commit 09a000ac50e11f7f83d9f592b0b3fc7ccbf0b471 Author: Matt Fox Date: Thu May 12 13:45:14 2011 -0700 Initial commit diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..1691d79 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +*.so +build/ diff --git a/CHANGES.txt b/CHANGES.txt new file mode 100644 index 0000000..6e9784c --- /dev/null +++ b/CHANGES.txt @@ -0,0 +1 @@ +v0.1, 12 May 2011 -- Initial release. diff --git a/LICENSE.txt b/LICENSE.txt new file mode 100644 index 0000000..65c9d8a --- /dev/null +++ b/LICENSE.txt @@ -0,0 +1,24 @@ +Copyright (c) 2011, Kerkhoff Technologies, Inc. +All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + * Neither the name of the Kerkhoff Technologies, Inc. nor the + names of its contributors may be used to endorse or promote products + derived from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY +DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; +LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND +ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS +SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. diff --git a/MANIFEST b/MANIFEST new file mode 100644 index 0000000..948b17a --- /dev/null +++ b/MANIFEST @@ -0,0 +1,5 @@ +CHANGES.txt +LICENSE.txt +README.txt +netfilterqueue.pyx +setup.py diff --git a/README.txt b/README.txt new file mode 100644 index 0000000..2861075 --- /dev/null +++ b/README.txt @@ -0,0 +1,69 @@ +============== +NetfilterQueue +============== + +NetfilterQueue provides access to packets matched by an iptables rule in +Linux. Packets so matched can be accepted, dropped, altered, or given a mark. + +Libnetfilter_queue (the netfilter library, not this module) is part of the `Netfilter project `_. + +Example +======= + +Coming soon... + +Installation +============ + +NetfilterQueue is a C extention module that links against libnetfilter_queue. Before installing, ensure you have: + +1. A C compiler + +2. Python development files + +3. Libnetfilter_queue development files and associated dependencies + +On Debian or Ubuntu, these files are install with:: + + sudo apt-get install build-essential python-dev libnetfilter-queue-dev + +From PyPI +--------- + +To install from PyPI by pip:: + + pip install netfilterqueue + +From source +----------- + +To install from source:: + + wget http://pypi.python.org/packages/source/n/netfilterqueue/netfilterqueue-0.1.tar.gz + tar -xvzf netfilterqueue-0.1.tar.gz + cd netfilterqueue-0.1 + python setup.py install + +Setup will use Cython if it is installed, regenerating the .c source from the .pyx before compiling the .so. + +Usage +===== + +Coming soon... + +Now route packets to the queue:: + + # iptables -I INPUT -p tcp --dport 80 -j NFQUEUE --queue-num 1 + +The only special part of the rule is the target. Rules can have any match and +can be added to any table or chain. + +Valid queue numbers are integers from 0 to 65,536 inclusive. + +Limitations +=========== + +TODO: fix this up + +* compiled to max 2048-byte packets, so won't work on LO? +* full API not implemented: omits set_payload(), interface methods, and what else? \ No newline at end of file diff --git a/netfilterqueue.c b/netfilterqueue.c new file mode 100644 index 0000000..b741f36 --- /dev/null +++ b/netfilterqueue.c @@ -0,0 +1,4541 @@ +/* Generated by Cython 0.14 on Thu May 12 13:19:22 2011 */ + +#define PY_SSIZE_T_CLEAN +#include "Python.h" +#ifndef Py_PYTHON_H + #error Python headers needed to compile C extensions, please install development version of Python. +#else + +#include /* For offsetof */ +#ifndef offsetof +#define offsetof(type, member) ( (size_t) & ((type*)0) -> member ) +#endif + +#if !defined(WIN32) && !defined(MS_WINDOWS) + #ifndef __stdcall + #define __stdcall + #endif + #ifndef __cdecl + #define __cdecl + #endif + #ifndef __fastcall + #define __fastcall + #endif +#endif + +#ifndef DL_IMPORT + #define DL_IMPORT(t) t +#endif +#ifndef DL_EXPORT + #define DL_EXPORT(t) t +#endif + +#ifndef PY_LONG_LONG + #define PY_LONG_LONG LONG_LONG +#endif + +#if PY_VERSION_HEX < 0x02040000 + #define METH_COEXIST 0 + #define PyDict_CheckExact(op) (Py_TYPE(op) == &PyDict_Type) + #define PyDict_Contains(d,o) PySequence_Contains(d,o) +#endif + +#if PY_VERSION_HEX < 0x02050000 + typedef int Py_ssize_t; + #define PY_SSIZE_T_MAX INT_MAX + #define PY_SSIZE_T_MIN INT_MIN + #define PY_FORMAT_SIZE_T "" + #define PyInt_FromSsize_t(z) PyInt_FromLong(z) + #define PyInt_AsSsize_t(o) PyInt_AsLong(o) + #define PyNumber_Index(o) PyNumber_Int(o) + #define PyIndex_Check(o) PyNumber_Check(o) + #define PyErr_WarnEx(category, message, stacklevel) PyErr_Warn(category, message) +#endif + +#if PY_VERSION_HEX < 0x02060000 + #define Py_REFCNT(ob) (((PyObject*)(ob))->ob_refcnt) + #define Py_TYPE(ob) (((PyObject*)(ob))->ob_type) + #define Py_SIZE(ob) (((PyVarObject*)(ob))->ob_size) + #define PyVarObject_HEAD_INIT(type, size) \ + PyObject_HEAD_INIT(type) size, + #define PyType_Modified(t) + + typedef struct { + void *buf; + PyObject *obj; + Py_ssize_t len; + Py_ssize_t itemsize; + int readonly; + int ndim; + char *format; + Py_ssize_t *shape; + Py_ssize_t *strides; + Py_ssize_t *suboffsets; + void *internal; + } Py_buffer; + + #define PyBUF_SIMPLE 0 + #define PyBUF_WRITABLE 0x0001 + #define PyBUF_FORMAT 0x0004 + #define PyBUF_ND 0x0008 + #define PyBUF_STRIDES (0x0010 | PyBUF_ND) + #define PyBUF_C_CONTIGUOUS (0x0020 | PyBUF_STRIDES) + #define PyBUF_F_CONTIGUOUS (0x0040 | PyBUF_STRIDES) + #define PyBUF_ANY_CONTIGUOUS (0x0080 | PyBUF_STRIDES) + #define PyBUF_INDIRECT (0x0100 | PyBUF_STRIDES) + +#endif + +#if PY_MAJOR_VERSION < 3 + #define __Pyx_BUILTIN_MODULE_NAME "__builtin__" +#else + #define __Pyx_BUILTIN_MODULE_NAME "builtins" +#endif + +#if PY_MAJOR_VERSION >= 3 + #define Py_TPFLAGS_CHECKTYPES 0 + #define Py_TPFLAGS_HAVE_INDEX 0 +#endif + +#if (PY_VERSION_HEX < 0x02060000) || (PY_MAJOR_VERSION >= 3) + #define Py_TPFLAGS_HAVE_NEWBUFFER 0 +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyBaseString_Type PyUnicode_Type + #define PyStringObject PyUnicodeObject + #define PyString_Type PyUnicode_Type + #define PyString_Check PyUnicode_Check + #define PyString_CheckExact PyUnicode_CheckExact +#endif + +#if PY_VERSION_HEX < 0x02060000 + #define PyBytesObject PyStringObject + #define PyBytes_Type PyString_Type + #define PyBytes_Check PyString_Check + #define PyBytes_CheckExact PyString_CheckExact + #define PyBytes_FromString PyString_FromString + #define PyBytes_FromStringAndSize PyString_FromStringAndSize + #define PyBytes_FromFormat PyString_FromFormat + #define PyBytes_DecodeEscape PyString_DecodeEscape + #define PyBytes_AsString PyString_AsString + #define PyBytes_AsStringAndSize PyString_AsStringAndSize + #define PyBytes_Size PyString_Size + #define PyBytes_AS_STRING PyString_AS_STRING + #define PyBytes_GET_SIZE PyString_GET_SIZE + #define PyBytes_Repr PyString_Repr + #define PyBytes_Concat PyString_Concat + #define PyBytes_ConcatAndDel PyString_ConcatAndDel + #define PySet_Check(obj) PyObject_TypeCheck(obj, &PySet_Type) + #define PyFrozenSet_Check(obj) PyObject_TypeCheck(obj, &PyFrozenSet_Type) +#endif + +#ifndef PySet_CheckExact +# define PySet_CheckExact(obj) (Py_TYPE(obj) == &PySet_Type) +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyIntObject PyLongObject + #define PyInt_Type PyLong_Type + #define PyInt_Check(op) PyLong_Check(op) + #define PyInt_CheckExact(op) PyLong_CheckExact(op) + #define PyInt_FromString PyLong_FromString + #define PyInt_FromUnicode PyLong_FromUnicode + #define PyInt_FromLong PyLong_FromLong + #define PyInt_FromSize_t PyLong_FromSize_t + #define PyInt_FromSsize_t PyLong_FromSsize_t + #define PyInt_AsLong PyLong_AsLong + #define PyInt_AS_LONG PyLong_AS_LONG + #define PyInt_AsSsize_t PyLong_AsSsize_t + #define PyInt_AsUnsignedLongMask PyLong_AsUnsignedLongMask + #define PyInt_AsUnsignedLongLongMask PyLong_AsUnsignedLongLongMask +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyBoolObject PyLongObject +#endif + + +#if PY_MAJOR_VERSION >= 3 + #define __Pyx_PyNumber_Divide(x,y) PyNumber_TrueDivide(x,y) + #define __Pyx_PyNumber_InPlaceDivide(x,y) PyNumber_InPlaceTrueDivide(x,y) +#else + #define __Pyx_PyNumber_Divide(x,y) PyNumber_Divide(x,y) + #define __Pyx_PyNumber_InPlaceDivide(x,y) PyNumber_InPlaceDivide(x,y) +#endif + +#if (PY_MAJOR_VERSION < 3) || (PY_VERSION_HEX >= 0x03010300) + #define __Pyx_PySequence_GetSlice(obj, a, b) PySequence_GetSlice(obj, a, b) + #define __Pyx_PySequence_SetSlice(obj, a, b, value) PySequence_SetSlice(obj, a, b, value) + #define __Pyx_PySequence_DelSlice(obj, a, b) PySequence_DelSlice(obj, a, b) +#else + #define __Pyx_PySequence_GetSlice(obj, a, b) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), (PyObject*)0) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_GetSlice(obj, a, b)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object is unsliceable", (obj)->ob_type->tp_name), (PyObject*)0))) + #define __Pyx_PySequence_SetSlice(obj, a, b, value) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), -1) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_SetSlice(obj, a, b, value)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object doesn't support slice assignment", (obj)->ob_type->tp_name), -1))) + #define __Pyx_PySequence_DelSlice(obj, a, b) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), -1) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_DelSlice(obj, a, b)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object doesn't support slice deletion", (obj)->ob_type->tp_name), -1))) +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyMethod_New(func, self, klass) ((self) ? PyMethod_New(func, self) : PyInstanceMethod_New(func)) +#endif + +#if PY_VERSION_HEX < 0x02050000 + #define __Pyx_GetAttrString(o,n) PyObject_GetAttrString((o),((char *)(n))) + #define __Pyx_SetAttrString(o,n,a) PyObject_SetAttrString((o),((char *)(n)),(a)) + #define __Pyx_DelAttrString(o,n) PyObject_DelAttrString((o),((char *)(n))) +#else + #define __Pyx_GetAttrString(o,n) PyObject_GetAttrString((o),(n)) + #define __Pyx_SetAttrString(o,n,a) PyObject_SetAttrString((o),(n),(a)) + #define __Pyx_DelAttrString(o,n) PyObject_DelAttrString((o),(n)) +#endif + +#if PY_VERSION_HEX < 0x02050000 + #define __Pyx_NAMESTR(n) ((char *)(n)) + #define __Pyx_DOCSTR(n) ((char *)(n)) +#else + #define __Pyx_NAMESTR(n) (n) + #define __Pyx_DOCSTR(n) (n) +#endif + +#ifdef __cplusplus +#define __PYX_EXTERN_C extern "C" +#else +#define __PYX_EXTERN_C extern +#endif + +#if defined(WIN32) || defined(MS_WINDOWS) +#define _USE_MATH_DEFINES +#endif +#include +#define __PYX_HAVE_API__netfilterqueue +#include "sys/types.h" +#include "netinet/ip.h" +#include "sys/time.h" +#include "netinet/in.h" +#include "libnfnetlink/linux_nfnetlink.h" +#include "libnetfilter_queue/linux_nfnetlink_queue.h" +#include "libnetfilter_queue/libnetfilter_queue.h" +#include "sys/socket.h" + +#ifdef PYREX_WITHOUT_ASSERTIONS +#define CYTHON_WITHOUT_ASSERTIONS +#endif + + +/* inline attribute */ +#ifndef CYTHON_INLINE + #if defined(__GNUC__) + #define CYTHON_INLINE __inline__ + #elif defined(_MSC_VER) + #define CYTHON_INLINE __inline + #elif defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L + #define CYTHON_INLINE inline + #else + #define CYTHON_INLINE + #endif +#endif + +/* unused attribute */ +#ifndef CYTHON_UNUSED +# if defined(__GNUC__) +# if !(defined(__cplusplus)) || (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 4)) +# define CYTHON_UNUSED __attribute__ ((__unused__)) +# else +# define CYTHON_UNUSED +# endif +# elif defined(__ICC) || defined(__INTEL_COMPILER) +# define CYTHON_UNUSED __attribute__ ((__unused__)) +# else +# define CYTHON_UNUSED +# endif +#endif + +typedef struct {PyObject **p; char *s; const long n; const char* encoding; const char is_unicode; const char is_str; const char intern; } __Pyx_StringTabEntry; /*proto*/ + + +/* Type Conversion Predeclarations */ + +#define __Pyx_PyBytes_FromUString(s) PyBytes_FromString((char*)s) +#define __Pyx_PyBytes_AsUString(s) ((unsigned char*) PyBytes_AsString(s)) + +#define __Pyx_PyBool_FromLong(b) ((b) ? (Py_INCREF(Py_True), Py_True) : (Py_INCREF(Py_False), Py_False)) +static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject*); +static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x); + +static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject*); +static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t); +static CYTHON_INLINE size_t __Pyx_PyInt_AsSize_t(PyObject*); + +#define __pyx_PyFloat_AsDouble(x) (PyFloat_CheckExact(x) ? PyFloat_AS_DOUBLE(x) : PyFloat_AsDouble(x)) + + +#ifdef __GNUC__ +/* Test for GCC > 2.95 */ +#if __GNUC__ > 2 || (__GNUC__ == 2 && (__GNUC_MINOR__ > 95)) +#define likely(x) __builtin_expect(!!(x), 1) +#define unlikely(x) __builtin_expect(!!(x), 0) +#else /* __GNUC__ > 2 ... */ +#define likely(x) (x) +#define unlikely(x) (x) +#endif /* __GNUC__ > 2 ... */ +#else /* __GNUC__ */ +#define likely(x) (x) +#define unlikely(x) (x) +#endif /* __GNUC__ */ + +static PyObject *__pyx_m; +static PyObject *__pyx_b; +static PyObject *__pyx_empty_tuple; +static PyObject *__pyx_empty_bytes; +static int __pyx_lineno; +static int __pyx_clineno = 0; +static const char * __pyx_cfilenm= __FILE__; +static const char *__pyx_filename; + + +static const char *__pyx_f[] = { + "netfilterqueue.pyx", + "netfilterqueue.pxd", +}; + +/* Type declarations */ + +/* "/root/NetfilterQueue/netfilterqueue.pxd":19 + * + * # Dummy defines from netinet/in.h: + * cdef enum: # <<<<<<<<<<<<<< + * IPPROTO_IP = 0 # Dummy protocol for TCP. + * IPPROTO_HOPOPTS = 0 # IPv6 Hop-by-Hop options. + */ + +enum { + __pyx_e_14netfilterqueue_IPPROTO_IP = 0, + __pyx_e_14netfilterqueue_IPPROTO_HOPOPTS = 0, + __pyx_e_14netfilterqueue_IPPROTO_ICMP = 1, + __pyx_e_14netfilterqueue_IPPROTO_IGMP = 2, + __pyx_e_14netfilterqueue_IPPROTO_IPIP = 4, + __pyx_e_14netfilterqueue_IPPROTO_TCP = 6, + __pyx_e_14netfilterqueue_IPPROTO_EGP = 8, + __pyx_e_14netfilterqueue_IPPROTO_PUP = 12, + __pyx_e_14netfilterqueue_IPPROTO_UDP = 17, + __pyx_e_14netfilterqueue_IPPROTO_IDP = 22, + __pyx_e_14netfilterqueue_IPPROTO_TP = 29, + __pyx_e_14netfilterqueue_IPPROTO_IPV6 = 41, + __pyx_e_14netfilterqueue_IPPROTO_ROUTING = 43, + __pyx_e_14netfilterqueue_IPPROTO_FRAGMENT = 44, + __pyx_e_14netfilterqueue_IPPROTO_RSVP = 46, + __pyx_e_14netfilterqueue_IPPROTO_GRE = 47, + __pyx_e_14netfilterqueue_IPPROTO_ESP = 50, + __pyx_e_14netfilterqueue_IPPROTO_AH = 51, + __pyx_e_14netfilterqueue_IPPROTO_ICMPV6 = 58, + __pyx_e_14netfilterqueue_IPPROTO_NONE = 59, + __pyx_e_14netfilterqueue_IPPROTO_DSTOPTS = 60, + __pyx_e_14netfilterqueue_IPPROTO_MTP = 92, + __pyx_e_14netfilterqueue_IPPROTO_ENCAP = 98, + __pyx_e_14netfilterqueue_IPPROTO_PIM = 103, + __pyx_e_14netfilterqueue_IPPROTO_COMP = 108, + __pyx_e_14netfilterqueue_IPPROTO_SCTP = 132, + __pyx_e_14netfilterqueue_IPPROTO_RAW = 255, + __pyx_e_14netfilterqueue_IPPROTO_MAX +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":134 + * + * # Dummy defines from linux/socket.h: + * cdef enum: # Protocol families, same as address families. # <<<<<<<<<<<<<< + * PF_INET = 2 + * PF_INET6 = 10 + */ + +enum { + __pyx_e_14netfilterqueue_PF_INET = 2, + __pyx_e_14netfilterqueue_PF_INET6 = 10 +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":142 + * + * # Dummy defines from linux/netfilter.h + * cdef enum: # <<<<<<<<<<<<<< + * NF_DROP + * NF_ACCEPT + */ + +enum { + + /* "/root/NetfilterQueue/netfilterqueue.pxd":149 + * NF_REPEAT + * NF_STOP + * NF_MAX_VERDICT = NF_STOP # <<<<<<<<<<<<<< + * + * cdef class NFPacket: + */ + __pyx_e_14netfilterqueue_NF_DROP, + __pyx_e_14netfilterqueue_NF_ACCEPT, + __pyx_e_14netfilterqueue_NF_STOLEN, + __pyx_e_14netfilterqueue_NF_QUEUE, + __pyx_e_14netfilterqueue_NF_REPEAT, + __pyx_e_14netfilterqueue_NF_STOP, + __pyx_e_14netfilterqueue_NF_MAX_VERDICT = __pyx_e_14netfilterqueue_NF_STOP +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":151 + * NF_MAX_VERDICT = NF_STOP + * + * cdef class NFPacket: # <<<<<<<<<<<<<< + * cdef nfq_q_handle *_qh + * cdef nfq_data *_nfa + */ + +struct __pyx_obj_14netfilterqueue_NFPacket { + PyObject_HEAD + struct __pyx_vtabstruct_14netfilterqueue_NFPacket *__pyx_vtab; + struct nfq_q_handle *_qh; + struct nfq_data *_nfa; + struct nfqnl_msg_packet_hdr *_hdr; + int _verdict_is_set; + int _mark_is_set; + u_int32_t _given_mark; + unsigned char *_given_payload; + u_int32_t id; + u_int16_t hw_protocol; + u_int8_t hook; + Py_ssize_t payload_len; + char *payload; + struct timeval timestamp; +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":186 + * cpdef drop(self) + * + * cdef class NFQueue: # <<<<<<<<<<<<<< + * cdef nfq_handle *h # Handle to NFQueue library + * cdef nfq_q_handle *qh # A handle to the queue + */ + +struct __pyx_obj_14netfilterqueue_NFQueue { + PyObject_HEAD + struct nfq_handle *h; + struct nfq_q_handle *qh; + u_int16_t af; + PyObject *packet_copy_size; +}; + + +/* "/root/NetfilterQueue/netfilterqueue.pyx":37 + * return 1 + * + * cdef class NFPacket: # <<<<<<<<<<<<<< + * """A packet received from NFQueue.""" + * def __cinit__(self): + */ + +struct __pyx_vtabstruct_14netfilterqueue_NFPacket { + PyObject *(*set_nfq_data)(struct __pyx_obj_14netfilterqueue_NFPacket *, struct nfq_q_handle *, struct nfq_data *); + void (*verdict)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int8_t); + Py_ssize_t (*get_payload_len)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + double (*get_timestamp)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + PyObject *(*set_mark)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int32_t, int __pyx_skip_dispatch); + PyObject *(*accept)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + PyObject *(*drop)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); +}; +static