Complete nft-events example by adding a basic set & set_elem event
notification.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx>
---
examples/nft-events.c | 60 +++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 60 insertions(+)
diff --git a/examples/nft-events.c b/examples/nft-events.c
index 150346a..989f4bd 100644
--- a/examples/nft-events.c
+++ b/examples/nft-events.c
@@ -21,6 +21,7 @@
#include <libnftnl/table.h>
#include <libnftnl/chain.h>
#include <libnftnl/rule.h>
+#include <libnftnl/set.h>
static int table_cb(const struct nlmsghdr *nlh, int type)
{
@@ -97,6 +98,57 @@ err:
return MNL_CB_OK;
}
+static int set_cb(const struct nlmsghdr *nlh, int type)
+{
+ struct nft_set *t;
+ char buf[4096];
+
+ t = nft_set_alloc();
+ if (t == NULL) {
+ perror("OOM");
+ goto err;
+ }
+
+ if (nft_set_nlmsg_parse(nlh, t) < 0) {
+ perror("nft_set_nlmsg_parse");
+ goto err_free;
+ }
+
+ nft_set_snprintf(buf, sizeof(buf), t, NFT_OUTPUT_DEFAULT, 0);
+ printf("[%s]\t%s\n", type == NFT_MSG_NEWSET ? "NEW" : "DEL", buf);
+
+err_free:
+ nft_set_free(t);
+err:
+ return MNL_CB_OK;
+}
+
+static int setelem_cb(const struct nlmsghdr *nlh, int type)
+{
+
+ struct nft_set *s;
+ char buf[4096];
+
+ s = nft_set_alloc();
+ if (s == NULL) {
+ perror("OOM");
+ goto err;
+ }
+
+ if (nft_set_elems_nlmsg_parse(nlh, s) < 0) {
+ perror("nft_set_nlmsg_parse");
+ goto err_free;
+ }
+
+ nft_set_snprintf(buf, sizeof(buf), s, NFT_OUTPUT_DEFAULT, 0);
+ printf("[%s]\t%s\n", type == NFT_MSG_NEWSETELEM ? "NEW" : "DEL", buf);
+
+err_free:
+ nft_set_free(s);
+err:
+ return MNL_CB_OK;
+}
+
static int events_cb(const struct nlmsghdr *nlh, void *data)
{
int ret = MNL_CB_OK;
@@ -115,6 +167,14 @@ static int events_cb(const struct nlmsghdr *nlh, void *data)
case NFT_MSG_DELRULE:
ret = rule_cb(nlh, type);
break;
+ case NFT_MSG_NEWSET:
+ case NFT_MSG_DELSET:
+ ret = set_cb(nlh, type);
+ break;
+ case NFT_MSG_NEWSETELEM:
+ case NFT_MSG_DELSETELEM:
+ ret = setelem_cb(nlh, type);
+ break;
}
return ret;
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
