#compdef netsniff-ng # # netsniff-ng.zsh -- zsh completion function for netsniff-ng # # Copyright (C) 2013 Hideo Hattori # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2 as # published by the Free Software Foundation. typeset -A opt_args local context state line _cpu () { _cpus=(${${(f)"$(grep processor /proc/cpuinfo | awk '{print $3}')"}}) compadd -a _cpus } _user_info () { user_info=(${${(f)"$(awk -F':' '{print $3":"$1}' /etc/passwd)"}}) _describe -t usr "user info" user_info && ret=0 } _group_info () { group_info=(${${(f)"$(awk -F':' '{print $4":"$1}' /etc/passwd)"}}) _describe -t usr "group info" group_info && ret=0 } _interfaces () { _wanted interfaces expl 'network interface' \ _net_interfaces _values "Pseudo-device that captures on all interfaces" "any" } _arguments -s -S \ "(-i -d --dev --in)"{-i,-d,--dev,--in}"[Input source as netdev, pcap or pcap stdin]:input:_interfaces" \ "(-o --out)"{-o,--out}"[Output sink as netdev, pcap, directory, trafgen, or stdout]::_gnu_generic" \ "(-f --filter)"{-f,--filter}"[Use BPF filter file from bpfc or tcpdump-like expression]" \ "(-t --type)"{-t,--type}"[Filter type]:filter:(host broadcast multicast others outgoing)" \ "(-F --interval)"{-F,--interval}"[Dump interval if -o is a dir: KiB/MiB/GiB/s/sec/min/hrs]:interval:_gnu_generic" \ "(-J --jumbo-support)"{-J,--jumbo-support}"[Support for 64KB Super Jumbo Frames (def: 2048B)]" \ "(-R --rfraw)"{-R,--rfraw}"[Capture or inject raw 802.11 frames]" \ "(-n --num)"{-n,--num}"[Number of packets until exit (def: 0)]" \ "(-P --prefix)"{-P,--prefix}"[Prefix for pcaps stored in directory]" \ "(-T --magic)"{-T,--magic}"[Pcap magic number/pcap format to store, see -D]" \ "(-D --dump-pcap-types)"{-D,--dump-pcap-types}"[Dump pcap types and magic numbers and quit]" \ "(-B --dump-bpf)"{-B,--dump-bpf}"[Dump generated BPF assembly]" \ "(-r --rand)"{-r,--rand}"[Randomize packet forwarding order (dev->dev)]" \ "(-M --no-promisc)"{-M,--no-promisc}"[No promiscuous mode for netdev]" \ "(-A --no-sock-mem)"{-A,--no-sock-mem}"[Don\'t tune core socket memory]" \ "(-m --mmap)"{-m,--mmap}"[Mmap(2) pcap file i.e., for replaying pcaps]" \ "(-G --sg)"{-G,--sg}"[Scatter/gather pcap file I/O]" \ "(-c --clrw)"{-c,--clrw}"[Use slower read(2)/write(2) I/O]" \ "(-S --ring-size)"{-S,--ring-size}"[Specify ring size to: KiB/MiB/GiB]:ringsize:" \ "(-k --kernel-pull)"{-k,--kernel-pull}"[Kernel pull from user interval in us (def: 10us)]:kernelpull:_gnu_generic" \ "(-b --bind-cpu)"{-b,--bind-cpu}"[Bind to specific CPU]:cpunum:_cpu" \ "(-u --user)"{-u,--user}"[Drop privileges and change to userid]:user:_user_info" \ "(-g --group)"{-g,--group}"[Drop privileges and change to groupid]:group:_group_info" \ "(-H --prio-high)"{-H,--prio-high}"[Make this high priority process]" \ "(-Q --notouch-irq)"{-Q,--notouch-irq}"[Do not touch IRQ CPU affinity of NIC]" \ "(-s --silent)"{-s,--silent}"[Do not print captured packets]" \ "(-q --less)"{-q,--less}"[Print less-verbose packet information]" \ "(-X --hex)"{-X,--hex}"[Print packet data in hex format]" \ "(-l --ascii)"{-l,--ascii}"[Print human-readable packet data]" \ "(-U --update)"{-U,--update}"[Update GeoIP databases]" \ "(-V --verbose)"{-V,--verbose}"[Be more verbose]" \ {-v,--version}"[Show version]:" \ {-h,--help}"[Guess what?!]:" \ "*::args:_gnu_generic" lect>space:mode:
authorLaura Garcia Liebana <nevola@gmail.com>2016-09-14 15:00:02 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2016-09-23 09:29:02 +0200
commit36b701fae12ac763a568037e4e7c96b5727a8b3e (patch)
tree51cf6649e755c9ee786cfdbbd9d03a6d22baf37c
parent2b03bf732488a3c2e920afe22c03b82cb8477e28 (diff)
netfilter: nf_tables: validate maximum value of u32 netlink attributes
Fetch value and validate u32 netlink attribute. This validation is usually required when the u32 netlink attributes are being stored in a field whose size is smaller. This patch revisits 4da449ae1df9 ("netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes"). Fixes: 96518518cc41 ("netfilter: add nftables") Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Laura Garcia Liebana <nevola@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>