Skip to contentSkip to conversation

ctnetlink major update

PATCH In review Pablo Neira 2 participants 2 messages Jul 12, 2005 – Jul 18, 2005 netfilter

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 ctnetlink major update

Sorry, this patch has been gzip'ed since I wasn't sure if it excedees the maximun size allowed that can be sent to the mailling list (bigger than 30K).

I didn't generate the incremental diff against the previous version since it doesn't make too many sense because this update introduces too many changes.

ip_conntrack_netlink doesn't use ip_conntrack structures anymore, instead we use nested ctnetlink atributes. This way protect us against furture changes that could break backward compatibility. And now it's fairly easy porting this to nfnetlink.

getting, creation, deletion of expectation isn't implemented yet. I kept it back until my come back, I didn't have enough time to finish it. Anyway, porting the old expectation handling functions to support ctnetlink attributes must be an easy job. If someone is interested, I kept those old functions here:

http://people.netfilter.org/~pablo/expect.x

#1 lore raw
Quoted 2 lines · Pablo Neira

Sorry, this patch has been gzip'ed since I wasn't sure if it excedees the maximun size allowed that can be sent to the mailling list (bigger than 30K).

it's 40k, and you can send larger emails, they will be administratively approved by Travis, our listmaster. Please only send text attachments.

Quoted 2 lines

I didn't generate the incremental diff against the previous version since it doesn't make too many sense because this update introduces too many changes.

it _always_ makes sense. Everybody reviewing your patch will otherwise have to create such a diff before he can reasonably review.

Quoted 4 lines

ip_conntrack_netlink doesn't use ip_conntrack structures anymore, instead we use nested ctnetlink atributes. This way protect us against furture changes that could break backward compatibility. And now it's fairly easy porting this to nfnetlink.

ACK.

Quoted 5 lines

getting, creation, deletion of expectation isn't implemented yet. I kept it back until my come back, I didn't have enough time to finish it. Anyway, porting the old expectation handling functions to support ctnetlink attributes must be an easy job. If someone is interested, I kept those old functions here:

I'll be adding them to your recent changes.

Signature · 5 lines
- Harald Welte <[email protected]>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie