netfilter: import layer7 patchset

[people/arne_f/kernel.git] / include / net / netfilter / nf_conntrack.h

diff --git a/include/net/netfilter/nf_conntrack.h b/include/net/netfilter/nf_conntrack.h
index 792c3f6d30ce8fa336c3c78aebcc4ba991b79b58..7a6e29fb6b59aa65824902aab2fc794a10e063b1 100644 (file)
--- a/include/net/netfilter/nf_conntrack.h
+++ b/include/net/netfilter/nf_conntrack.h
@@ -96,6 +96,22 @@ struct nf_conn {
        /* Extensions */
        struct nf_ct_ext *ext;
 
+#if defined(CONFIG_NETFILTER_XT_MATCH_LAYER7) || \
+    defined(CONFIG_NETFILTER_XT_MATCH_LAYER7_MODULE)
+       struct {
+               /*
+                * e.g. "http". NULL before decision. "unknown" after decision
+                * if no match.
+                */
+               char *app_proto;
+               /*
+                * application layer data so far. NULL after match decision.
+                */
+               char *app_data;
+               unsigned int app_data_len;
+       } layer7;
+#endif
+
        /* Storage reserved for other modules, must be the last member */
        union nf_conntrack_proto proto;
 };