CONFIG_NF_CONNTRACK_PROCFS
Subsystems (2)
Hi, all.
net/netfilter/nf_conntrack procfs file is marked as obsolete in the recent kernels. What's wrong with it? Or it's simply a new fashion to replace simple file interface with anything else?
Signature · 1 line
Nemanov Oleg
Quoted 3 lines · Oleg
net/netfilter/nf_conntrackprocfs file is marked as obsolete in the recent kernels. What's wrong with it? Or it's simply a new fashion to replace simple file interface with anything else?
proc has several drawbacks vs. ctnetlink:
- not extensible
- doesn't have ability to query for particular items
- no add/delete support
- no event notification (e.g. conntrack -E)
Quoted 7 lines · Florian Westphal
Quoted 3 lines · Oleg
net/netfilter/nf_conntrackprocfs file is marked as obsolete in the recent kernels. What's wrong with it? Or it's simply a new fashion to replace simple file interface with anything else?proc has several drawbacks vs. ctnetlink:
- not extensible
In the what way?
Sorry, but i think that limitations isn't in proc, but in a human fantasy.
Quoted 1 line
- doesn't have ability to query for particular items
What about something like:
exec 3<>nf_conntrack; echo show tcp dport 12345 >&3; cat <&3 HERE_WE_GET_NEEDED_ENTRIES
exec 3<&-
?
Quoted 1 line
- no add/delete support
What about simple:
echo add ENTRY > nf_conntrack
echo delete ENTRY > nf_conntrack
?
Quoted 1 line
- no event notification (e.g. conntrack -E)
Florian, are you seriosly? What's wrong with simple:
cat nf_conntrack_event
?
Moreover, all things i have wrote save already existent scripts works.
May be i don't understand anything? Please correct me if so.
P.S. netlink is really cool thing, but i think we go in the wrong way.
Signature · 1 line
Nemanov Oleg