1 /* $OpenBSD: if_pflog.h,v 1.13 2006/10/23 12:46:09 henning Exp $ */ 2 /*- 3 * SPDX-License-Identifier: BSD-2-Clause 4 * 5 * Copyright 2001 Niels Provos <provos@citi.umich.edu> 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 18 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 19 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 20 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 21 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 22 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 23 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 24 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 25 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 26 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 27 * 28 * $FreeBSD$ 29 */ 30 31 #ifndef _NET_IF_PFLOG_H_ 32 #define _NET_IF_PFLOG_H_ 33 34 #include <sys/types.h> 35 36 #include <net/if.h> 37 38 #define PFLOGIFS_MAX 16 39 40 #define PFLOG_RULESET_NAME_SIZE 16 41 42 struct pfloghdr { 43 u_int8_t length; 44 sa_family_t af; 45 u_int8_t action; 46 u_int8_t reason; 47 char ifname[IFNAMSIZ]; 48 char ruleset[PFLOG_RULESET_NAME_SIZE]; 49 u_int32_t rulenr; 50 u_int32_t subrulenr; 51 uid_t uid; 52 pid_t pid; 53 uid_t rule_uid; 54 pid_t rule_pid; 55 u_int8_t dir; 56 u_int8_t pad[3]; 57 u_int32_t ridentifier; 58 u_int8_t reserve; /* Appease broken software like Wireshark. */ 59 u_int8_t pad2[3]; 60 }; 61 62 #define PFLOG_ALIGNMENT sizeof(uint32_t) 63 #define PFLOG_ALIGN(x) (((x) + PFLOG_ALIGNMENT - 1) & ~(PFLOG_ALIGNMENT - 1)) 64 #define PFLOG_HDRLEN PFLOG_ALIGN(offsetof(struct pfloghdr, pad2)) 65 /* minus pad, also used as a signature */ 66 #define PFLOG_REAL_HDRLEN offsetof(struct pfloghdr, pad2) 67 68 #ifdef _KERNEL 69 struct pf_rule; 70 struct pf_ruleset; 71 struct pfi_kif; 72 struct pf_pdesc; 73 74 #define PFLOG_PACKET(i,a,b,c,d,e,f,g,h,di) do { \ 75 if (pflog_packet_ptr != NULL) \ 76 pflog_packet_ptr(i,a,b,c,d,e,f,g,h,di); \ 77 } while (0) 78 #endif /* _KERNEL */ 79 #endif /* _NET_IF_PFLOG_H_ */ 80