netfilter: meta: add PRANDOM support
authorFlorian Westphal <fw@strlen.de>
Tue, 16 Feb 2016 16:24:08 +0000 (17:24 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 29 Feb 2016 12:55:59 +0000 (13:55 +0100)
commitb07edbe1cf3dae9ba81f24888e2f2a9dbe778918
treeed0bb89d4e43f6eea804b4d1cbad01050dae3b30
parentf12d33f4d83c6837d176e1aef337914089c77957
netfilter: meta: add PRANDOM support

Can be used to randomly match packets e.g. for statistic traffic sampling.

See commit 3ad0040573b0c00f8848
("bpf: split state from prandom_u32() and consolidate {c, e}BPF prngs")
for more info why this doesn't use prandom_u32 directly.

Unlike bpf nft_meta can be built as a module, so add an EXPORT_SYMBOL
for prandom_seed_full_state too.

Cc: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
lib/random32.c
net/netfilter/nft_meta.c