1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
/* packet-netlink.h
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 2001 Gerald Combs
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
#ifndef __PACKET_NETLINK_H__
#define __PACKET_NETLINK_H__
#include <epan/value_string.h>
/* from <linux/netlink.h> prefixed with WS_ */
enum {
WS_NETLINK_ROUTE = 0,
WS_NETLINK_UNUSED = 1,
WS_NETLINK_USERSOCK = 2,
WS_NETLINK_FIREWALL = 3,
WS_NETLINK_SOCK_DIAG = 4,
WS_NETLINK_NFLOG = 5,
WS_NETLINK_XFRM = 6,
WS_NETLINK_SELINUX = 7,
WS_NETLINK_ISCSI = 8,
WS_NETLINK_AUDIT = 9,
WS_NETLINK_FIB_LOOKUP = 10,
WS_NETLINK_CONNECTOR = 11,
WS_NETLINK_NETFILTER = 12,
WS_NETLINK_IP6_FW = 13,
WS_NETLINK_DNRTMSG = 14,
WS_NETLINK_KOBJECT_UEVENT = 15,
WS_NETLINK_GENERIC = 16,
/* leave room for NETLINK_DM (DM Events) */
WS_NETLINK_SCSITRANSPORT = 18,
WS_NETLINK_ECRYPTFS = 19,
WS_NETLINK_RDMA = 20,
WS_NETLINK_CRYPTO = 21
};
/* from <linux/netlink.h> prefixed with WS_ */
enum {
WS_NLM_F_REQUEST = 1, /* It is request message.*/
WS_NLM_F_MULTI = 2, /* Multipart message, terminated by NETLINK_MSG_DONE */
WS_NLM_F_ACK = 4, /* Reply with ack, with zero or error code */
WS_NLM_F_ECHO = 8, /* Echo this request */
WS_NLM_F_DUMP_INTR = 16, /* Dump was inconsistent due to sequence change */
WS_NLM_F_DUMP_FILTERED = 32, /* Dump was filtered as requested */
/* Modifiers to Get request */
WS_NLM_F_ROOT = 0x100, /* specify tree root */
WS_NLM_F_MATCH = 0x200, /* return all matching */
WS_NLM_F_ATOMIC = 0x400, /* = (NETLINK_MSG_F_ROOT | NETLINK_MSG_F_MATCH) */
/* Modifiers to NEW request */
WS_NLM_F_REPLACE = 0x100, /* Override existing */
WS_NLM_F_EXCL = 0x200, /* Do not touch, if it exists */
WS_NLM_F_CREATE = 0x400, /* Create, if it does */
WS_NLM_F_APPEND = 0x800 /* Add to end of list */
};
extern value_string_ext netlink_family_vals_ext;
enum {
WS_NLMSG_NOOP = 0x01,
WS_NLMSG_ERROR = 0x02,
WS_NLMSG_DONE = 0x03,
WS_NLMSG_OVERRUN = 0x04,
WS_NLMSG_MIN_TYPE = 0x10 /** type < WS_NLMSG_MIN_TYPE are reserved */
};
/* from <linux/netfilter.h>. Looks like AF_xxx, except for NFPROTO_ARP */
enum ws_nfproto {
WS_NFPROTO_UNSPEC = 0,
WS_NFPROTO_INET = 1,
WS_NFPROTO_IPV4 = 2,
WS_NFPROTO_ARP = 3,
WS_NFPROTO_NETDEV = 5,
WS_NFPROTO_BRIDGE = 7,
WS_NFPROTO_IPV6 = 10,
WS_NFPROTO_DECNET = 12,
};
extern const value_string nfproto_family_vals[];
extern const value_string netfilter_hooks_vals[];
#define PACKET_NETLINK_MAGIC 0x4A5ACCCE
struct packet_netlink_data {
guint32 magic; /* PACKET_NETLINK_MAGIC */
int encoding;
guint16 type;
};
typedef int netlink_attributes_cb_t(tvbuff_t *, void *data, proto_tree *, int nla_type, int offset, int len);
int dissect_netlink_attributes(tvbuff_t *tvb, header_field_info *hfi_type, int ett, void *data, struct packet_netlink_data *nl_data, proto_tree *tree, int offset, int length, netlink_attributes_cb_t cb);
#define NLA_F_NESTED 0x8000
#define NLA_F_NET_BYTEORDER 0x4000
#define NLA_TYPE_MASK 0x3fff
#endif /* __PACKET_NETLINK_H__ */
|
