctnetlink_dump_tuples()
201 const struct nf_conntrack_l4proto *l4proto; in ctnetlink_dump_protoinfo() local
205 l4proto = nf_ct_l4proto_find(nf_ct_protonum(ct)); in ctnetlink_dump_protoinfo()
206 if (!l4proto->to_nlattr) in ctnetlink_dump_protoinfo()
213 ret = l4proto->to_nlattr(skb, nest_proto, ct, destroy); in ctnetlink_dump_protoinfo()
[all …]
|
| H A D | nf_conntrack_proto_generic.c | 69 .l4proto = 255,
|
| H A D | nf_conntrack_proto_udp.c | 284 .l4proto = IPPROTO_UDP,
306 .l4proto = IPPROTO_UDPLITE,
|
| H A D | xt_conntrack.c | 83 (nf_ct_protonum(ct) == info->l4proto) ^ in ct_proto_port_check()
127 (nf_ct_protonum(ct) == info->l4proto) ^ in ct_proto_port_check_v3()
|
| H A D | xt_ipvs.c | 75 if ((iph.protocol == data->l4proto) ^ in ipvs_mt()
|
| /linux/tools/testing/selftests/net/netfilter/ |
| H A D | conntrack_icmp_related.sh | 120 meta l4proto icmpv6 icmpv6 type "packet-too-big" ct state "related" counter name "related" accept
121 …meta l4proto icmp icmp type "destination-unreachable" ct state "related" counter name "related" ac…
122 meta l4proto { icmp, icmpv6 } ct state new,established accept
141 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
142 meta l4proto { icmp, icmpv6 } ct state "related" counter name "related" accept
157 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
159 meta l4proto { icmp, icmpv6 } ct state "new" counter name "new" accept
160 meta l4proto { icmp, icmpv6 } ct state "established" counter name "established" accept
165 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
167 meta l4proto { icmp, icmpv6 } ct state "new" counter name "new"
[all …]
|
| H A D | nft_meta.sh | 59 meta l4proto icmp counter name "il4protocounter"
73 meta l4proto icmp counter name "ol4protocounter"
|
| H A D | nft_synproxy.sh | 74 … meta iif veth0 meta l4proto tcp ct state untracked,invalid synproxy mss 1460 sack-perm timestamp
|
| /linux/include/uapi/linux/netfilter/ |
| H A D | xt_conntrack.h | 44 __u16 l4proto; member
57 __u16 l4proto; member
70 __u16 l4proto; member
|
| H A D | xt_ipvs.h | 23 __u8 l4proto; member
|
| /linux/tools/testing/selftests/bpf/progs/ |
| H A D | test_bpf_nf.c | 47 u8 l4proto; member
75 struct bpf_ct_opts___local opts_def = { .l4proto = IPPROTO_TCP, .netns_id = -1 }; in nf_ct_test()
91 opts_def.l4proto = IPPROTO_TCP; in nf_ct_test()
113 opts_def.l4proto = IPPROTO_ICMP; in nf_ct_test()
116 opts_def.l4proto = IPPROTO_TCP; in nf_ct_test()
|
| H A D | test_bpf_nf_fail.c | 12 u8 l4proto; member
|
| /linux/include/net/netfilter/ |
| H A D | nf_conntrack_l4proto.h | 22 u_int8_t l4proto; member
82 u8 l4proto,
150 const struct nf_conntrack_l4proto *nf_ct_l4proto_find(u8 l4proto);
|
| H A D | nf_conntrack_timeout.h | 16 const struct nf_conntrack_l4proto *l4proto; member
|
| /linux/drivers/net/ethernet/mediatek/ |
| H A D | mtk_ppe_offload.c | 256 u8 l4proto = 0; in mtk_flow_offload_replace() local
288 l4proto = match.key->ip_proto; in mtk_flow_offload_replace()
367 err = mtk_foe_entry_prepare(eth, &foe, offload_type, l4proto, 0, in mtk_flow_offload_replace()
|
| /linux/drivers/net/ethernet/aquantia/atlantic/ |
| H A D | aq_nic.c | 685 u8 l4proto = 0; in aq_nic_map_skb() local
688 l4proto = ip_hdr(skb)->protocol; in aq_nic_map_skb()
690 l4proto = ipv6_hdr(skb)->nexthdr; in aq_nic_map_skb()
698 if (l4proto == IPPROTO_TCP) { in aq_nic_map_skb()
701 } else if (l4proto == IPPROTO_UDP) { in aq_nic_map_skb()
752 dx_buff->is_tcp_cso = (l4proto == IPPROTO_TCP); in aq_nic_map_skb()
753 dx_buff->is_udp_cso = (l4proto == IPPROTO_UDP); in aq_nic_map_skb()
|