Home
last modified time | relevance | path

Searched refs:netfilter (Results 1 – 25 of 45) sorted by relevance

12

/linux/tools/testing/selftests/net/netfilter/
H A Dconntrack_resize.sh23 if ! sysctl -q net.netfilter.nf_conntrack_max >/dev/null;then
28 init_net_max=$(sysctl -n net.netfilter.nf_conntrack_max) || exit 1
29 ct_buckets=$(sysctl -n net.netfilter.nf_conntrack_buckets) || exit 1
37 sysctl -q net.netfilter.nf_conntrack_max=$init_net_max
38 sysctl -q net.netfilter.nf_conntrack_buckets=$ct_buckets
95 sysctl -q net.netfilter.nf_conntrack_buckets=$RANDOM
233 …[ "$r1" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=$((RANDOM…
234 …[ "$r2" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=$((RANDOM%…
251 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=30
252 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=30
[all …]
H A Dconntrack_sctp_collision.sh56 sysctl -wq net.netfilter.nf_log_all_netns=1
102 sysctl -wq net.netfilter.nf_log_all_netns=0
H A Dnft_synproxy.sh36 ip netns exec "$nsr" sysctl -q net.netfilter.nf_conntrack_tcp_loose=0
H A Dnft_zones_many.sh51 ip netns exec "$ns1" sysctl -q net.netfilter.nf_conntrack_udp_timeout=3600
H A Dconntrack_tcp_unreplied.sh101 ip netns exec "$ns2" sysctl -q net.netfilter.nf_conntrack_tcp_timeout_syn_sent=10
H A Dnft_fib.sh17 log_netns=$(sysctl -n net.netfilter.nf_log_all_netns)
23 [ "$log_netns" -eq 0 ] && sysctl -q net.netfilter.nf_log_all_netns=$log_netns
37 sysctl -q net.netfilter.nf_log_all_netns=1
/linux/net/netfilter/
H A Dnf_bpf_link.c157 info->netfilter.pf = nf_link->hook_ops.pf; in bpf_nf_link_fill_link_info()
158 info->netfilter.hooknum = nf_link->hook_ops.hooknum; in bpf_nf_link_fill_link_info()
159 info->netfilter.priority = nf_link->hook_ops.priority; in bpf_nf_link_fill_link_info()
160 info->netfilter.flags = hook ? BPF_F_NETFILTER_IP_DEFRAG : 0; in bpf_nf_link_fill_link_info()
184 switch (attr->link_create.netfilter.pf) { in bpf_nf_check_pf_and_hooks()
187 if (attr->link_create.netfilter.hooknum >= NF_INET_NUMHOOKS) in bpf_nf_check_pf_and_hooks()
194 if (attr->link_create.netfilter.flags & ~BPF_F_NETFILTER_IP_DEFRAG) in bpf_nf_check_pf_and_hooks()
198 prio = attr->link_create.netfilter.priority; in bpf_nf_check_pf_and_hooks()
203 else if ((attr->link_create.netfilter.flags & BPF_F_NETFILTER_IP_DEFRAG) && in bpf_nf_check_pf_and_hooks()
235 link->hook_ops.pf = attr->link_create.netfilter.pf; in bpf_nf_link_attach()
[all …]
/linux/tools/testing/selftests/bpf/prog_tests/
H A Dnetfilter_link_attach.c60 ASSERT_EQ(info.netfilter.pf, nf_expected.pf, "info nf protocol family"); in verify_netfilter_link_info()
61 ASSERT_EQ(info.netfilter.hooknum, nf_expected.hooknum, "info nf hooknum"); in verify_netfilter_link_info()
62 ASSERT_EQ(info.netfilter.priority, nf_expected.priority, "info nf priority"); in verify_netfilter_link_info()
63 ASSERT_EQ(info.netfilter.flags, nf_expected.flags, "info nf flags"); in verify_netfilter_link_info()
/linux/tools/testing/selftests/net/
H A Dip_defrag.sh25 …ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_high_thresh=9000000 >/dev/null…
26 …ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_low_thresh=7000000 >/dev/null…
