Skip to contentSkip to conversation

updates for libnfnetlink_conntrack

PATCH In review Pablo Neira 2 participants 3 messages Aug 5, 2005 netfilter

lore
Share & tools
lore

Pablo Neira

author
#0 lore raw

PATCH 1/1 updates for libnfnetlink_conntrack

@Harald: BTW, I can reach SVN to commit changes to conntrack (timeout error).

This patch includes the following updates for the userspace libnfnetlink_conntrack library:

a) change ctnl_open prototype: Now the subsystem is passed as parameter to select if we work working with given subsystem, say NFNL_CTNETLINK_CONNTRACK[_EXP].

b) added functions ctnl_[new|get|del]_expect

c) minor change in ctnl_build_tuple that let us create tuples based on CTA_* and CTA_EXPECT_* attributes.

libnfnetlink_conntrack/libnfnetlink_conntrack.h +6 -1
Index: include/libnfnetlink_conntrack/libnfnetlink_conntrack.h
===================================================================
@@ -99,7 +99,7 @@
 	struct ctnl_msg_handler *handler[IPCTNL_MSG_MAX];
 };
 
-extern int ctnl_open(struct ctnl_handle *, unsigned);
+extern int ctnl_open(struct ctnl_handle *, u_int8_t, unsigned);
 extern int ctnl_close(struct ctnl_handle *);
 extern int ctnl_unregister_handler(struct ctnl_handle *, int);
 extern int ctnl_register_handler(struct ctnl_handle *, 

@@ -113,6 +113,11 @@
 extern int ctnl_event_conntrack(struct ctnl_handle *, int);
 extern int ctnl_flush_conntrack(struct ctnl_handle *);
 
+extern int ctnl_new_expect(struct ctnl_handle *, struct ctnl_tuple *, 
+			   struct ctnl_tuple *, struct ctnl_tuple *, 
+			   unsigned long);
+extern int ctnl_del_expect(struct ctnl_handle *,struct ctnl_tuple *);
+extern int ctnl_get_expect(struct ctnl_handle *, struct ctnl_tuple *);
 extern int ctnl_list_expect(struct ctnl_handle *, int);
 extern int ctnl_event_expect(struct ctnl_handle *, int);
 extern int ctnl_flush_expect(struct ctnl_handle *);
libnfnetlink_conntrack.c +103 -8

157 lines not on this page · raw message

#1 lore raw
Quoted 1 line · Pablo Neira

@Harald: BTW, I can reach SVN to commit changes to conntrack (timeout error).

you can or you cannot?

Quoted 2 lines

This patch includes the following updates for the userspace libnfnetlink_conntrack library:

ok, looks fine. I'll apply it right now.

Signature · 5 lines
- Harald Welte <[email protected]>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie
#2 lore raw
In reply to Pablo Neira
Quoted 1 line · Pablo Neira

@Harald: BTW, I can reach SVN to commit changes to conntrack (timeout error).

the firewall (which was recently rebooted during an upgrade) was missing a required rule to allow svn commit access. It's fixed now.

Signature · 5 lines
- Harald Welte <[email protected]>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie