1 /* Kernel module to match packet length. */
2 /* (C) 1999-2001 James Morris <jmorros@intercode.com.au>
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License version 2 as
6 * published by the Free Software Foundation.
9 #include <linux/module.h>
10 #include <linux/skbuff.h>
11 #include <linux/ipv6.h>
14 #include <linux/netfilter/xt_length.h>
15 #include <linux/netfilter/x_tables.h>
17 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
18 MODULE_DESCRIPTION("IP tables packet length matching module");
19 MODULE_LICENSE("GPL");
20 MODULE_ALIAS("ipt_length");
21 MODULE_ALIAS("ip6t_length");
24 match(const struct sk_buff
*skb
,
25 const struct net_device
*in
,
26 const struct net_device
*out
,
27 const struct xt_match
*match
,
28 const void *matchinfo
,
33 const struct xt_length_info
*info
= matchinfo
;
34 u_int16_t pktlen
= ntohs(skb
->nh
.iph
->tot_len
);
36 return (pktlen
>= info
->min
&& pktlen
<= info
->max
) ^ info
->invert
;
40 match6(const struct sk_buff
*skb
,
41 const struct net_device
*in
,
42 const struct net_device
*out
,
43 const struct xt_match
*match
,
44 const void *matchinfo
,
49 const struct xt_length_info
*info
= matchinfo
;
50 u_int16_t pktlen
= ntohs(skb
->nh
.ipv6h
->payload_len
) + sizeof(struct ipv6hdr
);
52 return (pktlen
>= info
->min
&& pktlen
<= info
->max
) ^ info
->invert
;
55 static struct xt_match length_match
= {
58 .matchsize
= sizeof(struct xt_length_info
),
62 static struct xt_match length6_match
= {
65 .matchsize
= sizeof(struct xt_length_info
),
69 static int __init
init(void)
72 ret
= xt_register_match(AF_INET
, &length_match
);
75 ret
= xt_register_match(AF_INET6
, &length6_match
);
77 xt_unregister_match(AF_INET
, &length_match
);
82 static void __exit
fini(void)
84 xt_unregister_match(AF_INET
, &length_match
);
85 xt_unregister_match(AF_INET6
, &length6_match
);
This page took 0.040546 seconds and 5 git commands to generate.