From 09a000ac50e11f7f83d9f592b0b3fc7ccbf0b471 Mon Sep 17 00:00:00 2001 From: Matt Fox Date: Thu, 12 May 2011 13:45:14 -0700 Subject: [PATCH] Initial commit --- .gitignore | 2 + CHANGES.txt | 1 + LICENSE.txt | 24 + MANIFEST | 5 + README.txt | 69 + netfilterqueue.c | 4541 ++++++++++++++++++++++++++++++++++++++++++++ netfilterqueue.pxd | 191 ++ netfilterqueue.pyx | 179 ++ setup.py | 45 + 9 files changed, 5057 insertions(+) create mode 100644 .gitignore create mode 100644 CHANGES.txt create mode 100644 LICENSE.txt create mode 100644 MANIFEST create mode 100644 README.txt create mode 100644 netfilterqueue.c create mode 100644 netfilterqueue.pxd create mode 100644 netfilterqueue.pyx create mode 100644 setup.py diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..1691d79 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +*.so +build/ diff --git a/CHANGES.txt b/CHANGES.txt new file mode 100644 index 0000000..6e9784c --- /dev/null +++ b/CHANGES.txt @@ -0,0 +1 @@ +v0.1, 12 May 2011 -- Initial release. diff --git a/LICENSE.txt b/LICENSE.txt new file mode 100644 index 0000000..65c9d8a --- /dev/null +++ b/LICENSE.txt @@ -0,0 +1,24 @@ +Copyright (c) 2011, Kerkhoff Technologies, Inc. +All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + * Neither the name of the Kerkhoff Technologies, Inc. nor the + names of its contributors may be used to endorse or promote products + derived from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY +DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; +LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND +ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS +SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. diff --git a/MANIFEST b/MANIFEST new file mode 100644 index 0000000..948b17a --- /dev/null +++ b/MANIFEST @@ -0,0 +1,5 @@ +CHANGES.txt +LICENSE.txt +README.txt +netfilterqueue.pyx +setup.py diff --git a/README.txt b/README.txt new file mode 100644 index 0000000..2861075 --- /dev/null +++ b/README.txt @@ -0,0 +1,69 @@ +============== +NetfilterQueue +============== + +NetfilterQueue provides access to packets matched by an iptables rule in +Linux. Packets so matched can be accepted, dropped, altered, or given a mark. + +Libnetfilter_queue (the netfilter library, not this module) is part of the `Netfilter project `_. + +Example +======= + +Coming soon... + +Installation +============ + +NetfilterQueue is a C extention module that links against libnetfilter_queue. Before installing, ensure you have: + +1. A C compiler + +2. Python development files + +3. Libnetfilter_queue development files and associated dependencies + +On Debian or Ubuntu, these files are install with:: + + sudo apt-get install build-essential python-dev libnetfilter-queue-dev + +From PyPI +--------- + +To install from PyPI by pip:: + + pip install netfilterqueue + +From source +----------- + +To install from source:: + + wget http://pypi.python.org/packages/source/n/netfilterqueue/netfilterqueue-0.1.tar.gz + tar -xvzf netfilterqueue-0.1.tar.gz + cd netfilterqueue-0.1 + python setup.py install + +Setup will use Cython if it is installed, regenerating the .c source from the .pyx before compiling the .so. + +Usage +===== + +Coming soon... + +Now route packets to the queue:: + + # iptables -I INPUT -p tcp --dport 80 -j NFQUEUE --queue-num 1 + +The only special part of the rule is the target. Rules can have any match and +can be added to any table or chain. + +Valid queue numbers are integers from 0 to 65,536 inclusive. + +Limitations +=========== + +TODO: fix this up + +* compiled to max 2048-byte packets, so won't work on LO? +* full API not implemented: omits set_payload(), interface methods, and what else? \ No newline at end of file diff --git a/netfilterqueue.c b/netfilterqueue.c new file mode 100644 index 0000000..b741f36 --- /dev/null +++ b/netfilterqueue.c @@ -0,0 +1,4541 @@ +/* Generated by Cython 0.14 on Thu May 12 13:19:22 2011 */ + +#define PY_SSIZE_T_CLEAN +#include "Python.h" +#ifndef Py_PYTHON_H + #error Python headers needed to compile C extensions, please install development version of Python. +#else + +#include /* For offsetof */ +#ifndef offsetof +#define offsetof(type, member) ( (size_t) & ((type*)0) -> member ) +#endif + +#if !defined(WIN32) && !defined(MS_WINDOWS) + #ifndef __stdcall + #define __stdcall + #endif + #ifndef __cdecl + #define __cdecl + #endif + #ifndef __fastcall + #define __fastcall + #endif +#endif + +#ifndef DL_IMPORT + #define DL_IMPORT(t) t +#endif +#ifndef DL_EXPORT + #define DL_EXPORT(t) t +#endif + +#ifndef PY_LONG_LONG + #define PY_LONG_LONG LONG_LONG +#endif + +#if PY_VERSION_HEX < 0x02040000 + #define METH_COEXIST 0 + #define PyDict_CheckExact(op) (Py_TYPE(op) == &PyDict_Type) + #define PyDict_Contains(d,o) PySequence_Contains(d,o) +#endif + +#if PY_VERSION_HEX < 0x02050000 + typedef int Py_ssize_t; + #define PY_SSIZE_T_MAX INT_MAX + #define PY_SSIZE_T_MIN INT_MIN + #define PY_FORMAT_SIZE_T "" + #define PyInt_FromSsize_t(z) PyInt_FromLong(z) + #define PyInt_AsSsize_t(o) PyInt_AsLong(o) + #define PyNumber_Index(o) PyNumber_Int(o) + #define PyIndex_Check(o) PyNumber_Check(o) + #define PyErr_WarnEx(category, message, stacklevel) PyErr_Warn(category, message) +#endif + +#if PY_VERSION_HEX < 0x02060000 + #define Py_REFCNT(ob) (((PyObject*)(ob))->ob_refcnt) + #define Py_TYPE(ob) (((PyObject*)(ob))->ob_type) + #define Py_SIZE(ob) (((PyVarObject*)(ob))->ob_size) + #define PyVarObject_HEAD_INIT(type, size) \ + PyObject_HEAD_INIT(type) size, + #define PyType_Modified(t) + + typedef struct { + void *buf; + PyObject *obj; + Py_ssize_t len; + Py_ssize_t itemsize; + int readonly; + int ndim; + char *format; + Py_ssize_t *shape; + Py_ssize_t *strides; + Py_ssize_t *suboffsets; + void *internal; + } Py_buffer; + + #define PyBUF_SIMPLE 0 + #define PyBUF_WRITABLE 0x0001 + #define PyBUF_FORMAT 0x0004 + #define PyBUF_ND 0x0008 + #define PyBUF_STRIDES (0x0010 | PyBUF_ND) + #define PyBUF_C_CONTIGUOUS (0x0020 | PyBUF_STRIDES) + #define PyBUF_F_CONTIGUOUS (0x0040 | PyBUF_STRIDES) + #define PyBUF_ANY_CONTIGUOUS (0x0080 | PyBUF_STRIDES) + #define PyBUF_INDIRECT (0x0100 | PyBUF_STRIDES) + +#endif + +#if PY_MAJOR_VERSION < 3 + #define __Pyx_BUILTIN_MODULE_NAME "__builtin__" +#else + #define __Pyx_BUILTIN_MODULE_NAME "builtins" +#endif + +#if PY_MAJOR_VERSION >= 3 + #define Py_TPFLAGS_CHECKTYPES 0 + #define Py_TPFLAGS_HAVE_INDEX 0 +#endif + +#if (PY_VERSION_HEX < 0x02060000) || (PY_MAJOR_VERSION >= 3) + #define Py_TPFLAGS_HAVE_NEWBUFFER 0 +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyBaseString_Type PyUnicode_Type + #define PyStringObject PyUnicodeObject + #define PyString_Type PyUnicode_Type + #define PyString_Check PyUnicode_Check + #define PyString_CheckExact PyUnicode_CheckExact +#endif + +#if PY_VERSION_HEX < 0x02060000 + #define PyBytesObject PyStringObject + #define PyBytes_Type PyString_Type + #define PyBytes_Check PyString_Check + #define PyBytes_CheckExact PyString_CheckExact + #define PyBytes_FromString PyString_FromString + #define PyBytes_FromStringAndSize PyString_FromStringAndSize + #define PyBytes_FromFormat PyString_FromFormat + #define PyBytes_DecodeEscape PyString_DecodeEscape + #define PyBytes_AsString PyString_AsString + #define PyBytes_AsStringAndSize PyString_AsStringAndSize + #define PyBytes_Size PyString_Size + #define PyBytes_AS_STRING PyString_AS_STRING + #define PyBytes_GET_SIZE PyString_GET_SIZE + #define PyBytes_Repr PyString_Repr + #define PyBytes_Concat PyString_Concat + #define PyBytes_ConcatAndDel PyString_ConcatAndDel + #define PySet_Check(obj) PyObject_TypeCheck(obj, &PySet_Type) + #define PyFrozenSet_Check(obj) PyObject_TypeCheck(obj, &PyFrozenSet_Type) +#endif + +#ifndef PySet_CheckExact +# define PySet_CheckExact(obj) (Py_TYPE(obj) == &PySet_Type) +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyIntObject PyLongObject + #define PyInt_Type PyLong_Type + #define PyInt_Check(op) PyLong_Check(op) + #define PyInt_CheckExact(op) PyLong_CheckExact(op) + #define PyInt_FromString PyLong_FromString + #define PyInt_FromUnicode PyLong_FromUnicode + #define PyInt_FromLong PyLong_FromLong + #define PyInt_FromSize_t PyLong_FromSize_t + #define PyInt_FromSsize_t PyLong_FromSsize_t + #define PyInt_AsLong PyLong_AsLong + #define PyInt_AS_LONG PyLong_AS_LONG + #define PyInt_AsSsize_t PyLong_AsSsize_t + #define PyInt_AsUnsignedLongMask PyLong_AsUnsignedLongMask + #define PyInt_AsUnsignedLongLongMask PyLong_AsUnsignedLongLongMask +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyBoolObject PyLongObject +#endif + + +#if PY_MAJOR_VERSION >= 3 + #define __Pyx_PyNumber_Divide(x,y) PyNumber_TrueDivide(x,y) + #define __Pyx_PyNumber_InPlaceDivide(x,y) PyNumber_InPlaceTrueDivide(x,y) +#else + #define __Pyx_PyNumber_Divide(x,y) PyNumber_Divide(x,y) + #define __Pyx_PyNumber_InPlaceDivide(x,y) PyNumber_InPlaceDivide(x,y) +#endif + +#if (PY_MAJOR_VERSION < 3) || (PY_VERSION_HEX >= 0x03010300) + #define __Pyx_PySequence_GetSlice(obj, a, b) PySequence_GetSlice(obj, a, b) + #define __Pyx_PySequence_SetSlice(obj, a, b, value) PySequence_SetSlice(obj, a, b, value) + #define __Pyx_PySequence_DelSlice(obj, a, b) PySequence_DelSlice(obj, a, b) +#else + #define __Pyx_PySequence_GetSlice(obj, a, b) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), (PyObject*)0) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_GetSlice(obj, a, b)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object is unsliceable", (obj)->ob_type->tp_name), (PyObject*)0))) + #define __Pyx_PySequence_SetSlice(obj, a, b, value) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), -1) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_SetSlice(obj, a, b, value)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object doesn't support slice assignment", (obj)->ob_type->tp_name), -1))) + #define __Pyx_PySequence_DelSlice(obj, a, b) (unlikely(!(obj)) ? \ + (PyErr_SetString(PyExc_SystemError, "null argument to internal routine"), -1) : \ + (likely((obj)->ob_type->tp_as_mapping) ? (PySequence_DelSlice(obj, a, b)) : \ + (PyErr_Format(PyExc_TypeError, "'%.200s' object doesn't support slice deletion", (obj)->ob_type->tp_name), -1))) +#endif + +#if PY_MAJOR_VERSION >= 3 + #define PyMethod_New(func, self, klass) ((self) ? PyMethod_New(func, self) : PyInstanceMethod_New(func)) +#endif + +#if PY_VERSION_HEX < 0x02050000 + #define __Pyx_GetAttrString(o,n) PyObject_GetAttrString((o),((char *)(n))) + #define __Pyx_SetAttrString(o,n,a) PyObject_SetAttrString((o),((char *)(n)),(a)) + #define __Pyx_DelAttrString(o,n) PyObject_DelAttrString((o),((char *)(n))) +#else + #define __Pyx_GetAttrString(o,n) PyObject_GetAttrString((o),(n)) + #define __Pyx_SetAttrString(o,n,a) PyObject_SetAttrString((o),(n),(a)) + #define __Pyx_DelAttrString(o,n) PyObject_DelAttrString((o),(n)) +#endif + +#if PY_VERSION_HEX < 0x02050000 + #define __Pyx_NAMESTR(n) ((char *)(n)) + #define __Pyx_DOCSTR(n) ((char *)(n)) +#else + #define __Pyx_NAMESTR(n) (n) + #define __Pyx_DOCSTR(n) (n) +#endif + +#ifdef __cplusplus +#define __PYX_EXTERN_C extern "C" +#else +#define __PYX_EXTERN_C extern +#endif + +#if defined(WIN32) || defined(MS_WINDOWS) +#define _USE_MATH_DEFINES +#endif +#include +#define __PYX_HAVE_API__netfilterqueue +#include "sys/types.h" +#include "netinet/ip.h" +#include "sys/time.h" +#include "netinet/in.h" +#include "libnfnetlink/linux_nfnetlink.h" +#include "libnetfilter_queue/linux_nfnetlink_queue.h" +#include "libnetfilter_queue/libnetfilter_queue.h" +#include "sys/socket.h" + +#ifdef PYREX_WITHOUT_ASSERTIONS +#define CYTHON_WITHOUT_ASSERTIONS +#endif + + +/* inline attribute */ +#ifndef CYTHON_INLINE + #if defined(__GNUC__) + #define CYTHON_INLINE __inline__ + #elif defined(_MSC_VER) + #define CYTHON_INLINE __inline + #elif defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L + #define CYTHON_INLINE inline + #else + #define CYTHON_INLINE + #endif +#endif + +/* unused attribute */ +#ifndef CYTHON_UNUSED +# if defined(__GNUC__) +# if !(defined(__cplusplus)) || (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 4)) +# define CYTHON_UNUSED __attribute__ ((__unused__)) +# else +# define CYTHON_UNUSED +# endif +# elif defined(__ICC) || defined(__INTEL_COMPILER) +# define CYTHON_UNUSED __attribute__ ((__unused__)) +# else +# define CYTHON_UNUSED +# endif +#endif + +typedef struct {PyObject **p; char *s; const long n; const char* encoding; const char is_unicode; const char is_str; const char intern; } __Pyx_StringTabEntry; /*proto*/ + + +/* Type Conversion Predeclarations */ + +#define __Pyx_PyBytes_FromUString(s) PyBytes_FromString((char*)s) +#define __Pyx_PyBytes_AsUString(s) ((unsigned char*) PyBytes_AsString(s)) + +#define __Pyx_PyBool_FromLong(b) ((b) ? (Py_INCREF(Py_True), Py_True) : (Py_INCREF(Py_False), Py_False)) +static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject*); +static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x); + +static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject*); +static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t); +static CYTHON_INLINE size_t __Pyx_PyInt_AsSize_t(PyObject*); + +#define __pyx_PyFloat_AsDouble(x) (PyFloat_CheckExact(x) ? PyFloat_AS_DOUBLE(x) : PyFloat_AsDouble(x)) + + +#ifdef __GNUC__ +/* Test for GCC > 2.95 */ +#if __GNUC__ > 2 || (__GNUC__ == 2 && (__GNUC_MINOR__ > 95)) +#define likely(x) __builtin_expect(!!(x), 1) +#define unlikely(x) __builtin_expect(!!(x), 0) +#else /* __GNUC__ > 2 ... */ +#define likely(x) (x) +#define unlikely(x) (x) +#endif /* __GNUC__ > 2 ... */ +#else /* __GNUC__ */ +#define likely(x) (x) +#define unlikely(x) (x) +#endif /* __GNUC__ */ + +static PyObject *__pyx_m; +static PyObject *__pyx_b; +static PyObject *__pyx_empty_tuple; +static PyObject *__pyx_empty_bytes; +static int __pyx_lineno; +static int __pyx_clineno = 0; +static const char * __pyx_cfilenm= __FILE__; +static const char *__pyx_filename; + + +static const char *__pyx_f[] = { + "netfilterqueue.pyx", + "netfilterqueue.pxd", +}; + +/* Type declarations */ + +/* "/root/NetfilterQueue/netfilterqueue.pxd":19 + * + * # Dummy defines from netinet/in.h: + * cdef enum: # <<<<<<<<<<<<<< + * IPPROTO_IP = 0 # Dummy protocol for TCP. + * IPPROTO_HOPOPTS = 0 # IPv6 Hop-by-Hop options. + */ + +enum { + __pyx_e_14netfilterqueue_IPPROTO_IP = 0, + __pyx_e_14netfilterqueue_IPPROTO_HOPOPTS = 0, + __pyx_e_14netfilterqueue_IPPROTO_ICMP = 1, + __pyx_e_14netfilterqueue_IPPROTO_IGMP = 2, + __pyx_e_14netfilterqueue_IPPROTO_IPIP = 4, + __pyx_e_14netfilterqueue_IPPROTO_TCP = 6, + __pyx_e_14netfilterqueue_IPPROTO_EGP = 8, + __pyx_e_14netfilterqueue_IPPROTO_PUP = 12, + __pyx_e_14netfilterqueue_IPPROTO_UDP = 17, + __pyx_e_14netfilterqueue_IPPROTO_IDP = 22, + __pyx_e_14netfilterqueue_IPPROTO_TP = 29, + __pyx_e_14netfilterqueue_IPPROTO_IPV6 = 41, + __pyx_e_14netfilterqueue_IPPROTO_ROUTING = 43, + __pyx_e_14netfilterqueue_IPPROTO_FRAGMENT = 44, + __pyx_e_14netfilterqueue_IPPROTO_RSVP = 46, + __pyx_e_14netfilterqueue_IPPROTO_GRE = 47, + __pyx_e_14netfilterqueue_IPPROTO_ESP = 50, + __pyx_e_14netfilterqueue_IPPROTO_AH = 51, + __pyx_e_14netfilterqueue_IPPROTO_ICMPV6 = 58, + __pyx_e_14netfilterqueue_IPPROTO_NONE = 59, + __pyx_e_14netfilterqueue_IPPROTO_DSTOPTS = 60, + __pyx_e_14netfilterqueue_IPPROTO_MTP = 92, + __pyx_e_14netfilterqueue_IPPROTO_ENCAP = 98, + __pyx_e_14netfilterqueue_IPPROTO_PIM = 103, + __pyx_e_14netfilterqueue_IPPROTO_COMP = 108, + __pyx_e_14netfilterqueue_IPPROTO_SCTP = 132, + __pyx_e_14netfilterqueue_IPPROTO_RAW = 255, + __pyx_e_14netfilterqueue_IPPROTO_MAX +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":134 + * + * # Dummy defines from linux/socket.h: + * cdef enum: # Protocol families, same as address families. # <<<<<<<<<<<<<< + * PF_INET = 2 + * PF_INET6 = 10 + */ + +enum { + __pyx_e_14netfilterqueue_PF_INET = 2, + __pyx_e_14netfilterqueue_PF_INET6 = 10 +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":142 + * + * # Dummy defines from linux/netfilter.h + * cdef enum: # <<<<<<<<<<<<<< + * NF_DROP + * NF_ACCEPT + */ + +enum { + + /* "/root/NetfilterQueue/netfilterqueue.pxd":149 + * NF_REPEAT + * NF_STOP + * NF_MAX_VERDICT = NF_STOP # <<<<<<<<<<<<<< + * + * cdef class NFPacket: + */ + __pyx_e_14netfilterqueue_NF_DROP, + __pyx_e_14netfilterqueue_NF_ACCEPT, + __pyx_e_14netfilterqueue_NF_STOLEN, + __pyx_e_14netfilterqueue_NF_QUEUE, + __pyx_e_14netfilterqueue_NF_REPEAT, + __pyx_e_14netfilterqueue_NF_STOP, + __pyx_e_14netfilterqueue_NF_MAX_VERDICT = __pyx_e_14netfilterqueue_NF_STOP +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":151 + * NF_MAX_VERDICT = NF_STOP + * + * cdef class NFPacket: # <<<<<<<<<<<<<< + * cdef nfq_q_handle *_qh + * cdef nfq_data *_nfa + */ + +struct __pyx_obj_14netfilterqueue_NFPacket { + PyObject_HEAD + struct __pyx_vtabstruct_14netfilterqueue_NFPacket *__pyx_vtab; + struct nfq_q_handle *_qh; + struct nfq_data *_nfa; + struct nfqnl_msg_packet_hdr *_hdr; + int _verdict_is_set; + int _mark_is_set; + u_int32_t _given_mark; + unsigned char *_given_payload; + u_int32_t id; + u_int16_t hw_protocol; + u_int8_t hook; + Py_ssize_t payload_len; + char *payload; + struct timeval timestamp; +}; + +/* "/root/NetfilterQueue/netfilterqueue.pxd":186 + * cpdef drop(self) + * + * cdef class NFQueue: # <<<<<<<<<<<<<< + * cdef nfq_handle *h # Handle to NFQueue library + * cdef nfq_q_handle *qh # A handle to the queue + */ + +struct __pyx_obj_14netfilterqueue_NFQueue { + PyObject_HEAD + struct nfq_handle *h; + struct nfq_q_handle *qh; + u_int16_t af; + PyObject *packet_copy_size; +}; + + +/* "/root/NetfilterQueue/netfilterqueue.pyx":37 + * return 1 + * + * cdef class NFPacket: # <<<<<<<<<<<<<< + * """A packet received from NFQueue.""" + * def __cinit__(self): + */ + +struct __pyx_vtabstruct_14netfilterqueue_NFPacket { + PyObject *(*set_nfq_data)(struct __pyx_obj_14netfilterqueue_NFPacket *, struct nfq_q_handle *, struct nfq_data *); + void (*verdict)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int8_t); + Py_ssize_t (*get_payload_len)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + double (*get_timestamp)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + PyObject *(*set_mark)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int32_t, int __pyx_skip_dispatch); + PyObject *(*accept)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); + PyObject *(*drop)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch); +}; +static struct __pyx_vtabstruct_14netfilterqueue_NFPacket *__pyx_vtabptr_14netfilterqueue_NFPacket; + +#ifndef CYTHON_REFNANNY + #define CYTHON_REFNANNY 0 +#endif + +#if CYTHON_REFNANNY + typedef struct { + void (*INCREF)(void*, PyObject*, int); + void (*DECREF)(void*, PyObject*, int); + void (*GOTREF)(void*, PyObject*, int); + void (*GIVEREF)(void*, PyObject*, int); + void* (*SetupContext)(const char*, int, const