From 929ce0bb9b37afa38453247261d804e120fb45e2 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Fri, 28 Jan 2011 10:33:28 +0100 Subject: [PATCH] Add a counter to NFQ for modified packets. --- src/source-nfq.c | 8 ++++++-- src/source-nfq.h | 1 + 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/src/source-nfq.c b/src/source-nfq.c index 23167adfc0..50fe1ec99a 100644 --- a/src/source-nfq.c +++ b/src/source-nfq.c @@ -545,8 +545,9 @@ void ReceiveNFQThreadExitStats(ThreadVars *tv, void *data) { void VerdictNFQThreadExitStats(ThreadVars *tv, void *data) { NFQThreadVars *ntv = (NFQThreadVars *)data; #ifdef COUNTERS - SCLogInfo("(%s) Pkts accepted %" PRIu32 ", dropped %" PRIu32 "", - tv->name, ntv->accepted, ntv->dropped); + SCLogInfo("(%s) Pkts accepted %" PRIu32 ", dropped %" PRIu32 + ", replaced %" PRIu32, tv->name, ntv->accepted, + ntv->dropped, ntv->replaced); #endif } @@ -575,6 +576,9 @@ void NFQSetVerdict(NFQThreadVars *t, Packet *p) { SCMutexLock(&t->mutex_qh); if (p->flags & PKT_STREAM_MODIFIED) { ret = nfq_set_verdict(t->qh, p->nfq_v.id, verdict, GET_PKT_LEN(p), GET_PKT_DATA(p)); +#ifdef COUNTERS + t->replaced++; +#endif /* COUNTERS */ } else { ret = nfq_set_verdict(t->qh, p->nfq_v.id, verdict, 0, NULL); } diff --git a/src/source-nfq.h b/src/source-nfq.h index 34b7f37e8a..ed1bdc76c6 100644 --- a/src/source-nfq.h +++ b/src/source-nfq.h @@ -75,6 +75,7 @@ typedef struct NFQThreadVars_ uint32_t errs; uint32_t accepted; uint32_t dropped; + uint32_t replaced; ThreadVars *tv; } NFQThreadVars;