Struct nfq::Queue

pub struct Queue { /* private fields */ }

A NetFilter queue.

Implementations

impl Queue

pub fn open() -> Result<Queue>

Open a NetFilter socket and queue connection.

pub fn set_recv_enobufs(&mut self, enable: bool) -> Result<()>

Change whether ENOBUFS should be received by the application if the kernel queue is full. As user-space usually cannot do any special about this, open will turn this off by default.

pub fn bind(&mut self, queue_num: u16) -> Result<()>

Bind to a specific queue number.

This method will set the copy range to 65535 by default. It can be changed by using set_copy_range.

pub fn set_fail_open(&mut self, queue_num: u16, enabled: bool) -> Result<()>

Set whether the kernel should drop or accept a packet if the queue is full.

pub fn set_recv_gso(&mut self, queue_num: u16, enabled: bool) -> Result<()>

Set whether we should receive GSO-enabled and partial checksum packets.

pub fn set_recv_uid_gid(&mut self, queue_num: u16, enabled: bool) -> Result<()>

Set whether we should receive UID/GID along with packets.

pub fn set_recv_security_context(
    &mut self,
    queue_num: u16,
    enabled: bool
) -> Result<()>

Set whether we should receive security context strings along with packets.

pub fn set_copy_range(&mut self, queue_num: u16, range: u16) -> Result<()>

Set copy range. Packet larger than the specified range will be truncated. If the range given is 0, only metadata will be copied.

To get the original length of truncated packet, use Message::get_original_len.

pub fn set_queue_max_len(&mut self, queue_num: u16, len: u32) -> Result<()>

Set the maximum kernel queue length. If the application cannot recv fast enough, newly queued packet will be dropped (or accepted if fail open is enabled).

pub fn set_nonblocking(&mut self, nonblocking: bool)

Set whether the recv function blocks or not

pub fn unbind(&mut self, queue_num: u16) -> Result<()>

Unbind from a specific queue number.

pub fn recv(&mut self) -> Result<Message>

Receive a packet from the queue.

pub fn verdict(&mut self, msg: Message) -> Result<()>

Verdict a message.

Trait Implementations

impl Drop for Queue

fn drop(&mut self)

Executes the destructor for this type.