Home
last modified time | relevance | path

Searched refs:netfilter (Results 1 – 25 of 51) sorted by relevance

123

/Linux-v6.6/net/netfilter/
Dnf_bpf_link.c154 info->netfilter.pf = nf_link->hook_ops.pf; in bpf_nf_link_fill_link_info()
155 info->netfilter.hooknum = nf_link->hook_ops.hooknum; in bpf_nf_link_fill_link_info()
156 info->netfilter.priority = nf_link->hook_ops.priority; in bpf_nf_link_fill_link_info()
157 info->netfilter.flags = 0; in bpf_nf_link_fill_link_info()
181 switch (attr->link_create.netfilter.pf) { in bpf_nf_check_pf_and_hooks()
184 if (attr->link_create.netfilter.hooknum >= NF_INET_NUMHOOKS) in bpf_nf_check_pf_and_hooks()
191 if (attr->link_create.netfilter.flags & ~BPF_F_NETFILTER_IP_DEFRAG) in bpf_nf_check_pf_and_hooks()
195 prio = attr->link_create.netfilter.priority; in bpf_nf_check_pf_and_hooks()
200 else if ((attr->link_create.netfilter.flags & BPF_F_NETFILTER_IP_DEFRAG) && in bpf_nf_check_pf_and_hooks()
231 link->hook_ops.pf = attr->link_create.netfilter.pf; in bpf_nf_link_attach()
[all …]
DMakefile2 netfilter-objs := core.o nf_log.o nf_queue.o nf_sockopt.o utils.o
24 obj-$(CONFIG_NETFILTER) = netfilter.o
/Linux-v6.6/tools/testing/selftests/net/
Dip_defrag.sh25 …ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_high_thresh=9000000 >/dev/null…
26 …ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_low_thresh=7000000 >/dev/null…
27 ip netns exec "${NETNS}" sysctl -w net.netfilter.nf_conntrack_frag6_timeout=1 >/dev/null 2>&1
/Linux-v6.6/tools/bpf/bpftool/
Dnet.c742 delta = nfa->netfilter.pf - nfb->netfilter.pf; in netfilter_link_compar()
746 delta = nfa->netfilter.hooknum - nfb->netfilter.hooknum; in netfilter_link_compar()
750 if (nfa->netfilter.priority < nfb->netfilter.priority) in netfilter_link_compar()
752 if (nfa->netfilter.priority > nfb->netfilter.priority) in netfilter_link_compar()
755 return nfa->netfilter.flags - nfb->netfilter.flags; in netfilter_link_compar()
Dlink.c226 info->netfilter.pf); in netfilter_dump_json()
228 info->netfilter.hooknum); in netfilter_dump_json()
230 info->netfilter.priority); in netfilter_dump_json()
232 info->netfilter.flags); in netfilter_dump_json()
594 unsigned int hook = info->netfilter.hooknum; in netfilter_dump_plain()
595 unsigned int pf = info->netfilter.pf; in netfilter_dump_plain()
625 printf(" prio %d", info->netfilter.priority); in netfilter_dump_plain()
627 if (info->netfilter.flags) in netfilter_dump_plain()
628 printf(" flags 0x%x", info->netfilter.flags); in netfilter_dump_plain()
/Linux-v6.6/net/ipv6/
DMakefile20 ipv6-$(CONFIG_NETFILTER) += netfilter.o
38 obj-$(CONFIG_NETFILTER) += netfilter/
/Linux-v6.6/Documentation/translations/zh_CN/dev-tools/
Dgdb-kernel-debugging.rst69 loading @0xffffffffa0020000: /home/user/linux/build/net/netfilter/xt_tcpudp.ko
70 loading @0xffffffffa0016000: /home/user/linux/build/net/netfilter/xt_pkttype.ko
71 loading @0xffffffffa0002000: /home/user/linux/build/net/netfilter/xt_limit.ko
