netfilter

Documentation

Overview

Go bindings for libnetfilter_queue

This library provides access to packets in the IPTables netfilter queue (NFQUEUE). The libnetfilter_queue library is part of the http://netfilter.org/projects/libnetfilter_queue/ project.

Index

• Constants
• type NFPacket
  • func (p *NFPacket) SetVerdict(vd Verdict, newData []byte, size int)
• type NFQueue
  • func NewNFQueue(queueId uint16, maxPacketsInQueue uint32, packetSize uint32) (*NFQueue, error)
  • func (nfq *NFQueue) Close()
  • func (nfq *NFQueue) GetPackets() <-chan NFPacket
• type Verdict
• type VerdictWithData

Constants

const (
	AF_INET = 2

	NF_DROP   Verdict = 0
	NF_ACCEPT Verdict = 1
	NF_STOLEN Verdict = 2
	NF_QUEUE  Verdict = 3
	NF_REPEAT Verdict = 4
	NF_STOP   Verdict = 5

	NF_DEFAULT_PACKET_SIZE uint32 = 0xffff
)

Types

type NFPacket

type NFPacket struct {
	Packet gopacket.Packet
	// contains filtered or unexported fields
}

func (*NFPacket) SetVerdict

func (p *NFPacket) SetVerdict(vd Verdict, newData []byte, size int)

Set the verdict for the packet

type NFQueue

type NFQueue struct {
	// contains filtered or unexported fields
}

func NewNFQueue

func NewNFQueue(queueId uint16, maxPacketsInQueue uint32, packetSize uint32) (*NFQueue, error)

Create and bind to queue specified by queueId

func (*NFQueue) Close

func (nfq *NFQueue) Close()

Unbind and close the queue

func (*NFQueue) GetPackets

func (nfq *NFQueue) GetPackets() <-chan NFPacket

Get the channel for packets

type Verdict

type Verdict C.uint

Verdict for a packet

type VerdictWithData

type VerdictWithData struct {
	// contains filtered or unexported fields
}