char*); + void (*FinishContext)(void**); + } __Pyx_RefNannyAPIStruct; + static __Pyx_RefNannyAPIStruct *__Pyx_RefNanny = NULL; + static __Pyx_RefNannyAPIStruct * __Pyx_RefNannyImportAPI(const char *modname) { + PyObject *m = NULL, *p = NULL; + void *r = NULL; + m = PyImport_ImportModule((char *)modname); + if (!m) goto end; + p = PyObject_GetAttrString(m, (char *)"RefNannyAPI"); + if (!p) goto end; + r = PyLong_AsVoidPtr(p); + end: + Py_XDECREF(p); + Py_XDECREF(m); + return (__Pyx_RefNannyAPIStruct *)r; + } + #define __Pyx_RefNannySetupContext(name) void *__pyx_refnanny = __Pyx_RefNanny->SetupContext((name), __LINE__, __FILE__) + #define __Pyx_RefNannyFinishContext() __Pyx_RefNanny->FinishContext(&__pyx_refnanny) + #define __Pyx_INCREF(r) __Pyx_RefNanny->INCREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_DECREF(r) __Pyx_RefNanny->DECREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_GOTREF(r) __Pyx_RefNanny->GOTREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_GIVEREF(r) __Pyx_RefNanny->GIVEREF(__pyx_refnanny, (PyObject *)(r), __LINE__) + #define __Pyx_XDECREF(r) do { if((r) != NULL) {__Pyx_DECREF(r);} } while(0) +#else + #define __Pyx_RefNannySetupContext(name) + #define __Pyx_RefNannyFinishContext() + #define __Pyx_INCREF(r) Py_INCREF(r) + #define __Pyx_DECREF(r) Py_DECREF(r) + #define __Pyx_GOTREF(r) + #define __Pyx_GIVEREF(r) + #define __Pyx_XDECREF(r) Py_XDECREF(r) +#endif /* CYTHON_REFNANNY */ +#define __Pyx_XGIVEREF(r) do { if((r) != NULL) {__Pyx_GIVEREF(r);} } while(0) +#define __Pyx_XGOTREF(r) do { if((r) != NULL) {__Pyx_GOTREF(r);} } while(0) + +static PyObject *__Pyx_GetName(PyObject *dict, PyObject *name); /*proto*/ + +static void __Pyx_RaiseArgtupleInvalid(const char* func_name, int exact, + Py_ssize_t num_min, Py_ssize_t num_max, Py_ssize_t num_found); /*proto*/ + +static CYTHON_INLINE int __Pyx_CheckKeywordStrings(PyObject *kwdict, + const char* function_name, int kw_allowed); /*proto*/ + +static CYTHON_INLINE long __Pyx_NegateNonNeg(long b) { return unlikely(b < 0) ? b : !b; } +static CYTHON_INLINE PyObject* __Pyx_PyBoolOrNull_FromLong(long b) { + return unlikely(b < 0) ? NULL : __Pyx_PyBool_FromLong(b); +} + +static CYTHON_INLINE void __Pyx_RaiseNoneIndexingError(void); + +#if PY_MAJOR_VERSION >= 3 +static PyObject *__Pyx_PyDict_GetItem(PyObject *d, PyObject* key) { + PyObject *value; + if (unlikely(d == Py_None)) { + __Pyx_RaiseNoneIndexingError(); + return NULL; + } + value = PyDict_GetItemWithError(d, key); + if (unlikely(!value)) { + if (!PyErr_Occurred()) + PyErr_SetObject(PyExc_KeyError, key); + return NULL; + } + Py_INCREF(value); + return value; +} +#else + #define __Pyx_PyDict_GetItem(d, key) PyObject_GetItem(d, key) +#endif + +static void __Pyx_RaiseDoubleKeywordsError( + const char* func_name, PyObject* kw_name); /*proto*/ + +static int __Pyx_ParseOptionalKeywords(PyObject *kwds, PyObject **argnames[], PyObject *kwds2, PyObject *values[], Py_ssize_t num_pos_args, const char* function_name); /*proto*/ + +static int __Pyx_ArgTypeTest(PyObject *obj, PyTypeObject *type, int none_allowed, + const char *name, int exact); /*proto*/ + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int32_t(u_int32_t); + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int16_t(u_int16_t); + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int8_t(u_int8_t); + +static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list); /*proto*/ + +#define __pyx_binding_PyCFunctionType_USED 1 + +typedef struct { + PyCFunctionObject func; +} __pyx_binding_PyCFunctionType_object; + +PyTypeObject __pyx_binding_PyCFunctionType_type; +PyTypeObject *__pyx_binding_PyCFunctionType = NULL; + +PyObject *__pyx_binding_PyCFunctionType_NewEx(PyMethodDef *ml, PyObject *self, PyObject *module); /* proto */ +#define __pyx_binding_PyCFunctionType_New(ml, self) __pyx_binding_PyCFunctionType_NewEx(ml, self, NULL) + +int __pyx_binding_PyCFunctionType_init(void); /* proto */ + +static CYTHON_INLINE PyObject *__Pyx_GetAttr3(PyObject *, PyObject *, PyObject *); /*proto*/ + +static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb); /*proto*/ +static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb); /*proto*/ + +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb); /*proto*/ + +static CYTHON_INLINE u_int16_t __Pyx_PyInt_from_py_u_int16_t(PyObject *); + +#ifndef __PYX_FORCE_INIT_THREADS + #if PY_VERSION_HEX < 0x02040200 + #define __PYX_FORCE_INIT_THREADS 1 + #else + #define __PYX_FORCE_INIT_THREADS 0 + #endif +#endif + +static CYTHON_INLINE unsigned char __Pyx_PyInt_AsUnsignedChar(PyObject *); + +static CYTHON_INLINE unsigned short __Pyx_PyInt_AsUnsignedShort(PyObject *); + +static CYTHON_INLINE unsigned int __Pyx_PyInt_AsUnsignedInt(PyObject *); + +static CYTHON_INLINE char __Pyx_PyInt_AsChar(PyObject *); + +static CYTHON_INLINE short __Pyx_PyInt_AsShort(PyObject *); + +static CYTHON_INLINE int __Pyx_PyInt_AsInt(PyObject *); + +static CYTHON_INLINE signed char __Pyx_PyInt_AsSignedChar(PyObject *); + +static CYTHON_INLINE signed short __Pyx_PyInt_AsSignedShort(PyObject *); + +static CYTHON_INLINE signed int __Pyx_PyInt_AsSignedInt(PyObject *); + +static CYTHON_INLINE int __Pyx_PyInt_AsLongDouble(PyObject *); + +static CYTHON_INLINE unsigned long __Pyx_PyInt_AsUnsignedLong(PyObject *); + +static CYTHON_INLINE unsigned PY_LONG_LONG __Pyx_PyInt_AsUnsignedLongLong(PyObject *); + +static CYTHON_INLINE long __Pyx_PyInt_AsLong(PyObject *); + +static CYTHON_INLINE PY_LONG_LONG __Pyx_PyInt_AsLongLong(PyObject *); + +static CYTHON_INLINE signed long __Pyx_PyInt_AsSignedLong(PyObject *); + +static CYTHON_INLINE signed PY_LONG_LONG __Pyx_PyInt_AsSignedLongLong(PyObject *); + +static void __Pyx_WriteUnraisable(const char *name); /*proto*/ + +static CYTHON_INLINE u_int32_t __Pyx_PyInt_from_py_u_int32_t(PyObject *); + +static CYTHON_INLINE u_int8_t __Pyx_PyInt_from_py_u_int8_t(PyObject *); + +static int __Pyx_SetVtable(PyObject *dict, void *vtable); /*proto*/ + +static void __Pyx_AddTraceback(const char *funcname); /*proto*/ + +static int __Pyx_InitStrings(__Pyx_StringTabEntry *t); /*proto*/ +/* Module declarations from netfilterqueue */ + +static PyTypeObject *__pyx_ptype_14netfilterqueue_NFPacket = 0; +static PyTypeObject *__pyx_ptype_14netfilterqueue_NFQueue = 0; +static int __pyx_f_14netfilterqueue_global_callback(struct nfq_q_handle *, struct nfgenmsg *, struct nfq_data *, void *); /*proto*/ +#define __Pyx_MODULE_NAME "netfilterqueue" +int __pyx_module_is_main_netfilterqueue = 0; + +/* Implementation of netfilterqueue */ +static PyObject *__pyx_builtin_filter; +static PyObject *__pyx_builtin_OSError; +static char __pyx_k_2[] = "Unknown protocol"; +static char __pyx_k_3[] = "%s packet, %s bytes"; +static char __pyx_k_4[] = "Failed to get payload of packet."; +static char __pyx_k_6[] = "Failed to open NFQueue."; +static char __pyx_k_8[] = "Failed to bind family %s."; +static char __pyx_k_10[] = "Failed to create queue %s."; +static char __pyx_k_11[] = "Failed to set packet copy mode."; +static char __pyx_k__h[] = "h"; +static char __pyx_k__af[] = "af"; +static char __pyx_k__id[] = "id"; +static char __pyx_k__qh[] = "qh"; +static char __pyx_k___qh[] = "_qh"; +static char __pyx_k___hdr[] = "_hdr"; +static char __pyx_k___nfa[] = "_nfa"; +static char __pyx_k__drop[] = "drop"; +static char __pyx_k__hook[] = "hook"; +static char __pyx_k__mode[] = "mode"; +static char __pyx_k__range[] = "range"; +static char __pyx_k__accept[] = "accept"; +static char __pyx_k__filter[] = "filter"; +static char __pyx_k__handle[] = "handle"; +static char __pyx_k__maxlen[] = "maxlen"; +static char __pyx_k__socket[] = "socket"; +static char __pyx_k__tv_sec[] = "tv_sec"; +static char __pyx_k__AF_INET[] = "AF_INET"; +static char __pyx_k__IPPROTO[] = "IPPROTO"; +static char __pyx_k__OSError[] = "OSError"; +static char __pyx_k__handler[] = "handler"; +static char __pyx_k__payload[] = "payload"; +static char __pyx_k__tv_usec[] = "tv_usec"; +static char __pyx_k__verdict[] = "verdict"; +static char __pyx_k____main__[] = "__main__"; +static char __pyx_k____test__[] = "__test__"; +static char __pyx_k__protocol[] = "protocol"; +static char __pyx_k__set_mark[] = "set_mark"; +static char __pyx_k__COPY_META[] = "COPY_META"; +static char __pyx_k__COPY_NONE[] = "COPY_NONE"; +static char __pyx_k__packet_id[] = "packet_id"; +static char __pyx_k__queue_num[] = "queue_num"; +static char __pyx_k__timestamp[] = "timestamp"; +static char __pyx_k__startswith[] = "startswith"; +static char __pyx_k__COPY_PACKET[] = "COPY_PACKET"; +static char __pyx_k___given_mark[] = "_given_mark"; +static char __pyx_k__hw_protocol[] = "hw_protocol"; +static char __pyx_k__payload_len[] = "payload_len"; +static char __pyx_k___mark_is_set[] = "_mark_is_set"; +static char __pyx_k__set_nfq_data[] = "set_nfq_data"; +static char __pyx_k__get_timestamp[] = "get_timestamp"; +static char __pyx_k___given_payload[] = "_given_payload"; +static char __pyx_k__netfilterqueue[] = "netfilterqueue"; +static char __pyx_k___verdict_is_set[] = "_verdict_is_set"; +static char __pyx_k__get_payload_len[] = "get_payload_len"; +static PyObject *__pyx_kp_s_10; +static PyObject *__pyx_kp_s_11; +static PyObject *__pyx_kp_s_2; +static PyObject *__pyx_kp_s_3; +static PyObject *__pyx_kp_s_4; +static PyObject *__pyx_kp_s_6; +static PyObject *__pyx_kp_s_8; +static PyObject *__pyx_n_s__AF_INET; +static PyObject *__pyx_n_s__COPY_META; +static PyObject *__pyx_n_s__COPY_NONE; +static PyObject *__pyx_n_s__COPY_PACKET; +static PyObject *__pyx_n_s__IPPROTO; +static PyObject *__pyx_n_s__OSError; +static PyObject *__pyx_n_s____main__; +static PyObject *__pyx_n_s____test__; +static PyObject *__pyx_n_s___given_mark; +static PyObject *__pyx_n_s___given_payload; +static PyObject *__pyx_n_s___hdr; +static PyObject *__pyx_n_s___mark_is_set; +static PyObject *__pyx_n_s___nfa; +static PyObject *__pyx_n_s___qh; +static PyObject *__pyx_n_s___verdict_is_set; +static PyObject *__pyx_n_s__accept; +static PyObject *__pyx_n_s__af; +static PyObject *__pyx_n_s__drop; +static PyObject *__pyx_n_s__filter; +static PyObject *__pyx_n_s__get_payload_len; +static PyObject *__pyx_n_s__get_timestamp; +static PyObject *__pyx_n_s__h; +static PyObject *__pyx_n_s__handle; +static PyObject *__pyx_n_s__handler; +static PyObject *__pyx_n_s__hook; +static PyObject *__pyx_n_s__hw_protocol; +static PyObject *__pyx_n_s__id; +static PyObject *__pyx_n_s__maxlen; +static PyObject *__pyx_n_s__mode; +static PyObject *__pyx_n_s__netfilterqueue; +static PyObject *__pyx_n_s__packet_id; +static PyObject *__pyx_n_s__payload; +static PyObject *__pyx_n_s__payload_len; +static PyObject *__pyx_n_s__protocol; +static PyObject *__pyx_n_s__qh; +static PyObject *__pyx_n_s__queue_num; +static PyObject *__pyx_n_s__range; +static PyObject *__pyx_n_s__set_mark; +static PyObject *__pyx_n_s__set_nfq_data; +static PyObject *__pyx_n_s__socket; +static PyObject *__pyx_n_s__startswith; +static PyObject *__pyx_n_s__timestamp; +static PyObject *__pyx_n_s__tv_sec; +static PyObject *__pyx_n_s__tv_usec; +static PyObject *__pyx_n_s__verdict; +static PyObject *__pyx_int_1; +static PyObject *__pyx_int_2; +static PyObject *__pyx_int_3; +static u_int8_t __pyx_k_9; +static PyObject *__pyx_k_tuple_1; +static PyObject *__pyx_k_tuple_5; +static PyObject *__pyx_k_tuple_7; +static PyObject *__pyx_k_tuple_12; + +/* "/root/NetfilterQueue/netfilterqueue.pyx":15 + * DEF MaxCopySize = BufferSize - MetadataSize + * + * cdef int global_callback(nfq_q_handle *qh, nfgenmsg *nfmsg, # <<<<<<<<<<<<<< + * nfq_data *nfa, void *data) with gil: + * """ + */ + +static int __pyx_f_14netfilterqueue_global_callback(struct nfq_q_handle *__pyx_v_qh, struct nfgenmsg *__pyx_v_nfmsg, struct nfq_data *__pyx_v_nfa, void *__pyx_v_data) { + struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_packet; + int __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + #ifdef WITH_THREAD + PyGILState_STATE _save = PyGILState_Ensure(); + #endif + __Pyx_RefNannySetupContext("global_callback"); + __pyx_v_packet = ((struct __pyx_obj_14netfilterqueue_NFPacket *)Py_None); __Pyx_INCREF(Py_None); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":32 + * # NULL # TODO: adapt to use self._given_payload + * # ) + * packet = NFPacket() # <<<<<<<<<<<<<< + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) + */ + __pyx_t_1 = PyObject_Call(((PyObject *)((PyObject*)__pyx_ptype_14netfilterqueue_NFPacket)), ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 32; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(((PyObject *)__pyx_v_packet)); + __pyx_v_packet = ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_t_1); + __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":33 + * # ) + * packet = NFPacket() + * packet.set_nfq_data(qh, nfa) # <<<<<<<<<<<<<< + * (data).handle(packet) + * return 1 + */ + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_packet->__pyx_vtab)->set_nfq_data(__pyx_v_packet, __pyx_v_qh, __pyx_v_nfa); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 33; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":34 + * packet = NFPacket() + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) # <<<<<<<<<<<<<< + * return 1 + * + */ + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_data), __pyx_n_s__handle); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_t_2 = PyTuple_New(1); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + __Pyx_INCREF(((PyObject *)__pyx_v_packet)); + PyTuple_SET_ITEM(__pyx_t_2, 0, ((PyObject *)__pyx_v_packet)); + __Pyx_GIVEREF(((PyObject *)__pyx_v_packet)); + __pyx_t_3 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_t_2), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 34; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + __Pyx_DECREF(((PyObject *)__pyx_t_2)); __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":35 + * packet.set_nfq_data(qh, nfa) + * (data).handle(packet) + * return 1 # <<<<<<<<<<<<<< + * + * cdef class NFPacket: + */ + __pyx_r = 1; + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_WriteUnraisable("netfilterqueue.global_callback"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_DECREF((PyObject *)__pyx_v_packet); + __Pyx_RefNannyFinishContext(); + #ifdef WITH_THREAD + PyGILState_Release(_save); + #endif + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":39 + * cdef class NFPacket: + * """A packet received from NFQueue.""" + * def __cinit__(self): # <<<<<<<<<<<<<< + * self._verdict_is_set = False + * self._mark_is_set = False + */ + +static int __pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static int __pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + int __pyx_r; + __Pyx_RefNannySetupContext("__cinit__"); + if (unlikely(PyTuple_GET_SIZE(__pyx_args) > 0)) { + __Pyx_RaiseArgtupleInvalid("__cinit__", 1, 0, 0, PyTuple_GET_SIZE(__pyx_args)); return -1;} + if (unlikely(__pyx_kwds) && unlikely(PyDict_Size(__pyx_kwds) > 0) && unlikely(!__Pyx_CheckKeywordStrings(__pyx_kwds, "__cinit__", 0))) return -1; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":40 + * """A packet received from NFQueue.""" + * def __cinit__(self): + * self._verdict_is_set = False # <<<<<<<<<<<<<< + * self._mark_is_set = False + * self._given_payload = NULL + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_verdict_is_set = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":41 + * def __cinit__(self): + * self._verdict_is_set = False + * self._mark_is_set = False # <<<<<<<<<<<<<< + * self._given_payload = NULL + * + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_mark_is_set = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":42 + * self._verdict_is_set = False + * self._mark_is_set = False + * self._given_payload = NULL # <<<<<<<<<<<<<< + * + * def __str__(self): + */ + ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->_given_payload = NULL; + + __pyx_r = 0; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + +static PyObject *__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1(PyObject *__pyx_self, PyObject *__pyx_v_x); /*proto*/ +static PyMethodDef __pyx_lambda_methdef14netfilterqueue_7__str___lambda1 = {__Pyx_NAMESTR("__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1"), (PyCFunction)__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1, METH_O, __Pyx_DOCSTR(0)}; +static PyObject *__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1(PyObject *__pyx_self, PyObject *__pyx_v_x) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("__pyx_lambda_funcdef14netfilterqueue_7__str___lambda1"); + __pyx_self = __pyx_self; + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyObject_GetAttr(__pyx_v_x, __pyx_n_s__startswith); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_k_tuple_1), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.__str__.lambda1"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":44 + * self._given_payload = NULL + * + * def __str__(self): # <<<<<<<<<<<<<< + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_1__str__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_1__str__(PyObject *__pyx_v_self) { + struct iphdr *__pyx_v_hdr; + PyObject *__pyx_v_protocol; + PyObject *__pyx_v_name; + PyObject *__pyx_r = NULL; + Py_ssize_t __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + PyObject *__pyx_t_4 = NULL; + PyObject *__pyx_t_5 = NULL; + int __pyx_t_6; + __Pyx_RefNannySetupContext("__str__"); + __pyx_v_protocol = Py_None; __Pyx_INCREF(Py_None); + __pyx_v_name = Py_None; __Pyx_INCREF(Py_None); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":45 + * + * def __str__(self): + * cdef iphdr *hdr = self.payload # <<<<<<<<<<<<<< + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + */ + __pyx_v_hdr = ((struct iphdr *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":46 + * def __str__(self): + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" # <<<<<<<<<<<<<< + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: + */ + __Pyx_INCREF(((PyObject *)__pyx_kp_s_2)); + __Pyx_DECREF(__pyx_v_protocol); + __pyx_v_protocol = ((PyObject *)__pyx_kp_s_2); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + __pyx_t_2 = __pyx_binding_PyCFunctionType_NewEx(&__pyx_lambda_methdef14netfilterqueue_7__str___lambda1, NULL, __pyx_n_s__netfilterqueue); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __pyx_t_4 = PyObject_Dir(__pyx_t_3); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + __pyx_t_3 = PyTuple_New(2); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_2); + __Pyx_GIVEREF(__pyx_t_2); + PyTuple_SET_ITEM(__pyx_t_3, 1, __pyx_t_4); + __Pyx_GIVEREF(__pyx_t_4); + __pyx_t_2 = 0; + __pyx_t_4 = 0; + __pyx_t_4 = PyObject_Call(__pyx_builtin_filter, ((PyObject *)__pyx_t_3), NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(((PyObject *)__pyx_t_3)); __pyx_t_3 = 0; + if (PyList_CheckExact(__pyx_t_4) || PyTuple_CheckExact(__pyx_t_4)) { + __pyx_t_1 = 0; __pyx_t_3 = __pyx_t_4; __Pyx_INCREF(__pyx_t_3); + } else { + __pyx_t_1 = -1; __pyx_t_3 = PyObject_GetIter(__pyx_t_4); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + } + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + for (;;) { + if (likely(PyList_CheckExact(__pyx_t_3))) { + if (__pyx_t_1 >= PyList_GET_SIZE(__pyx_t_3)) break; + __pyx_t_4 = PyList_GET_ITEM(__pyx_t_3, __pyx_t_1); __Pyx_INCREF(__pyx_t_4); __pyx_t_1++; + } else if (likely(PyTuple_CheckExact(__pyx_t_3))) { + if (__pyx_t_1 >= PyTuple_GET_SIZE(__pyx_t_3)) break; + __pyx_t_4 = PyTuple_GET_ITEM(__pyx_t_3, __pyx_t_1); __Pyx_INCREF(__pyx_t_4); __pyx_t_1++; + } else { + __pyx_t_4 = PyIter_Next(__pyx_t_3); + if (!