![Patrick McHardy](/assets/img/avatar_default.png)
The LOG targets print the entire MAC header as one long string, which is not readable very well: IN=eth0 OUT= MAC=00:15:f2:24:91:f8:00:1b:24:dc:61:e6:08:00 ... Add an option to decode known header formats (currently just ARPHRD_ETHER devices) in their individual fields: IN=eth0 OUT= MACSRC=00:1b:24:dc:61:e6 MACDST=00:15:f2:24:91:f8 MACPROTO=0800 ... IN=eth0 OUT= MACSRC=00:1b:24:dc:61:e6 MACDST=00:15:f2:24:91:f8 MACPROTO=86dd ... The option needs to be explicitly enabled by userspace to avoid breaking existing parsers. Signed-off-by: Patrick McHardy <kaber@trash.net>
20 lines
599 B
C
20 lines
599 B
C
#ifndef _IP6T_LOG_H
|
|
#define _IP6T_LOG_H
|
|
|
|
/* make sure not to change this without changing netfilter.h:NF_LOG_* (!) */
|
|
#define IP6T_LOG_TCPSEQ 0x01 /* Log TCP sequence numbers */
|
|
#define IP6T_LOG_TCPOPT 0x02 /* Log TCP options */
|
|
#define IP6T_LOG_IPOPT 0x04 /* Log IP options */
|
|
#define IP6T_LOG_UID 0x08 /* Log UID owning local socket */
|
|
#define IP6T_LOG_NFLOG 0x10 /* Unsupported, don't use */
|
|
#define IP6T_LOG_MACDECODE 0x20 /* Decode MAC header */
|
|
#define IP6T_LOG_MASK 0x2f
|
|
|
|
struct ip6t_log_info {
|
|
unsigned char level;
|
|
unsigned char logflags;
|
|
char prefix[30];
|
|
};
|
|
|
|
#endif /*_IPT_LOG_H*/
|