suricata checkin based on commit id a4bce14770beee46a537eda3c3f6e8e8565d5d0a

Change-Id: I9a214fa0ee95e58fc640e50bd604dac7f42db48f

1 files changed, 110 insertions, 0 deletions

diff --git a/framework/src/suricata/src/source-nfq.h b/framework/src/suricata/src/source-nfq.h
new file mode 100644
index 00000000..41a54b78
--- /dev/null
+++ b/framework/src/suricata/src/source-nfq.h
@@ -0,0 +1,110 @@
+/* Copyright (C) 2007-2010 Open Information Security Foundation
+ *
+ * You can copy, redistribute or modify this Program under the terms of
+ * the GNU General Public License version 2 as published by the Free
+ * Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * version 2 along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ */
+
+/**
+ * \file
+ *
+ * \author Victor Julien <victor@inliniac.net>
+ */
+
+#ifndef __SOURCE_NFQ_H__
+#define __SOURCE_NFQ_H__
+
+#ifdef NFQ
+
+#include "threads.h"
+#ifdef OS_WIN32
+#include <netfilter/netfilter.h>
+#else
+#include <linux/netfilter.h>		/* for NF_ACCEPT */
+#endif
+#include <libnetfilter_queue/libnetfilter_queue.h>
+
+#define NFQ_MAX_QUEUE 16
+
+/* idea: set the recv-thread id in the packet to
+ * select an verdict-queue */
+
+typedef struct NFQPacketVars_
+{
+    int id; /* this nfq packets id */
+    uint16_t nfq_index; /* index in NFQ array */
+    uint8_t verdicted;
+
+    uint32_t mark;
+    uint32_t ifi;
+    uint32_t ifo;
+    uint16_t hw_protocol;
+} NFQPacketVars;
+
+typedef struct NFQQueueVars_
+{
+    struct nfq_handle *h;
+#ifndef OS_WIN32
+    struct nfnl_handle *nh;
+    int fd;
+#else
+    HANDLE fd;
+    OVERLAPPED ovr;
+#endif
+    uint8_t use_mutex;
+    /* 2 threads deal with the queue handle, so add a mutex */
+    struct nfq_q_handle *qh;
+    SCMutex mutex_qh;
+    /* this one should be not changing after init */
+    uint16_t queue_num;
+    /* position into the NFQ queue var array */
+    uint16_t nfq_index;
+
+#ifdef DBG_PERF
+    int dbg_maxreadsize;
+#endif /* DBG_PERF */
+
+    /* counters */
+    uint32_t pkts;
+    uint64_t bytes;
+    uint32_t errs;
+    uint32_t accepted;
+    uint32_t dropped;
+    uint32_t replaced;
+    struct {
+        uint32_t packet_id; /* id of last processed packet */
+        uint32_t verdict;
+        uint32_t mark;
+        uint8_t mark_valid:1;
+        uint8_t len;
+        uint8_t maxlen;
+    } verdict_cache;
+
+} NFQQueueVars;
+
+
+
+typedef struct NFQGlobalVars_
+{
+    char unbind;
+} NFQGlobalVars;
+
+void NFQInitConfig(char quiet);
+int NFQRegisterQueue(char *queue);
+int NFQGetQueueCount(void);
+void *NFQGetQueue(int number);
+int NFQGetQueueNum(int number);
+void *NFQGetThread(int number);
+#endif /* NFQ */
+#endif /* __SOURCE_NFQ_H__ */
+