Compare commits
1 Commits
9327d545f0
...
23bb7a92ad
Author | SHA1 | Date |
---|---|---|
|
23bb7a92ad |
40
monitor.go
40
monitor.go
|
@ -123,8 +123,8 @@ type MonitorEvent struct {
|
||||||
}
|
}
|
||||||
|
|
||||||
type MonitorEvents struct {
|
type MonitorEvents struct {
|
||||||
GeneratedBy *MonitorEvent
|
GenerateBy *MonitorEvent
|
||||||
Changes []*MonitorEvent
|
Changes []*MonitorEvent
|
||||||
}
|
}
|
||||||
|
|
||||||
const (
|
const (
|
||||||
|
@ -198,7 +198,7 @@ func NewMonitor(opts ...MonitorOption) *Monitor {
|
||||||
}
|
}
|
||||||
|
|
||||||
func (monitor *Monitor) monitor() {
|
func (monitor *Monitor) monitor() {
|
||||||
var changesEvents []*MonitorEvent
|
changesEvents := make([]*MonitorEvent, 0, 2)
|
||||||
|
|
||||||
for {
|
for {
|
||||||
msgs, err := monitor.conn.Receive()
|
msgs, err := monitor.conn.Receive()
|
||||||
|
@ -217,10 +217,10 @@ func (monitor *Monitor) monitor() {
|
||||||
changesEvents = append(changesEvents, event)
|
changesEvents = append(changesEvents, event)
|
||||||
|
|
||||||
monitor.eventCh <- &MonitorEvents{
|
monitor.eventCh <- &MonitorEvents{
|
||||||
GeneratedBy: event,
|
GenerateBy: event,
|
||||||
Changes: changesEvents,
|
Changes: changesEvents,
|
||||||
}
|
}
|
||||||
changesEvents = nil
|
changesEvents = make([]*MonitorEvent, 0, 2)
|
||||||
|
|
||||||
break
|
break
|
||||||
}
|
}
|
||||||
|
@ -298,11 +298,11 @@ func (monitor *Monitor) monitor() {
|
||||||
}
|
}
|
||||||
|
|
||||||
monitor.eventCh <- &MonitorEvents{
|
monitor.eventCh <- &MonitorEvents{
|
||||||
GeneratedBy: event,
|
GenerateBy: event,
|
||||||
Changes: changesEvents,
|
Changes: changesEvents,
|
||||||
}
|
}
|
||||||
|
|
||||||
changesEvents = make([]*MonitorEvent, 0)
|
changesEvents = make([]*MonitorEvent, 0, 2)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -331,27 +331,7 @@ func (monitor *Monitor) Close() error {
|
||||||
// calling Close on Monitor or encountering a netlink conn error while Receive.
|
// calling Close on Monitor or encountering a netlink conn error while Receive.
|
||||||
// Caller may receive a MonitorEventTypeOOB event which contains an error we didn't
|
// Caller may receive a MonitorEventTypeOOB event which contains an error we didn't
|
||||||
// handle, for now.
|
// handle, for now.
|
||||||
func (cc *Conn) AddMonitor(monitor *Monitor) (chan *MonitorEvent, error) {
|
func (cc *Conn) AddMonitor(monitor *Monitor) (chan *MonitorEvents, error) {
|
||||||
generationalEventCh, err := cc.AddGenerationalMonitor(monitor)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
|
|
||||||
eventCh := make(chan *MonitorEvent)
|
|
||||||
|
|
||||||
go func() {
|
|
||||||
defer close(eventCh)
|
|
||||||
for monitorEvents := range generationalEventCh {
|
|
||||||
for _, event := range monitorEvents.Changes {
|
|
||||||
eventCh <- event
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
|
|
||||||
return eventCh, nil
|
|
||||||
}
|
|
||||||
|
|
||||||
func (cc *Conn) AddGenerationalMonitor(monitor *Monitor) (chan *MonitorEvents, error) {
|
|
||||||
conn, closer, err := cc.netlinkConn()
|
conn, closer, err := cc.netlinkConn()
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return nil, err
|
return nil, err
|
||||||
|
|
|
@ -4,8 +4,6 @@ import (
|
||||||
"fmt"
|
"fmt"
|
||||||
"log"
|
"log"
|
||||||
"net"
|
"net"
|
||||||
"os"
|
|
||||||
"path/filepath"
|
|
||||||
"sync"
|
"sync"
|
||||||
"sync/atomic"
|
"sync/atomic"
|
||||||
"testing"
|
"testing"
|
||||||
|
@ -23,7 +21,7 @@ func ExampleNewMonitor() {
|
||||||
|
|
||||||
mon := nftables.NewMonitor()
|
mon := nftables.NewMonitor()
|
||||||
defer mon.Close()
|
defer mon.Close()
|
||||||
events, err := conn.AddGenerationalMonitor(mon)
|
events, err := conn.AddMonitor(mon)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
log.Fatal(err)
|
log.Fatal(err)
|
||||||
}
|
}
|
||||||
|
@ -48,9 +46,10 @@ func TestMonitor(t *testing.T) {
|
||||||
// Clear all rules at the beginning + end of the test.
