]> git.ipfire.org Git - thirdparty/nftables.git/commit
src: introduce passive OS fingerprint matching
authorFernando Fernandez Mancera <ffmancera@riseup.net>
Fri, 3 Aug 2018 21:47:11 +0000 (23:47 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 3 Aug 2018 22:21:19 +0000 (00:21 +0200)
commit9f28b685b473b2424524d0443ef1e0ed8ba276de
tree14834b9e589da013b8b058b49beaf8a2b8ceae72
parentcdb5655ee44da4113d1ee72fbd6afa6ca4ffaa14
src: introduce passive OS fingerprint matching

Add support for "osf" expression. Example:

table ip foo {
chain bar {
type filter hook input priority 0; policy accept;
osf name "Linux" counter packets 3 bytes 132
}
}

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/expression.h
include/linux/netfilter/nf_tables.h
src/Makefile.am
src/evaluate.c
src/netlink_delinearize.c
src/netlink_linearize.c
src/osf.c [new file with mode: 0644]
src/parser_bison.y
src/scanner.l