__pyx_t_4) { + if (unlikely(PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + break; + } + __Pyx_GOTREF(__pyx_t_4); + } + __Pyx_DECREF(__pyx_v_name); + __pyx_v_name = __pyx_t_4; + __pyx_t_4 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":48 + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: # <<<<<<<<<<<<<< + * protocol = name[8:] + * return "%s packet, %s bytes" % (protocol, self.payload_len) + */ + __pyx_t_4 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_2 = PyObject_GetAttr(__pyx_t_4, __pyx_v_name); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_4 = __Pyx_PyInt_to_py_u_int8_t(__pyx_v_hdr->protocol); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_5 = PyObject_RichCompare(__pyx_t_2, __pyx_t_4, Py_EQ); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_5); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_6 = __Pyx_PyObject_IsTrue(__pyx_t_5); if (unlikely(__pyx_t_6 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0; + if (__pyx_t_6) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":49 + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] # <<<<<<<<<<<<<< + * return "%s packet, %s bytes" % (protocol, self.payload_len) + * + */ + __pyx_t_5 = __Pyx_PySequence_GetSlice(__pyx_v_name, 8, PY_SSIZE_T_MAX); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 49; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_5); + __Pyx_DECREF(__pyx_v_protocol); + __pyx_v_protocol = __pyx_t_5; + __pyx_t_5 = 0; + goto __pyx_L7; + } + __pyx_L7:; + } + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":50 + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + * return "%s packet, %s bytes" % (protocol, self.payload_len) # <<<<<<<<<<<<<< + * + * cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): + */ + __Pyx_XDECREF(__pyx_r); + __pyx_t_3 = PyInt_FromSsize_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload_len); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __pyx_t_5 = PyTuple_New(2); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_5)); + __Pyx_INCREF(__pyx_v_protocol); + PyTuple_SET_ITEM(__pyx_t_5, 0, __pyx_v_protocol); + __Pyx_GIVEREF(__pyx_v_protocol); + PyTuple_SET_ITEM(__pyx_t_5, 1, __pyx_t_3); + __Pyx_GIVEREF(__pyx_t_3); + __pyx_t_3 = 0; + __pyx_t_3 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_3), ((PyObject *)__pyx_t_5)); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 50; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + __Pyx_DECREF(((PyObject *)__pyx_t_5)); __pyx_t_5 = 0; + __pyx_r = ((PyObject *)__pyx_t_3); + __pyx_t_3 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_XDECREF(__pyx_t_4); + __Pyx_XDECREF(__pyx_t_5); + __Pyx_AddTraceback("netfilterqueue.NFPacket.__str__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_DECREF(__pyx_v_protocol); + __Pyx_DECREF(__pyx_v_name); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":52 + * return "%s packet, %s bytes" % (protocol, self.payload_len) + * + * cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): # <<<<<<<<<<<<<< + * """ + * Assign a packet from NFQ to this object. Parse the header and load + */ + +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_set_nfq_data(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, struct nfq_q_handle *__pyx_v_qh, struct nfq_data *__pyx_v_nfa) { + PyObject *__pyx_r = NULL; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("set_nfq_data"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":57 + * local values. + * """ + * self._qh = qh # <<<<<<<<<<<<<< + * self._nfa = nfa + * self._hdr = nfq_get_msg_packet_hdr(nfa) + */ + __pyx_v_self->_qh = __pyx_v_qh; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":58 + * """ + * self._qh = qh + * self._nfa = nfa # <<<<<<<<<<<<<< + * self._hdr = nfq_get_msg_packet_hdr(nfa) + * + */ + __pyx_v_self->_nfa = __pyx_v_nfa; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":59 + * self._qh = qh + * self._nfa = nfa + * self._hdr = nfq_get_msg_packet_hdr(nfa) # <<<<<<<<<<<<<< + * + * self.id = ntohl(self._hdr.packet_id) + */ + __pyx_v_self->_hdr = nfq_get_msg_packet_hdr(__pyx_v_nfa); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":61 + * self._hdr = nfq_get_msg_packet_hdr(nfa) + * + * self.id = ntohl(self._hdr.packet_id) # <<<<<<<<<<<<<< + * self.hw_protocol = ntohs(self._hdr.hw_protocol) + * self.hook = self._hdr.hook + */ + __pyx_v_self->id = ntohl(__pyx_v_self->_hdr->packet_id); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":62 + * + * self.id = ntohl(self._hdr.packet_id) + * self.hw_protocol = ntohs(self._hdr.hw_protocol) # <<<<<<<<<<<<<< + * self.hook = self._hdr.hook + * + */ + __pyx_v_self->hw_protocol = ntohs(__pyx_v_self->_hdr->hw_protocol); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":63 + * self.id = ntohl(self._hdr.packet_id) + * self.hw_protocol = ntohs(self._hdr.hw_protocol) + * self.hook = self._hdr.hook # <<<<<<<<<<<<<< + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + */ + __pyx_v_self->hook = __pyx_v_self->_hdr->hook; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":65 + * self.hook = self._hdr.hook + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) # <<<<<<<<<<<<<< + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") + */ + __pyx_v_self->payload_len = nfq_get_payload(__pyx_v_self->_nfa, (&__pyx_v_self->payload)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":66 + * + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to get payload of packet.") + * + */ + __pyx_t_1 = (__pyx_v_self->payload_len < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":67 + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") # <<<<<<<<<<<<<< + * + * nfq_get_timestamp(self._nfa, &self.timestamp) + */ + __pyx_t_2 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_5), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_Raise(__pyx_t_2, 0, 0); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L3; + } + __pyx_L3:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":69 + * raise OSError("Failed to get payload of packet.") + * + * nfq_get_timestamp(self._nfa, &self.timestamp) # <<<<<<<<<<<<<< + * + * cdef void verdict(self, u_int8_t verdict): + */ + nfq_get_timestamp(__pyx_v_self->_nfa, (&__pyx_v_self->timestamp)); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_nfq_data"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":71 + * nfq_get_timestamp(self._nfa, &self.timestamp) + * + * cdef void verdict(self, u_int8_t verdict): # <<<<<<<<<<<<<< + * """Call appropriate set_verdict... function on packet.""" + * #if self._verdict_is_set: + */ + +static void __pyx_f_14netfilterqueue_8NFPacket_verdict(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, u_int8_t __pyx_v_verdict) { + __Pyx_RefNannySetupContext("verdict"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":76 + * # raise RuntimeWarning("Verdict already given for this packet.") + * + * if self._mark_is_set: # <<<<<<<<<<<<<< + * nfq_set_verdict_mark( + * self._qh, + */ + if (__pyx_v_self->_mark_is_set) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":83 + * htonl(self._given_mark), + * 0, # TODO: adapt to use self._given_payload + * NULL # TODO: adapt to use self._given_payload # <<<<<<<<<<<<<< + * ) + * else: + */ + nfq_set_verdict_mark(__pyx_v_self->_qh, __pyx_v_self->id, __pyx_v_verdict, htonl(__pyx_v_self->_given_mark), 0, NULL); + goto __pyx_L3; + } + /*else*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":91 + * verdict, + * 0, # TODO: adapt to use self._given_payload + * NULL # TODO: adapt to use self._given_payload # <<<<<<<<<<<<<< + * ) + * + */ + nfq_set_verdict(__pyx_v_self->_qh, __pyx_v_self->id, __pyx_v_verdict, 0, NULL); + } + __pyx_L3:; + + __Pyx_RefNannyFinishContext(); +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":96 + * #self._verdict_is_set = True + * + * def get_payload(self): # <<<<<<<<<<<<<< + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + * return py_string + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2get_payload(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2get_payload(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_v_py_string = 0; + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_payload"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":97 + * + * def get_payload(self): + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) # <<<<<<<<<<<<<< + * return py_string + * + */ + __pyx_t_1 = PyString_FromStringAndSize(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload, ((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload_len); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 97; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_v_py_string = __pyx_t_1; + __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":98 + * def get_payload(self): + * cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + * return py_string # <<<<<<<<<<<<<< + * + * cpdef Py_ssize_t get_payload_len(self): + */ + __Pyx_XDECREF(__pyx_r); + __Pyx_INCREF(__pyx_v_py_string); + __pyx_r = __pyx_v_py_string; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_payload"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XDECREF(__pyx_v_py_string); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":100 + * return py_string + * + * cpdef Py_ssize_t get_payload_len(self): # <<<<<<<<<<<<<< + * return self.payload_len + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static Py_ssize_t __pyx_f_14netfilterqueue_8NFPacket_get_payload_len(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + Py_ssize_t __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + Py_ssize_t __pyx_t_3; + __Pyx_RefNannySetupContext("get_payload_len"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__get_payload_len); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len)) { + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_PyIndex_AsSsize_t(__pyx_t_2); if (unlikely((__pyx_t_3 == (Py_ssize_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_r = __pyx_t_3; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":101 + * + * cpdef Py_ssize_t get_payload_len(self): + * return self.payload_len # <<<<<<<<<<<<<< + * + * cpdef double get_timestamp(self): + */ + __pyx_r = __pyx_v_self->payload_len; + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_WriteUnraisable("netfilterqueue.NFPacket.get_payload_len"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":100 + * return py_string + * + * cpdef Py_ssize_t get_payload_len(self): # <<<<<<<<<<<<<< + * return self.payload_len + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_payload_len"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyInt_FromSsize_t(((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->get_payload_len(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1)); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_payload_len"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":103 + * return self.payload_len + * + * cpdef double get_timestamp(self): # <<<<<<<<<<<<<< + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static double __pyx_f_14netfilterqueue_8NFPacket_get_timestamp(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + double __pyx_r; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + double __pyx_t_3; + __Pyx_RefNannySetupContext("get_timestamp"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__get_timestamp); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp)) { + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __pyx_PyFloat_AsDouble(__pyx_t_2); if (unlikely((__pyx_t_3 == (double)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_r = __pyx_t_3; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":104 + * + * cpdef double get_timestamp(self): + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) # <<<<<<<<<<<<<< + * + * # TODO: implement this + */ + __pyx_r = (__pyx_v_self->timestamp.tv_sec + (__pyx_v_self->timestamp.tv_usec / 1000000.0)); + goto __pyx_L0; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_WriteUnraisable("netfilterqueue.NFPacket.get_timestamp"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":103 + * return self.payload_len + * + * cpdef double get_timestamp(self): # <<<<<<<<<<<<<< + * return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("get_timestamp"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyFloat_FromDouble(((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->get_timestamp(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1)); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.get_timestamp"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":111 + * # self._given_payload = payload + * + * cpdef set_mark(self, u_int32_t mark): # <<<<<<<<<<<<<< + * self._given_mark = mark + * self._mark_is_set = True + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_set_mark(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, u_int32_t __pyx_v_mark, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + __Pyx_RefNannySetupContext("set_mark"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__set_mark); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_5set_mark)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = __Pyx_PyInt_to_py_u_int32_t(__pyx_v_mark); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = PyTuple_New(1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_2); + __Pyx_GIVEREF(__pyx_t_2); + __pyx_t_2 = 0; + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_t_3), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(((PyObject *)__pyx_t_3)); __pyx_t_3 = 0; + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":112 + * + * cpdef set_mark(self, u_int32_t mark): + * self._given_mark = mark # <<<<<<<<<<<<<< + * self._mark_is_set = True + * + */ + __pyx_v_self->_given_mark = __pyx_v_mark; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":113 + * cpdef set_mark(self, u_int32_t mark): + * self._given_mark = mark + * self._mark_is_set = True # <<<<<<<<<<<<<< + * + * cpdef accept(self): + */ + __pyx_v_self->_mark_is_set = 1; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":111 + * # self._given_payload = payload + * + * cpdef set_mark(self, u_int32_t mark): # <<<<<<<<<<<<<< + * self._given_mark = mark + * self._mark_is_set = True + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_5set_mark(PyObject *__pyx_v_self, PyObject *__pyx_arg_mark) { + u_int32_t __pyx_v_mark; + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("set_mark"); + assert(__pyx_arg_mark); { + __pyx_v_mark = __Pyx_PyInt_from_py_u_int32_t(__pyx_arg_mark); if (unlikely((__pyx_v_mark == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + goto __pyx_L4_argument_unpacking_done; + __pyx_L3_error:; + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __Pyx_RefNannyFinishContext(); + return NULL; + __pyx_L4_argument_unpacking_done:; + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->set_mark(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), __pyx_v_mark, 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 111; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.set_mark"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":115 + * self._mark_is_set = True + * + * cpdef accept(self): # <<<<<<<<<<<<<< + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_accept(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("accept"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__accept); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_6accept)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":117 + * cpdef accept(self): + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) # <<<<<<<<<<<<<< + * + * cpdef drop(self): + */ + ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_self->__pyx_vtab)->verdict(__pyx_v_self, __pyx_e_14netfilterqueue_NF_ACCEPT); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.accept"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":115 + * self._mark_is_set = True + * + * cpdef accept(self): # <<<<<<<<<<<<<< + * """Accept the packet.""" + * self.verdict(NF_ACCEPT) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_8NFPacket_6accept[] = "Accept the packet."; +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_6accept(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("accept"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->accept(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 115; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.accept"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":119 + * self.verdict(NF_ACCEPT) + * + * cpdef drop(self): # <<<<<<<<<<<<<< + * """Drop the packet.""" + * self.verdict(NF_DROP) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static PyObject *__pyx_f_14netfilterqueue_8NFPacket_drop(struct __pyx_obj_14netfilterqueue_NFPacket *__pyx_v_self, int __pyx_skip_dispatch) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + PyObject *__pyx_t_2 = NULL; + __Pyx_RefNannySetupContext("drop"); + /* Check if called by wrapper */ + if (unlikely(__pyx_skip_dispatch)) ; + /* Check if overriden in Python */ + else if (unlikely(Py_TYPE(((PyObject *)__pyx_v_self))->tp_dictoffset != 0)) { + __pyx_t_1 = PyObject_GetAttr(((PyObject *)__pyx_v_self), __pyx_n_s__drop); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (!PyCFunction_Check(__pyx_t_1) || (PyCFunction_GET_FUNCTION(__pyx_t_1) != (void *)&__pyx_pf_14netfilterqueue_8NFPacket_7drop)) { + __Pyx_XDECREF(__pyx_r); + __pyx_t_2 = PyObject_Call(__pyx_t_1, ((PyObject *)__pyx_empty_tuple), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_r = __pyx_t_2; + __pyx_t_2 = 0; + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + goto __pyx_L0; + } + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":121 + * cpdef drop(self): + * """Drop the packet.""" + * self.verdict(NF_DROP) # <<<<<<<<<<<<<< + * + * cdef class NFQueue: + */ + ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)__pyx_v_self->__pyx_vtab)->verdict(__pyx_v_self, __pyx_e_14netfilterqueue_NF_DROP); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_XDECREF(__pyx_t_2); + __Pyx_AddTraceback("netfilterqueue.NFPacket.drop"); + __pyx_r = 0; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":119 + * self.verdict(NF_ACCEPT) + * + * cpdef drop(self): # <<<<<<<<<<<<<< + * """Drop the packet.""" + * self.verdict(NF_DROP) + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_8NFPacket_7drop[] = "Drop the packet."; +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7drop(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("drop"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->__pyx_vtab)->drop(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self), 1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 119; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.drop"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":162 + * + * # From NFQ packet header: + * cdef readonly u_int32_t id # <<<<<<<<<<<<<< + * cdef readonly u_int16_t hw_protocol + * cdef readonly u_int8_t hook + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int32_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->id); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 162; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.id.