#include <stdbool.h>
#include <netinet/in.h>
#include <libnfnetlink/linux_nfnetlink.h>
#include <libnfnetlink/libnfnetlink.h>
#include <libnetfilter_conntrack/linux_nfnetlink_conntrack.h>
#include <sys/types.h>

Include dependency graph for libnetfilter_conntrack.h:

Data Structures
struct	nfct_attr_grp_ipv4

struct	nfct_attr_grp_ipv6

struct	nfct_attr_grp_port

struct	nfct_attr_grp_icmp

struct	nfct_attr_grp_ctrs

union	nfct_attr_grp_addr

struct	nfct_filter_proto

struct	nfct_filter_ipv4

struct	nfct_filter_ipv6

struct	nfct_filter_dump_mark

Macros
#define	NFCT_ALL_CT_GROUPS (NF_NETLINK_CONNTRACK_NEW\|NF_NETLINK_CONNTRACK_UPDATE\|NF_NETLINK_CONNTRACK_DESTROY)

#define	NFCT_SOPT_MAX (__NFCT_SOPT_MAX - 1)

#define	NFCT_GOPT_MAX (__NFCT_GOPT_MAX - 1)

#define	NF_CT_EXPECT_PERMANENT 0x1

#define	NF_CT_EXPECT_INACTIVE 0x2

#define	NF_CT_EXPECT_USERSPACE 0x4

#define	IP_CT_TCP_FLAG_WINDOW_SCALE 0x01

#define	IP_CT_TCP_FLAG_SACK_PERM 0x02

#define	IP_CT_TCP_FLAG_CLOSE_INIT 0x04

#define	IP_CT_TCP_FLAG_BE_LIBERAL 0x08

#define	NFCT_DIR_ORIGINAL 0

#define	NFCT_DIR_REPLY 1

#define	NFCT_DIR_MAX NFCT_DIR_REPLY+1

#define	NFCT_HELPER_NAME_MAX 16

Enumerations
enum	{ CONNTRACK = NFNL_SUBSYS_CTNETLINK, EXPECT = NFNL_SUBSYS_CTNETLINK_EXP }

enum	nf_conntrack_attr { ATTR_ORIG_IPV4_SRC = 0, ATTR_IPV4_SRC = ATTR_ORIG_IPV4_SRC, ATTR_ORIG_IPV4_DST, ATTR_IPV4_DST = ATTR_ORIG_IPV4_DST, ATTR_REPL_IPV4_SRC, ATTR_REPL_IPV4_DST, ATTR_ORIG_IPV6_SRC = 4, ATTR_IPV6_SRC = ATTR_ORIG_IPV6_SRC, ATTR_ORIG_IPV6_DST, ATTR_IPV6_DST = ATTR_ORIG_IPV6_DST, ATTR_REPL_IPV6_SRC, ATTR_REPL_IPV6_DST, ATTR_ORIG_PORT_SRC = 8, ATTR_PORT_SRC = ATTR_ORIG_PORT_SRC, ATTR_ORIG_PORT_DST, ATTR_PORT_DST = ATTR_ORIG_PORT_DST, ATTR_REPL_PORT_SRC, ATTR_REPL_PORT_DST, ATTR_ICMP_TYPE = 12, ATTR_ICMP_CODE, ATTR_ICMP_ID, ATTR_ORIG_L3PROTO, ATTR_L3PROTO = ATTR_ORIG_L3PROTO, ATTR_REPL_L3PROTO = 16, ATTR_ORIG_L4PROTO, ATTR_L4PROTO = ATTR_ORIG_L4PROTO, ATTR_REPL_L4PROTO, ATTR_TCP_STATE, ATTR_SNAT_IPV4 = 20, ATTR_DNAT_IPV4, ATTR_SNAT_PORT, ATTR_DNAT_PORT, ATTR_TIMEOUT = 24, ATTR_MARK, ATTR_ORIG_COUNTER_PACKETS, ATTR_REPL_COUNTER_PACKETS, ATTR_ORIG_COUNTER_BYTES = 28, ATTR_REPL_COUNTER_BYTES, ATTR_USE, ATTR_ID, ATTR_STATUS = 32, ATTR_TCP_FLAGS_ORIG, ATTR_TCP_FLAGS_REPL, ATTR_TCP_MASK_ORIG, ATTR_TCP_MASK_REPL = 36, ATTR_MASTER_IPV4_SRC, ATTR_MASTER_IPV4_DST, ATTR_MASTER_IPV6_SRC, ATTR_MASTER_IPV6_DST = 40, ATTR_MASTER_PORT_SRC, ATTR_MASTER_PORT_DST, ATTR_MASTER_L3PROTO, ATTR_MASTER_L4PROTO = 44, ATTR_SECMARK, ATTR_ORIG_NAT_SEQ_CORRECTION_POS, ATTR_ORIG_NAT_SEQ_OFFSET_BEFORE, ATTR_ORIG_NAT_SEQ_OFFSET_AFTER = 48, ATTR_REPL_NAT_SEQ_CORRECTION_POS, ATTR_REPL_NAT_SEQ_OFFSET_BEFORE, ATTR_REPL_NAT_SEQ_OFFSET_AFTER, ATTR_SCTP_STATE = 52, ATTR_SCTP_VTAG_ORIG, ATTR_SCTP_VTAG_REPL, ATTR_HELPER_NAME, ATTR_DCCP_STATE = 56, ATTR_DCCP_ROLE, ATTR_DCCP_HANDSHAKE_SEQ, ATTR_TCP_WSCALE_ORIG, ATTR_TCP_WSCALE_REPL = 60, ATTR_ZONE, ATTR_SECCTX, ATTR_TIMESTAMP_START, ATTR_TIMESTAMP_STOP = 64, ATTR_HELPER_INFO, ATTR_CONNLABELS, ATTR_CONNLABELS_MASK, ATTR_MAX }

