| /linux/net/netfilter/ |
| H A D | nft_ct.c | 31 u8 l4proto; member
845 const struct nf_conntrack_l4proto *l4proto, in nft_ct_timeout_parse_policy() argument
851 tb = kzalloc_objs(*tb, l4proto->ctnl_timeout.nlattr_max + 1); in nft_ct_timeout_parse_policy()
857 l4proto->ctnl_timeout.nlattr_max, in nft_ct_timeout_parse_policy()
859 l4proto->ctnl_timeout.nla_policy, in nft_ct_timeout_parse_policy()
864 ret = l4proto->ctnl_timeout.nlattr_to_obj(tb, net, timeouts); in nft_ct_timeout_parse_policy()
873 u8 l4proto; member
885 if (priv->l4proto != pkt->tprot) in nft_ct_timeout_obj_eval()
913 const struct nf_conntrack_l4proto *l4proto; in nft_ct_timeout_obj_init()
927 priv->l4proto in nft_ct_timeout_obj_init()
915 const struct nf_conntrack_l4proto *l4proto; nft_ct_timeout_obj_init() local
1216 u8 l4proto; global() member
[all...] |
| H A D | nf_conntrack_timeout.c | 116 if (timeout->l4proto->l4proto != l4num) { in nf_ct_set_timeout()
120 timeout_name, 4, timeout->l4proto->l4proto); in nf_ct_set_timeout()
|
| H A D | nft_inner.c | 140 ctx->l4proto = iph->protocol; in nft_inner_parse_l2l3()
148 int l4proto; in nft_inner_parse_l2l3() local
161 l4proto = ipv6_find_hdr(pkt->skb, &thoff, -1, &fragoff, &fh_flags); in nft_inner_parse_l2l3()
162 if (l4proto < 0 || thoff > U16_MAX) in nft_inner_parse_l2l3()
168 ctx->l4proto = l4proto; in nft_inner_parse_l2l3()
|
| H A D | nft_tproxy.c | 96 int l4proto; in nft_tproxy_eval_v6() local
105 l4proto = pkt->tprot; in nft_tproxy_eval_v6()
117 sk = nf_tproxy_get_sock_v6(nft_net(pkt), skb, thoff, l4proto, in nft_tproxy_eval_v6()
134 sk = nf_tproxy_handle_time_wait6(skb, l4proto, thoff, in nft_tproxy_eval_v6()
144 l4proto, &iph->saddr, &taddr, in nft_tproxy_eval_v6()
|
| H A D | xt_CT.c | 109 const struct nf_conntrack_l4proto *l4proto; in xt_ct_set_timeout() local
118 l4proto = nf_ct_l4proto_find(proto); in xt_ct_set_timeout()
119 return nf_ct_set_timeout(par->net, ct, par->family, l4proto->l4proto, in xt_ct_set_timeout()
|
| H A D | nf_conntrack_netlink.c | 69 const struct nf_conntrack_l4proto *l4proto) in ctnetlink_dump_tuples_proto() argument
80 if (likely(l4proto->tuple_to_nlattr)) in ctnetlink_dump_tuples_proto()
81 ret = l4proto->tuple_to_nlattr(skb, tuple); in ctnetlink_dump_tuples_proto()
139 const struct nf_conntrack_l4proto *l4proto; in ctnetlink_dump_tuples() local
146 l4proto = nf_ct_l4proto_find(tuple->dst.protonum); in ctnetlink_dump_tuples()
147 ret = ctnetlink_dump_tuples_proto(skb, tuple, l4proto); in ctnetlink_dump_tuples()
200 const struct nf_conntrack_l4proto *l4proto; in ctnetlink_dump_protoinfo() local
204 l4proto = nf_ct_l4proto_find(nf_ct_protonum(ct)); in ctnetlink_dump_protoinfo()
205 if (!l4proto->to_nlattr) in ctnetlink_dump_protoinfo()
212 ret = l4proto in ctnetlink_dump_protoinfo()
653 const struct nf_conntrack_l4proto *l4proto; ctnetlink_proto_size() local
1374 const struct nf_conntrack_l4proto *l4proto; ctnetlink_parse_tuple_proto() local
2022 const struct nf_conntrack_l4proto *l4proto; ctnetlink_change_protoinfo() local
2948 const struct nf_conntrack_l4proto *l4proto; ctnetlink_exp_dump_mask() local
[all...] |
| H A D | xt_conntrack.c | 83 (nf_ct_protonum(ct) == info->l4proto) ^ in ct_proto_port_check()
127 (nf_ct_protonum(ct) == info->l4proto) ^ in ct_proto_port_check_v3()
|
| H A D | nft_compat.c | 204 u32 l4proto; in nft_parse_compat() local
223 l4proto = ntohl(nla_get_be32(tb[NFTA_RULE_COMPAT_PROTO])); in nft_parse_compat()
224 if (l4proto > U16_MAX) in nft_parse_compat()
227 *proto = l4proto; in nft_parse_compat()
|
| H A D | xt_ipvs.c | 75 if ((iph.protocol == data->l4proto) ^ in ipvs_mt()
|
| H A D | nf_flow_table_offload.c | 173 switch (tuple->l4proto) { in nf_flow_rule_match()
186 key->basic.ip_proto = tuple->l4proto; in nf_flow_rule_match()
193 switch (tuple->l4proto) { in nf_flow_rule_match()
475 u8 protonum = flow->tuplehash[FLOW_OFFLOAD_DIR_ORIGINAL].tuple.l4proto; in flow_offload_l4proto()
564 u8 protonum = flow->tuplehash[FLOW_OFFLOAD_DIR_ORIGINAL].tuple.l4proto; in flow_offload_ipv4_checksum()
|
| H A D | nf_flow_table_core.c | 42 ft->l4proto = ctt->dst.protonum; in flow_offload_fill_dir()
531 u8 l4proto = nf_ct_protonum(ct); in nf_flow_table_extend_ct_timeout()
