need help with capturing packet and bytes count from conntrack

need help with capturing packet and bytes count from conntrack

[Pete Kay]

Hi,

I am trying to write a small piece of code to obtain the packet count
and bytes count for a connection.

Here is what I get from conntrack -L

[root@linux]# conntrack -L -p udp -s 192.168.1.179 -d 192.168.1.115
--sport 10374
udp      17 88 src=192.168.1.179 dst=192.168.1.115 sport=10374
dport=26926 packets=850 bytes=170000 src=192.168.1.56
dst=192.168.1.115 sport=16395 dport=26924 packets=571 bytes=159880
[ASSURED] mark=0 use=1

=============
When I run the following source code, I get 0 for all caller_bytes,
callee_bytes, caller_packets, callee_packets, does anyone know what is
wrong with my code here?


 uint32_t caller_bytes, callee_bytes, caller_packets, callee_packets;
        int ret = 0;
        struct nfct_handle *h;
        struct nf_conntrack *ct;
        ct = nfct_new();
        if (!ct) {
                perror("nfct_new");

        }

        switch_log_printf(SWITCH_CHANNEL_CHANNEL_LOG(channel),
SWITCH_LOG_DEBUG, "end_point_media_ip=[%s] end_point_media_port=[%s]
server_media_ip=[%s] se$

        nfct_set_attr_u8(ct, ATTR_L3PROTO, AF_INET);
        nfct_set_attr_u32(ct, ATTR_IPV4_SRC, inet_addr("192.168.1.179"));
        nfct_set_attr_u32(ct, ATTR_IPV4_DST, inet_addr("192.168.1.115"));
        nfct_set_attr_u8(ct, ATTR_L4PROTO, IPPROTO_UDP);
        nfct_set_attr_u16(ct, ATTR_PORT_SRC, htons(10374);
        nfct_set_attr_u16(ct, ATTR_PORT_DST, htons(26926);

        h = nfct_open(CONNTRACK, 0);
        if (!h) {
                perror("nfct_open");
        }
        ret = nfct_query(h, NFCT_Q_GET, ct);
        printf("TEST: query conntrack ");
        if (ret == -1)
              printf("(%d)(%s)\n", ret, strerror(errno));
        else
              printf("(OK)\n");


        caller_bytes = nfct_get_attr_u32(ct, ATTR_ORIG_COUNTER_BYTES);
        callee_bytes = nfct_get_attr_u32(ct, ATTR_REPL_COUNTER_BYTES);
        caller_packets = nfct_get_attr_u32(ct, ATTR_ORIG_COUNTER_PACKETS);
        callee_packets = nfct_get_attr_u32(ct, ATTR_REPL_COUNTER_PACKETS);
        nfct_close(h);

        printf("caller_bytes=[%lu] callee_bytes=[%lu]
caller_packet=[%lu] callee_packet=[%lu]\n", (unsigned
long)caller_bytes, (unsigned long)callee_bytes, (unsigned
long)caller_packets,(unsigned long) callee_packets);




Thank you in advance for all your kind help.



thanks,
P

Re: need help with capturing packet and bytes count from conntrack

[James King]

On Thu, Sep 9, 2010 at 6:19 AM, Pete Kay <petedao@gmail.com> wrote:
> Hi,
>
> I am trying to write a small piece of code to obtain the packet count
> and bytes count for a connection.
>
> Here is what I get from conntrack -L
>
> [root@linux]# conntrack -L -p udp -s 192.168.1.179 -d 192.168.1.115
> --sport 10374
> udp      17 88 src=192.168.1.179 dst=192.168.1.115 sport=10374
> dport=26926 packets=850 bytes=170000 src=192.168.1.56
> dst=192.168.1.115 sport=16395 dport=26924 packets=571 bytes=159880
> [ASSURED] mark=0 use=1
>
> =============
> When I run the following source code, I get 0 for all caller_bytes,
> callee_bytes, caller_packets, callee_packets, does anyone know what is
> wrong with my code here?
>
>
>  uint32_t caller_bytes, callee_bytes, caller_packets, callee_packets;
>        int ret = 0;
>        struct nfct_handle *h;
>        struct nf_conntrack *ct;
>        ct = nfct_new();
>        if (!ct) {
>                perror("nfct_new");
>
>        }
>
>        switch_log_printf(SWITCH_CHANNEL_CHANNEL_LOG(channel),
> SWITCH_LOG_DEBUG, "end_point_media_ip=[%s] end_point_media_port=[%s]
> server_media_ip=[%s] se$
>
>        nfct_set_attr_u8(ct, ATTR_L3PROTO, AF_INET);
>        nfct_set_attr_u32(ct, ATTR_IPV4_SRC, inet_addr("192.168.1.179"));
>        nfct_set_attr_u32(ct, ATTR_IPV4_DST, inet_addr("192.168.1.115"));
>        nfct_set_attr_u8(ct, ATTR_L4PROTO, IPPROTO_UDP);
>        nfct_set_attr_u16(ct, ATTR_PORT_SRC, htons(10374);
>        nfct_set_attr_u16(ct, ATTR_PORT_DST, htons(26926);
>
>        h = nfct_open(CONNTRACK, 0);
>        if (!h) {
>                perror("nfct_open");
>        }
>        ret = nfct_query(h, NFCT_Q_GET, ct);
>        printf("TEST: query conntrack ");
>        if (ret == -1)
>              printf("(%d)(%s)\n", ret, strerror(errno));
>        else
>              printf("(OK)\n");
>
>
>        caller_bytes = nfct_get_attr_u32(ct, ATTR_ORIG_COUNTER_BYTES);
>        callee_bytes = nfct_get_attr_u32(ct, ATTR_REPL_COUNTER_BYTES);
>        caller_packets = nfct_get_attr_u32(ct, ATTR_ORIG_COUNTER_PACKETS);
>        callee_packets = nfct_get_attr_u32(ct, ATTR_REPL_COUNTER_PACKETS);
>        nfct_close(h);
>
>        printf("caller_bytes=[%lu] callee_bytes=[%lu]
> caller_packet=[%lu] callee_packet=[%lu]\n", (unsigned
> long)caller_bytes, (unsigned long)callee_bytes, (unsigned
> long)caller_packets,(unsigned long) callee_packets);

I believe you need to register a callback before calling nfct_query()
and issue the get attribute calls from there.  See
utils/conntrack_get.c
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html