enum	nf_conntrack_attr_grp { ATTR_GRP_ORIG_IPV4 = 0, ATTR_GRP_REPL_IPV4, ATTR_GRP_ORIG_IPV6, ATTR_GRP_REPL_IPV6, ATTR_GRP_ORIG_PORT = 4, ATTR_GRP_REPL_PORT, ATTR_GRP_ICMP, ATTR_GRP_MASTER_IPV4, ATTR_GRP_MASTER_IPV6 = 8, ATTR_GRP_MASTER_PORT, ATTR_GRP_ORIG_COUNTERS, ATTR_GRP_REPL_COUNTERS, ATTR_GRP_ORIG_ADDR_SRC = 12, ATTR_GRP_ORIG_ADDR_DST, ATTR_GRP_REPL_ADDR_SRC, ATTR_GRP_REPL_ADDR_DST, ATTR_GRP_MAX }

enum	nf_conntrack_msg_type { NFCT_T_UNKNOWN = 0, NFCT_T_NEW_BIT = 0, NFCT_T_NEW = (1 << NFCT_T_NEW_BIT), NFCT_T_UPDATE_BIT = 1, NFCT_T_UPDATE = (1 << NFCT_T_UPDATE_BIT), NFCT_T_DESTROY_BIT = 2, NFCT_T_DESTROY = (1 << NFCT_T_DESTROY_BIT), NFCT_T_ALL = NFCT_T_NEW \| NFCT_T_UPDATE \| NFCT_T_DESTROY, NFCT_T_ERROR_BIT = 31, NFCT_T_ERROR = (1 << NFCT_T_ERROR_BIT) }

enum	{ NFCT_SOPT_UNDO_SNAT, NFCT_SOPT_UNDO_DNAT, NFCT_SOPT_UNDO_SPAT, NFCT_SOPT_UNDO_DPAT, NFCT_SOPT_SETUP_ORIGINAL, NFCT_SOPT_SETUP_REPLY, __NFCT_SOPT_MAX }

enum	{ NFCT_GOPT_IS_SNAT, NFCT_GOPT_IS_DNAT, NFCT_GOPT_IS_SPAT, NFCT_GOPT_IS_DPAT, __NFCT_GOPT_MAX }

enum	{ NFCT_CB_FAILURE = -1, NFCT_CB_STOP = 0, NFCT_CB_CONTINUE = 1, NFCT_CB_STOLEN = 2 }

enum	{ NFCT_O_PLAIN, NFCT_O_DEFAULT = NFCT_O_PLAIN, NFCT_O_XML, NFCT_O_MAX }

enum	{ NFCT_OF_SHOW_LAYER3_BIT = 0, NFCT_OF_SHOW_LAYER3 = (1 << NFCT_OF_SHOW_LAYER3_BIT), NFCT_OF_TIME_BIT = 1, NFCT_OF_TIME = (1 << NFCT_OF_TIME_BIT), NFCT_OF_ID_BIT = 2, NFCT_OF_ID = (1 << NFCT_OF_ID_BIT), NFCT_OF_TIMESTAMP_BIT = 3, NFCT_OF_TIMESTAMP = (1 << NFCT_OF_TIMESTAMP_BIT) }