struct __pyx_vtabstruct_14netfilterqueue_NFPacket *__pyx_vtabptr_14netfilterqueue_NFPacket; + +#ifndef CYTHON_REFNANNY + #define CYTHON_REFNANNY 0 +#endif + +#if CYTHON_REFNANNY + typedef struct { + void (*INCREF)(void*, PyObject*, int); + void (*DECREF)(void*, PyObject*, int); + void (*GOTREF)(void*, PyObject*, int); + void (*GIVEREF)(void*, PyObject*, int); + void* (*SetupContext)(const char*, int, const char*); + void (*FinishContext)(void**); + } __Pyx_RefNannyAPIStruct; + static __Pyx_RefNannyAPIStruct *__Pyx_RefNanny = NULL; + static __Pyx_RefNannyAPIStruct * __Pyx_RefNannyImportAPI(const char *modname) { + PyObject *m = NULL, *p = NULL; + void *r = NULL; + m = PyImport_ImportModule((char *)modname); + if (!m) goto end; + p = PyObject_GetAttrString(m, (char *)"RefNannyAPI"); + if (!p) goto end; + r = PyLong_AsVoidPtr(p); + end: + Py_XDECREF(p); + Py_XDECREF(m); + return (__Pyx_RefNannyAPIStruct *)r; + } + #define __Pyx_RefNannySetupContext(name) void *__pyx_refnanny = __Pyx_RefNanny->SetupContext((name), __LINE__, __FILE__) + #define __Pyx_RefNannyFinishContext() __Pyx_RefNanny->FinishContext(&__pyx_refnanny) + #define __Pyx_INCREF(r) __Pyx_RefNanny->INCREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_DECREF(r) __Pyx_RefNanny->DECREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_GOTREF(r) __Pyx_RefNanny->GOTREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_GIVEREF(r) __Pyx_RefNanny->GIVEREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_XDECREF(r) do { if((r) != NULL) {__Pyx_DECREF(r);} } while(0) +#else + #define __Pyx_RefNannySetupContext(name) + #define __Pyx_RefNannyFinishContext() + #define __Pyx_INCREF(r) Py_INCREF(r) + #define __Pyx_DECREF(r) Py_DECREF(r) + #define __Pyx_GOTREF(r) + #define __Pyx_GIVEREF(r) + #define __Pyx_XDECREF(r) Py_XDECREF(r) +#endif /* CYTHON_REFNANNY */ +#define __Pyx_XGIVEREF(r) do { if((r) != NULL) {__Pyx_GIVEREF(r);} } while(0) +#define __Pyx_XGOTREF(r) do { if((r) != NULL) {__Pyx_GOTREF(r);} } while(0) + +static PyObject *__Pyx_GetName(PyObject *dict, PyObject *name); /*proto*/ + +static void __Pyx_RaiseArgtupleInvalid(const char* func_name, int exact, + Py_ssize_t num_min, Py_ssize_t num_max, Py_ssize_t num_found); /*proto*/ + +static CYTHON_INLINE int __Pyx_CheckKeywordStrings(PyObject *kwdict, + const char* function_name, int kw_allowed); /*proto*/ + +static CYTHON_INLINE long __Pyx_NegateNonNeg(long b) { return unlikely(b < 0) ? b : !b; } +static CYTHON_INLINE PyObject* __Pyx_PyBoolOrNull_FromLong(long b) { + return unlikely(b < 0) ? NULL : __Pyx_PyBool_FromLong(b); +} + +static CYTHON_INLINE void __Pyx_RaiseNoneIndexingError(void); + +#if PY_MAJOR_VERSION >= 3 +static PyObject *__Pyx_PyDict_GetItem(PyObject *d, PyObject* key) { + PyObject *value; + if (unlikely(d == Py_None)) { + __Pyx_RaiseNoneIndexingError(); + return NULL; + } + value = PyDict_GetItemWithError(d, key); + if (unlikely(!value)) { + if (!PyErr_Occurred()) + PyErr_SetObject(PyExc_KeyError, key); + return NULL; + } + Py_INCREF(value); + return value; +} +#else + #define __Pyx_PyDict_GetItem(d, key) PyObject_GetItem(d, key) +#endif + +static void __Pyx_RaiseDoubleKeywordsError( + const char* func_name, PyObject* kw_name); /*proto*/ + +static int __Pyx_ParseOptionalKeywords(PyObject *kwds, PyObject **argnames[], PyObject *kwds2, PyObject *values[], Py_ssize_t num_pos_args, const char* function_name); /*proto*/ + +static int __Pyx_ArgTypeTest(PyObject *obj, PyTypeObject *type, int none_allowed, + const char *name, int exact); /*proto*/ + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int32_t(u_int32_t); + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int16_t(u_int16_t); + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int8_t(u_int8_t); + +static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list); /*proto*/ + +#define __pyx_binding_PyCFunctionType_USED 1 + +typedef struct { + PyCFunctionObject func; +} __pyx_binding_PyCFunctionType_object; + +PyTypeObject __pyx_binding_PyCFunctionType_type; +PyTypeObject *__pyx_binding_PyCFunctionType = NULL; + +PyObject *__pyx_binding_PyCFunctionType_NewEx(PyMethodDef *ml, PyObject *self, PyObject *module); /* proto */ +#define __pyx_binding_PyCFunctionType_New(ml, self) __pyx_binding_PyCFunctionType_NewEx(ml, self, NULL) + +int __pyx_binding_PyCFunctionType_init(void); /* proto */ + +static CYTHON_INLINE PyObject *__Pyx_GetAttr3(PyObject *, PyObject *, PyObject *); /*proto*/ + +static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb); /*proto*/ +static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb); /*proto*/ + +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb); /*proto*/ + +static CYTHON_INLINE u_int16_t __Pyx_PyInt_from_py_u_int16_t(PyObject *); + +#ifndef __PYX_FORCE_INIT_THREADS + #if PY_VERSION_HEX < 0x02040200 + #define __PYX_FORCE_INIT_THREADS 1 + #else + #define __PYX_FORCE_INIT_THREADS 0 + #endif +#endif + +static CYTHON_INLINE unsigned char __Pyx_PyInt_AsUnsignedChar(PyObject *); + +static CYTHON_INLINE unsigned short __Pyx_PyInt_AsUnsignedShort(PyObject *); + +static CYTHON_INLINE unsigned int __Pyx_PyInt_AsUnsignedInt(PyObject *); + +static CYTHON_INLINE char __Pyx_PyInt_AsChar(PyObject *); + +static CYTHON_INLINE short __Pyx_PyInt_AsShort(PyObject *); + +static CYTHON_INLINE int __Pyx_PyInt_AsInt(PyObject *); + +static CYTHON_INLINE signed char __Pyx_PyInt_AsSignedChar(PyObject *); + +static CYTHON_INLINE signed short __Pyx_PyInt_AsSignedShort(PyObject *); + +static CYTHON_INLINE signed int __Pyx_PyInt_AsSignedInt(PyObject *); + +static CYTHON_INLINE int __Pyx_PyInt_AsLongDouble(PyObject *); + +static CYTHON_INLINE unsigned long __Pyx_PyInt_AsUnsignedLong(PyObject *); + +static CYTHON_INLINE unsigned PY_LONG_LONG __Pyx_PyInt_AsUnsignedLongLong(PyObject *); + +static CYTHON_INLINE long __Pyx_PyInt_AsLong(PyObject *); + +static CYTHON_INLINE PY_LONG_LONG __Pyx_PyInt_AsLongLong(PyObject *); + +static CYTHON_INLINE signed long __Pyx_PyInt_AsSignedLong(PyObject *); + +static CYTHON_INLINE signed PY_LONG_LONG __Pyx_PyInt_AsSignedLongLong(PyObject *); + +static void __Pyx_WriteUnraisable(const char *name); /*proto*/ + +static CYTHON_INLINE u_int32_t __Pyx_PyInt_from_py_u_int32_t(PyObject *); + +static CYTHON_INLINE u_int8_t __Pyx_PyInt_from_py_u_int8_t(PyObject *); + +static int __Pyx_SetVtable(PyObject *dict, void *vtable); /*proto*/ + +static void __Pyx_AddTraceback(const char *funcname); /*proto*/ + +static int __Pyx_InitStrings(__Pyx_StringTabEntry *t); /*proto*/ +/* Module declarations from netfilterqueue */ + +static PyTypeObject *__pyx_ptype_14netfilterqueue_NFPacket = 0; +static PyTypeObject *__pyx_ptype_14netfilterqueue_NFQueue = 0; +static int __pyx_f_14netfilterqueue_global_callback(struct nfq_q_handle *, struct nfgenmsg *, struct nfq_data *, void *); /*proto*/ +#define __Pyx_MODULE_NAME "netfilterqueue" +int __pyx_module_is_main_netfilterqueue = 0; + +/* Implementation of netfilterqueue */ +static PyObject *__pyx_builtin_filter; +static PyObject *__pyx_builtin_OSError; +static char __pyx_k_2[] = "Unknown protocol"; +static char __pyx_k_3[] = "%s packet, %s bytes"; +static char __pyx_k_4[] = "Failed to get payload of packet."; +static char __pyx_k_6[] = "Failed to open NFQueue."; +static char __pyx_k_8[] = "Failed to bind family %s."; +static char __pyx_k_10[] = "Failed to create queue %s."; +static char __pyx_k_11[] = "Failed to set packet copy mode."; +static char __pyx_k__h[] = "h"; +static char __pyx_k__af[] = "af"; +static char __pyx_k__id[] = "id"; +static char __pyx_k__qh[] = "qh"; +static char __pyx_k___qh[] = "_qh"; +static char __pyx_k___hdr[] = "_hdr"; +static char __pyx_k___nfa[] = "_nfa"; +static char __pyx_k__drop[] = "drop"; +static char __pyx_k__hook[] = "hook"; +static char __pyx_k__mode[] = "mode"; +static char __pyx_k__range[] = "range"; +static char __pyx_k__accept[] = "accept"; +static char __pyx_k__filter[] = "filter"; +static char __pyx_k__handle[] = "handle"; +static char __pyx_k__maxlen[] = "maxlen"; +static char __pyx_k__socket[] = "socket"; +static char __pyx_k__tv_sec[] = "tv_sec"; +static char __pyx_k__AF_INET[] = "AF_INET"; +static char __pyx_k__IPPROTO[] = "IPPROTO"; +static char __pyx_k__OSError[] = "OSError"; +static char __pyx_k__handler[] = "handler"; +static char __pyx_k__payload[] = "payload"; +static char __pyx_k__tv_usec[] = "tv_usec"; +static char __pyx_k__verdict[] = "verdict"; +static char __pyx_k____main__[] = "__main__"; +static char __pyx_k____test__[] = "__test__"; +static char __pyx_k__protocol[] = "protocol"; +static char __pyx_k__set_mark[] = "set_mark"; +static char __pyx_k__COPY_META[] = "COPY_META"; +static char __pyx_k__COPY_NONE[] = "COPY_NONE"; +static char __pyx_k__packet_id[] = "packet_id"; +static char __pyx_k__queue_num[] = "queue_num"; +static char __pyx_k__timestamp[] = "timestamp"; +static char __pyx_k__startswith[] = "startswith"; +static char __pyx_k__COPY_PACKET[] = "COPY_PACKET"; +static char __pyx_k___given_mark[] = "_given_mark"; +static char __pyx_k__hw_protocol[] = "hw_protocol"; +static char __pyx_k__payload_len[] = "payload_len"; +static char __pyx_k___mark_is_set[] = "_mark_is_set"; +static char __pyx_k__set_nfq_data[] = "set_nfq_data"; +static char __pyx_k__get_timestamp[] = "get_timestamp"; +static char __pyx_k___given_payload[] = "_given_payload"; +static char __pyx_k__netfilterqueue[] = "netfilterqueue"; +static char __pyx_k___verdict_is_set[] = "_verdict_is_set"; +static char __pyx_k__get_payload_len[] = "get_payload_len"; +static PyObject *__pyx_kp_s_10; +static PyObject *__pyx_kp_s_11; +static PyObject *__pyx_kp_s_2; +static PyObject *__pyx_kp_s_3; +static PyObject *__pyx_kp_s_4; +static PyObject *__pyx_kp_s_6; +static PyObject *__pyx_kp_s_8; +static PyObject *__pyx_n_s__AF_INET; +static PyObject *__pyx_n_s__COPY_META; +static PyObject *__pyx_n_s__COPY_NONE; +static PyObject *__pyx_n_s__COPY_PACKET; +static PyObject *__pyx_n_s__IPPROTO; +static PyObject *__pyx_n_s__OSError; +static PyObject *__pyx_n_s____main__; +static PyObject *__pyx_n_s____test__; +static PyObject *__pyx_n_s___given_mark; +static PyObject *__pyx_n_s___given_payload; +static PyObject *__pyx_n_s___hdr; +static PyObject *__pyx_n_s___mark_is_set; +static PyObject *__pyx_n_s___nfa; +static PyObject *__pyx_n_s___qh; +static PyObject *__pyx_n_s___verdict_is_set; +static PyObject *__pyx_n_s__accept; +static PyObject *__pyx_n_s__af; +static PyObject *__pyx_n_s__drop; +static PyObject *__pyx_n_s__filter; +static PyObject *__pyx_n_s__get_payload_len; +static PyObject *__pyx_n_s__get_timestamp; +static PyObject *__pyx_n_s__h; +static PyObject *__pyx_n_s__handle; +static PyObject *__pyx_n_s__handler; +static PyObject *__pyx_n_s__hook; +static PyObject *__pyx_n_s__hw_protocol; +static PyObject *__pyx_n_s__id; +static PyObject *__pyx_n_s__maxlen; +static PyObject *__pyx_n_s__mode; +static PyObject *__pyx_n_s__netfilterqueue; +static PyObject *__pyx_n_s__packet_id; +static PyObject *__pyx_n_s__payload; +static PyObject *__pyx_n_s__payload_len; +static PyObject *__pyx_n_s__protocol; +static PyObject *__pyx_n_s__qh; +static PyObject *__pyx_n_s__queue_num; +static PyObject *__pyx_n_s__range; +static PyObject *__pyx_n_s__set_mark; +static PyObject *__pyx_n_s__set_nfq_data; +static PyObject *__pyx_n_s__socket; +static PyObject *__pyx_n_s__startswith; +static PyObject *__pyx_n_s__timestamp; +static PyObject *__pyx_n_s__tv_sec; +static PyObject *__pyx_n_s__tv_usec; +static PyObject *__pyx_n_s__verdict; +static PyObject *__pyx_int_1; +static PyObject *__pyx_int_2; +static PyObject *__pyx_int_3; +static u_int8_t __pyx_k_9; +static PyObject *__pyx_k_tuple_1; +static PyObject *__pyx_k_tuple_5; +static PyObject *__pyx_k_tuple_7; +static PyObject *__pyx_k_tuple_12; + +/* "/root/NetfilterQueue/netfilterqueue.pyx":15 + * DEF MaxCopySize = BufferSize - MetadataSize + * + * cdef int global_callback(nfq_q_handle *qh, nfgenmsg *nfmsg, # <<<<<<<<<<<<<< + * nfq_data *nfa, void *data) with gil: + * """ + */ + +static int __pyx_f_14netfilterqueue_global_callback(struct nfq_q_handle *__pyx_v_qh, struct nfgenmsg *__pyx_v_nfmsg, struct nfq_data *__pyx_v_nfa, void *__pyx_v_data) { + struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_packet; + int __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + #ifdef WITH_THREAD + PyGILState_STATE _save = PyGILState_Ensure(); + #endif + __Pyx_RefNannySetupContext("global_callback"); + __pyx_v_packet = ((struct __pyx_obj_14netfilterqueue_NFPacket *)Py_None); __Pyx_INCREF(Py_None); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":32 + * # NULL # TODO: adapt to use self._given_payload + * # ) + * packet = NFPacket() # <<<<<<<<<<<<<< + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) + */ + __pyx_t_1 = PyObject_Call(((PyObject *)((PyObject*)__pyx_ptype_14netfilterqueue_NFPacket)), ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 32; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(((PyObject *)__pyx_v_packet)); + __pyx_v_packet = ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_t_1); + __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":33 + * # ) + * packet = NFPacket() + * packet.set_nfq_data(qh, nfa) # <<<<<<<<<<<<<< + * (data).handle(packet) + * return 1 + */ + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_packet->__pyx_vtab)->set_nfq_data(__pyx_v_packet, __pyx_v_qh, __pyx_v_nfa); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 33; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":34 + * packet = NFPacket() + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) # <<<<<<<<<<<<<< + * return 1 + * + */ + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_data), __pyx_n_s__handle); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_t_2 = PyTuple_New(1); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + __Pyx_INCREF(((PyObject *)__pyx_v_packet)); + PyTuple_SET_ITEM(__pyx_t_2, 0, ((PyObject *)__pyx_v_packet)); + __Pyx_GIVEREF(((PyObject *)__pyx_v_packet)); + __pyx_t_3 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_t_2), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + __Pyx_DECREF(((PyObject *)__pyx_t_2)); __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":35 + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) + * return 1 # <<<<<<<<<<<<<< + * + * cdef class NFPacket: + */ + __pyx_r = 1; + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_WriteUnraisable("netfilterqueue.global_callback"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_DECREF((PyObject *)__pyx_v_packet); + __Pyx_RefNannyFinishContext(); + #ifdef WITH_THREAD + PyGILState_Release(_save); + #endif + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":39 + * cdef class NFPacket: + * """A packet received from NFQueue.""" + * def __cinit__(self): # <<<<<<<<<<<<<< + * self._verdict_is_set = False + * self._mark_is_set = False + */ + +static int __pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static int __pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + int __pyx_r; + __Pyx_RefNannySetupContext("__cinit__"); + if (unlikely(PyTuple_GET_SIZE(__pyx_args) > 0)) { + __Pyx_RaiseArgtupleInvalid("__cinit__", 1, 0, 0, PyTuple_GET_SIZE(__pyx_args)); return -1;} + if (unlikely(__pyx_kwds) && unlikely(PyDict_Size(__pyx_kwds) > 0) && unlikely(!__Pyx_CheckKeywordStrings(__pyx_kwds, "__cinit__", 0))) return -1; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":40 + * """A packet received from NFQueue.""" + * def __cinit__(self): + * self._verdict_is_set = False # <<<<<<<<<<<<<< + * self._mark_is_set = False + * self._given_payload = NULL + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_verdict_is_set = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":41 + * def __cinit__(self): + * self._verdict_is_set = False + * self._mark_is_set = False # <<<<<<<<<<<<<< + * self._given_payload = NULL + * + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_mark_is_set = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":42 + * self._verdict_is_set = False + * self._mark_is_set = False + * self._given_payload = NULL # <<<<<<<<<<<<<< + * + * def __str__(self): + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_given_payload = NULL; + + __pyx_r = 0; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + +static PyObject *__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1(PyObject *__pyx_self, PyObject *__pyx_v_x); /*proto*/ +static PyMethodDef __pyx_lambda_methdef14netfilterqueue_7__str___lambda1 = {__Pyx_NAMESTR("__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1"), (PyCFunction)__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1, METH_O, __Pyx_DOCSTR(0)}; +static PyObject *__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1(PyObject *__pyx_self, PyObject *__pyx_v_x) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1"); + __pyx_self = __pyx_self; + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyObject_GetAttr(__pyx_v_x, __pyx_n_s__startswith); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_k_tuple_1), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.