From mboxrd@z Thu Jan 1 00:00:00 1970 From: Giuseppe Longo Subject: [PATCH v2] xtables-events: prints arp rules Date: Mon, 10 Feb 2014 16:49:34 +0100 Message-ID: <1392047374-30511-2-git-send-email-giuseppelng@gmail.com> References: <1392047374-30511-1-git-send-email-giuseppelng@gmail.com> Cc: Giuseppe Longo To: netfilter-devel@vger.kernel.org Return-path: Received: from mail-ea0-f179.google.com ([209.85.215.179]:43499 "EHLO mail-ea0-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752394AbaBJPtO (ORCPT ); Mon, 10 Feb 2014 10:49:14 -0500 Received: by mail-ea0-f179.google.com with SMTP id q10so2612122ead.24 for ; Mon, 10 Feb 2014 07:49:13 -0800 (PST) In-Reply-To: <1392047374-30511-1-git-send-email-giuseppelng@gmail.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: This patch permits to print arp rules, avoiding the segfault that you got currently. Signed-off-by: Giuseppe Longo --- iptables/xtables-events.c | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/iptables/xtables-events.c b/iptables/xtables-events.c index 408e091..75459c1 100644 --- a/iptables/xtables-events.c +++ b/iptables/xtables-events.c @@ -59,7 +59,10 @@ static bool counters; static int rule_cb(const struct nlmsghdr *nlh, int type) { struct iptables_command_state cs = {}; + struct arpt_entry fw_arp = {}; struct nft_rule *r; + void *fw = NULL; + uint8_t family; r = nft_rule_alloc(); if (r == NULL) { @@ -72,21 +75,23 @@ static int rule_cb(const struct nlmsghdr *nlh, int type) goto err_free; } - nft_rule_to_iptables_command_state(r, &cs); - - switch(nft_rule_attr_get_u8(r, NFT_RULE_ATTR_FAMILY)) { + family = nft_rule_attr_get_u8(r, NFT_RULE_ATTR_FAMILY); + switch(family) { case AF_INET: - printf("-4 "); - break; case AF_INET6: - printf("-6 "); + printf("-%c ", family == AF_INET ? '4' : '6'); + nft_rule_to_iptables_command_state(r, &cs); + fw = &cs; break; + case NFPROTO_ARP: + nft_rule_to_arpt_entry(r, &fw_arp); + fw = &fw_arp; default: break; } - nft_rule_print_save(&cs, r, + nft_rule_print_save(fw, r, type == NFT_MSG_NEWRULE ? NFT_RULE_APPEND : NFT_RULE_DEL, counters ? 0 : FMT_NOCOUNTS); -- 1.8.1.5