27 ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_timeout=1 >/dev/null 2>&1
H A Dsrv6_end_dx6_netfilter_test.sh202 ip netns exec ${nsname} sysctl -wq net.netfilter.nf_hooks_lwtunnel=1
H A Dsrv6_end_dx4_netfilter_test.sh203 ip netns exec ${nsname} sysctl -wq net.netfilter.nf_hooks_lwtunnel=1
/linux/tools/bpf/bpftool/
H A Dnet.c832 delta = nfa->netfilter.pf - nfb->netfilter.pf; in netfilter_link_compar()
836 delta = nfa->netfilter.hooknum - nfb->netfilter.hooknum; in netfilter_link_compar()
840 if (nfa->netfilter.priority < nfb->netfilter.priority) in netfilter_link_compar()
842 if (nfa->netfilter.priority > nfb->netfilter.priority) in netfilter_link_compar()
845 return nfa->netfilter.flags - nfb->netfilter in netfilter_link_compar()
[all...]
H A Dlink.c226 info->netfilter.pf); in netfilter_dump_json()
228 info->netfilter.hooknum); in netfilter_dump_json()
230 info->netfilter.priority); in netfilter_dump_json()
232 info->netfilter.flags); in netfilter_dump_json()
792 unsigned int hook = info->netfilter.hooknum; in netfilter_dump_plain()
793 unsigned int pf = info->netfilter.pf; in netfilter_dump_plain()
823 printf(" prio %d", info->netfilter.priority); in netfilter_dump_plain()
825 if (info->netfilter.flags) in netfilter_dump_plain()
826 printf(" flags 0x%x", info->netfilter.flags); in netfilter_dump_plain()
/linux/usr/include/
H A DMakefile74 no-header-test-cxx += linux/netfilter/xt_sctp.h
122 uses-libc += linux/netfilter/xt_RATEEST.h
123 uses-libc += linux/netfilter/xt_hashlimit.h
124 uses-libc += linux/netfilter/xt_physdev.h
125 uses-libc += linux/netfilter/xt_rateest.h
/linux/Documentation/translations/zh_CN/dev-tools/
H A Dgdb-kernel-debugging.rst73 loading @0xffffffffa0020000: /home/user/linux/build/net/netfilter/xt_tcpudp.ko
74 loading @0xffffffffa0016000: /home/user/linux/build/net/netfilter/xt_pkttype.ko
75 loading @0xffffffffa0002000: /home/user/linux/build/net/netfilter/xt_limit.ko
/linux/Documentation/translations/zh_TW/dev-tools/
H A Dgdb-kernel-debugging.rst69 loading @0xffffffffa0020000: /home/user/linux/build/net/netfilter/xt_tcpudp.ko
70 loading @0xffffffffa0016000: /home/user/linux/build/net/netfilter/xt_pkttype.ko
71 loading @0xffffffffa0002000: /home/user/linux/build/net/netfilter/xt_limit.ko
/linux/net/ipv6/
H A DMakefile20 ipv6-$(CONFIG_NETFILTER) += netfilter.o
38 obj-$(CONFIG_NETFILTER) += netfilter/
/linux/Documentation/ABI/removed/
H A Dip_queue3 Contact: Pablo Neira Ayuso <pablo@netfilter.org>
/linux/tools/testing/selftests/net/netfilter/packetdrill/
H A Dcommon.sh7 sysctl -q net.netfilter.nf_conntrack_log_invalid=6
/linux/Documentation/networking/
H A Dnetfilter-sysctl.rst7 /proc/sys/net/netfilter/* Variables:
H A Dindex.rst84 netfilter-sysctl
H A Dnf_conntrack-sysctl.rst7 /proc/sys/net/netfilter/nf_conntrack_* Variables:
216 If this option is enabled, the lightweight tunnel netfilter hooks are
/linux/tools/bpf/bpftool/Documentation/
H A Dbpftool-net.rst40 classifier/action attachments, flow_dissector as well as netfilter
54 flow_dissector and finally netfilter programs. Both xdp programs and
/linux/Documentation/translations/zh_CN/networking/
H A Dindex.rst106 * netfilter-sysctl
/linux/security/smack/
H A DKconfig35 bool "Packet marking using secmarks for netfilter"

12