__str__.lambda1"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":44 + * self._given_payload = NULL + * + * def __str__(self): # <<<<<<<<<<<<<< + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_1__str__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_1__str__(PyObject *__pyx_v_self) { + struct iphdr *__pyx_v_hdr; + PyObject *__pyx_v_protocol; + PyObject *__pyx_v_name; + PyObject *__pyx_r = NULL; + Py_ssize_t __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + PyObject *__pyx_t_4 = NULL; + PyObject *__pyx_t_5 = NULL; + int __pyx_t_6; + __Pyx_RefNannySetupContext("__str__"); + __pyx_v_protocol = Py_None; __Pyx_INCREF(Py_None); + __pyx_v_name = Py_None; __Pyx_INCREF(Py_None); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":45 + * + * def __str__(self): + * cdef iphdr *hdr = self.payload # <<<<<<<<<<<<<< + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + */ + __pyx_v_hdr = ((struct iphdr *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":46 + * def __str__(self): + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" # <<<<<<<<<<<<<< + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: + */ + __Pyx_INCREF(((PyObject *)__pyx_kp_s_2)); + __Pyx_DECREF(__pyx_v_protocol); + __pyx_v_protocol = ((PyObject *)__pyx_kp_s_2); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + __pyx_t_2 = __pyx_binding_PyCFunctionType_NewEx(&__pyx_lambda_methdef14netfilterqueue_7__str___lambda1, NULL, __pyx_n_s__netfilterqueue); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __pyx_t_4 = PyObject_Dir(__pyx_t_3); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + __pyx_t_3 = PyTuple_New(2); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_2); + __Pyx_GIVEREF(__pyx_t_2); + PyTuple_SET_ITEM(__pyx_t_3, 1, __pyx_t_4); + __Pyx_GIVEREF(__pyx_t_4); + __pyx_t_2 = 0; + __pyx_t_4 = 0; + __pyx_t_4 = PyObject_Call(__pyx_builtin_filter, ((PyObject *)__pyx_t_3), NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(((PyObject *)__pyx_t_3)); __pyx_t_3 = 0; + if (PyList_CheckExact(__pyx_t_4) || PyTuple_CheckExact(__pyx_t_4)) { + __pyx_t_1 = 0; __pyx_t_3 = __pyx_t_4; __Pyx_INCREF(__pyx_t_3); + } else { + __pyx_t_1 = -1; __pyx_t_3 = PyObject_GetIter(__pyx_t_4); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + } + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + for (;;) { + if (likely(PyList_CheckExact(__pyx_t_3))) { + if (__pyx_t_1 >= PyList_GET_SIZE(__pyx_t_3)) break; + __pyx_t_4 = PyList_GET_ITEM(__pyx_t_3, __pyx_t_1); __Pyx_INCREF(__pyx_t_4); __pyx_t_1++; + } else if (likely(PyTuple_CheckExact(__pyx_t_3))) { + if (__pyx_t_1 >= PyTuple_GET_SIZE(__pyx_t_3)) break; + __pyx_t_4 = PyTuple_GET_ITEM(__pyx_t_3, __pyx_t_1); __Pyx_INCREF(__pyx_t_4); __pyx_t_1++; + } else { + __pyx_t_4 = PyIter_Next(__pyx_t_3); + if (!__pyx_t_4) { + if (unlikely(PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + break; + } + __Pyx_GOTREF(__pyx_t_4); + } + __Pyx_DECREF(__pyx_v_name); + __pyx_v_name = __pyx_t_4; + __pyx_t_4 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":48 + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: # <<<<<<<<<<<<<< + * protocol = name[8:] + * return "%s packet, %s bytes" % (protocol, self.payload_len) + */ + __pyx_t_4 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_2 = PyObject_GetAttr(__pyx_t_4, __pyx_v_name); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_4 = __Pyx_PyInt_to_py_u_int8_t(__pyx_v_hdr->protocol); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_5 = PyObject_RichCompare(__pyx_t_2, __pyx_t_4, Py_EQ); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_5); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_6 = __Pyx_PyObject_IsTrue(__pyx_t_5); if (unlikely(__pyx_t_6 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0; + if (__pyx_t_6) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":49 + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] # <<<<<<<<<<<<<< + * return "%s packet, %s bytes" % (protocol, self.payload_len) + * + */ + __pyx_t_5 = __Pyx_PySequence_GetSlice(__pyx_v_name, 8, PY_SSIZE_T_MAX); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 49; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_5); + __Pyx_DECREF(__pyx_v_protocol); + __pyx_v_protocol = __pyx_t_5; + __pyx_t_5 = 0; + goto __pyx_L7; + } + __pyx_L7:; + } + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":50 + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + * return "%s packet, %s bytes" % (protocol, self.payload_len) # <<<<<<<<<<<<<< + * + * cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): + */ + __Pyx_XDECREF(__pyx_r); + __pyx_t_3 = PyInt_FromSsize_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload_len); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __pyx_t_5 = PyTuple_New(2); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_5)); + __Pyx_INCREF(__pyx_v_protocol); + PyTuple_SET_ITEM(__pyx_t_5, 0, __pyx_v_protocol); + __Pyx_GIVEREF(__pyx_v_protocol); + PyTuple_SET_ITEM(__pyx_t_5, 1, __pyx_t_3); + __Pyx_GIVEREF(__pyx_t_3); + __pyx_t_3 = 0; + __pyx_t_3 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_3), ((PyObject *)__pyx_t_5)); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + __Pyx_DECREF(((PyObject *)__pyx_t_5)); __pyx_t_5 = 0; + __pyx_r = ((PyObject *)__pyx_t_3); + __pyx_t_3 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_XDECREF(__pyx_t_4); + __Pyx_XDECREF(__pyx_t_5); + __Pyx_AddTraceback("netfilterqueue.NFPacket.__str__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_DECREF(__pyx_v_protocol); + __Pyx_DECREF(__pyx_v_name); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":52 + * return "%s packet, %s bytes" % (protocol, self.payload_len) + * + * cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): # <<<<<<<<<<<<<< + * """ + * Assign a packet from NFQ to this object. Parse the header and load + */ + +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_set_nfq_data(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, struct nfq_q_handle *__pyx_v_qh, struct nfq_data *__pyx_v_nfa) { + PyObject *__pyx_r = NULL; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("set_nfq_data"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":57 + * local values. + * """ + * self._qh = qh # <<<<<<<<<<<<<< + * self._nfa = nfa + * self._hdr = nfq_get_msg_packet_hdr(nfa) + */ + __pyx_v_self->_qh = __pyx_v_qh; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":58 + * """ + * self._qh = qh + * self._nfa = nfa # <<<<<<<<<<<<<< + * self._hdr = nfq_get_msg_packet_hdr(nfa) + * + */ + __pyx_v_self->_nfa = __pyx_v_nfa; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":59 + * self._qh = qh + * self._nfa = nfa + * self._hdr = nfq_get_msg_packet_hdr(nfa) # <<<<<<<<<<<<<< + * + * self.id = ntohl(self._hdr.packet_id) + */ + __pyx_v_self->_hdr = nfq_get_msg_packet_hdr(__pyx_v_nfa); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":61 + * self._hdr = nfq_get_msg_packet_hdr(nfa) + * + * self.id = ntohl(self._hdr.packet_id) # <<<<<<<<<<<<<< + * self.hw_protocol = ntohs(self._hdr.hw_protocol) + * self.hook = self._hdr.hook + */ + __pyx_v_self->id = ntohl(__pyx_v_self->_hdr->packet_id); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":62 + * + * self.id = ntohl(self._hdr.packet_id) + * self.hw_protocol = ntohs(self._hdr.hw_protocol) # <<<<<<<<<<<<<< + * self.hook = self._hdr.hook + * + */ + __pyx_v_self->hw_protocol = ntohs(__pyx_v_self->_hdr->hw_protocol); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":63 + * self.id = ntohl(self._hdr.packet_id) + * self.hw_protocol = ntohs(self._hdr.hw_protocol) + * self.hook = self._hdr.hook # <<<<<<<<<<<<<< + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + */ + __pyx_v_self->hook = __pyx_v_self->_hdr->hook; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":65 + * self.hook = self._hdr.hook + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) # <<<<<<<<<<<<<< + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") + */ + __pyx_v_self->payload_len = nfq_get_payload(__pyx_v_self->_nfa, (&__pyx_v_self->payload)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":66 + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to get payload of packet.") + * + */ + __pyx_t_1 = (__pyx_v_self->payload_len < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":67 + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") # <<<<<<<<<<<<<< + * + * nfq_get_timestamp(self._nfa, &self.timestamp) + */ + __pyx_t_2 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_5), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_Raise(__pyx_t_2, 0, 0); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L3; + } + __pyx_L3:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":69 + * raise OSError("Failed to get payload of packet.") + * + * nfq_get_timestamp(self._nfa, &self.timestamp) # <<<<<<<<<<<<<< + * + * cdef void verdict(self, u_int8_t verdict): + */ + nfq_get_timestamp(__pyx_v_self->_nfa, (&__pyx_v_self->timestamp)); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_nfq_data"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":71 + * nfq_get_timestamp(self._nfa, &self.timestamp) + * + * cdef void verdict(self, u_int8_t verdict): # <<<<<<<<<<<<<< + * """Call appropriate set_verdict... function on packet.""" + * #if self._verdict_is_set: + */ + +static void __pyx_f_14netfilterqueue_8NFPacket_verdict(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, u_int8_t __pyx_v_verdict) { + __Pyx_RefNannySetupContext("verdict"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":76 + * # raise RuntimeWarning("Verdict already given for this packet.") + * + * if self._mark_is_set: # <<<<<<<<<<<<<< + * nfq_set_verdict_mark( + * self._qh, + */ + if (__pyx_v_self->_mark_is_set) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":83 + * htonl(self._given_mark), + * 0, # TODO: adapt to use self._given_payload + * NULL # TODO: adapt to use self._given_payload # <<<<<<<<<<<<<< + * ) + * else: + */ + nfq_set_verdict_mark(__pyx_v_self->_qh, __pyx_v_self->id, __pyx_v_verdict, htonl(__pyx_v_self->_given_mark), 0, NULL); + goto __pyx_L3; + } + /*else*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":91 + * verdict, + * 0, # TODO: adapt to use self._given_payload + * NULL # TODO: adapt to use self._given_payload # <<<<<<<<<<<<<< + * ) + * + */ + nfq_set_verdict(__pyx_v_self->_qh, __pyx_v_self->id, __pyx_v_verdict, 0, NULL); + } + __pyx_L3:; + + __Pyx_RefNannyFinishContext(); +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":96 + * #self._verdict_is_set = True + * + * def get_payload(self): # <<<<<<<<<<<<<< + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + * return py_string + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2get_payload(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2get_payload(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_v_py_string = 0; + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_payload"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":97 + * + * def get_payload(self): + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) # <<<<<<<<<<<<<< + * return py_string + * + */ + __pyx_t_1 = PyString_FromStringAndSize(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload, ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload_len); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 97; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_v_py_string = __pyx_t_1; + __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":98 + * def get_payload(self): + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + * return py_string # <<<<<<<<<<<<<< + * + * cpdef Py_ssize_t get_payload_len(self): + */ + __Pyx_XDECREF(__pyx_r); + __Pyx_INCREF(__pyx_v_py_string); + __pyx_r = __pyx_v_py_string; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_payload"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XDECREF(__pyx_v_py_string); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":100 + * return py_string + * + * cpdef Py_ssize_t get_payload_len(self): # <<<<<<<<<<<<<< + * return self.payload_len + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static Py_ssize_t __pyx_f_14netfilterqueue_8NFPacket_get_payload_len(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + Py_ssize_t __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + Py_ssize_t __pyx_t_3; + __Pyx_RefNannySetupContext("get_payload_len"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__get_payload_len); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len)) { + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_PyIndex_AsSsize_t(__pyx_t_2); if (unlikely((__pyx_t_3 == (Py_ssize_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_r = __pyx_t_3; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":101 + * + * cpdef Py_ssize_t get_payload_len(self): + * return self.payload_len # <<<<<<<<<<<<<< + * + * cpdef double get_timestamp(self): + */ + __pyx_r = __pyx_v_self->payload_len; + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_WriteUnraisable("netfilterqueue.NFPacket.get_payload_len"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":100 + * return py_string + * + * cpdef Py_ssize_t get_payload_len(self): # <<<<<<<<<<<<<< + * return self.payload_len + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_payload_len"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyInt_FromSsize_t(((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->get_payload_len(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1)); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_payload_len"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":103 + * return self.payload_len + * + * cpdef double get_timestamp(self): # <<<<<<<<<<<<<< + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static double __pyx_f_14netfilterqueue_8NFPacket_get_timestamp(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + double __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + double __pyx_t_3; + __Pyx_RefNannySetupContext("get_timestamp"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__get_timestamp); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp)) { + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __pyx_PyFloat_AsDouble(__pyx_t_2); if (unlikely((__pyx_t_3 == (double)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_r = __pyx_t_3; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":104 + * + * cpdef double get_timestamp(self): + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) # <<<<<<<<<<<<<< + * + * # TODO: implement this + */ + __pyx_r = (__pyx_v_self->timestamp.tv_sec + (__pyx_v_self->timestamp.tv_usec / 1000000.0)); + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_WriteUnraisable("netfilterqueue.NFPacket.get_timestamp"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":103 + * return self.payload_len + * + * cpdef double get_timestamp(self): # <<<<<<<<<<<<<< + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_timestamp"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyFloat_FromDouble(((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->get_timestamp(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1)); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_timestamp"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":111 + * # self._given_payload = payload + * + * cpdef set_mark(self, u_int32_t mark): # <<<<<<<<<<<<<< + * self._given_mark = mark + * self._mark_is_set = True + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_set_mark(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, u_int32_t __pyx_v_mark, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + __Pyx_RefNannySetupContext("set_mark"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__set_mark); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_5set_mark)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = __Pyx_PyInt_to_py_u_int32_t(__pyx_v_mark); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = PyTuple_New(1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_2); + __Pyx_GIVEREF(__pyx_t_2); + __pyx_t_2 = 0; + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_t_3), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(((PyObject *)__pyx_t_3)); __pyx_t_3 = 0; + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":112 + * + * cpdef set_mark(self, u_int32_t mark): + * self._given_mark = mark # <<<<<<<<<<<<<< + * self._mark_is_set = True + * + */ + __pyx_v_self->_given_mark = __pyx_v_mark; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":113 + * cpdef set_mark(self, u_int32_t mark): + * self._given_mark = mark + * self._mark_is_set = True # <<<<<<<<<<<<<< + * + * cpdef accept(self): + */ + __pyx_v_self->_mark_is_set = 1; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":111 + * # self._given_payload = payload + * + * cpdef set_mark(self, u_int32_t mark): # <<<<<<<<<<<<<< + * self._given_mark = mark + * self._mark_is_set = True + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark) { + u_int32_t __pyx_v_mark; + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("set_mark"); + assert(__pyx_arg_mark); { + __pyx_v_mark = __Pyx_PyInt_from_py_u_int32_t(__pyx_arg_mark); if (unlikely((__pyx_v_mark == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + goto __pyx_L4_argument_unpacking_done; + __pyx_L3_error:; + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __Pyx_RefNannyFinishContext(); + return NULL; + __pyx_L4_argument_unpacking_done:; + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->set_mark(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), __pyx_v_mark, 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":115 + * self._mark_is_set = True + * + * cpdef accept(self): # <<<<<<<<<<<<<< + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_accept(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("accept"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__accept); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_6accept)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":117 + * cpdef accept(self): + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) # <<<<<<<<<<<<<< + * + * cpdef drop(self): + */ + ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_self->__pyx_vtab)->verdict(__pyx_v_self, __pyx_e_14netfilterqueue_NF_ACCEPT); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.accept"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":115 + * self._mark_is_set = True + * + * cpdef accept(self): # <<<<<<<<<<<<<< + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_8NFPacket_6accept[] = "Accept the packet."; +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("accept"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->accept(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.accept"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":119 + * self.verdict(NF_ACCEPT) + * + * cpdef drop(self): # <<<<<<<<<<<<<< + * """Drop the packet.""" + * self.verdict(NF_DROP) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_drop(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("drop"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__drop); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_7drop)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":121 + * cpdef drop(self): + * """Drop the packet.""" + * self.verdict(NF_DROP) # <<<<<<<<<<<<<< + * + * cdef class NFQueue: + */ + ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_self->__pyx_vtab)->verdict(__pyx_v_self, __pyx_e_14netfilterqueue_NF_DROP); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.drop"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":119 + * self.verdict(NF_ACCEPT) + * + * cpdef drop(self): # <<<<<<<<<<<<<< + * """Drop the packet.""" + * self.verdict(NF_DROP) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_8NFPacket_7drop[] = "Drop the packet."; +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("drop"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->drop(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.drop"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":162 + * + * # From NFQ packet header: + * cdef readonly u_int32_t id # <<<<<<<<<<<<<< + * cdef readonly u_int16_t hw_protocol + * cdef readonly u_int8_t hook + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int32_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->id); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 162; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.id.