1 /* Accouting handling for netfilter. */
4 * (C) 2008 Krzysztof Piotr Oledzki <ole@ans.pl>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/netfilter.h>
12 #include <linux/slab.h>
13 #include <linux/kernel.h>
14 #include <linux/moduleparam.h>
15 #include <linux/export.h>
17 #include <net/netfilter/nf_conntrack.h>
18 #include <net/netfilter/nf_conntrack_extend.h>
19 #include <net/netfilter/nf_conntrack_acct.h>
21 static bool nf_ct_acct __read_mostly
;
23 module_param_named(acct
, nf_ct_acct
, bool, 0644);
24 MODULE_PARM_DESC(acct
, "Enable connection tracking flow accounting.");
27 static struct ctl_table acct_sysctl_table
[] = {
29 .procname
= "nf_conntrack_acct",
30 .data
= &init_net
.ct
.sysctl_acct
,
31 .maxlen
= sizeof(unsigned int),
33 .proc_handler
= proc_dointvec
,
37 #endif /* CONFIG_SYSCTL */
40 seq_print_acct(struct seq_file
*s
, const struct nf_conn
*ct
, int dir
)
42 struct nf_conn_acct
*acct
;
43 struct nf_conn_counter
*counter
;
45 acct
= nf_conn_acct_find(ct
);
49 counter
= acct
->counter
;
50 seq_printf(s
, "packets=%llu bytes=%llu ",
51 (unsigned long long)atomic64_read(&counter
[dir
].packets
),
52 (unsigned long long)atomic64_read(&counter
[dir
].bytes
));
56 EXPORT_SYMBOL_GPL(seq_print_acct
);
58 static const struct nf_ct_ext_type acct_extend
= {
59 .len
= sizeof(struct nf_conn_acct
),
60 .align
= __alignof__(struct nf_conn_acct
),
65 static int nf_conntrack_acct_init_sysctl(struct net
*net
)
67 struct ctl_table
*table
;
69 table
= kmemdup(acct_sysctl_table
, sizeof(acct_sysctl_table
),
74 table
[0].data
= &net
->ct
.sysctl_acct
;
76 /* Don't export sysctls to unprivileged users */
77 if (net
->user_ns
!= &init_user_ns
)
78 table
[0].procname
= NULL
;
80 net
->ct
.acct_sysctl_header
= register_net_sysctl(net
, "net/netfilter",
82 if (!net
->ct
.acct_sysctl_header
) {
83 printk(KERN_ERR
"nf_conntrack_acct: can't register to sysctl.\n");
94 static void nf_conntrack_acct_fini_sysctl(struct net
*net
)
96 struct ctl_table
*table
;
98 table
= net
->ct
.acct_sysctl_header
->ctl_table_arg
;
99 unregister_net_sysctl_table(net
->ct
.acct_sysctl_header
);
103 static int nf_conntrack_acct_init_sysctl(struct net
*net
)
108 static void nf_conntrack_acct_fini_sysctl(struct net
*net
)
113 int nf_conntrack_acct_pernet_init(struct net
*net
)
115 net
->ct
.sysctl_acct
= nf_ct_acct
;
116 return nf_conntrack_acct_init_sysctl(net
);
119 void nf_conntrack_acct_pernet_fini(struct net
*net
)
121 nf_conntrack_acct_fini_sysctl(net
);
124 int nf_conntrack_acct_init(void)
126 int ret
= nf_ct_extend_register(&acct_extend
);
128 pr_err("nf_conntrack_acct: Unable to register extension\n");
132 void nf_conntrack_acct_fini(void)
134 nf_ct_extend_unregister(&acct_extend
);