/Linux-v6.6/net/
DKconfig191 protocols over the bridge, use ebtables (under bridge netfilter
194 Various modules exist for netfilter which replace the previous
203 bool "Advanced netfilter configuration"
207 If you say Y here you can select between all the netfilter modules.
229 source "net/netfilter/Kconfig"
230 source "net/ipv4/netfilter/Kconfig"
231 source "net/ipv6/netfilter/Kconfig"
232 source "net/bridge/netfilter/Kconfig"
328 being used in cls_cgroup and for netfilter matching.
DMakefile16 obj-$(CONFIG_NETFILTER) += netfilter/
/Linux-v6.6/net/ipv4/
DMakefile44 obj-$(CONFIG_NETFILTER) += netfilter.o netfilter/
/Linux-v6.6/Documentation/ABI/removed/
Dip_queue3 Contact: Pablo Neira Ayuso <pablo@netfilter.org>
/Linux-v6.6/Documentation/networking/
Dnetfilter-sysctl.rst7 /proc/sys/net/netfilter/* Variables:
Dtproxy.rst52 http://people.netfilter.org/hidden/tproxy/netcat-ip_transparent-support.patch
104 '--enable-linux-netfilter' to configure and set the 'tproxy' option on
Dindex.rst81 netfilter-sysctl
Dnf_conntrack-sysctl.rst7 /proc/sys/net/netfilter/nf_conntrack_* Variables:
217 If this option is enabled, the lightweight tunnel netfilter hooks are
/Linux-v6.6/tools/testing/selftests/netfilter/
Dnft_fib.sh15 log_netns=$(sysctl -n net.netfilter.nf_log_all_netns)
23 [ $log_netns -eq 0 ] && sysctl -q net.netfilter.nf_log_all_netns=$log_netns
52 sysctl -q net.netfilter.nf_log_all_netns=1
Dnft_zones_many.sh45 ip netns exec $ns sysctl -q net.netfilter.nf_conntrack_udp_timeout=3600
Dnft_synproxy.sh54 ip netns exec $nsr sysctl -q net.netfilter.nf_conntrack_tcp_loose=0
/Linux-v6.6/tools/lib/bpf/
Dbpf.c790 attr.link_create.netfilter.pf = OPTS_GET(opts, netfilter.pf, 0); in bpf_link_create()
791 attr.link_create.netfilter.hooknum = OPTS_GET(opts, netfilter.hooknum, 0); in bpf_link_create()
792 attr.link_create.netfilter.priority = OPTS_GET(opts, netfilter.priority, 0); in bpf_link_create()
793 attr.link_create.netfilter.flags = OPTS_GET(opts, netfilter.flags, 0); in bpf_link_create()
794 if (!OPTS_ZEROED(opts, netfilter)) in bpf_link_create()
/Linux-v6.6/net/bridge/
DMakefile27 obj-$(CONFIG_NETFILTER) += netfilter/
/Linux-v6.6/net/bpfilter/
DKconfig8 provide netfilter compatible functionality via BPF
/Linux-v6.6/Documentation/dev-tools/
Dgdb-kernel-debugging.rst79 loading @0xffffffffa0020000: /home/user/linux/build/net/netfilter/xt_tcpudp.ko
80 loading @0xffffffffa0016000: /home/user/linux/build/net/netfilter/xt_pkttype.ko
81 loading @0xffffffffa0002000: /home/user/linux/build/net/netfilter/xt_limit.ko
/Linux-v6.6/tools/bpf/bpftool/Documentation/
Dbpftool-net.rst41 classifier/action attachments, flow_dissector as well as netfilter
56 and finally netfilter programs. Both xdp programs and tcx/tc programs are
/Linux-v6.6/include/linux/
Dbpf_types.h83 BPF_PROG_TYPE(BPF_PROG_TYPE_NETFILTER, netfilter,
/Linux-v6.6/security/smack/
DKconfig35 bool "Packet marking using secmarks for netfilter"

123