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":163 + * # From NFQ packet header: + * cdef readonly u_int32_t id + * cdef readonly u_int16_t hw_protocol # <<<<<<<<<<<<<< + * cdef readonly u_int8_t hook + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int16_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->hw_protocol); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 163; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.hw_protocol.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":164 + * cdef readonly u_int32_t id + * cdef readonly u_int16_t hw_protocol + * cdef readonly u_int8_t hook # <<<<<<<<<<<<<< + * + * # Packet details: + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int8_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->hook); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 164; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.hook.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":168 + * # Packet details: + * cdef Py_ssize_t payload_len + * cdef readonly char *payload # <<<<<<<<<<<<<< + * cdef timeval timestamp + * # TODO: implement these + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyBytes_FromString(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 168; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_1)); + __pyx_r = ((PyObject *)__pyx_t_1); + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.payload.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":125 + * cdef class NFQueue: + * """Handle a single numbered queue.""" + * def __cinit__(self, *args, **kwargs): # <<<<<<<<<<<<<< + * if "af" in kwargs: + * self.af = kwargs["af"] + */ + +static int __pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static int __pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + PyObject *__pyx_v_args = 0; + PyObject *__pyx_v_kwargs = 0; + int __pyx_r; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + u_int16_t __pyx_t_3; + PyObject *__pyx_t_4 = NULL; + __Pyx_RefNannySetupContext("__cinit__"); + if (unlikely(__pyx_kwds) && unlikely(!__Pyx_CheckKeywordStrings(__pyx_kwds, "__cinit__", 1))) return -1; + __pyx_v_kwargs = (__pyx_kwds) ? PyDict_Copy(__pyx_kwds) : PyDict_New(); + if (unlikely(!__pyx_v_kwargs)) return -1; + __Pyx_GOTREF(__pyx_v_kwargs); + __Pyx_INCREF(__pyx_args); + __pyx_v_args = __pyx_args; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":126 + * """Handle a single numbered queue.""" + * def __cinit__(self, *args, **kwargs): + * if "af" in kwargs: # <<<<<<<<<<<<<< + * self.af = kwargs["af"] + * else: + */ + if (unlikely(__pyx_v_kwargs == Py_None)) { + PyErr_SetString(PyExc_TypeError, "'NoneType' object is not iterable"); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 126; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + } + __pyx_t_1 = ((PyDict_Contains(((PyObject *)__pyx_v_kwargs), ((PyObject *)__pyx_n_s__af)))); if (unlikely(__pyx_t_1 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 126; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":127 + * def __cinit__(self, *args, **kwargs): + * if "af" in kwargs: + * self.af = kwargs["af"] # <<<<<<<<<<<<<< + * else: + * self.af = socket.AF_INET + */ + __pyx_t_2 = __Pyx_PyDict_GetItem(((PyObject *)__pyx_v_kwargs), ((PyObject *)__pyx_n_s__af)); if (!__pyx_t_2) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 127; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_PyInt_from_py_u_int16_t(__pyx_t_2); if (unlikely((__pyx_t_3 == (u_int16_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 127; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af = __pyx_t_3; + goto __pyx_L5; + } + /*else*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":129 + * self.af = kwargs["af"] + * else: + * self.af = socket.AF_INET # <<<<<<<<<<<<<< + * + * self.h = nfq_open() + */ + __pyx_t_2 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_4 = PyObject_GetAttr(__pyx_t_2, __pyx_n_s__AF_INET); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_t_3 = __Pyx_PyInt_from_py_u_int16_t(__pyx_t_4); if (unlikely((__pyx_t_3 == (u_int16_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af = __pyx_t_3; + } + __pyx_L5:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":131 + * self.af = socket.AF_INET + * + * self.h = nfq_open() # <<<<<<<<<<<<<< + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") + */ + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h = nfq_open(); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":132 + * + * self.h = nfq_open() + * if self.h == NULL: # <<<<<<<<<<<<<< + * raise OSError("Failed to open NFQueue.") + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h == NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":133 + * self.h = nfq_open() + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") # <<<<<<<<<<<<<< + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + */ + __pyx_t_4 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_7), NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_Raise(__pyx_t_4, 0, 0); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L6; + } + __pyx_L6:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":134 + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous # <<<<<<<<<<<<<< + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: + */ + nfq_unbind_pf(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":136 + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to bind family %s." % self.af) + * + */ + __pyx_t_1 = (nfq_bind_pf(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af) < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":137 + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: + * raise OSError("Failed to bind family %s." % self.af) # <<<<<<<<<<<<<< + * + * def __dealloc__(self): + */ + __pyx_t_4 = __Pyx_PyInt_to_py_u_int16_t(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_2 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_8), __pyx_t_4); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_4 = PyTuple_New(1); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_4)); + PyTuple_SET_ITEM(__pyx_t_4, 0, ((PyObject *)__pyx_t_2)); + __Pyx_GIVEREF(((PyObject *)__pyx_t_2)); + __pyx_t_2 = 0; + __pyx_t_2 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_t_4), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(((PyObject *)__pyx_t_4)); __pyx_t_4 = 0; + __Pyx_Raise(__pyx_t_2, 0, 0); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L7; + } + __pyx_L7:; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_4); + __Pyx_AddTraceback("netfilterqueue.NFQueue.__cinit__"); + __pyx_r = -1; + __pyx_L0:; + __Pyx_DECREF(__pyx_v_args); + __Pyx_DECREF(__pyx_v_kwargs); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":139 + * raise OSError("Failed to bind family %s." % self.af) + * + * def __dealloc__(self): # <<<<<<<<<<<<<< + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) + */ + +static void __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(PyObject *__pyx_v_self); /*proto*/ +static void __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(PyObject *__pyx_v_self) { + int __pyx_t_1; + __Pyx_RefNannySetupContext("__dealloc__"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":140 + * + * def __dealloc__(self): + * if self.qh != NULL: # <<<<<<<<<<<<<< + * nfq_destroy_queue(self.qh) + * # Don't call nfq_unbind_pf unless you want to disconnect any other + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh != NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":141 + * def __dealloc__(self): + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) # <<<<<<<<<<<<<< + * # Don't call nfq_unbind_pf unless you want to disconnect any other + * # processes using this libnetfilter_queue on this protocol family! + */ + nfq_destroy_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh); + goto __pyx_L5; + } + __pyx_L5:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":144 + * # Don't call nfq_unbind_pf unless you want to disconnect any other + * # processes using this libnetfilter_queue on this protocol family! + * nfq_close(self.h) # <<<<<<<<<<<<<< + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + */ + nfq_close(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h); + + __Pyx_RefNannyFinishContext(); +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":146 + * nfq_close(self.h) + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): # <<<<<<<<<<<<<< + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_2bind(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_2bind[] = "Create a new queue with the given callback function."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_2bind(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + PyObject *__pyx_v_handler = 0; + int __pyx_v_queue_num; + u_int32_t __pyx_v_maxlen; + u_int8_t __pyx_v_mode; + u_int32_t __pyx_v_range; + PyObject *__pyx_r = NULL; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + static PyObject **__pyx_pyargnames[] = {&__pyx_n_s__handler,&__pyx_n_s__queue_num,&__pyx_n_s__maxlen,&__pyx_n_s__mode,&__pyx_n_s__range,0}; + __Pyx_RefNannySetupContext("bind"); + if (unlikely(__pyx_kwds)) { + Py_ssize_t kw_args = PyDict_Size(__pyx_kwds); + PyObject* values[5] = {0,0,0,0,0}; + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 5: values[4] = PyTuple_GET_ITEM(__pyx_args, 4); + case 4: values[3] = PyTuple_GET_ITEM(__pyx_args, 3); + case 3: values[2] = PyTuple_GET_ITEM(__pyx_args, 2); + case 2: values[1] = PyTuple_GET_ITEM(__pyx_args, 1); + case 1: values[0] = PyTuple_GET_ITEM(__pyx_args, 0); + case 0: break; + default: goto __pyx_L5_argtuple_error; + } + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 0: + values[0] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__handler); + if (likely(values[0])) kw_args--; + else goto __pyx_L5_argtuple_error; + case 1: + values[1] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__queue_num); + if (likely(values[1])) kw_args--; + else { + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, 1); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + case 2: + values[2] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__maxlen); + if (likely(values[2])) kw_args--; + else { + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, 2); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + case 3: + if (kw_args > 0) { + PyObject* value = PyDict_GetItem(__pyx_kwds, __pyx_n_s__mode); + if (value) { values[3] = value; kw_args--; } + } + case 4: + if (kw_args > 0) { + PyObject* value = PyDict_GetItem(__pyx_kwds, __pyx_n_s__range); + if (value) { values[4] = value; kw_args--; } + } + } + if (unlikely(kw_args > 0)) { + if (unlikely(__Pyx_ParseOptionalKeywords(__pyx_kwds, __pyx_pyargnames, 0, values, PyTuple_GET_SIZE(__pyx_args), "bind") < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + __pyx_v_handler = values[0]; + __pyx_v_queue_num = __Pyx_PyInt_AsInt(values[1]); if (unlikely((__pyx_v_queue_num == (int)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_maxlen = __Pyx_PyInt_from_py_u_int32_t(values[2]); if (unlikely((__pyx_v_maxlen == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + if (values[3]) { + __pyx_v_mode = __Pyx_PyInt_from_py_u_int8_t(values[3]); if (unlikely((__pyx_v_mode == (u_int8_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } else { + __pyx_v_mode = __pyx_k_9; + } + if (values[4]) { + __pyx_v_range = __Pyx_PyInt_from_py_u_int32_t(values[4]); if (unlikely((__pyx_v_range == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } else { + __pyx_v_range = ((u_int32_t)65535); + } + } else { + __pyx_v_mode = __pyx_k_9; + __pyx_v_range = ((u_int32_t)65535); + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 5: + __pyx_v_range = __Pyx_PyInt_from_py_u_int32_t(PyTuple_GET_ITEM(__pyx_args, 4)); if (unlikely((__pyx_v_range == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + case 4: + __pyx_v_mode = __Pyx_PyInt_from_py_u_int8_t(PyTuple_GET_ITEM(__pyx_args, 3)); if (unlikely((__pyx_v_mode == (u_int8_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + case 3: + __pyx_v_maxlen = __Pyx_PyInt_from_py_u_int32_t(PyTuple_GET_ITEM(__pyx_args, 2)); if (unlikely((__pyx_v_maxlen == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_queue_num = __Pyx_PyInt_AsInt(PyTuple_GET_ITEM(__pyx_args, 1)); if (unlikely((__pyx_v_queue_num == (int)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_handler = PyTuple_GET_ITEM(__pyx_args, 0); + break; + default: goto __pyx_L5_argtuple_error; + } + } + goto __pyx_L4_argument_unpacking_done; + __pyx_L5_argtuple_error:; + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, PyTuple_GET_SIZE(__pyx_args)); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_L3_error:; + __Pyx_AddTraceback("netfilterqueue.NFQueue.bind"); + __Pyx_RefNannyFinishContext(); + return NULL; + __pyx_L4_argument_unpacking_done:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":148 + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) # <<<<<<<<<<<<<< + * if self.qh == NULL: + * raise OSError("Failed to create queue %s." % queue_num) + */ + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh = nfq_create_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, __pyx_v_queue_num, ((nfq_callback *)__pyx_f_14netfilterqueue_global_callback), ((void *)__pyx_v_handler)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":149 + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + * if self.qh == NULL: # <<<<<<<<<<<<<< + * raise OSError("Failed to create queue %s." % queue_num) + * + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh == NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":150 + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + * if self.qh == NULL: + * raise OSError("Failed to create queue %s." % queue_num) # <<<<<<<<<<<<<< + * + * if range > MaxCopySize: + */ + __pyx_t_2 = PyInt_FromLong(__pyx_v_queue_num); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_10), __pyx_t_2); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_t_2 = PyTuple_New(1); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + PyTuple_SET_ITEM(__pyx_t_2, 0, ((PyObject *)__pyx_t_3)); + __Pyx_GIVEREF(((PyObject *)__pyx_t_3)); + __pyx_t_3 = 0; + __pyx_t_3 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_t_2), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_DECREF(((PyObject *)__pyx_t_2)); __pyx_t_2 = 0; + __Pyx_Raise(__pyx_t_3, 0, 0); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L6; + } + __pyx_L6:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":152 + * raise OSError("Failed to create queue %s." % queue_num) + * + * if range > MaxCopySize: # <<<<<<<<<<<<<< + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + */ + __pyx_t_1 = (__pyx_v_range > 4016); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":153 + * + * if range > MaxCopySize: + * range = MaxCopySize # <<<<<<<<<<<<<< + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") + */ + __pyx_v_range = 4016; + goto __pyx_L7; + } + __pyx_L7:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":154 + * if range > MaxCopySize: + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to set packet copy mode.") + * + */ + __pyx_t_1 = (nfq_set_mode(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh, __pyx_v_mode, __pyx_v_range) < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":155 + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") # <<<<<<<<<<<<<< + * + * nfq_set_queue_maxlen(self.qh, maxlen) + */ + __pyx_t_3 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_12), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_Raise(__pyx_t_3, 0, 0); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L8; + } + __pyx_L8:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":157 + * raise OSError("Failed to set packet copy mode.") + * + * nfq_set_queue_maxlen(self.qh, maxlen) # <<<<<<<<<<<<<< + * + * def unbind(self): + */ + nfq_set_queue_maxlen(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh, __pyx_v_maxlen); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_AddTraceback("netfilterqueue.NFQueue.bind"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":159 + * nfq_set_queue_maxlen(self.qh, maxlen) + * + * def unbind(self): # <<<<<<<<<<<<<< + * """Destroy the queue.""" + * if self.qh != NULL: + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_3unbind(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_3unbind[] = "Destroy the queue."