#compdef netsniff-ng # # netsniff-ng.zsh -- zsh completion function for netsniff-ng # # Copyright (C) 2013 Hideo Hattori # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2 as # published by the Free Software Foundation. typeset -A opt_args local context state line _cpu () { _cpus=(${${(f)"$(grep processor /proc/cpuinfo | awk '{print $3}')"}}) compadd -a _cpus } _user_info () { user_info=(${${(f)"$(awk -F':' '{print $3":"$1}' /etc/passwd)"}}) _describe -t usr "user info" user_info && ret=0 } _group_info () { group_info=(${${(f)"$(awk -F':' '{print $4":"$1}' /etc/passwd)"}}) _describe -t usr "group info" group_info && ret=0 } _interfaces () { _wanted interfaces expl 'network interface' \ _net_interfaces _values "Pseudo-device that captures on all interfaces" "any" } _arguments -s -S \ "(-i -d --dev --in)"{-i,-d,--dev,--in}"[Input source as netdev, pcap or pcap stdin]:input:_interfaces" \ "(-o --out)"{-o,--out}"[Output sink as netdev, pcap, directory, trafgen, or stdout]::_gnu_generic" \ "(-f --filter)"{-f,--filter}"[Use BPF filter file from bpfc or tcpdump-like expression]" \ "(-t --type)"{-t,--type}"[Filter type]:filter:(host broadcast multicast others outgoing)" \ "(-F --interval)"{-F,--interval}"[Dump interval if -o is a dir: KiB/MiB/GiB/s/sec/min/hrs]:interval:_gnu_generic" \ "(-J --jumbo-support)"{-J,--jumbo-support}"[Support for 64KB Super Jumbo Frames (def: 2048B)]" \ "(-R --rfraw)"{-R,--rfraw}"[Capture or inject raw 802.11 frames]" \ "(-n --num)"{-n,--num}"[Number of packets until exit (def: 0)]" \ "(-P --prefix)"{-P,--prefix}"[Prefix for pcaps stored in directory]" \ "(-T --magic)"{-T,--magic}"[Pcap magic number/pcap format to store, see -D]" \ "(-D --dump-pcap-types)"{-D,--dump-pcap-types}"[Dump pcap types and magic numbers and quit]" \ "(-B --dump-bpf)"{-B,--dump-bpf}"[Dump generated BPF assembly]" \ "(-r --rand)"{-r,--rand}"[Randomize packet forwarding order (dev->dev)]" \ "(-M --no-promisc)"{-M,--no-promisc}"[No promiscuous mode for netdev]" \ "(-A --no-sock-mem)"{-A,--no-sock-mem}"[Don\'t tune core socket memory]" \ "(-m --mmap)"{-m,--mmap}"[Mmap(2) pcap file i.e., for replaying pcaps]" \ "(-G --sg)"{-G,--sg}"[Scatter/gather pcap file I/O]" \ "(-c --clrw)"{-c,--clrw}"[Use slower read(2)/write(2) I/O]" \ "(-S --ring-size)"{-S,--ring-size}"[Specify ring size to: KiB/MiB/GiB]:ringsize:" \ "(-k --kernel-pull)"{-k,--kernel-pull}"[Kernel pull from user interval in us (def: 10us)]:kernelpull:_gnu_generic" \ "(-b --bind-cpu)"{-b,--bind-cpu}"[Bind to specific CPU]:cpunum:_cpu" \ "(-u --user)"{-u,--user}"[Drop privileges and change to userid]:user:_user_info" \ "(-g --group)"{-g,--group}"[Drop privileges and change to groupid]:group:_group_info" \ "(-H --prio-high)"{-H,--prio-high}"[Make this high priority process]" \ "(-Q --notouch-irq)"{-Q,--notouch-irq}"[Do not touch IRQ CPU affinity of NIC]" \ "(-s --silent)"{-s,--silent}"[Do not print captured packets]" \ "(-q --less)"{-q,--less}"[Print less-verbose packet information]" \ "(-X --hex)"{-X,--hex}"[Print packet data in hex format]" \ "(-l --ascii)"{-l,--ascii}"[Print human-readable packet data]" \ "(-U --update)"{-U,--update}"[Update GeoIP databases]" \ "(-V --verbose)"{-V,--verbose}"[Be more verbose]" \ {-v,--version}"[Show version]:" \ {-h,--help}"[Guess what?!]:" \ "*::args:_gnu_generic" m.submit();'>space:mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2017-02-10 12:08:17 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2017-02-12 14:45:11 +0100
commit8c4d4e8b5626fec965fd5034e5bd5e57790f243f (patch)
treee8ce0acf10108f74d0ce8cd150f061baff0686bf /net/netfilter
parent48656835c0405aa2e6c0d6a4305c77b70758d168 (diff)
netfilter: nfnetlink: allow to check for generation ID
This patch allows userspace to specify the generation ID that has been used to build an incremental batch update. If userspace specifies the generation ID in the batch message as attribute, then nfnetlink compares it to the current generation ID so you make sure that you work against the right baseline. Otherwise, bail out with ERESTART so userspace knows that its changeset is stale and needs to respin. Userspace can do this transparently at the cost of taking slightly more time to refresh caches and rework the changeset. This check is optional, if there is no NFNL_BATCH_GENID attribute in the batch begin message, then no check is performed. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter')
-rw-r--r--net/netfilter/nfnetlink.c31
1 files changed, 27 insertions, 4 deletions
diff --git a/net/netfilter/nfnetlink.c b/net/netfilter/nfnetlink.c