Home | History | Annotate | Download | only in ip
      1 /* $USAGI: $ */
      2 
      3 /*
      4  * Copyright (C)2004 USAGI/WIDE Project
      5  *
      6  * This program is free software; you can redistribute it and/or modify
      7  * it under the terms of the GNU General Public License as published by
      8  * the Free Software Foundation; either version 2 of the License, or
      9  * (at your option) any later version.
     10  *
     11  * This program is distributed in the hope that it will be useful,
     12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
     13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     14  * GNU General Public License for more details.
     15  *
     16  * You should have received a copy of the GNU General Public License
     17  * along with this program; if not, write to the Free Software
     18  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     19  */
     20 /*
     21  * Authors:
     22  *	Masahide NAKAMURA @USAGI
     23  */
     24 
     25 #ifndef __XFRM_H__
     26 #define __XFRM_H__ 1
     27 
     28 #include <stdio.h>
     29 #include <sys/socket.h>
     30 #include <linux/xfrm.h>
     31 
     32 #ifndef IPPROTO_SCTP
     33 # define IPPROTO_SCTP	132
     34 #endif
     35 #ifndef IPPROTO_DCCP
     36 # define IPPROTO_DCCP	33
     37 #endif
     38 #ifndef IPPROTO_MH
     39 # define IPPROTO_MH	135
     40 #endif
     41 
     42 #define XFRMS_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_usersa_info))))
     43 #define XFRMS_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_usersa_info))
     44 
     45 #define XFRMP_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_userpolicy_info))))
     46 #define XFRMP_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_userpoilcy_info))
     47 
     48 #define XFRMSID_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_usersa_id))))
     49 #define XFRMSID_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_usersa_id))
     50 
     51 #define XFRMPID_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_userpolicy_id))))
     52 #define XFRMPID_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_userpoilcy_id))
     53 
     54 #define XFRMACQ_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_acquire))))
     55 #define XFRMEXP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_expire))))
     56 #define XFRMPEXP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_polexpire))))
     57 
     58 #define XFRMREP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_report))))
     59 
     60 #define XFRMSAPD_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(__u32))))
     61 #define XFRM_FLAG_PRINT(fp, flags, f, s) \
     62 	do { \
     63 		if (flags & f) { \
     64 			flags &= ~f; \
     65 			fprintf(fp, s "%s", (flags ? " " : "")); \
     66 		} \
     67 	} while(0)
     68 
     69 struct xfrm_buffer {
     70 	char *buf;
     71 	int size;
     72 	int offset;
     73 
     74 	int nlmsg_count;
     75 	struct rtnl_handle *rth;
     76 };
     77 
     78 struct xfrm_filter {
     79 	int use;
     80 
     81 	struct xfrm_usersa_info xsinfo;
     82 	__u8 id_src_mask;
     83 	__u8 id_dst_mask;
     84 	__u8 id_proto_mask;
     85 	__u32 id_spi_mask;
     86 	__u8 mode_mask;
     87 	__u32 reqid_mask;
     88 	__u8 state_flags_mask;
     89 
     90 	struct xfrm_userpolicy_info xpinfo;
     91 	__u8 dir_mask;
     92 	__u8 sel_src_mask;
     93 	__u8 sel_dst_mask;
     94 	__u32 sel_dev_mask;
     95 	__u8 upspec_proto_mask;
     96 	__u16 upspec_sport_mask;
     97 	__u16 upspec_dport_mask;
     98 	__u32 index_mask;
     99 	__u8 action_mask;
    100 	__u32 priority_mask;
    101 	__u8 policy_flags_mask;
    102 
    103 	__u8 ptype;
    104 	__u8 ptype_mask;
    105 
    106 };
    107 #define XFRM_FILTER_MASK_FULL (~0)
    108 
    109 extern struct xfrm_filter filter;
    110 
    111 int xfrm_state_print(const struct sockaddr_nl *who, struct nlmsghdr *n,
    112 		     void *arg);
    113 int xfrm_policy_print(const struct sockaddr_nl *who, struct nlmsghdr *n,
    114 		      void *arg);
    115 int do_xfrm_state(int argc, char **argv);
    116 int do_xfrm_policy(int argc, char **argv);
    117 int do_xfrm_monitor(int argc, char **argv);
    118 
    119 int xfrm_addr_match(xfrm_address_t *x1, xfrm_address_t *x2, int bits);
    120 int xfrm_xfrmproto_is_ipsec(__u8 proto);
    121 int xfrm_xfrmproto_is_ro(__u8 proto);
    122 int xfrm_xfrmproto_getbyname(char *name);
    123 int xfrm_algotype_getbyname(char *name);
    124 int xfrm_parse_mark(struct xfrm_mark *mark, int *argcp, char ***argvp);
    125 const char *strxf_xfrmproto(__u8 proto);
    126 const char *strxf_algotype(int type);
    127 const char *strxf_mask8(__u8 mask);
    128 const char *strxf_mask32(__u32 mask);
    129 const char *strxf_share(__u8 share);
    130 const char *strxf_proto(__u8 proto);
    131 const char *strxf_ptype(__u8 ptype);
    132 void xfrm_id_info_print(xfrm_address_t *saddr, struct xfrm_id *id,
    133 			__u8 mode, __u32 reqid, __u16 family, int force_spi,
    134 			FILE *fp, const char *prefix, const char *title);
    135 void xfrm_stats_print(struct xfrm_stats *s, FILE *fp, const char *prefix);
    136 void xfrm_lifetime_print(struct xfrm_lifetime_cfg *cfg,
    137 			 struct xfrm_lifetime_cur *cur,
    138 			 FILE *fp, const char *prefix);
    139 void xfrm_selector_print(struct xfrm_selector *sel, __u16 family,
    140 			 FILE *fp, const char *prefix);
    141 void xfrm_xfrma_print(struct rtattr *tb[], __u16 family,
    142 		      FILE *fp, const char *prefix);
    143 void xfrm_state_info_print(struct xfrm_usersa_info *xsinfo,
    144 			    struct rtattr *tb[], FILE *fp, const char *prefix,
    145 			   const char *title);
    146 void xfrm_policy_info_print(struct xfrm_userpolicy_info *xpinfo,
    147 			    struct rtattr *tb[], FILE *fp, const char *prefix,
    148 			    const char *title);
    149 int xfrm_id_parse(xfrm_address_t *saddr, struct xfrm_id *id, __u16 *family,
    150 		  int loose, int *argcp, char ***argvp);
    151 int xfrm_mode_parse(__u8 *mode, int *argcp, char ***argvp);
    152 int xfrm_encap_type_parse(__u16 *type, int *argcp, char ***argvp);
    153 int xfrm_reqid_parse(__u32 *reqid, int *argcp, char ***argvp);
    154 int xfrm_selector_parse(struct xfrm_selector *sel, int *argcp, char ***argvp);
    155 int xfrm_lifetime_cfg_parse(struct xfrm_lifetime_cfg *lft,
    156 			    int *argcp, char ***argvp);
    157 int xfrm_sctx_parse(char *ctxstr, char *context,
    158 		    struct xfrm_user_sec_ctx *sctx);
    159 #endif
    160