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_3unbind(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + int __pyx_t_1; + __Pyx_RefNannySetupContext("unbind"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":161 + * def unbind(self): + * """Destroy the queue.""" + * if self.qh != NULL: # <<<<<<<<<<<<<< + * nfq_destroy_queue(self.qh) + * # See warning about nfq_unbind_pf in __dealloc__ above. + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh != NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":162 + * """Destroy the queue.""" + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) # <<<<<<<<<<<<<< + * # See warning about nfq_unbind_pf in __dealloc__ above. + * + */ + nfq_destroy_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh); + goto __pyx_L5; + } + __pyx_L5:; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":165 + * # See warning about nfq_unbind_pf in __dealloc__ above. + * + * def run(self): # <<<<<<<<<<<<<< + * """Begin accepting packets.""" + * cdef int fd = nfq_fd(self.h) + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_4run(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_4run[] = "Begin accepting packets."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_4run(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + int __pyx_v_fd; + char __pyx_v_buf[4096]; + int __pyx_v_rv; + PyObject *__pyx_r = NULL; + int __pyx_t_1; + __Pyx_RefNannySetupContext("run"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":167 + * def run(self): + * """Begin accepting packets.""" + * cdef int fd = nfq_fd(self.h) # <<<<<<<<<<<<<< + * cdef char buf[BufferSize] + * cdef int rv + */ + __pyx_v_fd = nfq_fd(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":170 + * cdef char buf[BufferSize] + * cdef int rv + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + */ + { + #ifdef WITH_THREAD + PyThreadState *_save; + #endif + Py_UNBLOCK_THREADS + /*try:*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":171 + * cdef int rv + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) # <<<<<<<<<<<<<< + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + */ + __pyx_v_rv = recv(__pyx_v_fd, __pyx_v_buf, (sizeof(__pyx_v_buf)), 0); + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":170 + * cdef char buf[BufferSize] + * cdef int rv + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + */ + /*finally:*/ { + Py_BLOCK_THREADS + } + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":172 + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: # <<<<<<<<<<<<<< + * nfq_handle_packet(self.h, buf, rv) + * with nogil: + */ + while (1) { + __pyx_t_1 = (__pyx_v_rv >= 0); + if (!__pyx_t_1) break; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":173 + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) # <<<<<<<<<<<<<< + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) + */ + nfq_handle_packet(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, __pyx_v_buf, __pyx_v_rv); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":174 + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * + */ + { + #ifdef WITH_THREAD + PyThreadState *_save; + #endif + Py_UNBLOCK_THREADS + /*try:*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":175 + * nfq_handle_packet(self.h, buf, rv) + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) # <<<<<<<<<<<<<< + * + * def handle(self, NFPacket packet): + */ + __pyx_v_rv = recv(__pyx_v_fd, __pyx_v_buf, (sizeof(__pyx_v_buf)), 0); + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":174 + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * + */ + /*finally:*/ { + Py_BLOCK_THREADS + } + } + } + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":177 + * rv = recv(fd, buf, sizeof(buf), 0) + * + * def handle(self, NFPacket packet): # <<<<<<<<<<<<<< + * """Handle a single packet. User-defined classes should override this.""" + * packet.accept() + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_5handle(PyObject *__pyx_v_self, PyObject *__pyx_v_packet); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_5handle[] = "Handle a single packet. User-defined classes should override this."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_5handle(PyObject *__pyx_v_self, PyObject *__pyx_v_packet) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("handle"); + if (unlikely(!__Pyx_ArgTypeTest(((PyObject *)__pyx_v_packet), __pyx_ptype_14netfilterqueue_NFPacket, 1, "packet", 0))) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 177; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":179 + * def handle(self, NFPacket packet): + * """Handle a single packet. User-defined classes should override this.""" + * packet.accept() # <<<<<<<<<<<<<< + */ + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_packet)->__pyx_vtab)->accept(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_packet), 0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 179; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFQueue.handle"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} +static struct __pyx_vtabstruct_14netfilterqueue_NFPacket __pyx_vtable_14netfilterqueue_NFPacket; + +static PyObject *__pyx_tp_new_14netfilterqueue_NFPacket(PyTypeObject *t, PyObject *a, PyObject *k) { + struct __pyx_obj_14netfilterqueue_NFPacket *p; + PyObject *o = (*t->tp_alloc)(t, 0); + if (!o) return 0; + p = ((struct __pyx_obj_14netfilterqueue_NFPacket *)o); + p->__pyx_vtab = __pyx_vtabptr_14netfilterqueue_NFPacket; + if (__pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(o, __pyx_empty_tuple, NULL) < 0) { + Py_DECREF(o); o = 0; + } + return o; +} + +static void __pyx_tp_dealloc_14netfilterqueue_NFPacket(PyObject *o) { + (*Py_TYPE(o)->tp_free)(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_id(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_hw_protocol(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_hook(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_payload(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(o); +} + +static PyMethodDef __pyx_methods_14netfilterqueue_NFPacket[] = { + {__Pyx_NAMESTR("get_payload"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_2get_payload, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("get_payload_len"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("get_timestamp"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("set_mark"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_5set_mark, METH_O, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("accept"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_6accept, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_8NFPacket_6accept)}, + {__Pyx_NAMESTR("drop"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_7drop, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_8NFPacket_7drop)}, + {0, 0, 0, 0} +}; + +static struct PyGetSetDef __pyx_getsets_14netfilterqueue_NFPacket[] = { + {(char *)"id", __pyx_getprop_14netfilterqueue_8NFPacket_id, 0, 0, 0}, + {(char *)"hw_protocol", __pyx_getprop_14netfilterqueue_8NFPacket_hw_protocol, 0, 0, 0}, + {(char *)"hook", __pyx_getprop_14netfilterqueue_8NFPacket_hook, 0, 0, 0}, + {(char *)"payload", __pyx_getprop_14netfilterqueue_8NFPacket_payload, 0, 0, 0}, + {0, 0, 0, 0, 0} +}; + +static PyNumberMethods __pyx_tp_as_number_NFPacket = { + 0, /*nb_add*/ + 0, /*nb_subtract*/ + 0, /*nb_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_divide*/ + #endif + 0, /*nb_remainder*/ + 0, /*nb_divmod*/ + 0, /*nb_power*/ + 0, /*nb_negative*/ + 0, /*nb_positive*/ + 0, /*nb_absolute*/ + 0, /*nb_nonzero*/ + 0, /*nb_invert*/ + 0, /*nb_lshift*/ + 0, /*nb_rshift*/ + 0, /*nb_and*/ + 0, /*nb_xor*/ + 0, /*nb_or*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_coerce*/ + #endif + 0, /*nb_int*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_long*/ + #else + 0, /*reserved*/ + #endif + 0, /*nb_float*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_oct*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*nb_hex*/ + #endif + 0, /*nb_inplace_add*/ + 0, /*nb_inplace_subtract*/ + 0, /*nb_inplace_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_inplace_divide*/ + #endif + 0, /*nb_inplace_remainder*/ + 0, /*nb_inplace_power*/ + 0, /*nb_inplace_lshift*/ + 0, /*nb_inplace_rshift*/ + 0, /*nb_inplace_and*/ + 0, /*nb_inplace_xor*/ + 0, /*nb_inplace_or*/ + 0, /*nb_floor_divide*/ + 0, /*nb_true_divide*/ + 0, /*nb_inplace_floor_divide*/ + 0, /*nb_inplace_true_divide*/ + #if PY_VERSION_HEX >= 0x02050000 + 0, /*nb_index*/ + #endif +}; + +static PySequenceMethods __pyx_tp_as_sequence_NFPacket = { + 0, /*sq_length*/ + 0, /*sq_concat*/ + 0, /*sq_repeat*/ + 0, /*sq_item*/ + 0, /*sq_slice*/ + 0, /*sq_ass_item*/ + 0, /*sq_ass_slice*/ + 0, /*sq_contains*/ + 0, /*sq_inplace_concat*/ + 0, /*sq_inplace_repeat*/ +}; + +static PyMappingMethods __pyx_tp_as_mapping_NFPacket = { + 0, /*mp_length*/ + 0, /*mp_subscript*/ + 0, /*mp_ass_subscript*/ +}; + +static PyBufferProcs __pyx_tp_as_buffer_NFPacket = { + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getreadbuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getwritebuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getsegcount*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getcharbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_getbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_releasebuffer*/ + #endif +}; + +PyTypeObject __pyx_type_14netfilterqueue_NFPacket = { + PyVarObject_HEAD_INIT(0, 0) + __Pyx_NAMESTR("netfilterqueue.NFPacket"), /*tp_name*/ + sizeof(struct __pyx_obj_14netfilterqueue_NFPacket), /*tp_basicsize*/ + 0, /*tp_itemsize*/ + __pyx_tp_dealloc_14netfilterqueue_NFPacket, /*tp_dealloc*/ + 0, /*tp_print*/ + 0, /*tp_getattr*/ + 0, /*tp_setattr*/ + #if PY_MAJOR_VERSION < 3 + 0, /*tp_compare*/ + #else + 0, /*reserved*/ + #endif + 0, /*tp_repr*/ + &__pyx_tp_as_number_NFPacket, /*tp_as_number*/ + &__pyx_tp_as_sequence_NFPacket, /*tp_as_sequence*/ + &__pyx_tp_as_mapping_NFPacket, /*tp_as_mapping*/ + 0, /*tp_hash*/ + 0, /*tp_call*/ + __pyx_pf_14netfilterqueue_8NFPacket_1__str__, /*tp_str*/ + 0, /*tp_getattro*/ + 0, /*tp_setattro*/ + &__pyx_tp_as_buffer_NFPacket, /*tp_as_buffer*/ + Py_TPFLAGS_DEFAULT|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_BASETYPE, /*tp_flags*/ + __Pyx_DOCSTR("A packet received from NFQueue."), /*tp_doc*/ + 0, /*tp_traverse*/ + 0, /*tp_clear*/ + 0, /*tp_richcompare*/ + 0, /*tp_weaklistoffset*/ + 0, /*tp_iter*/ + 0, /*tp_iternext*/ + __pyx_methods_14netfilterqueue_NFPacket, /*tp_methods*/ + 0, /*tp_members*/ + __pyx_getsets_14netfilterqueue_NFPacket, /*tp_getset*/ + 0, /*tp_base*/ + 0, /*tp_dict*/ + 0, /*tp_descr_get*/ + 0, /*tp_descr_set*/ + 0, /*tp_dictoffset*/ + 0, /*tp_init*/ + 0, /*tp_alloc*/ + __pyx_tp_new_14netfilterqueue_NFPacket, /*tp_new*/ + 0, /*tp_free*/ + 0, /*tp_is_gc*/ + 0, /*tp_bases*/ + 0, /*tp_mro*/ + 0, /*tp_cache*/ + 0, /*tp_subclasses*/ + 0, /*tp_weaklist*/ + 0, /*tp_del*/ + #if PY_VERSION_HEX >= 0x02060000 + 0, /*tp_version_tag*/ + #endif +}; + +static PyObject *__pyx_tp_new_14netfilterqueue_NFQueue(PyTypeObject *t, PyObject *a, PyObject *k) { + struct __pyx_obj_14netfilterqueue_NFQueue *p; + PyObject *o = (*t->tp_alloc)(t, 0); + if (!o) return 0; + p = ((struct __pyx_obj_14netfilterqueue_NFQueue *)o); + p->packet_copy_size = Py_None; Py_INCREF(Py_None); + if (__pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(o, a, k) < 0) { + Py_DECREF(o); o = 0; + } + return o; +} + +static void __pyx_tp_dealloc_14netfilterqueue_NFQueue(PyObject *o) { + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + { + PyObject *etype, *eval, *etb; + PyErr_Fetch(&etype, &eval, &etb); + ++Py_REFCNT(o); + __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(o); + if (PyErr_Occurred()) PyErr_WriteUnraisable(o); + --Py_REFCNT(o); + PyErr_Restore(etype, eval, etb); + } + Py_XDECREF(p->packet_copy_size); + (*Py_TYPE(o)->tp_free)(o); +} + +static int __pyx_tp_traverse_14netfilterqueue_NFQueue(PyObject *o, visitproc v, void *a) { + int e; + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + if (p->packet_copy_size) { + e = (*v)(p->packet_copy_size, a); if (e) return e; + } + return 0; +} + +static int __pyx_tp_clear_14netfilterqueue_NFQueue(PyObject *o) { + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + PyObject* tmp; + tmp = ((PyObject*)p->packet_copy_size); + p->packet_copy_size = Py_None; Py_INCREF(Py_None); + Py_XDECREF(tmp); + return 0; +} + +static PyMethodDef __pyx_methods_14netfilterqueue_NFQueue[] = { + {__Pyx_NAMESTR("bind"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_2bind, METH_VARARGS|METH_KEYWORDS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_2bind)}, + {__Pyx_NAMESTR("unbind"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_3unbind, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_3unbind)}, + {__Pyx_NAMESTR("run"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_4run, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_4run)}, + {__Pyx_NAMESTR("handle"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_5handle, METH_O, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_5handle)}, + {0, 0, 0, 0} +}; + +static PyNumberMethods __pyx_tp_as_number_NFQueue = { + 0, /*nb_add*/ + 0, /*nb_subtract*/ + 0, /*nb_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_divide*/ + #endif + 0, /*nb_remainder*/ + 0, /*nb_divmod*/ + 0, /*nb_power*/ + 0, /*nb_negative*/ + 0, /*nb_positive*/ + 0, /*nb_absolute*/ + 0, /*nb_nonzero*/ + 0, /*nb_invert*/ + 0, /*nb_lshift*/ + 0, /*nb_rshift*/ + 0, /*nb_and*/ + 0, /*nb_xor*/ + 0, /*nb_or*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_coerce*/ + #endif + 0, /*nb_int*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_long*/ + #else + 0, /*reserved*/ + #endif + 0, /*nb_float*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_oct*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*nb_hex*/ + #endif + 0, /*nb_inplace_add*/ + 0, /*nb_inplace_subtract*/ + 0, /*nb_inplace_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_inplace_divide*/ + #endif + 0, /*nb_inplace_remainder*/ + 0, /*nb_inplace_power*/ + 0, /*nb_inplace_lshift*/ + 0, /*nb_inplace_rshift*/ + 0, /*nb_inplace_and*/ + 0, /*nb_inplace_xor*/ + 0, /*nb_inplace_or*/ + 0, /*nb_floor_divide*/ + 0, /*nb_true_divide*/ + 0, /*nb_inplace_floor_divide*/ + 0, /*nb_inplace_true_divide*/ + #if PY_VERSION_HEX >= 0x02050000 + 0, /*nb_index*/ + #endif +}; + +static PySequenceMethods __pyx_tp_as_sequence_NFQueue = { + 0, /*sq_length*/ + 0, /*sq_concat*/ + 0, /*sq_repeat*/ + 0, /*sq_item*/ + 0, /*sq_slice*/ + 0, /*sq_ass_item*/ + 0, /*sq_ass_slice*/ + 0, /*sq_contains*/ + 0, /*sq_inplace_concat*/ + 0, /*sq_inplace_repeat*/ +}; + +static PyMappingMethods __pyx_tp_as_mapping_NFQueue = { + 0, /*mp_length*/ + 0, /*mp_subscript*/ + 0, /*mp_ass_subscript*/ +}; + +static PyBufferProcs __pyx_tp_as_buffer_NFQueue = { + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getreadbuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getwritebuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getsegcount*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getcharbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_getbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_releasebuffer*/ + #endif +}; + +PyTypeObject __pyx_type_14netfilterqueue_NFQueue = { + PyVarObject_HEAD_INIT(0, 0) + __Pyx_NAMESTR("netfilterqueue.NFQueue"), /*tp_name*/ + sizeof(struct __pyx_obj_14netfilterqueue_NFQueue), /*tp_basicsize*/ + 0, /*tp_itemsize*/ + __pyx_tp_dealloc_14netfilterqueue_NFQueue, /*tp_dealloc*/ + 0, /*tp_print*/ + 0, /*tp_getattr*/ + 0, /*tp_setattr*/ + #if PY_MAJOR_VERSION < 3 + 0, /*tp_compare*/ + #else + 0, /*reserved*/ + #endif + 0, /*tp_repr*/ + &__pyx_tp_as_number_NFQueue, /*tp_as_number*/ + &__pyx_tp_as_sequence_NFQueue, /*tp_as_sequence*/ + &__pyx_tp_as_mapping_NFQueue, /*tp_as_mapping*/ + 0, /*tp_hash*/ + 0, /*tp_call*/ + 0, /*tp_str*/ + 0, /*tp_getattro*/ + 0, /*tp_setattro*/ + &__pyx_tp_as_buffer_NFQueue, /*tp_as_buffer*/ + Py_TPFLAGS_DEFAULT|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_BASETYPE|Py_TPFLAGS_HAVE_GC, /*tp_flags*/ + __Pyx_DOCSTR("Handle a single numbered queue."), /*tp_doc*/ + __pyx_tp_traverse_14netfilterqueue_NFQueue, /*tp_traverse*/ + __pyx_tp_clear_14netfilterqueue_NFQueue, /*tp_clear*/ + 0, /*tp_richcompare*/ + 0, /*tp_weaklistoffset*/ + 0, /*tp_iter*/ + 0, /*tp_iternext*/ + __pyx_methods_14netfilterqueue_NFQueue, /*tp_methods*/ + 0, /*tp_members*/ + 0, /*tp_getset*/ + 0, /*tp_base*/ + 0, /*tp_dict*/ + 0, /*tp_descr_get*/ + 0, /*tp_descr_set*/ + 0, /*tp_dictoffset*/ + 0, /*tp_init*/ + 0, /*tp_alloc*/ + __pyx_tp_new_14netfilterqueue_NFQueue, /*tp_new*/ + 0, /*tp_free*/ + 0, /*tp_is_gc*/ + 0, /*tp_bases*/ + 0, /*tp_mro*/ + 0, /*tp_cache*/ + 0, /*tp_subclasses*/ + 0, /*tp_weaklist*/ + 0, /*tp_del*/ + #if PY_VERSION_HEX >= 0x02060000 + 0, /*tp_version_tag*/ + #endif +}; + +static PyMethodDef __pyx_methods[] = { + {0, 0, 0, 0} +}; + +#if PY_MAJOR_VERSION >= 3 +static struct PyModuleDef __pyx_moduledef = { + PyModuleDef_HEAD_INIT, + __Pyx_NAMESTR("netfilterqueue"), + 