|
// Clear all rules at the beginning + end of the test.
|
||||||
c.FlushRuleset()
|
c.FlushRuleset()
|
||||||
defer c.FlushRuleset()
|
defer c.FlushRuleset()
|
||||||
|
|
||||||
// default to monitor all
|
// default to monitor all
|
||||||
monitor := nftables.NewMonitor()
|
monitor := nftables.NewMonitor()
|
||||||
events, err := c.AddGenerationalMonitor(monitor)
|
events, err := c.AddMonitor(monitor)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
t.Fatal(err)
|
t.Fatal(err)
|
||||||
}
|
}
|
||||||
|
@ -61,7 +60,6 @@ func TestMonitor(t *testing.T) {
|
||||||
var gotRule *nftables.Rule
|
var gotRule *nftables.Rule
|
||||||
wg := sync.WaitGroup{}
|
wg := sync.WaitGroup{}
|
||||||
wg.Add(1)
|
wg.Add(1)
|
||||||
var errMonitor error
|
|
||||||
go func() {
|
go func() {
|
||||||
defer wg.Done()
|
defer wg.Done()
|
||||||
count := int32(0)
|
count := int32(0)
|
||||||
|
@ -71,17 +69,9 @@ func TestMonitor(t *testing.T) {
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
genMsg := event.GeneratedBy.Data.(*nftables.GenMsg)
|
|
||||||
fileName := filepath.Base(os.Args[0])
|
|
||||||
|
|
||||||
if genMsg.ProcComm != fileName {
|
|
||||||
errMonitor = fmt.Errorf("procComm: %s, want: %s", genMsg.ProcComm, fileName)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, change := range event.Changes {
|
for _, change := range event.Changes {
|
||||||
if change.Error != nil {
|
if change.Error != nil {
|
||||||
errMonitor = fmt.Errorf("monitor err: %s", change.Error)
|
err = fmt.Errorf("monitor err: %s", change.Error)
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -142,13 +132,7 @@ func TestMonitor(t *testing.T) {
|
||||||
if err := c.Flush(); err != nil {
|
if err := c.Flush(); err != nil {
|
||||||
t.Fatal(err)
|
t.Fatal(err)
|
||||||
}
|
}
|
||||||
|
|
||||||
wg.Wait()
|
wg.Wait()
|
||||||
|
|
||||||
if errMonitor != nil {
|
|
||||||
t.Fatal("monitor err", errMonitor)
|
|
||||||
}
|
|
||||||
|
|
||||||
if gotTable.Family != nat.Family || gotTable.Name != nat.Name {
|
if gotTable.Family != nat.Family || gotTable.Name != nat.Name {
|
||||||
t.Fatal("no want table", gotTable.Family, gotTable.Name)
|
t.Fatal("no want table", gotTable.Family, gotTable.Name)
|
||||||
}
|
}
|
||||||
|
|
14
set.go
14
set.go
|
@ -268,6 +268,12 @@ type Set struct {
|
||||||
KeyByteOrder binaryutil.ByteOrder
|
KeyByteOrder binaryutil.ByteOrder
|
||||||
}
|
}
|
||||||
|
|
||||||
|
type SetElementsInfo struct {
|
||||||
|
TableName string
|
||||||
|
SetName string
|
||||||
|
Elements []SetElement
|
||||||
|
}
|
||||||
|
|
||||||
// SetElement represents a data point within a set.
|
// SetElement represents a data point within a set.
|
||||||
type SetElement struct {
|
type SetElement struct {
|
||||||
Key []byte
|
Key []byte
|
||||||
|
@ -797,10 +803,16 @@ func elementsFromMsg(fam byte, msg netlink.Message) ([]SetElement, error) {
|
||||||
}
|
}
|
||||||
ad.ByteOrder = binary.BigEndian
|
ad.ByteOrder = binary.BigEndian
|
||||||
|
|
||||||
|
var info = &SetElementsInfo{}
|
||||||
var elements []SetElement
|
var elements []SetElement
|
||||||
for ad.Next() {
|
for ad.Next() {
|
||||||
b := ad.Bytes()
|
b := ad.Bytes()
|
||||||
if ad.Type() == unix.NFTA_SET_ELEM_LIST_ELEMENTS {
|
switch ad.Type() {
|
||||||
|
case unix.NFTA_SET_ELEM_LIST_TABLE:
|
||||||
|
info.TableName = ad.String()
|
||||||
|
case unix.NFTA_SET_ELEM_LIST_SET:
|
||||||
|
info.SetName = ad.String()
|
||||||
|
case unix.NFTA_SET_ELEM_LIST_ELEMENTS:
|
||||||
ad, err := netlink.NewAttributeDecoder(b)
|
ad, err := netlink.NewAttributeDecoder(b)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return nil, err
|
return nil, err
|
||||||
|
|
Loading…
Reference in New Issue