root/sbin/ipf/libipf/printactivenat.c

/*
 * Copyright (C) 2012 by Darren Reed.
 *
 * See the IPFILTER.LICENCE file for details on licencing.
 *
 * Added redirect stuff and a variety of bug fixes. (mcn@EnGarde.com)
 */

#include "ipf.h"



static int proto_opened = 0;

void
printactivenat(nat_t *nat, int opts, u_long ticks)
{
        struct protoent *pproto;

        if (proto_opened == 0) {
                proto_opened = 1;
                setprotoent(1);
        }

        PRINTF("%s", getnattype(nat));

        if (nat->nat_flags & SI_CLONE)
                PRINTF(" CLONE");
        if (nat->nat_phnext[0] == NULL && nat->nat_phnext[1] == NULL)
                PRINTF(" ORPHAN");

        putchar(' ');
        if (nat->nat_redir & NAT_REWRITE) {
                printactiveaddress(nat->nat_v[0], "%-15s", &nat->nat_osrc6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_osport));

                putchar(' ');
                printactiveaddress(nat->nat_v[0], "%-15s", &nat->nat_odst6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_odport));

                PRINTF("<- -> ");
                printactiveaddress(nat->nat_v[1], "%-15s", &nat->nat_nsrc6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_nsport));

                putchar(' ');
                printactiveaddress(nat->nat_v[1], "%-15s", &nat->nat_ndst6,
                                   nat->nat_ifnames[0]);
                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_ndport));

                pproto = getprotobynumber(nat->nat_pr[0]);
                PRINTF(" %s", pproto->p_name);

        } else if (nat->nat_dir == NAT_OUTBOUND) {
                printactiveaddress(nat->nat_v[0], "%-15s", &nat->nat_osrc6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_osport));

                PRINTF(" <- -> ");
                printactiveaddress(nat->nat_v[1], "%-15s", &nat->nat_nsrc6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_nsport));

                PRINTF(" [");
                printactiveaddress(nat->nat_v[0], "%s", &nat->nat_odst6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %hu", ntohs(nat->nat_odport));
                PRINTF("]");

                pproto = getprotobynumber(nat->nat_pr[1]);
                PRINTF(" %s", pproto->p_name);
        } else {
                printactiveaddress(nat->nat_v[1], "%-15s", &nat->nat_ndst6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_ndport));

                PRINTF(" <- -> ");
                printactiveaddress(nat->nat_v[0], "%-15s", &nat->nat_odst6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %-5hu", ntohs(nat->nat_odport));

                PRINTF(" [");
                printactiveaddress(nat->nat_v[0], "%s", &nat->nat_osrc6,
                                   nat->nat_ifnames[0]);

                if ((nat->nat_flags & IPN_TCPUDP) != 0)
                        PRINTF(" %hu", ntohs(nat->nat_osport));
                PRINTF("]");

                pproto = getprotobynumber(nat->nat_pr[0]);
                PRINTF(" %s", pproto->p_name);
        }


        if (opts & OPT_VERBOSE) {
                PRINTF("\n\tttl %lu use %hu sumd %s/",
                        nat->nat_age - ticks, nat->nat_use,
                        getsumd(nat->nat_sumd[0]));
                PRINTF("%s pr %u/%u hash %u/%u flags %x\n",
                        getsumd(nat->nat_sumd[1]),
                        nat->nat_pr[0], nat->nat_pr[1],
                        nat->nat_hv[0], nat->nat_hv[1], nat->nat_flags);
                PRINTF("\tifp %s,%s ", FORMAT_IF(nat->nat_ifnames[0]),
                        FORMAT_IF(nat->nat_ifnames[1]));
#ifdef  USE_QUAD_T
                PRINTF("bytes %"PRIu64"/%"PRIu64" pkts %"PRIu64"/%"PRIu64"",
                        (unsigned long long)nat->nat_bytes[0],
                        (unsigned long long)nat->nat_bytes[1],
                        (unsigned long long)nat->nat_pkts[0],
                        (unsigned long long)nat->nat_pkts[1]);
#else
                PRINTF("bytes %lu/%lu pkts %lu/%lu", nat->nat_bytes[0],
                        nat->nat_bytes[1], nat->nat_pkts[0], nat->nat_pkts[1]);
#endif
                PRINTF(" ipsumd %x", nat->nat_ipsumd);
        }

        if (opts & OPT_DEBUG) {
                PRINTF("\n\tnat_next %p _pnext %p _hm %p\n",
                        nat->nat_next, nat->nat_pnext, nat->nat_hm);
                PRINTF("\t_hnext %p/%p _phnext %p/%p\n",
                        nat->nat_hnext[0], nat->nat_hnext[1],
                        nat->nat_phnext[0], nat->nat_phnext[1]);
                PRINTF("\t_data %p _me %p _state %p _aps %p\n",
                        nat->nat_data, nat->nat_me, nat->nat_state,
                        nat->nat_aps);
                PRINTF("\tfr %p ptr %p ifps %p/%p sync %p\n",
                        nat->nat_fr, nat->nat_ptr, nat->nat_ifps[0],
                        nat->nat_ifps[1], nat->nat_sync);
                PRINTF("\ttqe:pnext %p next %p ifq %p parent %p/%p\n",
                        nat->nat_tqe.tqe_pnext, nat->nat_tqe.tqe_next,
                        nat->nat_tqe.tqe_ifq, nat->nat_tqe.tqe_parent, nat);
                PRINTF("\ttqe:die %d touched %d flags %x state %d/%d\n",
                        nat->nat_tqe.tqe_die, nat->nat_tqe.tqe_touched,
                        nat->nat_tqe.tqe_flags, nat->nat_tqe.tqe_state[0],
                        nat->nat_tqe.tqe_state[1]);
        }
        putchar('\n');
}