0, /* m_doc */ + -1, /* m_size */ + __pyx_methods /* m_methods */, + NULL, /* m_reload */ + NULL, /* m_traverse */ + NULL, /* m_clear */ + NULL /* m_free */ +}; +#endif + +static __Pyx_StringTabEntry __pyx_string_tab[] = { + {&__pyx_kp_s_10, __pyx_k_10, sizeof(__pyx_k_10), 0, 0, 1, 0}, + {&__pyx_kp_s_11, __pyx_k_11, sizeof(__pyx_k_11), 0, 0, 1, 0}, + {&__pyx_kp_s_2, __pyx_k_2, sizeof(__pyx_k_2), 0, 0, 1, 0}, + {&__pyx_kp_s_3, __pyx_k_3, sizeof(__pyx_k_3), 0, 0, 1, 0}, + {&__pyx_kp_s_4, __pyx_k_4, sizeof(__pyx_k_4), 0, 0, 1, 0}, + {&__pyx_kp_s_6, __pyx_k_6, sizeof(__pyx_k_6), 0, 0, 1, 0}, + {&__pyx_kp_s_8, __pyx_k_8, sizeof(__pyx_k_8), 0, 0, 1, 0}, + {&__pyx_n_s__AF_INET, __pyx_k__AF_INET, sizeof(__pyx_k__AF_INET), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_META, __pyx_k__COPY_META, sizeof(__pyx_k__COPY_META), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_NONE, __pyx_k__COPY_NONE, sizeof(__pyx_k__COPY_NONE), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_PACKET, __pyx_k__COPY_PACKET, sizeof(__pyx_k__COPY_PACKET), 0, 0, 1, 1}, + {&__pyx_n_s__IPPROTO, __pyx_k__IPPROTO, sizeof(__pyx_k__IPPROTO), 0, 0, 1, 1}, + {&__pyx_n_s__OSError, __pyx_k__OSError, sizeof(__pyx_k__OSError), 0, 0, 1, 1}, + {&__pyx_n_s____main__, __pyx_k____main__, sizeof(__pyx_k____main__), 0, 0, 1, 1}, + {&__pyx_n_s____test__, __pyx_k____test__, sizeof(__pyx_k____test__), 0, 0, 1, 1}, + {&__pyx_n_s___given_mark, __pyx_k___given_mark, sizeof(__pyx_k___given_mark), 0, 0, 1, 1}, + {&__pyx_n_s___given_payload, __pyx_k___given_payload, sizeof(__pyx_k___given_payload), 0, 0, 1, 1}, + {&__pyx_n_s___hdr, __pyx_k___hdr, sizeof(__pyx_k___hdr), 0, 0, 1, 1}, + {&__pyx_n_s___mark_is_set, __pyx_k___mark_is_set, sizeof(__pyx_k___mark_is_set), 0, 0, 1, 1}, + {&__pyx_n_s___nfa, __pyx_k___nfa, sizeof(__pyx_k___nfa), 0, 0, 1, 1}, + {&__pyx_n_s___qh, __pyx_k___qh, sizeof(__pyx_k___qh), 0, 0, 1, 1}, + {&__pyx_n_s___verdict_is_set, __pyx_k___verdict_is_set, sizeof(__pyx_k___verdict_is_set), 0, 0, 1, 1}, + {&__pyx_n_s__accept, __pyx_k__accept, sizeof(__pyx_k__accept), 0, 0, 1, 1}, + {&__pyx_n_s__af, __pyx_k__af, sizeof(__pyx_k__af), 0, 0, 1, 1}, + {&__pyx_n_s__drop, __pyx_k__drop, sizeof(__pyx_k__drop), 0, 0, 1, 1}, + {&__pyx_n_s__filter, __pyx_k__filter, sizeof(__pyx_k__filter), 0, 0, 1, 1}, + {&__pyx_n_s__get_payload_len, __pyx_k__get_payload_len, sizeof(__pyx_k__get_payload_len), 0, 0, 1, 1}, + {&__pyx_n_s__get_timestamp, __pyx_k__get_timestamp, sizeof(__pyx_k__get_timestamp), 0, 0, 1, 1}, + {&__pyx_n_s__h, __pyx_k__h, sizeof(__pyx_k__h), 0, 0, 1, 1}, + {&__pyx_n_s__handle, __pyx_k__handle, sizeof(__pyx_k__handle), 0, 0, 1, 1}, + {&__pyx_n_s__handler, __pyx_k__handler, sizeof(__pyx_k__handler), 0, 0, 1, 1}, + {&__pyx_n_s__hook, __pyx_k__hook, sizeof(__pyx_k__hook), 0, 0, 1, 1}, + {&__pyx_n_s__hw_protocol, __pyx_k__hw_protocol, sizeof(__pyx_k__hw_protocol), 0, 0, 1, 1}, + {&__pyx_n_s__id, __pyx_k__id, sizeof(__pyx_k__id), 0, 0, 1, 1}, + {&__pyx_n_s__maxlen, __pyx_k__maxlen, sizeof(__pyx_k__maxlen), 0, 0, 1, 1}, + {&__pyx_n_s__mode, __pyx_k__mode, sizeof(__pyx_k__mode), 0, 0, 1, 1}, + {&__pyx_n_s__netfilterqueue, __pyx_k__netfilterqueue, sizeof(__pyx_k__netfilterqueue), 0, 0, 1, 1}, + {&__pyx_n_s__packet_id, __pyx_k__packet_id, sizeof(__pyx_k__packet_id), 0, 0, 1, 1}, + {&__pyx_n_s__payload, __pyx_k__payload, sizeof(__pyx_k__payload), 0, 0, 1, 1}, + {&__pyx_n_s__payload_len, __pyx_k__payload_len, sizeof(__pyx_k__payload_len), 0, 0, 1, 1}, + {&__pyx_n_s__protocol, __pyx_k__protocol, sizeof(__pyx_k__protocol), 0, 0, 1, 1}, + {&__pyx_n_s__qh, __pyx_k__qh, sizeof(__pyx_k__qh), 0, 0, 1, 1}, + {&__pyx_n_s__queue_num, __pyx_k__queue_num, sizeof(__pyx_k__queue_num), 0, 0, 1, 1}, + {&__pyx_n_s__range, __pyx_k__range, sizeof(__pyx_k__range), 0, 0, 1, 1}, + {&__pyx_n_s__set_mark, __pyx_k__set_mark, sizeof(__pyx_k__set_mark), 0, 0, 1, 1}, + {&__pyx_n_s__set_nfq_data, __pyx_k__set_nfq_data, sizeof(__pyx_k__set_nfq_data), 0, 0, 1, 1}, + {&__pyx_n_s__socket, __pyx_k__socket, sizeof(__pyx_k__socket), 0, 0, 1, 1}, + {&__pyx_n_s__startswith, __pyx_k__startswith, sizeof(__pyx_k__startswith), 0, 0, 1, 1}, + {&__pyx_n_s__timestamp, __pyx_k__timestamp, sizeof(__pyx_k__timestamp), 0, 0, 1, 1}, + {&__pyx_n_s__tv_sec, __pyx_k__tv_sec, sizeof(__pyx_k__tv_sec), 0, 0, 1, 1}, + {&__pyx_n_s__tv_usec, __pyx_k__tv_usec, sizeof(__pyx_k__tv_usec), 0, 0, 1, 1}, + {&__pyx_n_s__verdict, __pyx_k__verdict, sizeof(__pyx_k__verdict), 0, 0, 1, 1}, + {0, 0, 0, 0, 0, 0, 0} +}; +static int __Pyx_InitCachedBuiltins(void) { + __pyx_builtin_filter = __Pyx_GetName(__pyx_b, __pyx_n_s__filter); if (!__pyx_builtin_filter) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_builtin_OSError = __Pyx_GetName(__pyx_b, __pyx_n_s__OSError); if (!__pyx_builtin_OSError) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + return 0; + __pyx_L1_error:; + return -1; +} + +static int __Pyx_InitCachedConstants(void) { + __Pyx_RefNannySetupContext("__Pyx_InitCachedConstants"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + __pyx_k_tuple_1 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_1)); + __Pyx_INCREF(((PyObject *)__pyx_n_s__IPPROTO)); + PyTuple_SET_ITEM(__pyx_k_tuple_1, 0, ((PyObject *)__pyx_n_s__IPPROTO)); + __Pyx_GIVEREF(((PyObject *)__pyx_n_s__IPPROTO)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_1)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":67 + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") # <<<<<<<<<<<<<< + * + * nfq_get_timestamp(self._nfa, &self.timestamp) + */ + __pyx_k_tuple_5 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_5)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_4)); + PyTuple_SET_ITEM(__pyx_k_tuple_5, 0, ((PyObject *)__pyx_kp_s_4)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_4)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_5)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":133 + * self.h = nfq_open() + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") # <<<<<<<<<<<<<< + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + */ + __pyx_k_tuple_7 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_7)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_6)); + PyTuple_SET_ITEM(__pyx_k_tuple_7, 0, ((PyObject *)__pyx_kp_s_6)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_6)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_7)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":155 + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") # <<<<<<<<<<<<<< + * + * nfq_set_queue_maxlen(self.qh, maxlen) + */ + __pyx_k_tuple_12 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_12)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_11)); + PyTuple_SET_ITEM(__pyx_k_tuple_12, 0, ((PyObject *)__pyx_kp_s_11)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_11)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_12)); + __Pyx_RefNannyFinishContext(); + return 0; + __pyx_L1_error:; + __Pyx_RefNannyFinishContext(); + return -1; +} + +static int __Pyx_InitGlobals(void) { + if (__Pyx_InitStrings(__pyx_string_tab) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_1 = PyInt_FromLong(1); if (unlikely(!__pyx_int_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_2 = PyInt_FromLong(2); if (unlikely(!__pyx_int_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_3 = PyInt_FromLong(3); if (unlikely(!__pyx_int_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + return 0; + __pyx_L1_error:; + return -1; +} + +#if PY_MAJOR_VERSION < 3 +PyMODINIT_FUNC initnetfilterqueue(void); /*proto*/ +PyMODINIT_FUNC initnetfilterqueue(void) +#else +PyMODINIT_FUNC PyInit_netfilterqueue(void); /*proto*/ +PyMODINIT_FUNC PyInit_netfilterqueue(void) +#endif +{ + PyObject *__pyx_t_1 = NULL; + #if CYTHON_REFNANNY + void* __pyx_refnanny = NULL; + __Pyx_RefNanny = __Pyx_RefNannyImportAPI("refnanny"); + if (!__Pyx_RefNanny) { + PyErr_Clear(); + __Pyx_RefNanny = __Pyx_RefNannyImportAPI("Cython.Runtime.refnanny"); + if (!__Pyx_RefNanny) + Py_FatalError("failed to import 'refnanny' module"); + } + __pyx_refnanny = __Pyx_RefNanny->SetupContext("PyMODINIT_FUNC PyInit_netfilterqueue(void)", __LINE__, __FILE__); + #endif + __pyx_empty_tuple = PyTuple_New(0); if (unlikely(!__pyx_empty_tuple)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_empty_bytes = PyBytes_FromStringAndSize("", 0); if (unlikely(!__pyx_empty_bytes)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + #ifdef __pyx_binding_PyCFunctionType_USED + if (__pyx_binding_PyCFunctionType_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + #endif + /*--- Library function declarations ---*/ + /*--- Threads initialization code ---*/ + #if defined(__PYX_FORCE_INIT_THREADS) && __PYX_FORCE_INIT_THREADS + #ifdef WITH_THREAD /* Python build with threading support? */ + PyEval_InitThreads(); + #endif + #endif + /*--- Module creation code ---*/ + #if PY_MAJOR_VERSION < 3 + __pyx_m = Py_InitModule4(__Pyx_NAMESTR("netfilterqueue"), __pyx_methods, 0, 0, PYTHON_API_VERSION); + #else + __pyx_m = PyModule_Create(&__pyx_moduledef); + #endif + if (!__pyx_m) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + #if PY_MAJOR_VERSION < 3 + Py_INCREF(__pyx_m); + #endif + __pyx_b = PyImport_AddModule(__Pyx_NAMESTR(__Pyx_BUILTIN_MODULE_NAME)); + if (!__pyx_b) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + if (__Pyx_SetAttrString(__pyx_m, "__builtins__", __pyx_b) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + /*--- Initialize various global constants etc. ---*/ + if (unlikely(__Pyx_InitGlobals() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__pyx_module_is_main_netfilterqueue) { + if (__Pyx_SetAttrString(__pyx_m, "__name__", __pyx_n_s____main__) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + } + /*--- Builtin init code ---*/ + if (unlikely(__Pyx_InitCachedBuiltins() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + /*--- Constants init code ---*/ + if (unlikely(__Pyx_InitCachedConstants() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + /*--- Global init code ---*/ + /*--- Function export code ---*/ + /*--- Type init code ---*/ + __pyx_vtabptr_14netfilterqueue_NFPacket = &__pyx_vtable_14netfilterqueue_NFPacket; + __pyx_vtable_14netfilterqueue_NFPacket.set_nfq_data = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, struct nfq_q_handle *, struct nfq_data *))__pyx_f_14netfilterqueue_8NFPacket_set_nfq_data; + __pyx_vtable_14netfilterqueue_NFPacket.verdict = (void (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int8_t))__pyx_f_14netfilterqueue_8NFPacket_verdict; + __pyx_vtable_14netfilterqueue_NFPacket.get_payload_len = (Py_ssize_t (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_get_payload_len; + __pyx_vtable_14netfilterqueue_NFPacket.get_timestamp = (double (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_get_timestamp; + __pyx_vtable_14netfilterqueue_NFPacket.set_mark = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int32_t, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_set_mark; + __pyx_vtable_14netfilterqueue_NFPacket.accept = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_accept; + __pyx_vtable_14netfilterqueue_NFPacket.drop = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_drop; + if (PyType_Ready(&__pyx_type_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetVtable(__pyx_type_14netfilterqueue_NFPacket.tp_dict, __pyx_vtabptr_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetAttrString(__pyx_m, "NFPacket", (PyObject *)&__pyx_type_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_ptype_14netfilterqueue_NFPacket = &__pyx_type_14netfilterqueue_NFPacket; + if (PyType_Ready(&__pyx_type_14netfilterqueue_NFQueue) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 123; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetAttrString(__pyx_m, "NFQueue", (PyObject *)&__pyx_type_14netfilterqueue_NFQueue) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 123; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_ptype_14netfilterqueue_NFQueue = &__pyx_type_14netfilterqueue_NFQueue; + /*--- Type import code ---*/ + /*--- Function import code ---*/ + /*--- Execution code ---*/ + + /* "/root/NetfilterQueue/netfilterqueue.pyx":2 + * ## cython: profile=True + * import socket # <<<<<<<<<<<<<< + * + * # Constants for module users + */ + __pyx_t_1 = __Pyx_Import(((PyObject *)__pyx_n_s__socket), 0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 2; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__socket, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 2; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":5 + * + * # Constants for module users + * COPY_NONE = 1 # <<<<<<<<<<<<<< + * COPY_META = 2 + * COPY_PACKET = 3 + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_NONE, __pyx_int_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 5; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":6 + * # Constants for module users + * COPY_NONE = 1 + * COPY_META = 2 # <<<<<<<<<<<<<< + * COPY_PACKET = 3 + * + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_META, __pyx_int_2) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 6; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":7 + * COPY_NONE = 1 + * COPY_META = 2 + * COPY_PACKET = 3 # <<<<<<<<<<<<<< + * + * # Packet copying defaults + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_PACKET, __pyx_int_3) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 7; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":146 + * nfq_close(self.h) + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): # <<<<<<<<<<<<<< + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + */ + __pyx_k_9 = NFQNL_COPY_PACKET; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":1 + * ## cython: profile=True # <<<<<<<<<<<<<< + * import socket + * + */ + __pyx_t_1 = PyDict_New(); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_1)); + if (PyObject_SetAttr(__pyx_m, __pyx_n_s____test__, ((PyObject *)__pyx_t_1)) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(((PyObject *)__pyx_t_1)); __pyx_t_1 = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + if (__pyx_m) { + __Pyx_AddTraceback("init netfilterqueue"); + Py_DECREF(__pyx_m); __pyx_m = 0; + } else if (!PyErr_Occurred()) { + PyErr_SetString(PyExc_ImportError, "init netfilterqueue"); + } + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + #if PY_MAJOR_VERSION < 3 + return; + #else + return __pyx_m; + #endif +} + +/* Runtime support code */ + +static PyObject *__Pyx_GetName(PyObject *dict, PyObject *name) { + PyObject *result; + result = PyObject_GetAttr(dict, name); + if (!result) + PyErr_SetObject(PyExc_NameError, name); + return result; +} + +static void __Pyx_RaiseArgtupleInvalid( + const char* func_name, + int exact, + Py_ssize_t num_min, + Py_ssize_t num_max, + Py_ssize_t num_found) +{ + Py_ssize_t num_expected; + const char *number, *more_or_less; + + if (num_found < num_min) { + num_expected = num_min; + more_or_less = "at least"; + } else { + num_expected = num_max; + more_or_less = "at most"; + } + if (exact) { + more_or_less = "exactly"; + } + number = (num_expected == 1) ? "" : "s"; + PyErr_Format(PyExc_TypeError, + #if PY_VERSION_HEX < 0x02050000 + "%s() takes %s %d positional argument%s (%d given)", + #else + "%s() takes %s %zd positional argument%s (%zd given)", + #endif + func_name, more_or_less, num_expected, number, num_found); +} + +static CYTHON_INLINE int __Pyx_CheckKeywordStrings( + PyObject *kwdict, + const char* function_name, + int kw_allowed) +{ + PyObject* key = 0; + Py_ssize_t pos = 0; + while (PyDict_Next(kwdict, &pos, &key, 0)) { + #if PY_MAJOR_VERSION < 3 + if (unlikely(!PyString_CheckExact(key)) && unlikely(!PyString_Check(key))) + #else + if (unlikely(!PyUnicode_CheckExact(key)) && unlikely(!PyUnicode_Check(key))) + #endif + goto invalid_keyword_type; + } + if ((!kw_allowed) && unlikely(key)) + goto invalid_keyword; + return 1; +invalid_keyword_type: + PyErr_Format(PyExc_TypeError, + "%s() keywords must be strings", function_name); + return 0; +invalid_keyword: + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION < 3 + "%s() got an unexpected keyword argument '%s'", + function_name, PyString_AsString(key)); + #else + "%s() got an unexpected keyword argument '%U'", + function_name, key); + #endif + return 0; +} + +static CYTHON_INLINE void __Pyx_RaiseNoneIndexingError(void) { + PyErr_SetString(PyExc_TypeError, "'NoneType' object is unsubscriptable"); +} + +static void __Pyx_RaiseDoubleKeywordsError( + const char* func_name, + PyObject* kw_name) +{ + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION >= 3 + "%s() got multiple values for keyword argument '%U'", func_name, kw_name); + #else + "%s() got multiple values for keyword argument '%s'", func_name, + PyString_AS_STRING(kw_name)); + #endif +} + +static int __Pyx_ParseOptionalKeywords( + PyObject *kwds, + PyObject **argnames[], + PyObject *kwds2, + PyObject *values[], + Py_ssize_t num_pos_args, + const char* function_name) +{ + PyObject *key = 0, *value = 0; + Py_ssize_t pos = 0; + PyObject*** name; + PyObject*** first_kw_arg = argnames + num_pos_args; + + while (PyDict_Next(kwds, &pos, &key, &value)) { + name = first_kw_arg; + while (*name && (**name != key)) name++; + if (*name) { + values[name-argnames] = value; + } else { + #if PY_MAJOR_VERSION < 3 + if (unlikely(!PyString_CheckExact(key)) && unlikely(!PyString_Check(key))) { + #else + if (unlikely(!PyUnicode_CheckExact(key)) && unlikely(!PyUnicode_Check(key))) { + #endif + goto invalid_keyword_type; + } else { + for (name = first_kw_arg; *name; name++) { + #if PY_MAJOR_VERSION >= 3 + if (PyUnicode_GET_SIZE(**name) == PyUnicode_GET_SIZE(key) && + PyUnicode_Compare(**name, key) == 0) break; + #else + if (PyString_GET_SIZE(**name) == PyString_GET_SIZE(key) && + _PyString_Eq(**name, key)) break; + #endif + } + if (*name) { + values[name-argnames] = value; + } else { + /* unexpected keyword found */ + for (name=argnames; name != first_kw_arg; name++) { + if (**name == key) goto arg_passed_twice; + #if PY_MAJOR_VERSION >= 3 + if (PyUnicode_GET_SIZE(**name) == PyUnicode_GET_SIZE(key) && + PyUnicode_Compare(**name, key) == 0) goto arg_passed_twice; + #else + if (PyString_GET_SIZE(**name) == PyString_GET_SIZE(key) && + _PyString_Eq(**name, key)) goto arg_passed_twice; + #endif + } + if (kwds2) { + if (unlikely(PyDict_SetItem(kwds2, key, value))) goto bad; + } else { + goto invalid_keyword; + } + } + } + } + } + return 0; +arg_passed_twice: + __Pyx_RaiseDoubleKeywordsError(function_name, **name); + goto bad; +invalid_keyword_type: + PyErr_Format(PyExc_TypeError, + "%s() keywords must be strings", function_name); + goto bad; +invalid_keyword: + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION < 3 + "%s() got an unexpected keyword argument '%s'", + function_name, PyString_AsString(key)); + #else + "%s() got an unexpected keyword argument '%U'", + function_name, key); + #endif +bad: + return -1; +} + +static int __Pyx_ArgTypeTest(PyObject *obj, PyTypeObject *type, int none_allowed, + const char *name, int exact) +{ + if (!type) { + PyErr_Format(PyExc_SystemError, "Missing type object"); + return 0; + } + if (none_allowed && obj == Py_None) return 1; + else if (exact) { + if (Py_TYPE(obj) == type) return 1; + } + else { + if (PyObject_TypeCheck(obj, type)) return 1; + } + PyErr_Format(PyExc_TypeError, + "Argument '%s' has incorrect type (expected %s, got %s)", + name, type->tp_name, Py_TYPE(obj)->tp_name); + return 0; +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int32_t(u_int32_t val) { + const u_int32_t neg_one = (u_int32_t)-1, const_zero = (u_int32_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int32_t) == sizeof(char)) || + (sizeof(u_int32_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int32_t) == sizeof(int)) || + (sizeof(u_int32_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int32_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int32_t), + little, !is_unsigned); + } +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int16_t(u_int16_t val) { + const u_int16_t neg_one = (u_int16_t)-1, const_zero = (u_int16_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int16_t) == sizeof(char)) || + (sizeof(u_int16_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int16_t) == sizeof(int)) || + (sizeof(u_int16_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int16_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int16_t), + little, !is_unsigned); + } +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int8_t(u_int8_t val) { + const u_int8_t neg_one = (u_int8_t)-1, const_zero = (u_int8_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int8_t) == sizeof(char)) || + (sizeof(u_int8_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int8_t) == sizeof(int)) || + (sizeof(u_int8_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int8_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int8_t), + little, !is_unsigned); + } +} + +static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list) { + PyObject *py_import = 0; + PyObject *empty_list = 0; + PyObject *module = 0; + PyObject *global_dict = 0; + PyObject *empty_dict = 0; + PyObject *list; + py_import = __Pyx_GetAttrString(__pyx_b, "__import__"); + if (!py_import) + goto bad; + if (from_list) + list = from_list; + else { + empty_list = PyList_New(0); + if (!empty_list) + goto bad; + list = empty_list; + } + global_dict = PyModule_GetDict(__pyx_m); + if (!global_dict) + goto bad; + empty_dict = PyDict_New(); + if (!empty_dict) + goto bad; + module = PyObject_CallFunctionObjArgs(py_import, + name, global_dict, empty_dict, list, NULL); +bad: + Py_XDECREF(empty_list); + Py_XDECREF(py_import); + Py_XDECREF(empty_dict); + return module; +} + + +PyObject *__pyx_binding_PyCFunctionType_NewEx(PyMethodDef *ml, PyObject *self, PyObject *module) { + __pyx_binding_PyCFunctionType_object *op = PyObject_GC_New(__pyx_binding_PyCFunctionType_object, __pyx_binding_PyCFunctionType); + if (op == NULL) + return NULL; + op->func.m_ml = ml; + Py_XINCREF(self); + op->func.m_self = self; + Py_XINCREF(module); + op->func.m_module = module; + PyObject_GC_Track(op); + return (PyObject *)op; +} + +static void __pyx_binding_PyCFunctionType_dealloc(__pyx_binding_PyCFunctionType_object *m) { + PyObject_GC_UnTrack(m); + Py_XDECREF(m->func.m_self); + Py_XDECREF(m->func.m_module); + PyObject_GC_Del(m); +} + +static PyObject *__pyx_binding_PyCFunctionType_descr_get(PyObject *func, PyObject *obj, PyObject *type) { + if (obj == Py_None) + obj = NULL; + return PyMethod_New(func, obj, type); +} + +int __pyx_binding_PyCFunctionType_init(void) { + __pyx_binding_PyCFunctionType_type = PyCFunction_Type; + __pyx_binding_PyCFunctionType_type.tp_name = __Pyx_NAMESTR("cython_binding_builtin_function_or_method"); + __pyx_binding_PyCFunctionType_type.tp_dealloc = (destructor)__pyx_binding_PyCFunctionType_dealloc; + __pyx_binding_PyCFunctionType_type.tp_descr_get = __pyx_binding_PyCFunctionType_descr_get; + if (PyType_Ready(&__pyx_binding_PyCFunctionType_type) < 0) { + return -1; + } + __pyx_binding_PyCFunctionType = &__pyx_binding_PyCFunctionType_type; + return 0; + +} + +static CYTHON_INLINE PyObject *__Pyx_GetAttr3(PyObject *o, PyObject *n, PyObject *d) { + PyObject *r = PyObject_GetAttr(o, n); + if (!r) { + if (!PyErr_ExceptionMatches(PyExc_AttributeError)) + goto bad; + PyErr_Clear(); + r = d; + Py_INCREF(d); + } + return r; +bad: + return NULL; +} + +static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb) { + PyObject *tmp_type, *tmp_value, *tmp_tb; + PyThreadState *tstate = PyThreadState_GET(); + + tmp_type = tstate->curexc_type; + tmp_value = tstate->curexc_value; + tmp_tb = tstate->curexc_traceback; + tstate->curexc_type = type; + tstate->curexc_value = value; + tstate->curexc_traceback = tb; + Py_XDECREF(tmp_type); + Py_XDECREF(tmp_value); + Py_XDECREF(tmp_tb); +} + +static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb) { + PyThreadState *tstate = PyThreadState_GET(); + *type = tstate->curexc_type; + *value = tstate->curexc_value; + *tb = tstate->curexc_traceback; + + tstate->curexc_type = 0; + tstate->curexc_value = 0; + tstate->curexc_traceback = 0; +} + + +#if PY_MAJOR_VERSION < 3 +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb) { + Py_XINCREF(type); + Py_XINCREF(value); + Py_XINCREF(tb); + /* First, check the traceback argument, replacing None with NULL. */ + if (tb == Py_None) { + Py_DECREF(tb); + tb = 0; + } + else if (tb != NULL && !PyTraceBack_Check(tb)) { + PyErr_SetString(PyExc_TypeError, + "raise: arg 3 must be a traceback or None"); + goto raise_error; + } + /* Next, replace a missing value with None */ + if (value == NULL) { + value = Py_None; + Py_INCREF(value); + } + #if PY_VERSION_HEX < 0x02050000 + if (!PyClass_Check(type)) + #else + if (!PyType_Check(type)) + #endif + { + /* Raising an instance. The value should be a dummy. */ + if (value != Py_None) { + PyErr_SetString(PyExc_TypeError, + "instance exception may not have a separate value"); + goto raise_error; + } + /* Normalize to raise , */ + Py_DECREF(value); + value = type; + #if PY_VERSION_HEX < 0x02050000 + if (PyInstance_Check(type)) { + type = (PyObject*) ((PyInstanceObject*)type)->in_class; + Py_INCREF(type); + } + else { + type = 0; + PyErr_SetString(PyExc_TypeError, + "raise: exception must be an old-style class or instance"); + goto raise_error; + } + #else + type = (PyObject*) Py_TYPE(type); + Py_INCREF(type); + if (!PyType_IsSubtype((PyTypeObject *)type, (PyTypeObject *)PyExc_BaseException)) { + PyErr_SetString(PyExc_TypeError, + "raise: exception class must be a subclass of BaseException"); + goto raise_error; + } + #endif + } + + __Pyx_ErrRestore(type, value, tb); + return; +raise_error: + Py_XDECREF(value); + Py_XDECREF(type); + Py_XDECREF(tb); + return; +} + +#else /* Python 3+ */ + +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb) { + if (tb == Py_None) { + tb = 0; + } else if (tb && !PyTraceBack_Check(tb)) { + PyErr_SetString(PyExc_TypeError, + "raise: arg 3 must be a traceback or None"); + goto bad; + } + if (value == Py_None) + value = 0; + + if (PyExceptionInstance_Check(type)) { + if (value) { + PyErr_SetString(PyExc_TypeError, + "instance exception may not have a separate value"); + goto bad; + } + value = type; + type = (PyObject*) Py_TYPE(value); + } else if (!PyExceptionClass_Check(type)) { + PyErr_SetString(PyExc_TypeError, + "raise: exception class must be a subclass of BaseException"); + goto bad; + } + + PyErr_SetObject(type, value); + + if (tb) { + PyThreadState *tstate = PyThreadState_GET(); + PyObject* tmp_tb = tstate->curexc_traceback; + if (tb != tmp_tb) { + Py_INCREF(tb); + tstate->curexc_traceback = tb; + Py_XDECREF(tmp_tb); + } + } + +bad: + return; +} +#endif + +static CYTHON_INLINE u_int16_t __Pyx_PyInt_from_py_u_int16_t(PyObject* x) { + const u_int16_t neg_one = (u_int16_t)-1, const_zero = (u_int16_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int16_t) == sizeof(char)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int16_t) == sizeof(short)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int16_t) == sizeof(int)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int16_t) == sizeof(long)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int16_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int16_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int16_t)-1; + } +} + +static CYTHON_INLINE unsigned char __Pyx_PyInt_AsUnsignedChar(PyObject* x) { + const unsigned char neg_one = (unsigned char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned char" : + "value too large to convert to unsigned char"); + } + return (unsigned char)-1; + } + return (unsigned char)val; + } + return (unsigned char)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE unsigned short __Pyx_PyInt_AsUnsignedShort(PyObject* x) { + const unsigned short neg_one = (unsigned short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned short" : + "value too large to convert to unsigned short"); + } + return (unsigned short)-1; + } + return (unsigned short)val; + } + return (unsigned short)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE unsigned int __Pyx_PyInt_AsUnsignedInt(PyObject* x) { + const unsigned int neg_one = (unsigned int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned int" : + "value too large to convert to unsigned int"); + } + return (unsigned int)-1; + } + return (unsigned int)val; + } + return (unsigned int)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE char __Pyx_PyInt_AsChar(PyObject* x) { + const char neg_one = (char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to char" : + "value too large to convert to char"); + } + return (char)-1; + } + return (char)val; + } + return (char)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE short __Pyx_PyInt_AsShort(PyObject* x) { + const short neg_one = (short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to short" : + "value too large to convert to short"); + } + return (short)-1; + } + return (short)val; + } + return (short)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE int __Pyx_PyInt_AsInt(PyObject* x) { + const int neg_one = (int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to int" : + "value too large to convert to int"); + } + return (int)-1; + } + return (int)val; + } + return (int)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE signed char __Pyx_PyInt_AsSignedChar(PyObject* x) { + const signed char neg_one = (signed char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed char" : + "value too large to convert to signed char"); + } + return (signed char)-1; + } + return (signed char)val; + } + return (signed char)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE signed short __Pyx_PyInt_AsSignedShort(PyObject* x) { + const signed short neg_one = (signed short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed short" : + "value too large to convert to signed short"); + } + return (signed short)-1; + } + return (signed short)val; + } + return (signed short)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE signed int __Pyx_PyInt_AsSignedInt(PyObject* x) { + const signed int neg_one = (signed int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed int" : + "value too large to convert to signed int"); + } + return (signed int)-1; + } + return (signed int)val; + } + return (signed int)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE int __Pyx_PyInt_AsLongDouble(PyObject* x) { + const int neg_one = (int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to int" : + "value too large to convert to int"); + } + return (int)-1; + } + return (int)val; + } + return (int)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE unsigned long __Pyx_PyInt_AsUnsignedLong(PyObject* x) { + const unsigned long neg_one = (unsigned long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned long"); + return (unsigned long)-1; + } + return (unsigned long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned long"); + return (unsigned long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + unsigned long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (unsigned long)-1; + val = __Pyx_PyInt_AsUnsignedLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE unsigned PY_LONG_LONG __Pyx_PyInt_AsUnsignedLongLong(PyObject* x) { + const unsigned PY_LONG_LONG neg_one = (unsigned PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned PY_LONG_LONG"); + return (unsigned PY_LONG_LONG)-1; + } + return (unsigned PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned PY_LONG_LONG"); + return (unsigned PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + unsigned PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (unsigned PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsUnsignedLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE long __Pyx_PyInt_AsLong(PyObject* x) { + const long neg_one = (long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to long"); + return (long)-1; + } + return (long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to long"); + return (long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (long)-1; + val = __Pyx_PyInt_AsLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE PY_LONG_LONG __Pyx_PyInt_AsLongLong(PyObject* x) { + const PY_LONG_LONG neg_one = (PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to PY_LONG_LONG"); + return (PY_LONG_LONG)-1; + } + return (PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to PY_LONG_LONG"); + return (PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE signed long __Pyx_PyInt_AsSignedLong(PyObject* x) { + const signed long neg_one = (signed long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed long"); + return (signed long)-1; + } + return (signed long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed long"); + return (signed long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + signed long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (signed long)-1; + val = __Pyx_PyInt_AsSignedLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE signed PY_LONG_LONG __Pyx_PyInt_AsSignedLongLong(PyObject* x) { + const signed PY_LONG_LONG neg_one = (signed PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed PY_LONG_LONG"); + return (signed PY_LONG_LONG)-1; + } + return (signed PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed PY_LONG_LONG"); + return (signed PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + signed PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (signed PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsSignedLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static void __Pyx_WriteUnraisable(const char *name) { + PyObject *old_exc, *old_val, *old_tb; + PyObject *ctx; + __Pyx_ErrFetch(&old_exc, &old_val, &old_tb); + #if PY_MAJOR_VERSION < 3 + ctx = PyString_FromString(name); + #else + ctx = PyUnicode_FromString(name); + #endif + __Pyx_ErrRestore(old_exc, old_val, old_tb); + if (!ctx) { + PyErr_WriteUnraisable(Py_None); + } else { + PyErr_WriteUnraisable(ctx); + Py_DECREF(ctx); + } +} + +static CYTHON_INLINE u_int32_t __Pyx_PyInt_from_py_u_int32_t(PyObject* x) { + const u_int32_t neg_one = (u_int32_t)-1, const_zero = (u_int32_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int32_t) == sizeof(char)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int32_t) == sizeof(short)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int32_t) == sizeof(int)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int32_t) == sizeof(long)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int32_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int32_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int32_t)-1; + } +} + +static CYTHON_INLINE u_int8_t __Pyx_PyInt_from_py_u_int8_t(PyObject* x) { + const u_int8_t neg_one = (u_int8_t)-1, const_zero = (u_int8_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int8_t) == sizeof(char)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int8_t) == sizeof(short)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int8_t) == sizeof(int)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int8_t) == sizeof(long)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int8_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int8_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int8_t)-1; + } +} + +static int __Pyx_SetVtable(PyObject *dict, void *vtable) { +#if PY_VERSION_HEX >= 0x02070000 && !