534 switch (l4proto) { in nf_flow_table_extend_ct_timeout()
526 u8 l4proto = nf_ct_protonum(ct); nf_flow_table_extend_ct_timeout() local
|
| H A D | nf_conntrack_core.c | 1150 const struct nf_conntrack_l4proto *l4proto;
1159 l4proto = nf_ct_l4proto_find(nf_ct_protonum(ct));
1160 if (!l4proto->allow_clash)
1461 const struct nf_conntrack_l4proto *l4proto; in early_drop_list()
1467 l4proto = nf_ct_l4proto_find(protonum); in early_drop_list()
1468 if (l4proto->can_early_drop && l4proto->can_early_drop(ct)) in early_drop_list()
1178 const struct nf_conntrack_l4proto *l4proto; nf_ct_resolve_clash() local
1504 const struct nf_conntrack_l4proto *l4proto; gc_worker_can_early_drop() local
|
| /linux/tools/testing/selftests/net/netfilter/ |
| H A D | conntrack_icmp_related.sh | 120 meta l4proto icmpv6 icmpv6 type "packet-too-big" ct state "related" counter name "related" accept
121 …meta l4proto icmp icmp type "destination-unreachable" ct state "related" counter name "related" ac…
122 meta l4proto { icmp, icmpv6 } ct state new,established accept
141 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
142 meta l4proto { icmp, icmpv6 } ct state "related" counter name "related" accept
157 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
159 meta l4proto { icmp, icmpv6 } ct state "new" counter name "new" accept
160 meta l4proto { icmp, icmpv6 } ct state "established" counter name "established" accept
165 meta l4proto { icmp, icmpv6 } ct state established,untracked accept
167 meta l4proto { icmp, icmpv6 } ct state "new" counter name "new"
[all …]
|
| H A D | nft_meta.sh | 59 meta l4proto icmp counter name "il4protocounter"
73 meta l4proto icmp counter name "ol4protocounter"
|
| H A D | nft_synproxy.sh | 74 … meta iif veth0 meta l4proto tcp ct state untracked,invalid synproxy mss 1460 sack-perm timestamp
|
| H A D | conntrack_clash.sh | 27 …meta l4proto udp dnat to numgen random mod 3 map { 0 : 10.0.2.1 . 9000, 1 : 10.0.2.1 . 9001, 2 : 1…
|
| H A D | nft_flowtable.sh | 183 meta nfproto ipv4 meta l4proto icmp accept
184 meta nfproto ipv6 meta l4proto icmpv6 accept
201 meta l4proto tcp goto {
|
| /linux/include/uapi/linux/netfilter/ |
| H A D | xt_conntrack.h | 44 __u16 l4proto; member
57 __u16 l4proto; member
70 __u16 l4proto; member
|
| H A D | xt_ipvs.h | 23 __u8 l4proto; member
|
| /linux/tools/testing/selftests/bpf/progs/ |
| H A D | test_bpf_nf.c | 60 u8 l4proto;
68 u8 l4proto;
99 struct bpf_ct_opts___local opts_def = { .l4proto = IPPROTO_TCP, .netns_id = -1 }; in nf_ct_test()
109 opts_def.l4proto = IPPROTO_TCP; in nf_ct_test()
153 opts_def.l4proto = IPPROTO_ICMP; in nf_ct_test()
156 opts_def.l4proto = IPPROTO_TCP; in nf_ct_test()
270 struct bpf_ct_opts___new opts_def = { .l4proto = IPPROTO_TCP, .netns_id = -1 }; in nf_ct_opts_new_test()
57 u8 l4proto; global() member
65 u8 l4proto; global() member
|
| H A D | test_bpf_nf_fail.c | 14 u8 l4proto;
13 u8 l4proto; global() member
|
| /linux/include/net/netfilter/ |
| H A D | nf_conntrack_timeout.h | 17 const struct nf_conntrack_l4proto *l4proto;
16 const struct nf_conntrack_l4proto *l4proto; global() member
|
| H A D | nf_tables_core.h | 172 u8 l4proto; member
|
| /linux/drivers/net/ethernet/mediatek/ |
| H A D | mtk_ppe_offload.c | 279 u8 l4proto = 0; in mtk_flow_offload_replace() local
322 l4proto = match.key->ip_proto; in mtk_flow_offload_replace()
402 err = mtk_foe_entry_prepare(eth, &foe, offload_type, l4proto, 0, in mtk_flow_offload_replace()
|
| /linux/drivers/net/ethernet/airoha/ |
| H A D | airoha_ppe.c | 317 int l4proto) in airoha_ppe_foe_entry_prepare()
328 FIELD_PREP(AIROHA_FOE_IB1_BIND_UDP, l4proto == IPPROTO_UDP) | in airoha_ppe_foe_entry_prepare()
392 ports_pad = 0xa5a5a500 | (l4proto & 0xff); in airoha_ppe_foe_entry_prepare()
1068 u8 l4proto = 0; in airoha_ppe_flow_offload_replace()
1093 l4proto = match.key->ip_proto; in airoha_ppe_flow_offload_replace()
1163 &data, l4proto); in airoha_ppe_flow_offload_replace()
304 airoha_ppe_foe_entry_prepare(struct airoha_eth * eth,struct airoha_foe_entry * hwe,struct net_device * dev,int type,struct airoha_flow_data * data,int l4proto) airoha_ppe_foe_entry_prepare() argument
1044 u8 l4proto = 0; airoha_ppe_flow_offload_replace() local
|