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":163 + * # From NFQ packet header: + * cdef readonly u_int32_t id + * cdef readonly u_int16_t hw_protocol # <<<<<<<<<<<<<< + * cdef readonly u_int8_t hook + * + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int16_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->hw_protocol); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 163; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.hw_protocol.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":164 + * cdef readonly u_int32_t id + * cdef readonly u_int16_t hw_protocol + * cdef readonly u_int8_t hook # <<<<<<<<<<<<<< + * + * # Packet details: + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = __Pyx_PyInt_to_py_u_int8_t(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->hook); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 164; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __pyx_r = __pyx_t_1; + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.hook.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pxd":168 + * # Packet details: + * cdef Py_ssize_t payload_len + * cdef readonly char *payload # <<<<<<<<<<<<<< + * cdef timeval timestamp + * # TODO: implement these + */ + +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(PyObject *__pyx_v_self); /*proto*/ +static PyObject *__pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(PyObject *__pyx_v_self) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("__get__"); + __Pyx_XDECREF(__pyx_r); + __pyx_t_1 = PyBytes_FromString(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_self)->payload); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 168; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_1)); + __pyx_r = ((PyObject *)__pyx_t_1); + __pyx_t_1 = 0; + goto __pyx_L0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFPacket.payload.__get__"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":125 + * cdef class NFQueue: + * """Handle a single numbered queue.""" + * def __cinit__(self, *args, **kwargs): # <<<<<<<<<<<<<< + * if "af" in kwargs: + * self.af = kwargs["af"] + */ + +static int __pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static int __pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + PyObject *__pyx_v_args = 0; + PyObject *__pyx_v_kwargs = 0; + int __pyx_r; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + u_int16_t __pyx_t_3; + PyObject *__pyx_t_4 = NULL; + __Pyx_RefNannySetupContext("__cinit__"); + if (unlikely(__pyx_kwds) && unlikely(!__Pyx_CheckKeywordStrings(__pyx_kwds, "__cinit__", 1))) return -1; + __pyx_v_kwargs = (__pyx_kwds) ? PyDict_Copy(__pyx_kwds) : PyDict_New(); + if (unlikely(!__pyx_v_kwargs)) return -1; + __Pyx_GOTREF(__pyx_v_kwargs); + __Pyx_INCREF(__pyx_args); + __pyx_v_args = __pyx_args; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":126 + * """Handle a single numbered queue.""" + * def __cinit__(self, *args, **kwargs): + * if "af" in kwargs: # <<<<<<<<<<<<<< + * self.af = kwargs["af"] + * else: + */ + if (unlikely(__pyx_v_kwargs == Py_None)) { + PyErr_SetString(PyExc_TypeError, "'NoneType' object is not iterable"); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 126; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + } + __pyx_t_1 = ((PyDict_Contains(((PyObject *)__pyx_v_kwargs), ((PyObject *)__pyx_n_s__af)))); if (unlikely(__pyx_t_1 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 126; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":127 + * def __cinit__(self, *args, **kwargs): + * if "af" in kwargs: + * self.af = kwargs["af"] # <<<<<<<<<<<<<< + * else: + * self.af = socket.AF_INET + */ + __pyx_t_2 = __Pyx_PyDict_GetItem(((PyObject *)__pyx_v_kwargs), ((PyObject *)__pyx_n_s__af)); if (!__pyx_t_2) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 127; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = __Pyx_PyInt_from_py_u_int16_t(__pyx_t_2); if (unlikely((__pyx_t_3 == (u_int16_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 127; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af = __pyx_t_3; + goto __pyx_L5; + } + /*else*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":129 + * self.af = kwargs["af"] + * else: + * self.af = socket.AF_INET # <<<<<<<<<<<<<< + * + * self.h = nfq_open() + */ + __pyx_t_2 = __Pyx_GetName(__pyx_m, __pyx_n_s__socket); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_4 = PyObject_GetAttr(__pyx_t_2, __pyx_n_s__AF_INET); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_t_3 = __Pyx_PyInt_from_py_u_int16_t(__pyx_t_4); if (unlikely((__pyx_t_3 == (u_int16_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 129; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af = __pyx_t_3; + } + __pyx_L5:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":131 + * self.af = socket.AF_INET + * + * self.h = nfq_open() # <<<<<<<<<<<<<< + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") + */ + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h = nfq_open(); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":132 + * + * self.h = nfq_open() + * if self.h == NULL: # <<<<<<<<<<<<<< + * raise OSError("Failed to open NFQueue.") + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h == NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":133 + * self.h = nfq_open() + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") # <<<<<<<<<<<<<< + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + */ + __pyx_t_4 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_7), NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __Pyx_Raise(__pyx_t_4, 0, 0); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L6; + } + __pyx_L6:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":134 + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous # <<<<<<<<<<<<<< + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: + */ + nfq_unbind_pf(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":136 + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to bind family %s." % self.af) + * + */ + __pyx_t_1 = (nfq_bind_pf(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af) < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":137 + * # running queues + * if nfq_bind_pf(self.h, self.af) < 0: + * raise OSError("Failed to bind family %s." % self.af) # <<<<<<<<<<<<<< + * + * def __dealloc__(self): + */ + __pyx_t_4 = __Pyx_PyInt_to_py_u_int16_t(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->af); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_4); + __pyx_t_2 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_8), __pyx_t_4); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0; + __pyx_t_4 = PyTuple_New(1); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_4)); + PyTuple_SET_ITEM(__pyx_t_4, 0, ((PyObject *)__pyx_t_2)); + __Pyx_GIVEREF(((PyObject *)__pyx_t_2)); + __pyx_t_2 = 0; + __pyx_t_2 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_t_4), NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __Pyx_DECREF(((PyObject *)__pyx_t_4)); __pyx_t_4 = 0; + __Pyx_Raise(__pyx_t_2, 0, 0); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 137; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L7; + } + __pyx_L7:; + + __pyx_r = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_4); + __Pyx_AddTraceback("netfilterqueue.NFQueue.__cinit__"); + __pyx_r = -1; + __pyx_L0:; + __Pyx_DECREF(__pyx_v_args); + __Pyx_DECREF(__pyx_v_kwargs); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":139 + * raise OSError("Failed to bind family %s." % self.af) + * + * def __dealloc__(self): # <<<<<<<<<<<<<< + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) + */ + +static void __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(PyObject *__pyx_v_self); /*proto*/ +static void __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(PyObject *__pyx_v_self) { + int __pyx_t_1; + __Pyx_RefNannySetupContext("__dealloc__"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":140 + * + * def __dealloc__(self): + * if self.qh != NULL: # <<<<<<<<<<<<<< + * nfq_destroy_queue(self.qh) + * # Don't call nfq_unbind_pf unless you want to disconnect any other + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh != NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":141 + * def __dealloc__(self): + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) # <<<<<<<<<<<<<< + * # Don't call nfq_unbind_pf unless you want to disconnect any other + * # processes using this libnetfilter_queue on this protocol family! + */ + nfq_destroy_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh); + goto __pyx_L5; + } + __pyx_L5:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":144 + * # Don't call nfq_unbind_pf unless you want to disconnect any other + * # processes using this libnetfilter_queue on this protocol family! + * nfq_close(self.h) # <<<<<<<<<<<<<< + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + */ + nfq_close(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h); + + __Pyx_RefNannyFinishContext(); +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":146 + * nfq_close(self.h) + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): # <<<<<<<<<<<<<< + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_2bind(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_2bind[] = "Create a new queue with the given callback function."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_2bind(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) { + PyObject *__pyx_v_handler = 0; + int __pyx_v_queue_num; + u_int32_t __pyx_v_maxlen; + u_int8_t __pyx_v_mode; + u_int32_t __pyx_v_range; + PyObject *__pyx_r = NULL; + int __pyx_t_1; + PyObject *__pyx_t_2 = NULL; + PyObject *__pyx_t_3 = NULL; + static PyObject **__pyx_pyargnames[] = {&__pyx_n_s__handler,&__pyx_n_s__queue_num,&__pyx_n_s__maxlen,&__pyx_n_s__mode,&__pyx_n_s__range,0}; + __Pyx_RefNannySetupContext("bind"); + if (unlikely(__pyx_kwds)) { + Py_ssize_t kw_args = PyDict_Size(__pyx_kwds); + PyObject* values[5] = {0,0,0,0,0}; + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 5: values[4] = PyTuple_GET_ITEM(__pyx_args, 4); + case 4: values[3] = PyTuple_GET_ITEM(__pyx_args, 3); + case 3: values[2] = PyTuple_GET_ITEM(__pyx_args, 2); + case 2: values[1] = PyTuple_GET_ITEM(__pyx_args, 1); + case 1: values[0] = PyTuple_GET_ITEM(__pyx_args, 0); + case 0: break; + default: goto __pyx_L5_argtuple_error; + } + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 0: + values[0] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__handler); + if (likely(values[0])) kw_args--; + else goto __pyx_L5_argtuple_error; + case 1: + values[1] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__queue_num); + if (likely(values[1])) kw_args--; + else { + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, 1); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + case 2: + values[2] = PyDict_GetItem(__pyx_kwds, __pyx_n_s__maxlen); + if (likely(values[2])) kw_args--; + else { + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, 2); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + case 3: + if (kw_args > 0) { + PyObject* value = PyDict_GetItem(__pyx_kwds, __pyx_n_s__mode); + if (value) { values[3] = value; kw_args--; } + } + case 4: + if (kw_args > 0) { + PyObject* value = PyDict_GetItem(__pyx_kwds, __pyx_n_s__range); + if (value) { values[4] = value; kw_args--; } + } + } + if (unlikely(kw_args > 0)) { + if (unlikely(__Pyx_ParseOptionalKeywords(__pyx_kwds, __pyx_pyargnames, 0, values, PyTuple_GET_SIZE(__pyx_args), "bind") < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } + __pyx_v_handler = values[0]; + __pyx_v_queue_num = __Pyx_PyInt_AsInt(values[1]); if (unlikely((__pyx_v_queue_num == (int)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_maxlen = __Pyx_PyInt_from_py_u_int32_t(values[2]); if (unlikely((__pyx_v_maxlen == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + if (values[3]) { + __pyx_v_mode = __Pyx_PyInt_from_py_u_int8_t(values[3]); if (unlikely((__pyx_v_mode == (u_int8_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } else { + __pyx_v_mode = __pyx_k_9; + } + if (values[4]) { + __pyx_v_range = __Pyx_PyInt_from_py_u_int32_t(values[4]); if (unlikely((__pyx_v_range == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + } else { + __pyx_v_range = ((u_int32_t)65535); + } + } else { + __pyx_v_mode = __pyx_k_9; + __pyx_v_range = ((u_int32_t)65535); + switch (PyTuple_GET_SIZE(__pyx_args)) { + case 5: + __pyx_v_range = __Pyx_PyInt_from_py_u_int32_t(PyTuple_GET_ITEM(__pyx_args, 4)); if (unlikely((__pyx_v_range == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + case 4: + __pyx_v_mode = __Pyx_PyInt_from_py_u_int8_t(PyTuple_GET_ITEM(__pyx_args, 3)); if (unlikely((__pyx_v_mode == (u_int8_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + case 3: + __pyx_v_maxlen = __Pyx_PyInt_from_py_u_int32_t(PyTuple_GET_ITEM(__pyx_args, 2)); if (unlikely((__pyx_v_maxlen == (u_int32_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_queue_num = __Pyx_PyInt_AsInt(PyTuple_GET_ITEM(__pyx_args, 1)); if (unlikely((__pyx_v_queue_num == (int)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_v_handler = PyTuple_GET_ITEM(__pyx_args, 0); + break; + default: goto __pyx_L5_argtuple_error; + } + } + goto __pyx_L4_argument_unpacking_done; + __pyx_L5_argtuple_error:; + __Pyx_RaiseArgtupleInvalid("bind", 0, 3, 5, PyTuple_GET_SIZE(__pyx_args)); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 146; __pyx_clineno = __LINE__; goto __pyx_L3_error;} + __pyx_L3_error:; + __Pyx_AddTraceback("netfilterqueue.NFQueue.bind"); + __Pyx_RefNannyFinishContext(); + return NULL; + __pyx_L4_argument_unpacking_done:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":148 + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) # <<<<<<<<<<<<<< + * if self.qh == NULL: + * raise OSError("Failed to create queue %s." % queue_num) + */ + ((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh = nfq_create_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, __pyx_v_queue_num, ((nfq_callback *)__pyx_f_14netfilterqueue_global_callback), ((void *)__pyx_v_handler)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":149 + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + * if self.qh == NULL: # <<<<<<<<<<<<<< + * raise OSError("Failed to create queue %s." % queue_num) + * + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh == NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":150 + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + * if self.qh == NULL: + * raise OSError("Failed to create queue %s." % queue_num) # <<<<<<<<<<<<<< + * + * if range > MaxCopySize: + */ + __pyx_t_2 = PyInt_FromLong(__pyx_v_queue_num); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_2); + __pyx_t_3 = PyNumber_Remainder(((PyObject *)__pyx_kp_s_10), __pyx_t_2); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_3)); + __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0; + __pyx_t_2 = PyTuple_New(1); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_2)); + PyTuple_SET_ITEM(__pyx_t_2, 0, ((PyObject *)__pyx_t_3)); + __Pyx_GIVEREF(((PyObject *)__pyx_t_3)); + __pyx_t_3 = 0; + __pyx_t_3 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_t_2), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_DECREF(((PyObject *)__pyx_t_2)); __pyx_t_2 = 0; + __Pyx_Raise(__pyx_t_3, 0, 0); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 150; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L6; + } + __pyx_L6:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":152 + * raise OSError("Failed to create queue %s." % queue_num) + * + * if range > MaxCopySize: # <<<<<<<<<<<<<< + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + */ + __pyx_t_1 = (__pyx_v_range > 4016); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":153 + * + * if range > MaxCopySize: + * range = MaxCopySize # <<<<<<<<<<<<<< + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") + */ + __pyx_v_range = 4016; + goto __pyx_L7; + } + __pyx_L7:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":154 + * if range > MaxCopySize: + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: # <<<<<<<<<<<<<< + * raise OSError("Failed to set packet copy mode.") + * + */ + __pyx_t_1 = (nfq_set_mode(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh, __pyx_v_mode, __pyx_v_range) < 0); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":155 + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") # <<<<<<<<<<<<<< + * + * nfq_set_queue_maxlen(self.qh, maxlen) + */ + __pyx_t_3 = PyObject_Call(__pyx_builtin_OSError, ((PyObject *)__pyx_k_tuple_12), NULL); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_3); + __Pyx_Raise(__pyx_t_3, 0, 0); + __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0; + {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + goto __pyx_L8; + } + __pyx_L8:; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":157 + * raise OSError("Failed to set packet copy mode.") + * + * nfq_set_queue_maxlen(self.qh, maxlen) # <<<<<<<<<<<<<< + * + * def unbind(self): + */ + nfq_set_queue_maxlen(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh, __pyx_v_maxlen); + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_2); + __Pyx_XDECREF(__pyx_t_3); + __Pyx_AddTraceback("netfilterqueue.NFQueue.bind"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":159 + * nfq_set_queue_maxlen(self.qh, maxlen) + * + * def unbind(self): # <<<<<<<<<<<<<< + * """Destroy the queue.""" + * if self.qh != NULL: + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_3unbind(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_3unbind[] = "Destroy the queue."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_3unbind(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + PyObject *__pyx_r = NULL; + int __pyx_t_1; + __Pyx_RefNannySetupContext("unbind"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":161 + * def unbind(self): + * """Destroy the queue.""" + * if self.qh != NULL: # <<<<<<<<<<<<<< + * nfq_destroy_queue(self.qh) + * # See warning about nfq_unbind_pf in __dealloc__ above. + */ + __pyx_t_1 = (((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh != NULL); + if (__pyx_t_1) { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":162 + * """Destroy the queue.""" + * if self.qh != NULL: + * nfq_destroy_queue(self.qh) # <<<<<<<<<<<<<< + * # See warning about nfq_unbind_pf in __dealloc__ above. + * + */ + nfq_destroy_queue(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->qh); + goto __pyx_L5; + } + __pyx_L5:; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":165 + * # See warning about nfq_unbind_pf in __dealloc__ above. + * + * def run(self): # <<<<<<<<<<<<<< + * """Begin accepting packets.""" + * cdef int fd = nfq_fd(self.h) + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_4run(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_4run[] = "Begin accepting packets."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_4run(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) { + int __pyx_v_fd; + char __pyx_v_buf[4096]; + int __pyx_v_rv; + PyObject *__pyx_r = NULL; + int __pyx_t_1; + __Pyx_RefNannySetupContext("run"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":167 + * def run(self): + * """Begin accepting packets.""" + * cdef int fd = nfq_fd(self.h) # <<<<<<<<<<<<<< + * cdef char buf[BufferSize] + * cdef int rv + */ + __pyx_v_fd = nfq_fd(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":170 + * cdef char buf[BufferSize] + * cdef int rv + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + */ + { + #ifdef WITH_THREAD + PyThreadState *_save; + #endif + Py_UNBLOCK_THREADS + /*try:*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":171 + * cdef int rv + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) # <<<<<<<<<<<<<< + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + */ + __pyx_v_rv = recv(__pyx_v_fd, __pyx_v_buf, (sizeof(__pyx_v_buf)), 0); + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":170 + * cdef char buf[BufferSize] + * cdef int rv + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + */ + /*finally:*/ { + Py_BLOCK_THREADS + } + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":172 + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: # <<<<<<<<<<<<<< + * nfq_handle_packet(self.h, buf, rv) + * with nogil: + */ + while (1) { + __pyx_t_1 = (__pyx_v_rv >= 0); + if (!__pyx_t_1) break; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":173 + * rv = recv(fd, buf, sizeof(buf), 0) + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) # <<<<<<<<<<<<<< + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) + */ + nfq_handle_packet(((struct __pyx_obj_14netfilterqueue_NFQueue *)__pyx_v_self)->h, __pyx_v_buf, __pyx_v_rv); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":174 + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * + */ + { + #ifdef WITH_THREAD + PyThreadState *_save; + #endif + Py_UNBLOCK_THREADS + /*try:*/ { + + /* "/root/NetfilterQueue/netfilterqueue.pyx":175 + * nfq_handle_packet(self.h, buf, rv) + * with nogil: + * rv = recv(fd, buf, sizeof(buf), 0) # <<<<<<<<<<<<<< + * + * def handle(self, NFPacket packet): + */ + __pyx_v_rv = recv(__pyx_v_fd, __pyx_v_buf, (sizeof(__pyx_v_buf)), 0); + } + + /* "/root/NetfilterQueue/netfilterqueue.pyx":174 + * while rv >= 0: + * nfq_handle_packet(self.h, buf, rv) + * with nogil: # <<<<<<<<<<<<<< + * rv = recv(fd, buf, sizeof(buf), 0) + * + */ + /*finally:*/ { + Py_BLOCK_THREADS + } + } + } + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} + +/* "/root/NetfilterQueue/netfilterqueue.pyx":177 + * rv = recv(fd, buf, sizeof(buf), 0) + * + * def handle(self, NFPacket packet): # <<<<<<<<<<<<<< + * """Handle a single packet. User-defined classes should override this.""" + * packet.accept() + */ + +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_5handle(PyObject *__pyx_v_self, PyObject *__pyx_v_packet); /*proto*/ +static char __pyx_doc_14netfilterqueue_7NFQueue_5handle[] = "Handle a single packet. User-defined classes should override this."; +static PyObject *__pyx_pf_14netfilterqueue_7NFQueue_5handle(PyObject *__pyx_v_self, PyObject *__pyx_v_packet) { + PyObject *__pyx_r = NULL; + PyObject *__pyx_t_1 = NULL; + __Pyx_RefNannySetupContext("handle"); + if (unlikely(!__Pyx_ArgTypeTest(((PyObject *)__pyx_v_packet), __pyx_ptype_14netfilterqueue_NFPacket, 1, "packet", 0))) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 177; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":179 + * def handle(self, NFPacket packet): + * """Handle a single packet. User-defined classes should override this.""" + * packet.accept() # <<<<<<<<<<<<<< + */ + __pyx_t_1 = ((struct __pyx_vtabstruct_14netfilterqueue_NFPacket *)((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_packet)->__pyx_vtab)->accept(((struct __pyx_obj_14netfilterqueue_NFPacket *)__pyx_v_packet), 0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 179; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + __pyx_r = Py_None; __Pyx_INCREF(Py_None); + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + __Pyx_AddTraceback("netfilterqueue.NFQueue.handle"); + __pyx_r = NULL; + __pyx_L0:; + __Pyx_XGIVEREF(__pyx_r); + __Pyx_RefNannyFinishContext(); + return __pyx_r; +} +static struct __pyx_vtabstruct_14netfilterqueue_NFPacket __pyx_vtable_14netfilterqueue_NFPacket; + +static PyObject *__pyx_tp_new_14netfilterqueue_NFPacket(PyTypeObject *t, PyObject *a, PyObject *k) { + struct __pyx_obj_14netfilterqueue_NFPacket *p; + PyObject *o = (*t->tp_alloc)(t, 0); + if (!o) return 0; + p = ((struct __pyx_obj_14netfilterqueue_NFPacket *)o); + p->__pyx_vtab = __pyx_vtabptr_14netfilterqueue_NFPacket; + if (__pyx_pf_14netfilterqueue_8NFPacket_0__cinit__(o, __pyx_empty_tuple, NULL) < 0) { + Py_DECREF(o); o = 0; + } + return o; +} + +static void __pyx_tp_dealloc_14netfilterqueue_NFPacket(PyObject *o) { + (*Py_TYPE(o)->tp_free)(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_id(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_2id_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_hw_protocol(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_11hw_protocol_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_hook(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_4hook_0__get__(o); +} + +static PyObject *__pyx_getprop_14netfilterqueue_8NFPacket_payload(PyObject *o, void *x) { + return __pyx_pf_14netfilterqueue_8NFPacket_7payload_0__get__(o); +} + +static PyMethodDef __pyx_methods_14netfilterqueue_NFPacket[] = { + {__Pyx_NAMESTR("get_payload"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_2get_payload, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("get_payload_len"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_3get_payload_len, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("get_timestamp"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_4get_timestamp, METH_NOARGS, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("set_mark"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_5set_mark, METH_O, __Pyx_DOCSTR(0)}, + {__Pyx_NAMESTR("accept"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_6accept, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_8NFPacket_6accept)}, + {__Pyx_NAMESTR("drop"), (PyCFunction)__pyx_pf_14netfilterqueue_8NFPacket_7drop, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_8NFPacket_7drop)}, + {0, 0, 0, 0} +}; + +static struct PyGetSetDef __pyx_getsets_14netfilterqueue_NFPacket[] = { + {(char *)"id", __pyx_getprop_14netfilterqueue_8NFPacket_id, 0, 0, 0}, + {(char *)"hw_protocol", __pyx_getprop_14netfilterqueue_8NFPacket_hw_protocol, 0, 0, 0}, + {(char *)"hook", __pyx_getprop_14netfilterqueue_8NFPacket_hook, 0, 0, 0}, + {(char *)"payload", __pyx_getprop_14netfilterqueue_8NFPacket_payload, 0, 0, 0}, + {0, 0, 0, 0, 0} +}; + +static PyNumberMethods __pyx_tp_as_number_NFPacket = { + 0, /*nb_add*/ + 0, /*nb_subtract*/ + 0, /*nb_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_divide*/ + #endif + 0, /*nb_remainder*/ + 0, /*nb_divmod*/ + 0, /*nb_power*/ + 0, /*nb_negative*/ + 0, /*nb_positive*/ + 0, /*nb_absolute*/ + 0, /*nb_nonzero*/ + 0, /*nb_invert*/ + 0, /*nb_lshift*/ + 0, /*nb_rshift*/ + 0, /*nb_and*/ + 0, /*nb_xor*/ + 0, /*nb_or*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_coerce*/ + #endif + 0, /*nb_int*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_long*/ + #else + 0, /*reserved*/ + #endif + 0, /*nb_float*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_oct*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*nb_hex*/ + #endif + 0, /*nb_inplace_add*/ + 0, /*nb_inplace_subtract*/ + 0, /*nb_inplace_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_inplace_divide*/ + #endif + 0, /*nb_inplace_remainder*/ + 0, /*nb_inplace_power*/ + 0, /*nb_inplace_lshift*/ + 0, /*nb_inplace_rshift*/ + 0, /*nb_inplace_and*/ + 0, /*nb_inplace_xor*/ + 0, /*nb_inplace_or*/ + 0, /*nb_floor_divide*/ + 0, /*nb_true_divide*/ + 0, /*nb_inplace_floor_divide*/ + 0, /*nb_inplace_true_divide*/ + #if PY_VERSION_HEX >= 0x02050000 + 0, /*nb_index*/ + #endif +}; + +static PySequenceMethods __pyx_tp_as_sequence_NFPacket = { + 0, /*sq_length*/ + 0, /*sq_concat*/ + 0, /*sq_repeat*/ + 0, /*sq_item*/ + 0, /*sq_slice*/ + 0, /*sq_ass_item*/ + 0, /*sq_ass_slice*/ + 0, /*sq_contains*/ + 0, /*sq_inplace_concat*/ + 0, /*sq_inplace_repeat*/ +}; + +static PyMappingMethods __pyx_tp_as_mapping_NFPacket = { + 0, /*mp_length*/ + 0, /*mp_subscript*/ + 0, /*mp_ass_subscript*/ +}; + +static PyBufferProcs __pyx_tp_as_buffer_NFPacket = { + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getreadbuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getwritebuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getsegcount*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getcharbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_getbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_releasebuffer*/ + #endif +}; + +PyTypeObject __pyx_type_14netfilterqueue_NFPacket = { + PyVarObject_HEAD_INIT(0, 0) + __Pyx_NAMESTR("netfilterqueue.NFPacket"), /*tp_name*/ + sizeof(struct __pyx_obj_14netfilterqueue_NFPacket), /*tp_basicsize*/ + 0, /*tp_itemsize*/ + __pyx_tp_dealloc_14netfilterqueue_NFPacket, /*tp_dealloc*/ + 0, /*tp_print*/ + 0, /*tp_getattr*/ + 0, /*tp_setattr*/ + #if PY_MAJOR_VERSION < 3 + 0, /*tp_compare*/ + #else + 0, /*reserved*/ + #endif + 0, /*tp_repr*/ + &__pyx_tp_as_number_NFPacket, /*tp_as_number*/ + &__pyx_tp_as_sequence_NFPacket, /*tp_as_sequence*/ + &__pyx_tp_as_mapping_NFPacket, /*tp_as_mapping*/ + 0, /*tp_hash*/ + 0, /*tp_call*/ + __pyx_pf_14netfilterqueue_8NFPacket_1__str__, /*tp_str*/ + 0, /*tp_getattro*/ + 0, /*tp_setattro*/ + &__pyx_tp_as_buffer_NFPacket, /*tp_as_buffer*/ + Py_TPFLAGS_DEFAULT|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_BASETYPE, /*tp_flags*/ + __Pyx_DOCSTR("A packet received from NFQueue."), /*tp_doc*/ + 0, /*tp_traverse*/ + 0, /*tp_clear*/ + 0, /*tp_richcompare*/ + 0, /*tp_weaklistoffset*/ + 0, /*tp_iter*/ + 0, /*tp_iternext*/ + __pyx_methods_14netfilterqueue_NFPacket, /*tp_methods*/ + 0, /*tp_members*/ + __pyx_getsets_14netfilterqueue_NFPacket, /*tp_getset*/ + 0, /*tp_base*/ + 0, /*tp_dict*/ + 0, /*tp_descr_get*/ + 0, /*tp_descr_set*/ + 0, /*tp_dictoffset*/ + 0, /*tp_init*/ + 0, /*tp_alloc*/ + __pyx_tp_new_14netfilterqueue_NFPacket, /*tp_new*/ + 0, /*tp_free*/ + 0, /*tp_is_gc*/ + 0, /*tp_bases*/ + 0, /*tp_mro*/ + 0, /*tp_cache*/ + 0, /*tp_subclasses*/ + 0, /*tp_weaklist*/ + 0, /*tp_del*/ + #if PY_VERSION_HEX >= 0x02060000 + 0, /*tp_version_tag*/ + #endif +}; + +static PyObject *__pyx_tp_new_14netfilterqueue_NFQueue(PyTypeObject *t, PyObject *a, PyObject *k) { + struct __pyx_obj_14netfilterqueue_NFQueue *p; + PyObject *o = (*t->tp_alloc)(t, 0); + if (!o) return 0; + p = ((struct __pyx_obj_14netfilterqueue_NFQueue *)o); + p->packet_copy_size = Py_None; Py_INCREF(Py_None); + if (__pyx_pf_14netfilterqueue_7NFQueue_0__cinit__(o, a, k) < 0) { + Py_DECREF(o); o = 0; + } + return o; +} + +static void __pyx_tp_dealloc_14netfilterqueue_NFQueue(PyObject *o) { + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + { + PyObject *etype, *eval, *etb; + PyErr_Fetch(&etype, &eval, &etb); + ++Py_REFCNT(o); + __pyx_pf_14netfilterqueue_7NFQueue_1__dealloc__(o); + if (PyErr_Occurred()) PyErr_WriteUnraisable(o); + --Py_REFCNT(o); + PyErr_Restore(etype, eval, etb); + } + Py_XDECREF(p->packet_copy_size); + (*Py_TYPE(o)->tp_free)(o); +} + +static int __pyx_tp_traverse_14netfilterqueue_NFQueue(PyObject *o, visitproc v, void *a) { + int e; + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + if (p->packet_copy_size) { + e = (*v)(p->packet_copy_size, a); if (e) return e; + } + return 0; +} + +static int __pyx_tp_clear_14netfilterqueue_NFQueue(PyObject *o) { + struct __pyx_obj_14netfilterqueue_NFQueue *p = (struct __pyx_obj_14netfilterqueue_NFQueue *)o; + PyObject* tmp; + tmp = ((PyObject*)p->packet_copy_size); + p->packet_copy_size = Py_None; Py_INCREF(Py_None); + Py_XDECREF(tmp); + return 0; +} + +static PyMethodDef __pyx_methods_14netfilterqueue_NFQueue[] = { + {__Pyx_NAMESTR("bind"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_2bind, METH_VARARGS|METH_KEYWORDS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_2bind)}, + {__Pyx_NAMESTR("unbind"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_3unbind, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_3unbind)}, + {__Pyx_NAMESTR("run"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_4run, METH_NOARGS, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_4run)}, + {__Pyx_NAMESTR("handle"), (PyCFunction)__pyx_pf_14netfilterqueue_7NFQueue_5handle, METH_O, __Pyx_DOCSTR(__pyx_doc_14netfilterqueue_7NFQueue_5handle)}, + {0, 0, 0, 0} +}; + +static PyNumberMethods __pyx_tp_as_number_NFQueue = { + 0, /*nb_add*/ + 0, /*nb_subtract*/ + 0, /*nb_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_divide*/ + #endif + 0, /*nb_remainder*/ + 0, /*nb_divmod*/ + 0, /*nb_power*/ + 0, /*nb_negative*/ + 0, /*nb_positive*/ + 0, /*nb_absolute*/ + 0, /*nb_nonzero*/ + 0, /*nb_invert*/ + 0, /*nb_lshift*/ + 0, /*nb_rshift*/ + 0, /*nb_and*/ + 0, /*nb_xor*/ + 0, /*nb_or*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_coerce*/ + #endif + 0, /*nb_int*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_long*/ + #else + 0, /*reserved*/ + #endif + 0, /*nb_float*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_oct*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*nb_hex*/ + #endif + 0, /*nb_inplace_add*/ + 0, /*nb_inplace_subtract*/ + 0, /*nb_inplace_multiply*/ + #if PY_MAJOR_VERSION < 3 + 0, /*nb_inplace_divide*/ + #endif + 0, /*nb_inplace_remainder*/ + 0, /*nb_inplace_power*/ + 0, /*nb_inplace_lshift*/ + 0, /*nb_inplace_rshift*/ + 0, /*nb_inplace_and*/ + 0, /*nb_inplace_xor*/ + 0, /*nb_inplace_or*/ + 0, /*nb_floor_divide*/ + 0, /*nb_true_divide*/ + 0, /*nb_inplace_floor_divide*/ + 0, /*nb_inplace_true_divide*/ + #if PY_VERSION_HEX >= 0x02050000 + 0, /*nb_index*/ + #endif +}; + +static PySequenceMethods __pyx_tp_as_sequence_NFQueue = { + 0, /*sq_length*/ + 0, /*sq_concat*/ + 0, /*sq_repeat*/ + 0, /*sq_item*/ + 0, /*sq_slice*/ + 0, /*sq_ass_item*/ + 0, /*sq_ass_slice*/ + 0, /*sq_contains*/ + 0, /*sq_inplace_concat*/ + 0, /*sq_inplace_repeat*/ +}; + +static PyMappingMethods __pyx_tp_as_mapping_NFQueue = { + 0, /*mp_length*/ + 0, /*mp_subscript*/ + 0, /*mp_ass_subscript*/ +}; + +static PyBufferProcs __pyx_tp_as_buffer_NFQueue = { + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getreadbuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getwritebuffer*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getsegcount*/ + #endif + #if PY_MAJOR_VERSION < 3 + 0, /*bf_getcharbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_getbuffer*/ + #endif + #if PY_VERSION_HEX >= 0x02060000 + 0, /*bf_releasebuffer*/ + #endif +}; + +PyTypeObject __pyx_type_14netfilterqueue_NFQueue = { + PyVarObject_HEAD_INIT(0, 0) + __Pyx_NAMESTR("netfilterqueue.NFQueue"), /*tp_name*/ + sizeof(struct __pyx_obj_14netfilterqueue_NFQueue), /*tp_basicsize*/ + 0, /*tp_itemsize*/ + __pyx_tp_dealloc_14netfilterqueue_NFQueue, /*tp_dealloc*/ + 0, /*tp_print*/ + 0, /*tp_getattr*/ + 0, /*tp_setattr*/ + #if PY_MAJOR_VERSION < 3 + 0, /*tp_compare*/ + #else + 0, /*reserved*/ + #endif + 0, /*tp_repr*/ + &__pyx_tp_as_number_NFQueue, /*tp_as_number*/ + &__pyx_tp_as_sequence_NFQueue, /*tp_as_sequence*/ + &__pyx_tp_as_mapping_NFQueue, /*tp_as_mapping*/ + 0, /*tp_hash*/ + 0, /*tp_call*/ + 0, /*tp_str*/ + 0, /*tp_getattro*/ + 0, /*tp_setattro*/ + &__pyx_tp_as_buffer_NFQueue, /*tp_as_buffer*/ + Py_TPFLAGS_DEFAULT|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_BASETYPE|Py_TPFLAGS_HAVE_GC, /*tp_flags*/ + __Pyx_DOCSTR("Handle a single numbered queue."), /*tp_doc*/ + __pyx_tp_traverse_14netfilterqueue_NFQueue, /*tp_traverse*/ + __pyx_tp_clear_14netfilterqueue_NFQueue, /*tp_clear*/ + 0, /*tp_richcompare*/ + 0, /*tp_weaklistoffset*/ + 0, /*tp_iter*/ + 0, /*tp_iternext*/ + __pyx_methods_14netfilterqueue_NFQueue, /*tp_methods*/ + 0, /*tp_members*/ + 0, /*tp_getset*/ + 0, /*tp_base*/ + 0, /*tp_dict*/ + 0, /*tp_descr_get*/ + 0, /*tp_descr_set*/ + 0, /*tp_dictoffset*/ + 0, /*tp_init*/ + 0, /*tp_alloc*/ + __pyx_tp_new_14netfilterqueue_NFQueue, /*tp_new*/ + 0, /*tp_free*/ + 0, /*tp_is_gc*/ + 0, /*tp_bases*/ + 0, /*tp_mro*/ + 0, /*tp_cache*/ + 0, /*tp_subclasses*/ + 0, /*tp_weaklist*/ + 0, /*tp_del*/ + #if PY_VERSION_HEX >= 0x02060000 + 0, /*tp_version_tag*/ + #endif +}; + +static PyMethodDef __pyx_methods[] = { + {0, 0, 0, 0} +}; + +#if PY_MAJOR_VERSION >= 3 +static struct PyModuleDef __pyx_moduledef = { + PyModuleDef_HEAD_INIT, + __Pyx_NAMESTR("netfilterqueue"), + 0, /* m_doc */ + -1, /* m_size */ + __pyx_methods /* m_methods */, + NULL, /* m_reload */ + NULL, /* m_traverse */ + NULL, /* m_clear */ + NULL /* m_free */ +}; +#endif + +static __Pyx_StringTabEntry __pyx_string_tab[] = { + {&__pyx_kp_s_10, __pyx_k_10, sizeof(__pyx_k_10), 0, 0, 1, 0}, + {&__pyx_kp_s_11, __pyx_k_11, sizeof(__pyx_k_11), 0, 0, 1, 0}, + {&__pyx_kp_s_2, __pyx_k_2, sizeof(__pyx_k_2), 0, 0, 1, 0}, + {&__pyx_kp_s_3, __pyx_k_3, sizeof(__pyx_k_3), 0, 0, 1, 0}, + {&__pyx_kp_s_4, __pyx_k_4, sizeof(__pyx_k_4), 0, 0, 1, 0}, + {&__pyx_kp_s_6, __pyx_k_6, sizeof(__pyx_k_6), 0, 0, 1, 0}, + {&__pyx_kp_s_8, __pyx_k_8, sizeof(__pyx_k_8), 0, 0, 1, 0}, + {&__pyx_n_s__AF_INET, __pyx_k__AF_INET, sizeof(__pyx_k__AF_INET), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_META, __pyx_k__COPY_META, sizeof(__pyx_k__COPY_META), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_NONE, __pyx_k__COPY_NONE, sizeof(__pyx_k__COPY_NONE), 