ctnetlink updates incarnation #2

Hi,

Here follows the #2 incarnation of the ctnetlink updates:

[CONNTRACK] mark conntrack event
[CTNETLINK] dump conntrack mark
[CTNETLINK] send expectation events iif there listeners [CTNETLINK] Fix race condition on conntrack creation [CONNTRACK] Introduce the pickup facilities to take over TCP connections [CTNETLINK] Rework conntrack fields dumping logic on events [CTNETLINK] send conntrack events on ctnetlink actions [CTNETLINK] Remove useless event-bit-is-set checkings on updates

Patches 1-3 are trivial, Patrick was OK with them. Patches 4-8 are based on their previous incarnation plus Patrick's suggestions.

I'll be leaving to Valencia and Barcelona tomorrow but I think that I'll have an internet connection up to August 1st.

Comments welcome.

The dawn of the fourth age of Linux firewalling is coming; a time of great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris

I'm trying out the new ctnetlink with conntrackd-0.8.2

I've got the latest libnfnetlink and libnetfilter_conntrack from svn, but conntrackd-0.8.2 and 0.8.1 give this error:
/opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:67: undefined reference to `nfct_conntrack_is_snatted' events.o(.text+0x260):/opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:58:
undefined reference to `nfct_conntrack_is_dnatted'

and loads more.

I can't find reference to nfct_conntrack_is_snatted anywhere in any of my source trees, even google and gmane have nothing to say.

nm -as /usr/local/lib/libnetfilter_conntrack.a doesn't find the symbol either, or any symbol with "snat" within it.

Is there a file missing from conntrackd?

Sam

No, probably you forgot to apply the patches included in the directory "patches" inside conntrackd-0.8.2 that provides those functions.

The dawn of the fourth age of Linux firewalling is coming; a time of great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris