1 /* Accouting handling for netfilter. */
4 * (C) 2008 Krzysztof Piotr Oledzki <ole@ans.pl>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/netfilter.h>
12 #include <linux/slab.h>
13 #include <linux/kernel.h>
14 #include <linux/moduleparam.h>
15 #include <linux/export.h>
17 #include <net/netfilter/nf_conntrack.h>
18 #include <net/netfilter/nf_conntrack_extend.h>
19 #include <net/netfilter/nf_conntrack_acct.h>
21 static bool nf_ct_acct __read_mostly
;
23 module_param_named(acct
, nf_ct_acct
, bool, 0644);
24 MODULE_PARM_DESC(acct
, "Enable connection tracking flow accounting.");
27 static struct ctl_table acct_sysctl_table
[] = {
29 .procname
= "nf_conntrack_acct",
30 .data
= &init_net
.ct
.sysctl_acct
,
31 .maxlen
= sizeof(unsigned int),
33 .proc_handler
= proc_dointvec
,
37 #endif /* CONFIG_SYSCTL */
40 seq_print_acct(struct seq_file
*s
, const struct nf_conn
*ct
, int dir
)
42 struct nf_conn_acct
*acct
;
43 struct nf_conn_counter
*counter
;
45 acct
= nf_conn_acct_find(ct
);
49 counter
= acct
->counter
;
50 return seq_printf(s
, "packets=%llu bytes=%llu ",
51 (unsigned long long)atomic64_read(&counter
[dir
].packets
),
52 (unsigned long long)atomic64_read(&counter
[dir
].bytes
));
54 EXPORT_SYMBOL_GPL(seq_print_acct
);
56 static struct nf_ct_ext_type acct_extend __read_mostly
= {
57 .len
= sizeof(struct nf_conn_acct
),
58 .align
= __alignof__(struct nf_conn_acct
),
63 static int nf_conntrack_acct_init_sysctl(struct net
*net
)
65 struct ctl_table
*table
;
67 table
= kmemdup(acct_sysctl_table
, sizeof(acct_sysctl_table
),
72 table
[0].data
= &net
->ct
.sysctl_acct
;
74 /* Don't export sysctls to unprivileged users */
75 if (net
->user_ns
!= &init_user_ns
)
76 table
[0].procname
= NULL
;
78 net
->ct
.acct_sysctl_header
= register_net_sysctl(net
, "net/netfilter",
80 if (!net
->ct
.acct_sysctl_header
) {
81 printk(KERN_ERR
"nf_conntrack_acct: can't register to sysctl.\n");
92 static void nf_conntrack_acct_fini_sysctl(struct net
*net
)
94 struct ctl_table
*table
;
96 table
= net
->ct
.acct_sysctl_header
->ctl_table_arg
;
97 unregister_net_sysctl_table(net
->ct
.acct_sysctl_header
);
101 static int nf_conntrack_acct_init_sysctl(struct net
*net
)
106 static void nf_conntrack_acct_fini_sysctl(struct net
*net
)
111 int nf_conntrack_acct_pernet_init(struct net
*net
)
113 net
->ct
.sysctl_acct
= nf_ct_acct
;
114 return nf_conntrack_acct_init_sysctl(net
);
117 void nf_conntrack_acct_pernet_fini(struct net
*net
)
119 nf_conntrack_acct_fini_sysctl(net
);
122 int nf_conntrack_acct_init(void)
124 int ret
= nf_ct_extend_register(&acct_extend
);
126 pr_err("nf_conntrack_acct: Unable to register extension\n");
130 void nf_conntrack_acct_fini(void)
132 nf_ct_extend_unregister(&acct_extend
);