0, 0, 1, 1}, + {&__pyx_n_s__COPY_PACKET, __pyx_k__COPY_PACKET, sizeof(__pyx_k__COPY_PACKET), 0, 0, 1, 1}, + {&__pyx_n_s__IPPROTO, __pyx_k__IPPROTO, sizeof(__pyx_k__IPPROTO), 0, 0, 1, 1}, + {&__pyx_n_s__OSError, __pyx_k__OSError, sizeof(__pyx_k__OSError), 0, 0, 1, 1}, + {&__pyx_n_s____main__, __pyx_k____main__, sizeof(__pyx_k____main__), 0, 0, 1, 1}, + {&__pyx_n_s____test__, __pyx_k____test__, sizeof(__pyx_k____test__), 0, 0, 1, 1}, + {&__pyx_n_s___given_mark, __pyx_k___given_mark, sizeof(__pyx_k___given_mark), 0, 0, 1, 1}, + {&__pyx_n_s___given_payload, __pyx_k___given_payload, sizeof(__pyx_k___given_payload), 0, 0, 1, 1}, + {&__pyx_n_s___hdr, __pyx_k___hdr, sizeof(__pyx_k___hdr), 0, 0, 1, 1}, + {&__pyx_n_s___mark_is_set, __pyx_k___mark_is_set, sizeof(__pyx_k___mark_is_set), 0, 0, 1, 1}, + {&__pyx_n_s___nfa, __pyx_k___nfa, sizeof(__pyx_k___nfa), 0, 0, 1, 1}, + {&__pyx_n_s___qh, __pyx_k___qh, sizeof(__pyx_k___qh), 0, 0, 1, 1}, + {&__pyx_n_s___verdict_is_set, __pyx_k___verdict_is_set, sizeof(__pyx_k___verdict_is_set), 0, 0, 1, 1}, + {&__pyx_n_s__accept, __pyx_k__accept, sizeof(__pyx_k__accept), 0, 0, 1, 1}, + {&__pyx_n_s__af, __pyx_k__af, sizeof(__pyx_k__af), 0, 0, 1, 1}, + {&__pyx_n_s__drop, __pyx_k__drop, sizeof(__pyx_k__drop), 0, 0, 1, 1}, + {&__pyx_n_s__filter, __pyx_k__filter, sizeof(__pyx_k__filter), 0, 0, 1, 1}, + {&__pyx_n_s__get_payload_len, __pyx_k__get_payload_len, sizeof(__pyx_k__get_payload_len), 0, 0, 1, 1}, + {&__pyx_n_s__get_timestamp, __pyx_k__get_timestamp, sizeof(__pyx_k__get_timestamp), 0, 0, 1, 1}, + {&__pyx_n_s__h, __pyx_k__h, sizeof(__pyx_k__h), 0, 0, 1, 1}, + {&__pyx_n_s__handle, __pyx_k__handle, sizeof(__pyx_k__handle), 0, 0, 1, 1}, + {&__pyx_n_s__handler, __pyx_k__handler, sizeof(__pyx_k__handler), 0, 0, 1, 1}, + {&__pyx_n_s__hook, __pyx_k__hook, sizeof(__pyx_k__hook), 0, 0, 1, 1}, + {&__pyx_n_s__hw_protocol, __pyx_k__hw_protocol, sizeof(__pyx_k__hw_protocol), 0, 0, 1, 1}, + {&__pyx_n_s__id, __pyx_k__id, sizeof(__pyx_k__id), 0, 0, 1, 1}, + {&__pyx_n_s__maxlen, __pyx_k__maxlen, sizeof(__pyx_k__maxlen), 0, 0, 1, 1}, + {&__pyx_n_s__mode, __pyx_k__mode, sizeof(__pyx_k__mode), 0, 0, 1, 1}, + {&__pyx_n_s__netfilterqueue, __pyx_k__netfilterqueue, sizeof(__pyx_k__netfilterqueue), 0, 0, 1, 1}, + {&__pyx_n_s__packet_id, __pyx_k__packet_id, sizeof(__pyx_k__packet_id), 0, 0, 1, 1}, + {&__pyx_n_s__payload, __pyx_k__payload, sizeof(__pyx_k__payload), 0, 0, 1, 1}, + {&__pyx_n_s__payload_len, __pyx_k__payload_len, sizeof(__pyx_k__payload_len), 0, 0, 1, 1}, + {&__pyx_n_s__protocol, __pyx_k__protocol, sizeof(__pyx_k__protocol), 0, 0, 1, 1}, + {&__pyx_n_s__qh, __pyx_k__qh, sizeof(__pyx_k__qh), 0, 0, 1, 1}, + {&__pyx_n_s__queue_num, __pyx_k__queue_num, sizeof(__pyx_k__queue_num), 0, 0, 1, 1}, + {&__pyx_n_s__range, __pyx_k__range, sizeof(__pyx_k__range), 0, 0, 1, 1}, + {&__pyx_n_s__set_mark, __pyx_k__set_mark, sizeof(__pyx_k__set_mark), 0, 0, 1, 1}, + {&__pyx_n_s__set_nfq_data, __pyx_k__set_nfq_data, sizeof(__pyx_k__set_nfq_data), 0, 0, 1, 1}, + {&__pyx_n_s__socket, __pyx_k__socket, sizeof(__pyx_k__socket), 0, 0, 1, 1}, + {&__pyx_n_s__startswith, __pyx_k__startswith, sizeof(__pyx_k__startswith), 0, 0, 1, 1}, + {&__pyx_n_s__timestamp, __pyx_k__timestamp, sizeof(__pyx_k__timestamp), 0, 0, 1, 1}, + {&__pyx_n_s__tv_sec, __pyx_k__tv_sec, sizeof(__pyx_k__tv_sec), 0, 0, 1, 1}, + {&__pyx_n_s__tv_usec, __pyx_k__tv_usec, sizeof(__pyx_k__tv_usec), 0, 0, 1, 1}, + {&__pyx_n_s__verdict, __pyx_k__verdict, sizeof(__pyx_k__verdict), 0, 0, 1, 1}, + {0, 0, 0, 0, 0, 0, 0} +}; +static int __Pyx_InitCachedBuiltins(void) { + __pyx_builtin_filter = __Pyx_GetName(__pyx_b, __pyx_n_s__filter); if (!__pyx_builtin_filter) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_builtin_OSError = __Pyx_GetName(__pyx_b, __pyx_n_s__OSError); if (!__pyx_builtin_OSError) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + return 0; + __pyx_L1_error:; + return -1; +} + +static int __Pyx_InitCachedConstants(void) { + __Pyx_RefNannySetupContext("__Pyx_InitCachedConstants"); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":47 + * cdef iphdr *hdr = self.payload + * protocol = "Unknown protocol" + * for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): # <<<<<<<<<<<<<< + * if getattr(socket, name) == hdr.protocol: + * protocol = name[8:] + */ + __pyx_k_tuple_1 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 47; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_1)); + __Pyx_INCREF(((PyObject *)__pyx_n_s__IPPROTO)); + PyTuple_SET_ITEM(__pyx_k_tuple_1, 0, ((PyObject *)__pyx_n_s__IPPROTO)); + __Pyx_GIVEREF(((PyObject *)__pyx_n_s__IPPROTO)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_1)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":67 + * self.payload_len = nfq_get_payload(self._nfa, &self.payload) + * if self.payload_len < 0: + * raise OSError("Failed to get payload of packet.") # <<<<<<<<<<<<<< + * + * nfq_get_timestamp(self._nfa, &self.timestamp) + */ + __pyx_k_tuple_5 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 67; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_5)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_4)); + PyTuple_SET_ITEM(__pyx_k_tuple_5, 0, ((PyObject *)__pyx_kp_s_4)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_4)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_5)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":133 + * self.h = nfq_open() + * if self.h == NULL: + * raise OSError("Failed to open NFQueue.") # <<<<<<<<<<<<<< + * nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + * # running queues + */ + __pyx_k_tuple_7 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 133; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_7)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_6)); + PyTuple_SET_ITEM(__pyx_k_tuple_7, 0, ((PyObject *)__pyx_kp_s_6)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_6)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_7)); + + /* "/root/NetfilterQueue/netfilterqueue.pyx":155 + * range = MaxCopySize + * if nfq_set_mode(self.qh, mode, range) < 0: + * raise OSError("Failed to set packet copy mode.") # <<<<<<<<<<<<<< + * + * nfq_set_queue_maxlen(self.qh, maxlen) + */ + __pyx_k_tuple_12 = PyTuple_New(1); if (unlikely(!__pyx_k_tuple_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 155; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_k_tuple_12)); + __Pyx_INCREF(((PyObject *)__pyx_kp_s_11)); + PyTuple_SET_ITEM(__pyx_k_tuple_12, 0, ((PyObject *)__pyx_kp_s_11)); + __Pyx_GIVEREF(((PyObject *)__pyx_kp_s_11)); + __Pyx_GIVEREF(((PyObject *)__pyx_k_tuple_12)); + __Pyx_RefNannyFinishContext(); + return 0; + __pyx_L1_error:; + __Pyx_RefNannyFinishContext(); + return -1; +} + +static int __Pyx_InitGlobals(void) { + if (__Pyx_InitStrings(__pyx_string_tab) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_1 = PyInt_FromLong(1); if (unlikely(!__pyx_int_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_2 = PyInt_FromLong(2); if (unlikely(!__pyx_int_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + __pyx_int_3 = PyInt_FromLong(3); if (unlikely(!__pyx_int_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + return 0; + __pyx_L1_error:; + return -1; +} + +#if PY_MAJOR_VERSION < 3 +PyMODINIT_FUNC initnetfilterqueue(void); /*proto*/ +PyMODINIT_FUNC initnetfilterqueue(void) +#else +PyMODINIT_FUNC PyInit_netfilterqueue(void); /*proto*/ +PyMODINIT_FUNC PyInit_netfilterqueue(void) +#endif +{ + PyObject *__pyx_t_1 = NULL; + #if CYTHON_REFNANNY + void* __pyx_refnanny = NULL; + __Pyx_RefNanny = __Pyx_RefNannyImportAPI("refnanny"); + if (!__Pyx_RefNanny) { + PyErr_Clear(); + __Pyx_RefNanny = __Pyx_RefNannyImportAPI("Cython.Runtime.refnanny"); + if (!__Pyx_RefNanny) + Py_FatalError("failed to import 'refnanny' module"); + } + __pyx_refnanny = __Pyx_RefNanny->SetupContext("PyMODINIT_FUNC PyInit_netfilterqueue(void)", __LINE__, __FILE__); + #endif + __pyx_empty_tuple = PyTuple_New(0); if (unlikely(!__pyx_empty_tuple)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_empty_bytes = PyBytes_FromStringAndSize("", 0); if (unlikely(!__pyx_empty_bytes)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + #ifdef __pyx_binding_PyCFunctionType_USED + if (__pyx_binding_PyCFunctionType_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + #endif + /*--- Library function declarations ---*/ + /*--- Threads initialization code ---*/ + #if defined(__PYX_FORCE_INIT_THREADS) && __PYX_FORCE_INIT_THREADS + #ifdef WITH_THREAD /* Python build with threading support? */ + PyEval_InitThreads(); + #endif + #endif + /*--- Module creation code ---*/ + #if PY_MAJOR_VERSION < 3 + __pyx_m = Py_InitModule4(__Pyx_NAMESTR("netfilterqueue"), __pyx_methods, 0, 0, PYTHON_API_VERSION); + #else + __pyx_m = PyModule_Create(&__pyx_moduledef); + #endif + if (!__pyx_m) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + #if PY_MAJOR_VERSION < 3 + Py_INCREF(__pyx_m); + #endif + __pyx_b = PyImport_AddModule(__Pyx_NAMESTR(__Pyx_BUILTIN_MODULE_NAME)); + if (!__pyx_b) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + if (__Pyx_SetAttrString(__pyx_m, "__builtins__", __pyx_b) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + /*--- Initialize various global constants etc. ---*/ + if (unlikely(__Pyx_InitGlobals() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__pyx_module_is_main_netfilterqueue) { + if (__Pyx_SetAttrString(__pyx_m, "__name__", __pyx_n_s____main__) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}; + } + /*--- Builtin init code ---*/ + if (unlikely(__Pyx_InitCachedBuiltins() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + /*--- Constants init code ---*/ + if (unlikely(__Pyx_InitCachedConstants() < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + /*--- Global init code ---*/ + /*--- Function export code ---*/ + /*--- Type init code ---*/ + __pyx_vtabptr_14netfilterqueue_NFPacket = &__pyx_vtable_14netfilterqueue_NFPacket; + __pyx_vtable_14netfilterqueue_NFPacket.set_nfq_data = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, struct nfq_q_handle *, struct nfq_data *))__pyx_f_14netfilterqueue_8NFPacket_set_nfq_data; + __pyx_vtable_14netfilterqueue_NFPacket.verdict = (void (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int8_t))__pyx_f_14netfilterqueue_8NFPacket_verdict; + __pyx_vtable_14netfilterqueue_NFPacket.get_payload_len = (Py_ssize_t (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_get_payload_len; + __pyx_vtable_14netfilterqueue_NFPacket.get_timestamp = (double (*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_get_timestamp; + __pyx_vtable_14netfilterqueue_NFPacket.set_mark = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, u_int32_t, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_set_mark; + __pyx_vtable_14netfilterqueue_NFPacket.accept = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_accept; + __pyx_vtable_14netfilterqueue_NFPacket.drop = (PyObject *(*)(struct __pyx_obj_14netfilterqueue_NFPacket *, int __pyx_skip_dispatch))__pyx_f_14netfilterqueue_8NFPacket_drop; + if (PyType_Ready(&__pyx_type_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetVtable(__pyx_type_14netfilterqueue_NFPacket.tp_dict, __pyx_vtabptr_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetAttrString(__pyx_m, "NFPacket", (PyObject *)&__pyx_type_14netfilterqueue_NFPacket) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_ptype_14netfilterqueue_NFPacket = &__pyx_type_14netfilterqueue_NFPacket; + if (PyType_Ready(&__pyx_type_14netfilterqueue_NFQueue) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 123; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + if (__Pyx_SetAttrString(__pyx_m, "NFQueue", (PyObject *)&__pyx_type_14netfilterqueue_NFQueue) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 123; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __pyx_ptype_14netfilterqueue_NFQueue = &__pyx_type_14netfilterqueue_NFQueue; + /*--- Type import code ---*/ + /*--- Function import code ---*/ + /*--- Execution code ---*/ + + /* "/root/NetfilterQueue/netfilterqueue.pyx":2 + * ## cython: profile=True + * import socket # <<<<<<<<<<<<<< + * + * # Constants for module users + */ + __pyx_t_1 = __Pyx_Import(((PyObject *)__pyx_n_s__socket), 0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 2; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(__pyx_t_1); + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__socket, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 2; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":5 + * + * # Constants for module users + * COPY_NONE = 1 # <<<<<<<<<<<<<< + * COPY_META = 2 + * COPY_PACKET = 3 + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_NONE, __pyx_int_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 5; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":6 + * # Constants for module users + * COPY_NONE = 1 + * COPY_META = 2 # <<<<<<<<<<<<<< + * COPY_PACKET = 3 + * + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_META, __pyx_int_2) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 6; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":7 + * COPY_NONE = 1 + * COPY_META = 2 + * COPY_PACKET = 3 # <<<<<<<<<<<<<< + * + * # Packet copying defaults + */ + if (PyObject_SetAttr(__pyx_m, __pyx_n_s__COPY_PACKET, __pyx_int_3) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 7; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + + /* "/root/NetfilterQueue/netfilterqueue.pyx":146 + * nfq_close(self.h) + * + * def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): # <<<<<<<<<<<<<< + * """Create a new queue with the given callback function.""" + * self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + */ + __pyx_k_9 = NFQNL_COPY_PACKET; + + /* "/root/NetfilterQueue/netfilterqueue.pyx":1 + * ## cython: profile=True # <<<<<<<<<<<<<< + * import socket + * + */ + __pyx_t_1 = PyDict_New(); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_GOTREF(((PyObject *)__pyx_t_1)); + if (PyObject_SetAttr(__pyx_m, __pyx_n_s____test__, ((PyObject *)__pyx_t_1)) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;} + __Pyx_DECREF(((PyObject *)__pyx_t_1)); __pyx_t_1 = 0; + goto __pyx_L0; + __pyx_L1_error:; + __Pyx_XDECREF(__pyx_t_1); + if (__pyx_m) { + __Pyx_AddTraceback("init netfilterqueue"); + Py_DECREF(__pyx_m); __pyx_m = 0; + } else if (!PyErr_Occurred()) { + PyErr_SetString(PyExc_ImportError, "init netfilterqueue"); + } + __pyx_L0:; + __Pyx_RefNannyFinishContext(); + #if PY_MAJOR_VERSION < 3 + return; + #else + return __pyx_m; + #endif +} + +/* Runtime support code */ + +static PyObject *__Pyx_GetName(PyObject *dict, PyObject *name) { + PyObject *result; + result = PyObject_GetAttr(dict, name); + if (!result) + PyErr_SetObject(PyExc_NameError, name); + return result; +} + +static void __Pyx_RaiseArgtupleInvalid( + const char* func_name, + int exact, + Py_ssize_t num_min, + Py_ssize_t num_max, + Py_ssize_t num_found) +{ + Py_ssize_t num_expected; + const char *number, *more_or_less; + + if (num_found < num_min) { + num_expected = num_min; + more_or_less = "at least"; + } else { + num_expected = num_max; + more_or_less = "at most"; + } + if (exact) { + more_or_less = "exactly"; + } + number = (num_expected == 1) ? "" : "s"; + PyErr_Format(PyExc_TypeError, + #if PY_VERSION_HEX < 0x02050000 + "%s() takes %s %d positional argument%s (%d given)", + #else + "%s() takes %s %zd positional argument%s (%zd given)", + #endif + func_name, more_or_less, num_expected, number, num_found); +} + +static CYTHON_INLINE int __Pyx_CheckKeywordStrings( + PyObject *kwdict, + const char* function_name, + int kw_allowed) +{ + PyObject* key = 0; + Py_ssize_t pos = 0; + while (PyDict_Next(kwdict, &pos, &key, 0)) { + #if PY_MAJOR_VERSION < 3 + if (unlikely(!PyString_CheckExact(key)) && unlikely(!PyString_Check(key))) + #else + if (unlikely(!PyUnicode_CheckExact(key)) && unlikely(!PyUnicode_Check(key))) + #endif + goto invalid_keyword_type; + } + if ((!kw_allowed) && unlikely(key)) + goto invalid_keyword; + return 1; +invalid_keyword_type: + PyErr_Format(PyExc_TypeError, + "%s() keywords must be strings", function_name); + return 0; +invalid_keyword: + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION < 3 + "%s() got an unexpected keyword argument '%s'", + function_name, PyString_AsString(key)); + #else + "%s() got an unexpected keyword argument '%U'", + function_name, key); + #endif + return 0; +} + +static CYTHON_INLINE void __Pyx_RaiseNoneIndexingError(void) { + PyErr_SetString(PyExc_TypeError, "'NoneType' object is unsubscriptable"); +} + +static void __Pyx_RaiseDoubleKeywordsError( + const char* func_name, + PyObject* kw_name) +{ + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION >= 3 + "%s() got multiple values for keyword argument '%U'", func_name, kw_name); + #else + "%s() got multiple values for keyword argument '%s'", func_name, + PyString_AS_STRING(kw_name)); + #endif +} + +static int __Pyx_ParseOptionalKeywords( + PyObject *kwds, + PyObject **argnames[], + PyObject *kwds2, + PyObject *values[], + Py_ssize_t num_pos_args, + const char* function_name) +{ + PyObject *key = 0, *value = 0; + Py_ssize_t pos = 0; + PyObject*** name; + PyObject*** first_kw_arg = argnames + num_pos_args; + + while (PyDict_Next(kwds, &pos, &key, &value)) { + name = first_kw_arg; + while (*name && (**name != key)) name++; + if (*name) { + values[name-argnames] = value; + } else { + #if PY_MAJOR_VERSION < 3 + if (unlikely(!PyString_CheckExact(key)) && unlikely(!PyString_Check(key))) { + #else + if (unlikely(!PyUnicode_CheckExact(key)) && unlikely(!PyUnicode_Check(key))) { + #endif + goto invalid_keyword_type; + } else { + for (name = first_kw_arg; *name; name++) { + #if PY_MAJOR_VERSION >= 3 + if (PyUnicode_GET_SIZE(**name) == PyUnicode_GET_SIZE(key) && + PyUnicode_Compare(**name, key) == 0) break; + #else + if (PyString_GET_SIZE(**name) == PyString_GET_SIZE(key) && + _PyString_Eq(**name, key)) break; + #endif + } + if (*name) { + values[name-argnames] = value; + } else { + /* unexpected keyword found */ + for (name=argnames; name != first_kw_arg; name++) { + if (**name == key) goto arg_passed_twice; + #if PY_MAJOR_VERSION >= 3 + if (PyUnicode_GET_SIZE(**name) == PyUnicode_GET_SIZE(key) && + PyUnicode_Compare(**name, key) == 0) goto arg_passed_twice; + #else + if (PyString_GET_SIZE(**name) == PyString_GET_SIZE(key) && + _PyString_Eq(**name, key)) goto arg_passed_twice; + #endif + } + if (kwds2) { + if (unlikely(PyDict_SetItem(kwds2, key, value))) goto bad; + } else { + goto invalid_keyword; + } + } + } + } + } + return 0; +arg_passed_twice: + __Pyx_RaiseDoubleKeywordsError(function_name, **name); + goto bad; +invalid_keyword_type: + PyErr_Format(PyExc_TypeError, + "%s() keywords must be strings", function_name); + goto bad; +invalid_keyword: + PyErr_Format(PyExc_TypeError, + #if PY_MAJOR_VERSION < 3 + "%s() got an unexpected keyword argument '%s'", + function_name, PyString_AsString(key)); + #else + "%s() got an unexpected keyword argument '%U'", + function_name, key); + #endif +bad: + return -1; +} + +static int __Pyx_ArgTypeTest(PyObject *obj, PyTypeObject *type, int none_allowed, + const char *name, int exact) +{ + if (!type) { + PyErr_Format(PyExc_SystemError, "Missing type object"); + return 0; + } + if (none_allowed && obj == Py_None) return 1; + else if (exact) { + if (Py_TYPE(obj) == type) return 1; + } + else { + if (PyObject_TypeCheck(obj, type)) return 1; + } + PyErr_Format(PyExc_TypeError, + "Argument '%s' has incorrect type (expected %s, got %s)", + name, type->tp_name, Py_TYPE(obj)->tp_name); + return 0; +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int32_t(u_int32_t val) { + const u_int32_t neg_one = (u_int32_t)-1, const_zero = (u_int32_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int32_t) == sizeof(char)) || + (sizeof(u_int32_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int32_t) == sizeof(int)) || + (sizeof(u_int32_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int32_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int32_t), + little, !is_unsigned); + } +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int16_t(u_int16_t val) { + const u_int16_t neg_one = (u_int16_t)-1, const_zero = (u_int16_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int16_t) == sizeof(char)) || + (sizeof(u_int16_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int16_t) == sizeof(int)) || + (sizeof(u_int16_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int16_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int16_t), + little, !is_unsigned); + } +} + +static CYTHON_INLINE PyObject *__Pyx_PyInt_to_py_u_int8_t(u_int8_t val) { + const u_int8_t neg_one = (u_int8_t)-1, const_zero = (u_int8_t)0; + const int is_unsigned = const_zero < neg_one; + if ((sizeof(u_int8_t) == sizeof(char)) || + (sizeof(u_int8_t) == sizeof(short))) { + return PyInt_FromLong((long)val); + } else if ((sizeof(u_int8_t) == sizeof(int)) || + (sizeof(u_int8_t) == sizeof(long))) { + if (is_unsigned) + return PyLong_FromUnsignedLong((unsigned long)val); + else + return PyInt_FromLong((long)val); + } else if (sizeof(u_int8_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG)val); + else + return PyLong_FromLongLong((PY_LONG_LONG)val); + } else { + int one = 1; int little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + return _PyLong_FromByteArray(bytes, sizeof(u_int8_t), + little, !is_unsigned); + } +} + +static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list) { + PyObject *py_import = 0; + PyObject *empty_list = 0; + PyObject *module = 0; + PyObject *global_dict = 0; + PyObject *empty_dict = 0; + PyObject *list; + py_import = __Pyx_GetAttrString(__pyx_b, "__import__"); + if (!py_import) + goto bad; + if (from_list) + list = from_list; + else { + empty_list = PyList_New(0); + if (!empty_list) + goto bad; + list = empty_list; + } + global_dict = PyModule_GetDict(__pyx_m); + if (!global_dict) + goto bad; + empty_dict = PyDict_New(); + if (!empty_dict) + goto bad; + module = PyObject_CallFunctionObjArgs(py_import, + name, global_dict, empty_dict, list, NULL); +bad: + Py_XDECREF(empty_list); + Py_XDECREF(py_import); + Py_XDECREF(empty_dict); + return module; +} + + +PyObject *__pyx_binding_PyCFunctionType_NewEx(PyMethodDef *ml, PyObject *self, PyObject *module) { + __pyx_binding_PyCFunctionType_object *op = PyObject_GC_New(__pyx_binding_PyCFunctionType_object, __pyx_binding_PyCFunctionType); + if (op == NULL) + return NULL; + op->func.m_ml = ml; + Py_XINCREF(self); + op->func.m_self = self; + Py_XINCREF(module); + op->func.m_module = module; + PyObject_GC_Track(op); + return (PyObject *)op; +} + +static void __pyx_binding_PyCFunctionType_dealloc(__pyx_binding_PyCFunctionType_object *m) { + PyObject_GC_UnTrack(m); + Py_XDECREF(m->func.m_self); + Py_XDECREF(m->func.m_module); + PyObject_GC_Del(m); +} + +static PyObject *__pyx_binding_PyCFunctionType_descr_get(PyObject *func, PyObject *obj, PyObject *type) { + if (obj == Py_None) + obj = NULL; + return PyMethod_New(func, obj, type); +} + +int __pyx_binding_PyCFunctionType_init(void) { + __pyx_binding_PyCFunctionType_type = PyCFunction_Type; + __pyx_binding_PyCFunctionType_type.tp_name = __Pyx_NAMESTR("cython_binding_builtin_function_or_method"); + __pyx_binding_PyCFunctionType_type.tp_dealloc = (destructor)__pyx_binding_PyCFunctionType_dealloc; + __pyx_binding_PyCFunctionType_type.tp_descr_get = __pyx_binding_PyCFunctionType_descr_get; + if (PyType_Ready(&__pyx_binding_PyCFunctionType_type) < 0) { + return -1; + } + __pyx_binding_PyCFunctionType = &__pyx_binding_PyCFunctionType_type; + return 0; + +} + +static CYTHON_INLINE PyObject *__Pyx_GetAttr3(PyObject *o, PyObject *n, PyObject *d) { + PyObject *r = PyObject_GetAttr(o, n); + if (!r) { + if (!PyErr_ExceptionMatches(PyExc_AttributeError)) + goto bad; + PyErr_Clear(); + r = d; + Py_INCREF(d); + } + return r; +bad: + return NULL; +} + +static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb) { + PyObject *tmp_type, *tmp_value, *tmp_tb; + PyThreadState *tstate = PyThreadState_GET(); + + tmp_type = tstate->curexc_type; + tmp_value = tstate->curexc_value; + tmp_tb = tstate->curexc_traceback; + tstate->curexc_type = type; + tstate->curexc_value = value; + tstate->curexc_traceback = tb; + Py_XDECREF(tmp_type); + Py_XDECREF(tmp_value); + Py_XDECREF(tmp_tb); +} + +static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb) { + PyThreadState *tstate = PyThreadState_GET(); + *type = tstate->curexc_type; + *value = tstate->curexc_value; + *tb = tstate->curexc_traceback; + + tstate->curexc_type = 0; + tstate->curexc_value = 0; + tstate->curexc_traceback = 0; +} + + +#if PY_MAJOR_VERSION < 3 +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb) { + Py_XINCREF(type); + Py_XINCREF(value); + Py_XINCREF(tb); + /* First, check the traceback argument, replacing None with NULL. */ + if (tb == Py_None) { + Py_DECREF(tb); + tb = 0; + } + else if (tb != NULL && !PyTraceBack_Check(tb)) { + PyErr_SetString(PyExc_TypeError, + "raise: arg 3 must be a traceback or None"); + goto raise_error; + } + /* Next, replace a missing value with None */ + if (value == NULL) { + value = Py_None; + Py_INCREF(value); + } + #if PY_VERSION_HEX < 0x02050000 + if (!PyClass_Check(type)) + #else + if (!PyType_Check(type)) + #endif + { + /* Raising an instance. The value should be a dummy. */ + if (value != Py_None) { + PyErr_SetString(PyExc_TypeError, + "instance exception may not have a separate value"); + goto raise_error; + } + /* Normalize to raise , */ + Py_DECREF(value); + value = type; + #if PY_VERSION_HEX < 0x02050000 + if (PyInstance_Check(type)) { + type = (PyObject*) ((PyInstanceObject*)type)->in_class; + Py_INCREF(type); + } + else { + type = 0; + PyErr_SetString(PyExc_TypeError, + "raise: exception must be an old-style class or instance"); + goto raise_error; + } + #else + type = (PyObject*) Py_TYPE(type); + Py_INCREF(type); + if (!PyType_IsSubtype((PyTypeObject *)type, (PyTypeObject *)PyExc_BaseException)) { + PyErr_SetString(PyExc_TypeError, + "raise: exception class must be a subclass of BaseException"); + goto raise_error; + } + #endif + } + + __Pyx_ErrRestore(type, value, tb); + return; +raise_error: + Py_XDECREF(value); + Py_XDECREF(type); + Py_XDECREF(tb); + return; +} + +#else /* Python 3+ */ + +static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb) { + if (tb == Py_None) { + tb = 0; + } else if (tb && !PyTraceBack_Check(tb)) { + PyErr_SetString(PyExc_TypeError, + "raise: arg 3 must be a traceback or None"); + goto bad; + } + if (value == Py_None) + value = 0; + + if (PyExceptionInstance_Check(type)) { + if (value) { + PyErr_SetString(PyExc_TypeError, + "instance exception may not have a separate value"); + goto bad; + } + value = type; + type = (PyObject*) Py_TYPE(value); + } else if (!PyExceptionClass_Check(type)) { + PyErr_SetString(PyExc_TypeError, + "raise: exception class must be a subclass of BaseException"); + goto bad; + } + + PyErr_SetObject(type, value); + + if (tb) { + PyThreadState *tstate = PyThreadState_GET(); + PyObject* tmp_tb = tstate->curexc_traceback; + if (tb != tmp_tb) { + Py_INCREF(tb); + tstate->curexc_traceback = tb; + Py_XDECREF(tmp_tb); + } + } + +bad: + return; +} +#endif + +static CYTHON_INLINE u_int16_t __Pyx_PyInt_from_py_u_int16_t(PyObject* x) { + const u_int16_t neg_one = (u_int16_t)-1, const_zero = (u_int16_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int16_t) == sizeof(char)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int16_t) == sizeof(short)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int16_t) == sizeof(int)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int16_t) == sizeof(long)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int16_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int16_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int16_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int16_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int16_t)-1; + } +} + +static CYTHON_INLINE unsigned char __Pyx_PyInt_AsUnsignedChar(PyObject* x) { + const unsigned char neg_one = (unsigned char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned char" : + "value too large to convert to unsigned char"); + } + return (unsigned char)-1; + } + return (unsigned char)val; + } + return (unsigned char)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE unsigned short __Pyx_PyInt_AsUnsignedShort(PyObject* x) { + const unsigned short neg_one = (unsigned short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned short" : + "value too large to convert to unsigned short"); + } + return (unsigned short)-1; + } + return (unsigned short)val; + } + return (unsigned short)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE unsigned int __Pyx_PyInt_AsUnsignedInt(PyObject* x) { + const unsigned int neg_one = (unsigned int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(unsigned int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(unsigned int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to unsigned int" : + "value too large to convert to unsigned int"); + } + return (unsigned int)-1; + } + return (unsigned int)val; + } + return (unsigned int)__Pyx_PyInt_AsUnsignedLong(x); +} + +static CYTHON_INLINE char __Pyx_PyInt_AsChar(PyObject* x) { + const char neg_one = (char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to char" : + "value too large to convert to char"); + } + return (char)-1; + } + return (char)val; + } + return (char)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE short __Pyx_PyInt_AsShort(PyObject* x) { + const short neg_one = (short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to short" : + "value too large to convert to short"); + } + return (short)-1; + } + return (short)val; + } + return (short)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE int __Pyx_PyInt_AsInt(PyObject* x) { + const int neg_one = (int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to int" : + "value too large to convert to int"); + } + return (int)-1; + } + return (int)val; + } + return (int)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE signed char __Pyx_PyInt_AsSignedChar(PyObject* x) { + const signed char neg_one = (signed char)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed char) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed char)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed char" : + "value too large to convert to signed char"); + } + return (signed char)-1; + } + return (signed char)val; + } + return (signed char)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE signed short __Pyx_PyInt_AsSignedShort(PyObject* x) { + const signed short neg_one = (signed short)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed short) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed short)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed short" : + "value too large to convert to signed short"); + } + return (signed short)-1; + } + return (signed short)val; + } + return (signed short)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE signed int __Pyx_PyInt_AsSignedInt(PyObject* x) { + const signed int neg_one = (signed int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(signed int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(signed int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to signed int" : + "value too large to convert to signed int"); + } + return (signed int)-1; + } + return (signed int)val; + } + return (signed int)__Pyx_PyInt_AsSignedLong(x); +} + +static CYTHON_INLINE int __Pyx_PyInt_AsLongDouble(PyObject* x) { + const int neg_one = (int)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; + if (sizeof(int) < sizeof(long)) { + long val = __Pyx_PyInt_AsLong(x); + if (unlikely(val != (long)(int)val)) { + if (!unlikely(val == -1 && PyErr_Occurred())) { + PyErr_SetString(PyExc_OverflowError, + (is_unsigned && unlikely(val < 0)) ? + "can't convert negative value to int" : + "value too large to convert to int"); + } + return (int)-1; + } + return (int)val; + } + return (int)__Pyx_PyInt_AsLong(x); +} + +static CYTHON_INLINE unsigned long __Pyx_PyInt_AsUnsignedLong(PyObject* x) { + const unsigned long neg_one = (unsigned long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned long"); + return (unsigned long)-1; + } + return (unsigned long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned long"); + return (unsigned long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + unsigned long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (unsigned long)-1; + val = __Pyx_PyInt_AsUnsignedLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE unsigned PY_LONG_LONG __Pyx_PyInt_AsUnsignedLongLong(PyObject* x) { + const unsigned PY_LONG_LONG neg_one = (unsigned PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned PY_LONG_LONG"); + return (unsigned PY_LONG_LONG)-1; + } + return (unsigned PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to unsigned PY_LONG_LONG"); + return (unsigned PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + unsigned PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (unsigned PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsUnsignedLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE long __Pyx_PyInt_AsLong(PyObject* x) { + const long neg_one = (long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to long"); + return (long)-1; + } + return (long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to long"); + return (long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (long)-1; + val = __Pyx_PyInt_AsLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE PY_LONG_LONG __Pyx_PyInt_AsLongLong(PyObject* x) { + const PY_LONG_LONG neg_one = (PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to PY_LONG_LONG"); + return (PY_LONG_LONG)-1; + } + return (PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to PY_LONG_LONG"); + return (PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE signed long __Pyx_PyInt_AsSignedLong(PyObject* x) { + const signed long neg_one = (signed long)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed long"); + return (signed long)-1; + } + return (signed long)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed long"); + return (signed long)-1; + } + return PyLong_AsUnsignedLong(x); + } else { + return PyLong_AsLong(x); + } + } else { + signed long val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (signed long)-1; + val = __Pyx_PyInt_AsSignedLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static CYTHON_INLINE signed PY_LONG_LONG __Pyx_PyInt_AsSignedLongLong(PyObject* x) { + const signed PY_LONG_LONG neg_one = (signed PY_LONG_LONG)-1, const_zero = 0; + const int is_unsigned = neg_one > const_zero; +#if PY_VERSION_HEX < 0x03000000 + if (likely(PyInt_Check(x))) { + long val = PyInt_AS_LONG(x); + if (is_unsigned && unlikely(val < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed PY_LONG_LONG"); + return (signed PY_LONG_LONG)-1; + } + return (signed PY_LONG_LONG)val; + } else +#endif + if (likely(PyLong_Check(x))) { + if (is_unsigned) { + if (unlikely(Py_SIZE(x) < 0)) { + PyErr_SetString(PyExc_OverflowError, + "can't convert negative value to signed PY_LONG_LONG"); + return (signed PY_LONG_LONG)-1; + } + return PyLong_AsUnsignedLongLong(x); + } else { + return PyLong_AsLongLong(x); + } + } else { + signed PY_LONG_LONG val; + PyObject *tmp = __Pyx_PyNumber_Int(x); + if (!tmp) return (signed PY_LONG_LONG)-1; + val = __Pyx_PyInt_AsSignedLongLong(tmp); + Py_DECREF(tmp); + return val; + } +} + +static void __Pyx_WriteUnraisable(const char *name) { + PyObject *old_exc, *old_val, *old_tb; + PyObject *ctx; + __Pyx_ErrFetch(&old_exc, &old_val, &old_tb); + #if PY_MAJOR_VERSION < 3 + ctx = PyString_FromString(name); + #else + ctx = PyUnicode_FromString(name); + #endif + __Pyx_ErrRestore(old_exc, old_val, old_tb); + if (!ctx) { + PyErr_WriteUnraisable(Py_None); + } else { + PyErr_WriteUnraisable(ctx); + Py_DECREF(ctx); + } +} + +static CYTHON_INLINE u_int32_t __Pyx_PyInt_from_py_u_int32_t(PyObject* x) { + const u_int32_t neg_one = (u_int32_t)-1, const_zero = (u_int32_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int32_t) == sizeof(char)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int32_t) == sizeof(short)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int32_t) == sizeof(int)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int32_t) == sizeof(long)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int32_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int32_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int32_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int32_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int32_t)-1; + } +} + +static CYTHON_INLINE u_int8_t __Pyx_PyInt_from_py_u_int8_t(PyObject* x) { + const u_int8_t neg_one = (u_int8_t)-1, const_zero = (u_int8_t)0; + const int is_unsigned = const_zero < neg_one; + if (sizeof(u_int8_t) == sizeof(char)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedChar(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedChar(x); + } else if (sizeof(u_int8_t) == sizeof(short)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedShort(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedShort(x); + } else if (sizeof(u_int8_t) == sizeof(int)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedInt(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedInt(x); + } else if (sizeof(u_int8_t) == sizeof(long)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedLong(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedLong(x); + } else if (sizeof(u_int8_t) == sizeof(PY_LONG_LONG)) { + if (is_unsigned) + return (u_int8_t)__Pyx_PyInt_AsUnsignedLongLong(x); + else + return (u_int8_t)__Pyx_PyInt_AsSignedLongLong(x); + } else { + u_int8_t val; + PyObject *v = __Pyx_PyNumber_Int(x); + #if PY_VERSION_HEX < 0x03000000 + if (likely(v) && !PyLong_Check(v)) { + PyObject *tmp = v; + v = PyNumber_Long(tmp); + Py_DECREF(tmp); + } + #endif + if (likely(v)) { + int one = 1; int is_little = (int)*(unsigned char *)&one; + unsigned char *bytes = (unsigned char *)&val; + int ret = _PyLong_AsByteArray((PyLongObject *)v, + bytes, sizeof(val), + is_little, !is_unsigned); + Py_DECREF(v); + if (likely(!ret)) + return val; + } + return (u_int8_t)-1; + } +} + +static int __Pyx_SetVtable(PyObject *dict, void *vtable) { +#if PY_VERSION_HEX >= 0x02070000 && !(PY_MAJOR_VERSION==3&&PY_MINOR_VERSION==0) + PyObject *ob = PyCapsule_New(vtable, 0, 0); +#else + PyObject *ob = PyCObject_FromVoidPtr(vtable, 0); +#endif + if (!ob) + goto bad; + if (PyDict_SetItemString(dict, "__pyx_vtable__", ob) < 0) + goto bad; + Py_DECREF(ob); + return 0; +bad: + Py_XDECREF(ob); + return -1; +} + +#include "compile.h" +#include "frameobject.h" +#include "traceback.h" + +static void __Pyx_AddTraceback(const char *funcname) { + PyObject *py_srcfile = 0; + PyObject *py_funcname = 0; + PyObject *py_globals = 0; + PyCodeObject *py_code = 0; + PyFrameObject *py_frame = 0; + + #if PY_MAJOR_VERSION < 3 + py_srcfile = PyString_FromString(__pyx_filename); + #else + py_srcfile = PyUnicode_FromString(__pyx_filename); + #endif + if (!py_srcfile) goto bad; + if (__pyx_clineno) { + #if PY_MAJOR_VERSION < 3 + py_funcname = PyString_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, __pyx_clineno); + #else + py_funcname = PyUnicode_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, __pyx_clineno); + #endif + } + else { + #if PY_MAJOR_VERSION < 3 + py_funcname = PyString_FromString(funcname); + #else + py_funcname = PyUnicode_FromString(funcname); + #endif + } + if (!py_funcname) goto bad; + py_globals = PyModule_GetDict(__pyx_m); + if (!py_globals) goto bad; + py_code = PyCode_New( + 0, /*int argcount,*/ + #if PY_MAJOR_VERSION >= 3 + 0, /*int kwonlyargcount,*/ + #endif + 0, /*int nlocals,*/ + 0, /*int stacksize,*/ + 0, /*int flags,*/ + __pyx_empty_bytes, /*PyObject *code,*/ + __pyx_empty_tuple, /*PyObject *consts,*/ + __pyx_empty_tuple, /*PyObject *names,*/ + __pyx_empty_tuple, /*PyObject *varnames,*/ + __pyx_empty_tuple, /*PyObject *freevars,*/ + __pyx_empty_tuple, /*PyObject *cellvars,*/ + py_srcfile, /*PyObject *filename,*/ + py_funcname, /*PyObject *name,*/ + __pyx_lineno, /*int firstlineno,*/ + __pyx_empty_bytes /*PyObject *lnotab*/ + ); + if (!py_code) goto bad; + py_frame = PyFrame_New( + PyThreadState_GET(), /*PyThreadState *tstate,*/ + py_code, /*PyCodeObject *code,*/ + py_globals, /*PyObject *globals,*/ + 0 /*PyObject *locals*/ + ); + if (!py_frame) goto bad; + py_frame->f_lineno = __pyx_lineno; + PyTraceBack_Here(py_frame); +bad: + Py_XDECREF(py_srcfile); + Py_XDECREF(py_funcname); + Py_XDECREF(py_code); + Py_XDECREF(py_frame); +} + +static int __Pyx_InitStrings(__Pyx_StringTabEntry *t) { + while (t->p) { + #if PY_MAJOR_VERSION < 3 + if (t->is_unicode) { + *t->p = PyUnicode_DecodeUTF8(t->s, t->n - 1, NULL); + } else if (t->intern) { + *t->p = PyString_InternFromString(t->s); + } else { + *t->p = PyString_FromStringAndSize(t->s, t->n - 1); + } + #else /* Python 3+ has unicode identifiers */ + if (t->is_unicode | t->is_str) { + if (t->intern) { + *t->p = PyUnicode_InternFromString(t->s); + } else if (t->encoding) { + *t->p = PyUnicode_Decode(t->s, t->n - 1, t->encoding, NULL); + } else { + *t->p = PyUnicode_FromStringAndSize(t->s, t->n - 1); + } + } else { + *t->p = PyBytes_FromStringAndSize(t->s, t->n - 1); + } + #endif + if (!*t->p) + return -1; + ++t; + } + return 0; +} + +/* Type Conversion Functions */ + +static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject* x) { + int is_true = x == Py_True; + if (is_true | (x == Py_False) | (x == Py_None)) return is_true; + else return PyObject_IsTrue(x); +} + +static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x) { + PyNumberMethods *m; + const char *name = NULL; + PyObject *res = NULL; +#if PY_VERSION_HEX < 0x03000000 + if (PyInt_Check(x) || PyLong_Check(x)) +#else + if (PyLong_Check(x)) +#endif + return Py_INCREF(x), x; + m = Py_TYPE(x)->tp_as_number; +#if PY_VERSION_HEX < 0x03000000 + if (m && m->nb_int) { + name = "int"; + res = PyNumber_Int(x); + } + else if (m && m->nb_long) { + name = "long"; + res = PyNumber_Long(x); + } +#else + if (m && m->nb_int) { + name = "int"; + res = PyNumber_Long(x); + } +#endif + if (res) { +#if PY_VERSION_HEX < 0x03000000 + if (!PyInt_Check(res) && !PyLong_Check(res)) { +#else + if (!PyLong_Check(res)) { +#endif + PyErr_Format(PyExc_TypeError, + "__%s__ returned non-%s (type %.200s)", + name, name, Py_TYPE(res)->tp_name); + Py_DECREF(res); + return NULL; + } + } + else if (!PyErr_Occurred()) { + PyErr_SetString(PyExc_TypeError, + "an integer is required"); + } + return res; +} + +static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject* b) { + Py_ssize_t ival; + PyObject* x = PyNumber_Index(b); + if (!x) return -1; + ival = PyInt_AsSsize_t(x); + Py_DECREF(x); + return ival; +} + +static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t ival) { +#if PY_VERSION_HEX < 0x02050000 + if (ival <= LONG_MAX) + return PyInt_FromLong((long)ival); + else { + unsigned char *bytes = (unsigned char *) &ival; + int one = 1; int little = (int)*(unsigned char*)&one; + return _PyLong_FromByteArray(bytes, sizeof(size_t), little, 0); + } +#else + return PyInt_FromSize_t(ival); +#endif +} + +static CYTHON_INLINE size_t __Pyx_PyInt_AsSize_t(PyObject* x) { + unsigned PY_LONG_LONG val = __Pyx_PyInt_AsUnsignedLongLong(x); + if (unlikely(val == (unsigned PY_LONG_LONG)-1 && PyErr_Occurred())) { + return (size_t)-1; + } else if (unlikely(val != (unsigned PY_LONG_LONG)(size_t)val)) { + PyErr_SetString(PyExc_OverflowError, + "value too large to convert to size_t"); + return (size_t)-1; + } + return (size_t)val; +} + + +#endif /* Py_PYTHON_H */ diff --git a/netfilterqueue.pxd b/netfilterqueue.pxd new file mode 100644 index 0000000..5b520ce --- /dev/null +++ b/netfilterqueue.pxd @@ -0,0 +1,191 @@ +cdef extern from "sys/types.h": + ctypedef unsigned char u_int8_t + ctypedef unsigned short int u_int16_t + ctypedef unsigned int u_int32_t + +cdef extern from "netinet/ip.h": + struct iphdr: + u_int8_t tos + u_int16_t tot_len + u_int16_t id + u_int16_t frag_off + u_int8_t ttl + u_int8_t protocol + u_int16_t check + u_int32_t saddr + u_int32_t daddr + +# Dummy defines from netinet/in.h: +cdef enum: + IPPROTO_IP = 0 # Dummy protocol for TCP. + IPPROTO_HOPOPTS = 0 # IPv6 Hop-by-Hop options. + IPPROTO_ICMP = 1 # Internet Control Message Protocol. + IPPROTO_IGMP = 2 # Internet Group Management Protocol. */ + IPPROTO_IPIP = 4 # IPIP tunnels (older KA9Q tunnels use 94). + IPPROTO_TCP = 6 # Transmission Control Protocol. + IPPROTO_EGP = 8 # Exterior Gateway Protocol. + IPPROTO_PUP = 12 # PUP protocol. + IPPROTO_UDP = 17 # User Datagram Protocol. + IPPROTO_IDP = 22 # XNS IDP protocol. + IPPROTO_TP = 29 # SO Transport Protocol Class 4. + IPPROTO_IPV6 = 41 # IPv6 header. + IPPROTO_ROUTING = 43 # IPv6 routing header. + IPPROTO_FRAGMENT = 44 # IPv6 fragmentation header. + IPPROTO_RSVP = 46 # Reservation Protocol. + IPPROTO_GRE = 47 # General Routing Encapsulation. + IPPROTO_ESP = 50 # encapsulating security payload. + IPPROTO_AH = 51 # authentication header. + IPPROTO_ICMPV6 = 58 # ICMPv6. + IPPROTO_NONE = 59 # IPv6 no next header. + IPPROTO_DSTOPTS = 60 # IPv6 destination options. + IPPROTO_MTP = 92 # Multicast Transport Protocol. + IPPROTO_ENCAP = 98 # Encapsulation Header. + IPPROTO_PIM = 103 # Protocol Independent Multicast. + IPPROTO_COMP = 108 # Compression Header Protocol. + IPPROTO_SCTP = 132 # Stream Control Transmission Protocol. + IPPROTO_RAW = 255 # Raw IP packets. + IPPROTO_MAX + +cdef extern from "Python.h": + object PyString_FromStringAndSize(char *s, Py_ssize_t len) + +cdef extern from "sys/time.h": + ctypedef long time_t + struct timeval: + time_t tv_sec + time_t tv_usec + struct timezone: + pass + +cdef extern from "netinet/in.h": + u_int32_t ntohl (u_int32_t __netlong) nogil + u_int16_t ntohs (u_int16_t __netshort) nogil + u_int32_t htonl (u_int32_t __hostlong) nogil + u_int16_t htons (u_int16_t __hostshort) nogil + +cdef extern from "libnfnetlink/linux_nfnetlink.h": + struct nfgenmsg: + u_int8_t nfgen_family + u_int8_t version + u_int16_t res_id + +cdef extern from "libnetfilter_queue/linux_nfnetlink_queue.h": + enum nfqnl_config_mode: + NFQNL_COPY_NONE + NFQNL_COPY_META + NFQNL_COPY_PACKET + struct nfqnl_msg_packet_hdr: + u_int32_t packet_id + u_int16_t hw_protocol + u_int8_t hook + +cdef extern from "libnetfilter_queue/libnetfilter_queue.h": + struct nfq_handle: + pass + struct nfq_q_handle: + pass + struct nfq_data: + pass + struct nfqnl_msg_packet_hw: + u_int8_t hw_addr[8] + + nfq_handle *nfq_open() + int nfq_close(nfq_handle *h) + + int nfq_bind_pf(nfq_handle *h, u_int16_t pf) + int nfq_unbind_pf(nfq_handle *h, u_int16_t pf) + ctypedef int *nfq_callback(nfq_q_handle *gh, nfgenmsg *nfmsg, + nfq_data *nfad, void *data) + nfq_q_handle *nfq_create_queue(nfq_handle *h, + u_int16_t num, + nfq_callback *cb, + void *data) + int nfq_destroy_queue(nfq_q_handle *qh) + + int nfq_handle_packet(nfq_handle *h, char *buf, int len) + + int nfq_set_mode(nfq_q_handle *qh, + u_int8_t mode, unsigned int len) + + q_set_queue_maxlen(nfq_q_handle *qh, + u_int32_t queuelen) + + int nfq_set_verdict(nfq_q_handle *qh, + u_int32_t id, + u_int32_t verdict, + u_int32_t data_len, + unsigned char *buf) nogil + + int nfq_set_verdict_mark(nfq_q_handle *qh, + u_int32_t id, + u_int32_t verdict, + u_int32_t mark, + u_int32_t datalen, + unsigned char *buf) nogil + int nfq_set_queue_maxlen(nfq_q_handle *qh, u_int32_t queuelen) + + int nfq_fd(nfq_handle *h) + nfqnl_msg_packet_hdr *nfq_get_msg_packet_hdr(nfq_data *nfad) + int nfq_get_payload(nfq_data *nfad, char **data) + int nfq_get_timestamp(nfq_data *nfad, timeval *tv) + nfqnl_msg_packet_hw *nfq_get_packet_hw(nfq_data *nfad) + +# Dummy defines from linux/socket.h: +cdef enum: # Protocol families, same as address families. + PF_INET = 2 + PF_INET6 = 10 + +cdef extern from "sys/socket.h": + ssize_t recv(int __fd, void *__buf, size_t __n, int __flags) nogil + +# Dummy defines from linux/netfilter.h +cdef enum: + NF_DROP + NF_ACCEPT + NF_STOLEN + NF_QUEUE + NF_REPEAT + NF_STOP + NF_MAX_VERDICT = NF_STOP + +cdef class NFPacket: + cdef nfq_q_handle *_qh + cdef nfq_data *_nfa + cdef nfqnl_msg_packet_hdr *_hdr + cdef bint _verdict_is_set # True if verdict has been issued, + # false otherwise + cdef bint _mark_is_set # True if a mark has been given, false otherwise + cdef u_int32_t _given_mark # Mark given to packet + cdef unsigned char *_given_payload # New payload of packet, or null + + # From NFQ packet header: + cdef readonly u_int32_t id + cdef readonly u_int16_t hw_protocol + cdef readonly u_int8_t hook + + # Packet details: + cdef Py_ssize_t payload_len + cdef readonly char *payload + cdef timeval timestamp + # TODO: implement these + #cdef u_int8_t hw_addr[8] # A eui64-formatted address? + #cdef readonly u_int32_t nfmark + #cdef readonly u_int32_t indev + #cdef readonly u_int32_t physindev + #cdef readonly u_int32_t outdev + #cdef readonly u_int32_t physoutdev + + cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa) + cdef void verdict(self, u_int8_t verdict) + cpdef Py_ssize_t get_payload_len(self) + cpdef double get_timestamp(self) + cpdef set_mark(self, u_int32_t mark) + cpdef accept(self) + cpdef drop(self) + +cdef class NFQueue: + cdef nfq_handle *h # Handle to NFQueue library + cdef nfq_q_handle *qh # A handle to the queue + cdef u_int16_t af # Address family + cdef packet_copy_size # Amount of packet metadata + data copied to buffer + \ No newline at end of file diff --git a/netfilterqueue.pyx b/netfilterqueue.pyx new file mode 100644 index 0000000..644bb0c --- /dev/null +++ b/netfilterqueue.pyx @@ -0,0 +1,179 @@ +## cython: profile=True +import socket + +# Constants for module users +COPY_NONE = 1 +COPY_META = 2 +COPY_PACKET = 3 + +# Packet copying defaults +DEF MaxPacketSize = 0xFFFF +DEF BufferSize = 4096 +DEF MetadataSize = 80 +DEF MaxCopySize = BufferSize - MetadataSize + +cdef int global_callback(nfq_q_handle *qh, nfgenmsg *nfmsg, + nfq_data *nfa, void *data) with gil: + """ + Create an NFPacket and pass it to appropriate Python/Cython callback. + + Working in a Python or Cython callback, rather than directly in this + callback, results in a ~7% performance hit. + """ +# cdef nfqnl_msg_packet_hdr *_hdr = nfq_get_msg_packet_hdr(nfa) +# cdef u_int32_t id = ntohl(_hdr.packet_id) +# nfq_set_verdict( +# qh, +# id, +# NF_ACCEPT, +# 0, # TODO: adapt to use self._given_payload +# NULL # TODO: adapt to use self._given_payload +# ) + packet = NFPacket() + packet.set_nfq_data(qh, nfa) + (data).handle(packet) + return 1 + +cdef class NFPacket: + """A packet received from NFQueue.""" + def __cinit__(self): + self._verdict_is_set = False + self._mark_is_set = False + self._given_payload = NULL + + def __str__(self): + cdef iphdr *hdr = self.payload + protocol = "Unknown protocol" + for name in filter(lambda x: x.startswith("IPPROTO"), dir(socket)): + if getattr(socket, name) == hdr.protocol: + protocol = name[8:] + return "%s packet, %s bytes" % (protocol, self.payload_len) + + cdef set_nfq_data(self, nfq_q_handle *qh, nfq_data *nfa): + """ + Assign a packet from NFQ to this object. Parse the header and load + local values. + """ + self._qh = qh + self._nfa = nfa + self._hdr = nfq_get_msg_packet_hdr(nfa) + + self.id = ntohl(self._hdr.packet_id) + self.hw_protocol = ntohs(self._hdr.hw_protocol) + self.hook = self._hdr.hook + + self.payload_len = nfq_get_payload(self._nfa, &self.payload) + if self.payload_len < 0: + raise OSError("Failed to get payload of packet.") + + nfq_get_timestamp(self._nfa, &self.timestamp) + + cdef void verdict(self, u_int8_t verdict): + """Call appropriate set_verdict... function on packet.""" + #if self._verdict_is_set: + # raise RuntimeWarning("Verdict already given for this packet.") + + if self._mark_is_set: + nfq_set_verdict_mark( # TODO: make this use nfq_set_verdict2 if available on system + self._qh, + self.id, + verdict, + htonl(self._given_mark), + 0, # TODO: adapt to use self._given_payload + NULL # TODO: adapt to use self._given_payload + ) + else: + nfq_set_verdict( + self._qh, + self.id, + verdict, + 0, # TODO: adapt to use self._given_payload + NULL # TODO: adapt to use self._given_payload + ) + + #self._verdict_is_set = True + + def get_payload(self): + cdef object py_string = PyString_FromStringAndSize(self.payload, self.payload_len) + return py_string + + cpdef Py_ssize_t get_payload_len(self): + return self.payload_len + + cpdef double get_timestamp(self): + return self.timestamp.tv_sec + (self.timestamp.tv_usec/1000000.0) + + # TODO: implement this + #cpdef set_payload(self, unsigned char *payload): + # """Set the new payload of this packet.""" + # self._given_payload = payload + + cpdef set_mark(self, u_int32_t mark): + self._given_mark = mark + self._mark_is_set = True + + cpdef accept(self): + """Accept the packet.""" + self.verdict(NF_ACCEPT) + + cpdef drop(self): + """Drop the packet.""" + self.verdict(NF_DROP) + +cdef class NFQueue: + """Handle a single numbered queue.""" + def __cinit__(self, *args, **kwargs): + if "af" in kwargs: + self.af = kwargs["af"] + else: + self.af = socket.AF_INET + + self.h = nfq_open() + if self.h == NULL: + raise OSError("Failed to open NFQueue.") + nfq_unbind_pf(self.h, self.af) # This does NOT kick out previous + # running queues + if nfq_bind_pf(self.h, self.af) < 0: + raise OSError("Failed to bind family %s." % self.af) + + def __dealloc__(self): + if self.qh != NULL: + nfq_destroy_queue(self.qh) + # Don't call nfq_unbind_pf unless you want to disconnect any other + # processes using this libnetfilter_queue on this protocol family! + nfq_close(self.h) + + def bind(self, object handler, int queue_num, u_int32_t maxlen, u_int8_t mode=NFQNL_COPY_PACKET, u_int32_t range=MaxPacketSize): + """Create a new queue with the given callback function.""" + self.qh = nfq_create_queue(self.h, queue_num, global_callback, handler) + if self.qh == NULL: + raise OSError("Failed to create queue %s." % queue_num) + + if range > MaxCopySize: + range = MaxCopySize + if nfq_set_mode(self.qh, mode, range) < 0: + raise OSError("Failed to set packet copy mode.") + + nfq_set_queue_maxlen(self.qh, maxlen) + + def unbind(self): + """Destroy the queue.""" + if self.qh != NULL: + nfq_destroy_queue(self.qh) + # See warning about nfq_unbind_pf in __dealloc__ above. + + def run(self): + """Begin accepting packets.""" + cdef int fd = nfq_fd(self.h) + cdef char buf[BufferSize] + cdef int rv + with nogil: + rv = recv(fd, buf, sizeof(buf), 0) + while rv >= 0: + nfq_handle_packet(self.h, buf, rv) + with nogil: + rv = recv(fd, buf, sizeof(buf), 0) + + def handle(self, NFPacket packet): + """Handle a single packet. User-defined classes should override this.""" + packet.accept() diff --git a/setup.py b/setup.py new file mode 100644 index 0000000..6cb1ac0 --- /dev/null +++ b/setup.py @@ -0,0 +1,45 @@ +from distutils.core import setup, Extension + +VERSION = "0.1" + +try: + # Use Cython + from Cython.Distutils import build_ext + ext = Extension( + "netfilterqueue", + sources=["netfilterqueue.pyx",], + libraries=["netfilter_queue"], + ) +except ImportError: + # No Cython + build_ext = None + ext = Extension( + "netfilterqueue", + sources = ["netfilterqueue.c"], + libraries=["netfilter_queue"], + ) + +setup( + cmdclass = {"build_ext": build_ext}, + ext_modules = [ext], + name="NetfilterQueue", + version=VERSION, + license="BSD", + author="Matthew Fox", + author_email="matthew@kerkhofftech.ca", + url="https://github.com/kti/python-netfilter_queue", + description="Python bindings for libnetfilter_queue", + long_description=open("README.txt").read(), + download_url="http://pypi.python.org/packages/source/N/NetfilterQueue/NetfilterQueue-%s.tar.gz" % VERSION, + classifiers = [ + "Development Status :: 4 - Beta", + "License :: OSI Approved :: BSD License", + "Operating System :: POSIX :: Linux", + "Topic :: System :: Networking", + "Topic :: Security", + "Intended Audience :: Developers", + "Intended Audience :: Telecommunications Industry", + "Programming Language :: Cython", + "Programming Language :: Python :: 2", + ] +)