From: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
To: netfilter-devel@vger.kernel.org
Subject: [libnftnl PATCH 2/2] examples: nft-set-parse-add: give batching support
Date: Fri, 26 Sep 2014 20:34:48 +0200 [thread overview]
Message-ID: <20140926183448.3333.64808.stgit@nfdev.cica.es> (raw)
In-Reply-To: <20140926183442.3333.62136.stgit@nfdev.cica.es>
Batching is needed in current kernels.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
---
examples/nft-set-parse-add.c | 43 ++++++++++++++++++++++++++++++++++--------
1 file changed, 35 insertions(+), 8 deletions(-)
diff --git a/examples/nft-set-parse-add.c b/examples/nft-set-parse-add.c
index b74ad7f..f21385f 100644
--- a/examples/nft-set-parse-add.c
+++ b/examples/nft-set-parse-add.c
@@ -23,6 +23,7 @@
#include <linux/netfilter.h>
#include <linux/netfilter/nf_tables.h>
+#include <linux/netfilter/nfnetlink.h>
#include <libmnl/libmnl.h>
#include <libnftnl/set.h>
@@ -66,6 +67,8 @@ static struct nft_set *set_parse_file(const char *file, uint16_t format)
}
nft_parse_err_free(err);
+
+ nft_set_attr_set_u32(s, NFT_SET_ATTR_ID, 1);
return s;
}
@@ -75,10 +78,11 @@ int main(int argc, char *argv[])
struct mnl_socket *nl;
char buf[MNL_SOCKET_BUFFER_SIZE];
struct nlmsghdr *nlh;
- uint32_t portid, seq;
+ uint32_t portid, seq, set_seq;
struct nft_set *s;
- int ret;
+ int ret, batching;
uint16_t family, format, outformat;
+ struct mnl_nlmsg_batch *batch;
if (argc < 2) {
printf("Usage: %s {xml|json} <file>\n", argv[0]);
@@ -103,14 +107,34 @@ int main(int argc, char *argv[])
nft_set_fprintf(stdout, s, outformat, 0);
fprintf(stdout, "\n");
- family = nft_set_attr_get_u32(s, NFT_SET_ATTR_FAMILY);
-
seq = time(NULL);
+ batching = nft_batch_is_supported();
+ if (batching < 0) {
+ perror("cannot talk to nfnetlink");
+ exit(EXIT_FAILURE);
+ }
+
+ batch = mnl_nlmsg_batch_start(buf, sizeof(buf));
- nlh = nft_set_nlmsg_build_hdr(buf, NFT_MSG_NEWSET, family,
- NLM_F_CREATE|NLM_F_ACK, seq);
+ if (batching) {
+ nft_batch_begin(mnl_nlmsg_batch_current(batch), seq++);
+ mnl_nlmsg_batch_next(batch);
+ }
+
+ family = nft_set_attr_get_u32(s, NFT_SET_ATTR_FAMILY);
+
+ set_seq = seq;
+ nlh = nft_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+ NFT_MSG_NEWSET, family,
+ NLM_F_CREATE|NLM_F_ACK, seq++);
nft_set_nlmsg_build_payload(nlh, s);
nft_set_free(s);
+ mnl_nlmsg_batch_next(batch);
+
+ if (batching) {
+ nft_batch_end(mnl_nlmsg_batch_current(batch), seq++);
+ mnl_nlmsg_batch_next(batch);
+ }
nl = mnl_socket_open(NETLINK_NETFILTER);
if (nl == NULL) {
@@ -124,14 +148,17 @@ int main(int argc, char *argv[])
}
portid = mnl_socket_get_portid(nl);
- if (mnl_socket_sendto(nl, nlh, nlh->nlmsg_len) < 0) {
+ if (mnl_socket_sendto(nl, mnl_nlmsg_batch_head(batch),
+ mnl_nlmsg_batch_size(batch)) < 0) {
perror("mnl_socket_send");
exit(EXIT_FAILURE);
}
+ mnl_nlmsg_batch_stop(batch);
+
ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
while (ret > 0) {
- ret = mnl_cb_run(buf, ret, seq, portid, NULL, NULL);
+ ret = mnl_cb_run(buf, ret, set_seq, portid, NULL, NULL);
if (ret <= 0)
break;
ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
next prev parent reply other threads:[~2014-09-26 18:34 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-09-26 18:34 [libnftnl PATCH 1/2] examples: nft-set-json-add: generalize parsing format support Arturo Borrero Gonzalez
2014-09-26 18:34 ` Arturo Borrero Gonzalez [this message]
2014-09-29 15:03 ` [libnftnl PATCH 2/2] examples: nft-set-parse-add: give batching support Pablo Neira Ayuso
[not found] ` <CAOkSjBhujE4fx-1YnH1ZqdP1aUsZxaPQR+rrXoLC6wBBbONjYg@mail.gmail.com>
2014-09-30 9:03 ` Pablo Neira Ayuso
2014-09-29 14:58 ` [libnftnl PATCH 1/2] examples: nft-set-json-add: generalize parsing format support Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140926183448.3333.64808.stgit@nfdev.cica.es \
--to=arturo.borrero.glez@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.