(PY_MAJOR_VERSION==3&&PY_MINOR_VERSION==0) + PyObject *ob = PyCapsule_New(vtable, 0, 0); +#else + PyObject *ob = PyCObject_FromVoidPtr(vtable, 0); +#endif + if (!ob) + goto bad; + if (PyDict_SetItemString(dict, "__pyx_vtable__", ob) < 0) + goto bad; + Py_DECREF(ob); + return 0; +bad: + Py_XDECREF(ob); + return -1; +} + +#include "compile.h" +#include "frameobject.h" +#include "traceback.h" + +static void __Pyx_AddTraceback(const char *funcname) { + PyObject *py_srcfile = 0; + PyObject *py_funcname = 0; + PyObject *py_globals = 0; + PyCodeObject *py_code = 0; + PyFrameObject *py_frame = 0; + + #if PY_MAJOR_VERSION < 3 + py_srcfile = PyString_FromString(__pyx_filename); + #else + py_srcfile = PyUnicode_FromString(__pyx_filename); + #endif + if (!py_srcfile) goto bad; + if (__pyx_clineno) { + #if PY_MAJOR_VERSION < 3 + py_funcname = PyString_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, __pyx_clineno); + #else + py_funcname = PyUnicode_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, __pyx_clineno); + #endif + } + else { + #if PY_MAJOR_VERSION < 3 + py_funcname = PyString_FromString(funcname); + #else + py_funcname = PyUnicode_FromString(funcname); + #endif + } + if (!py_funcname) goto bad; + py_globals = PyModule_GetDict(__pyx_m); + if (!py_globals) goto bad; + py_code = PyCode_New( + 0, /*int argcount,*/ + #if PY_MAJOR_VERSION >= 3 + 0, /*int kwonlyargcount,*/ + #endif + 0, /*int nlocals,*/ + 0, /*int stacksize,*/ + 0, /*int flags,*/ + __pyx_empty_bytes, /*PyObject *code,*/ + __pyx_empty_tuple, /*PyObject *consts,*/ + __pyx_empty_tuple, /*PyObject *names,*/ + __pyx_empty_tuple, /*PyObject *varnames,*/ + __pyx_empty_tuple, /*PyObject *freevars,*/ + __pyx_empty_tuple, /*PyObject *cellvars,*/ + py_srcfile, /*PyObject *filename,*/ + py_funcname, /*PyObject *name,*/ + __pyx_lineno, /*int firstlineno,*/ + __pyx_empty_bytes /*PyObject *lnotab*/ + ); + if (!py_code) goto bad; + py_frame = PyFrame_New( + PyThreadState_GET(), /*PyThreadState *tstate,*/ + py_code, /*PyCodeObject *code,*/ + py_globals, /*PyObject *globals,*/ + 0 /*PyObject *locals*/ + ); + if (!py_frame) goto bad; + py_frame->f_lineno = __pyx_lineno; + PyTraceBack_Here(py_frame); +bad: + Py_XDECREF(py_srcfile); + Py_XDECREF(py_funcname); + Py_XDECREF(py_code); + Py_XDECREF(py_frame); +} + +static int __Pyx_InitStrings(__Pyx_StringTabEntry *t) { + while (t->p) { + #if PY_MAJOR_VERSION < 3 + if (t->is_unicode) { + *t->p = PyUnicode_DecodeUTF8(t->s, t->n - 1, NULL); + } else if (t->intern) { + *t->p = PyString_InternFromString(t->s); + } else { + *t->p = PyString_FromStringAndSize(t->s, t->n - 1); + } + #else /* Python 3+ has unicode identifiers */ + if (t->is_unicode | t->is_str) { + if (t->intern) { + *t->p = PyUnicode_InternFromString(t->s); + } else if (t->encoding) { + *t->p = PyUnicode_Decode(t->s, t->n - 1, t->encoding, NULL); + } else { + *t->p = PyUnicode_FromStringAndSize(t->s, t->n - 1); + } + } else { + *t->p = PyBytes_FromStringAndSize(t->s, t->n - 1); + } + #endif + if (!*t->p) + return -1; + ++t; + } + return 0; +} + +/* Type Conversion Functions */ + +static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject* x) { + int is_true = x == Py_True; + if (is_true | (x == Py_False) | (x == Py_None)) return is_true; + else return PyObject_IsTrue(x); +} + +static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x) { + PyNumberMethods *m; + const char *name = NULL; + PyObject *res = NULL; +#if PY_VERSION_HEX < 0x03000000 + if (PyInt_Check(x) || PyLong_Check(x)) +#else + if (PyLong_Check(x)) +#endif + return Py_INCREF(x), x; + m = Py_TYPE(x)->tp_as_number; +#if PY_VERSION_HEX < 0x03000000 + if (m && m->nb_int) { + name = "int"; + res = PyNumber_Int(x); + } + else if (m && m->nb_long) { + name = "long"; + res = PyNumber_Long(x); + } +#else + if (m && m->nb_int) { + name = "int"; + res = PyNumber_Long(x); + } +#endif + if (res) { +#if PY_VERSION_HEX < 0x03000000 + if (!PyInt_Check(res) && !PyLong_Check(res)) { +#else + if (!PyLong_Check(res)) { +#endif + PyErr_Format(PyExc_TypeError, + "__%s__ returned non-%s (type %.200s)", + name, name, Py_TYPE(res)->tp_name); + Py_DECREF(res); + return NULL; + } + } + else if (!PyErr_Occurred()) { + PyErr_SetString(PyExc_TypeError, + "an integer is required"); + } + return res; +} + +static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject* b) { + Py_ssize_t ival; + PyObject* x = PyNumber_Index(b); + if (!x) return -1; + ival = PyInt_AsSsize_t(x); + Py_DECREF(x); + return ival; +} + +static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t ival) { +#if PY_VERSION_HEX < 0x02050000 + if (ival <= LONG_MAX) + return PyInt_FromLong((long)ival); + else { + unsigned char *bytes = (unsigned char *) &ival; + int one = 1; int little = (int)*(unsigned char*)&one; + return _PyLong_FromByteArray(bytes, sizeof(size_t), little, 0); + } +#else + return PyInt_FromSize_t(ival); +#endif +} + +static CYTHON_INLINE size_t __Pyx_PyInt_AsSize_t(PyObject* x) { + unsigned PY_LONG_LONG val = __Pyx_PyInt_AsUnsignedLongLong(x); + if (unlikely(val == (unsigned PY_LONG_LONG)-1 && PyErr_Occurred())) { + return (size_t)-1; + } else if (unlikely(val != (unsigned PY_LONG_LONG)(size_t)val)) { + PyErr_SetString(PyExc_OverflowError, + "value too large to convert to size_t"); + return (size_t)-1; + } + return (size_t)val; +} + + +#endif /* Py_PYTHON_H */ diff --git a/netfilterqueue.pxd b/netfilterqueue.pxd new file mode 100644 index 0000000..5b520ce --- /dev/null +++ b/netfilterqueue.pxd @@ -0,0 +1,191 @@ +cdef extern from "sys/types.h": + ctypedef unsigned char u_int8_t + ctypedef unsigned short int u_int16_t + ctypedef unsigned int u_int32_t + +cdef extern from "netinet/ip.h": + struct iphdr: + u_int8_t tos + u_int16_t tot_len + u_int16_t id + u_int16_t frag_off + u_int8_t ttl + u_int8_t protocol + u_int16_t check + u_int32_t saddr + u_int32_t daddr + +# Dummy defines from netinet/in.h: +cdef enum: + IPPROTO_IP = 0 # Dummy protocol for TCP. + IPPROTO_HOPOPTS = 0 # IPv6 Hop-by-Hop options. + IPPROTO_ICMP = 1 # Internet Control Message Protocol. + IPPROTO_IGMP = 2 # Internet Group Management Protocol. */ + IPPROTO_IPIP = 4 # IPIP tunnels (older KA9Q tunnels use 94). + IPPROTO_TCP = 6 # Transmission Control Protocol. + IPPROTO_EGP = 8 # Exterior Gateway Protocol. + IPPROTO_PUP = 12 # PUP protocol. + IPPROTO_UDP = 17 # User Datagram Protocol. + IPPROTO_IDP = 22 # XNS IDP protocol. + IPPROTO_TP = 29 # SO Transport Protocol Class 4. + IPPROTO_IPV6 = 41 # IPv6 header. + IPPROTO_ROUTING = 43 # IPv6 routing header. + IPPROTO_FRAGMENT = 44 # IPv6 fragmentation header. + IPPROTO_RSVP = 46 # Reservation Protocol. + IPPROTO_GRE = 47 # General Routing Encapsulation. + IPPROTO_ESP = 50 # encapsulating security payload. + IPPROTO_AH = 51 # authentication header. + IPPROTO_ICMPV6 = 58 # ICMPv6. + IPPROTO_NONE = 59 # IPv6 no next header. + IPPROTO_DSTOPTS = 60 # IPv6 destination options. + IPPROTO_MTP = 92 # Multicast Transport Protocol. + IPPROTO_ENCAP = 98 # Encapsulation Header. + IPPROTO_PIM = 103 # Protocol Independent Multicast. + IPPROTO_COMP = 108 # Compression Header Protocol. + IPPROTO_SCTP = 132 # Stream Control Transmission Protocol. + IPPROTO_RAW = 255 # Raw IP packets. + IPPROTO_MAX + +cdef extern from "Python.h": + object PyString_FromStringAndSize(char *s, Py_ssize_t len) + +cdef extern from "sys/time.h": + ctypedef long time_t + struct timeval: + time_t tv_sec + time_t tv_usec + struct timezone: + pass + +cdef extern from "netinet/in.h": + u_int32_t ntohl (u_int32_t __netlong) nogil + u_int16_t ntohs (u_int16_t __netshort) nogil + u_int32_t htonl (u_int32_t __hostlong) nogil + u_int16_t htons (u_int16_t __hostshort) nogil + +cdef extern from "libnfnetlink/linux_nfnetlink.h": + struct nfgenmsg: + u_int8_t nfgen_family + u_int8_t version + u_int16_t res_id + +cdef extern from "libnetfilter_queue/linux_nfnetlink_queue.h": + enum nfqnl_config_mode: + NFQNL_COPY_NONE + NFQNL_COPY_META + NFQNL_COPY_PACKET + struct nfqnl_msg_packet_hdr: + u_int32_t packet_id + u_int16_t hw_protocol + u_int8_t hook + +cdef extern from "libnetfilter_queue/libnetfilter_queue.h": + struct nfq_handle: + pass + struct nfq_q_handle: + pass + struct nfq_data: + pass + struct nfqnl_msg_packet_hw: + u_int8_t hw_addr[8] + + nfq_handle *nfq_open() + int nfq_close(nfq_handle *h) + + int nfq_bind_pf(nfq_handle *h, u_int16_t pf) + int nfq_unbind_pf(nfq_handle *h, u_int16_t pf) + ctypedef int *nfq_callback(nfq_q_handle *gh, nfgenmsg *nfmsg, + nfq_data *nfad, void *data) + nfq_q_handle *nfq_create_queue(nfq_handle *h, + u_int16_t num, + nfq_callback *cb, + void *data) + int nfq_destroy_queue(nfq_q_handle *qh) + + int nfq_handle_packet(nfq_handle *h, char *buf, int len) + + int nfq_set_mode(nfq_q_handle *qh, + u_int8_t mode, unsigned int len) + + q_set_queue_maxlen(nfq_q_handle *qh, + u_int32_t queuelen) + + int nfq_set_verdict(nfq_q_handle *qh, + u_int32_t id, + u_int32_t verdict, + u_int32_t data_len, + unsigned char *buf) nogil + + int nfq_set_verdict_mark(nfq_q_handle *qh, + u_int32_t id, + u_int32_t verdict, + u_int32_t mark, + u_int32_t datalen, + unsigned char *buf) nogil + int nfq_set_queue_maxlen(nfq_q_handle *qh, u_int32_t queuelen) + + int nfq_fd(nfq_handle *h) + nfqnl_msg_packet_hdr *nfq_get_msg_packet_hdr(nfq_data *nfad) + int nfq_get_payload(nfq_data *nfad, char **data) + int nfq_get_timestamp(nfq_data *nfad, timeval *tv) + nfqnl_msg_packet_hw *nfq_get_packet_hw(nfq_data *nfad) + +# Dummy defines from linux/socket.h: +cdef enum: # Protocol families, same as address families. + PF_INET = 2 + PF_INET6 = 10 + +cdef extern from "sys/socket.h": + ssize_t recv(int __fd, void *__buf, size_t __n, int __flags) nogil + +# Dummy defines from linux/netfilter.h +cdef enum: + NF_DROP + NF_ACCEPT + NF_STOLEN + NF_QUEUE + NF_REPEAT + NF_STOP + NF_MAX_VERDICT = NF_STOP + +cdef class NFPacket: + cdef nfq_q_handle *_qh + cdef nfq_data *_nfa + cdef nfqnl_msg_packet_hdr *_hdr + cdef bint _verdict_is_set # True if verdict has been issued, + # false otherwise + cdef bint _mark_is_set # True if a mark has been given, false otherwise + cdef u_int32_t _given_mark # Mark given to packet + cdef unsigned char *_given_payload # New payload of packet, or null + + # From NFQ packet header: + cdef readonly u_int32_t id + cdef readonly u_int16_t hw_protocol + cdef readonly u_int8_t hook + + # Packet details: + cdef Py_ssize_t payload_len + cdef readonly char *payload + cdef timeval timestamp + # TODO: implement these + #cdef u_int8_t hw_addr[8] # A eui64-formatted address? + #cdef readonly u_int32_t nfmark + #cdef readonly u_int32_t indev + #cdef readonly u_int32_t physindev + #cdef readonly u_int32_t outdev + #cdef readonly u_int32_t physoutdev + + cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa) + cdef void verdict(self, u_int8_t verdict) + cpdef Py_ssize_t get_payload_len(self) + cpdef double get_timestamp(self) + cpdef set_mark(self, u_int32_t mark) + cpdef accept(self) + cpdef drop(self) + +cdef class NFQueue: + cdef nfq_handle *h # Handle to NFQueue library + cdef nfq_q_handle *qh # A handle to the queue + cdef u_int16_t af # Address family + cdef packet_copy_size # Amount of packet metadata + data copied to buffer + \ No newline at end of file diff --git a/netfilterqueue.pyx b/netfilterqueue.pyx new file mode 100644 index 0000000..644bb0c --- /dev/null +++ b/netfilterqueue.pyx @@ -0,0 +1,179 @@ +## cython: profile=True +import socket + +# Constants for module users +COPY_NONE = 1 +COPY_META = 2 +COPY_PACKET = 3 + +# Packet copying defaults +DEF MaxPacketSize = 0xFFFF +DEF BufferSize = 4096 +DEF MetadataSize = 80 +DEF MaxCopySize = BufferSize - MetadataSize + +cdef int global_callback(nfq_q_handle *qh, nfgenmsg *nfmsg, + nfq_data *nfa, void *data) with gil: + """ + Create an NFPacket and pass it to appropriate Python/Cython callback. + + Working in a Python or Cython callback, rather than directly in this + callback, results in a ~7% performance hit. + """ +# cdef nfqnl_msg_packet_hdr *_hdr = nfq_get_msg_packet_hdr(nfa) +# cdef u_int32_t id = ntohl(_hdr.packet_id) +# nfq_set_verdict( +# qh, +# id, +# NF_ACCEPT, +# 0, # TODO: adapt to use self._given_payload +# NULL # TODO: adapt to use self._given_payload +# ) + packet = NFPacket() + packet.set_nfq_data(qh, nfa) + (data).handle(packet) + return 1 + +cdef class NFPacket: + """A packet received from NFQueue.""" + def __cinit__(self): + self._verdict_is_set = False + self._mark_is_set = False + self._given_payload = NULL + + def __str__(self): + cdef iphdr *hdr = self.payload + protocol = "Unknown protocol" + for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + if getattr(socket, name) == hdr.protocol: + protocol = name[8:] + return "%s packet, %s bytes" % (protocol, self.payload_len) + + cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): + """ + Assign a packet from NFQ to this object. Parse the header and load + local values. + """ + self._qh = qh + self._nfa = nfa + self._hdr = nfq_get_msg_packet_hdr(nfa) + + self.id = ntohl(self._hdr.packet_id) + self.hw_protocol = ntohs(self._hdr.hw_protocol) + self.hook = self._hdr.hook + + self.payload_len = nfq_get_payload(self._nfa, &self.payload) + if self.payload_len < 0: + raise OSError("Failed to get payload of packet.") + + nfq_get_timestamp(self._nfa, &self.timestamp) + + cdef void verdict(self, u_int8_t verdict): + """Call appropriate set_verdict... function on packet.""" + #if self._verdict_is_set: + # raise RuntimeWarning("Verdict already given for this packet.") + + if self._mark_is_set: + nfq_set_verdict_mark( # TODO: make this use nfq_set_verdict2 if available on system + self._qh, + self.id, + verdict, + htonl(self._given_mark), + 0, # TODO: adapt to use self._given_payload + NULL # TODO: adapt to use self._given_payload + ) + else: + nfq_set_verdict( + self._qh, + self.id, + verdict, + 0, # TODO: adapt to use self._given_payload + NULL # TODO: adapt to use self._given_payload + ) + + #self._verdict_is_set = True + + def get_payload(self): + cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + return py_string + + cpdef Py_ssize_t get_payload_len(self): + return self.payload_len + + cpdef double get_timestamp(self): + return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + + # TODO: implement this + #cpdef set_payload(self, unsigned char *payload): + # """Set the new payload of this packet.""" + # self._given_payload = payload + + cpdef set_mark(self, u_int32_t mark): + self._given_mark = mark + self._mark_is_set = True + + cpdef accept(self): + """Accept the packet.""" + self.verdict(NF_ACCEPT) + + cpdef drop(self): + """Drop the packet.""" + self.verdict(NF_DROP) + +cdef class NFQueue: + """Handle a single numbered queue.""" + def __cinit__(self, *args, **kwargs): + if "af" in kwargs: + self.af = kwargs["af"] + else: + self.af = socket.AF_INET + + self.h = nfq_open() + if self.h == NULL: + raise OSError("Failed to open NFQueue.") + nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + # running queues + if nfq_bind_pf(self.h, self.af) < 0: + raise OSError("Failed to bind family %s." % self.af) + + def __dealloc__(self): + if self.qh != NULL: + nfq_destroy_queue(self.qh) + # Don't call nfq_unbind_pf unless you want to disconnect any other + # processes using this libnetfilter_queue on this protocol family! + nfq_close(self.h) + + def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + """Create a new queue with the given callback function.""" + self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + if self.qh == NULL: + raise OSError("Failed to create queue %s." % queue_num) + + if range > MaxCopySize: + range = MaxCopySize + if nfq_set_mode(self.qh, mode, range) < 0: + raise OSError("Failed to set packet copy mode.") + + nfq_set_queue_maxlen(self.qh, maxlen) + + def unbind(self): + """Destroy the queue.""" + if self.qh != NULL: + nfq_destroy_queue(self.qh) + # See warning about nfq_unbind_pf in __dealloc__ above. + + def run(self): + """Begin accepting packets.""" + cdef int fd = nfq_fd(self.h) + cdef char buf[BufferSize] + cdef int rv + with nogil: + rv = recv(fd, buf, sizeof(buf), 0) + while rv >= 0: + nfq_handle_packet(self.h, buf, rv) + with nogil: + rv = recv(fd, buf, sizeof(buf), 0) + + def handle(self, NFPacket packet): + """Handle a single packet. User-defined classes should override this.""" + packet.accept() diff --git a/setup.py b/setup.py new file mode 100644 index 0000000..6cb1ac0 --- /dev/null +++ b/setup.py @@ -0,0 +1,45 @@ +from distutils.core import setup, Extension + +VERSION = "0.1" + +try: + # Use Cython + from Cython.Distutils import build_ext + ext = Extension( + "netfilterqueue", + sources=["netfilterqueue.pyx",], + libraries=["netfilter_queue"], + ) +except ImportError: + # No Cython + build_ext = None + ext = Extension( + "netfilterqueue", + sources = ["netfilterqueue.c"], + libraries=["netfilter_queue"], + ) + +setup( + cmdclass = {"build_ext": build_ext}, + ext_modules = [ext], + name="NetfilterQueue", + version=VERSION, + license="BSD", + author="Matthew Fox", + author_email="matthew@kerkhofftech.ca", + url="https://github.com/kti/python-netfilter_queue", + description="Python bindings for libnetfilter_queue", + long_description=open("README.txt").read(), + download_url="http://pypi.python.org/packages/source/N/NetfilterQueue/NetfilterQueue-%s.tar.gz" % VERSION, + classifiers = [ + "Development Status :: 4 - Beta", + "License :: OSI Approved :: BSD License", + "Operating System :: POSIX :: Linux", + "Topic :: System :: Networking", + "Topic :: Security", + "Intended Audience :: Developers", + "Intended Audience :: Telecommunications Industry", + "Programming Language :: Cython", + "Programming Language :: Python :: 2", + ] +)