enum	{ NFCT_CMP_ALL = 0, NFCT_CMP_ORIG = (1 << 0), NFCT_CMP_REPL = (1 << 1), NFCT_CMP_TIMEOUT_EQ = (1 << 2), NFCT_CMP_TIMEOUT_GT = (1 << 3), NFCT_CMP_TIMEOUT_GE = (NFCT_CMP_TIMEOUT_EQ \| NFCT_CMP_TIMEOUT_GT), NFCT_CMP_TIMEOUT_LT = (1 << 4), NFCT_CMP_TIMEOUT_LE = (NFCT_CMP_TIMEOUT_EQ \| NFCT_CMP_TIMEOUT_LT), NFCT_CMP_MASK = (1 << 5), NFCT_CMP_STRICT = (1 << 6) }

enum	nf_conntrack_query { NFCT_Q_CREATE, NFCT_Q_UPDATE, NFCT_Q_DESTROY, NFCT_Q_GET, NFCT_Q_FLUSH, NFCT_Q_DUMP, NFCT_Q_DUMP_RESET, NFCT_Q_CREATE_UPDATE, NFCT_Q_DUMP_FILTER, NFCT_Q_DUMP_FILTER_RESET }

enum	{ NFCT_CP_ALL = 0, NFCT_CP_ORIG = (1 << 0), NFCT_CP_REPL = (1 << 1), NFCT_CP_META = (1 << 2), NFCT_CP_OVERRIDE = (1 << 3) }

enum	nfct_filter_attr { NFCT_FILTER_L4PROTO = 0, NFCT_FILTER_L4PROTO_STATE, NFCT_FILTER_SRC_IPV4, NFCT_FILTER_DST_IPV4, NFCT_FILTER_SRC_IPV6, NFCT_FILTER_DST_IPV6, NFCT_FILTER_MAX }

enum	nfct_filter_logic { NFCT_FILTER_LOGIC_POSITIVE, NFCT_FILTER_LOGIC_NEGATIVE, NFCT_FILTER_LOGIC_MAX }

enum	nfct_filter_dump_attr { NFCT_FILTER_DUMP_MARK = 0, NFCT_FILTER_DUMP_L3NUM, NFCT_FILTER_DUMP_MAX }

enum	nf_expect_attr { ATTR_EXP_MASTER = 0, ATTR_EXP_EXPECTED, ATTR_EXP_MASK, ATTR_EXP_TIMEOUT, ATTR_EXP_ZONE, ATTR_EXP_FLAGS, ATTR_EXP_HELPER_NAME, ATTR_EXP_CLASS, ATTR_EXP_NAT_TUPLE, ATTR_EXP_NAT_DIR, ATTR_EXP_FN, ATTR_EXP_MAX }

enum	ip_conntrack_status { IPS_EXPECTED_BIT = 0, IPS_EXPECTED = (1 << IPS_EXPECTED_BIT), IPS_SEEN_REPLY_BIT = 1, IPS_SEEN_REPLY = (1 << IPS_SEEN_REPLY_BIT), IPS_ASSURED_BIT = 2, IPS_ASSURED = (1 << IPS_ASSURED_BIT), IPS_CONFIRMED_BIT = 3, IPS_CONFIRMED = (1 << IPS_CONFIRMED_BIT), IPS_SRC_NAT_BIT = 4, IPS_SRC_NAT = (1 << IPS_SRC_NAT_BIT), IPS_DST_NAT_BIT = 5, IPS_DST_NAT = (1 << IPS_DST_NAT_BIT), IPS_NAT_MASK = (IPS_DST_NAT \| IPS_SRC_NAT), IPS_SEQ_ADJUST_BIT = 6, IPS_SEQ_ADJUST = (1 << IPS_SEQ_ADJUST_BIT), IPS_SRC_NAT_DONE_BIT = 7, IPS_SRC_NAT_DONE = (1 << IPS_SRC_NAT_DONE_BIT), IPS_DST_NAT_DONE_BIT = 8, IPS_DST_NAT_DONE = (1 << IPS_DST_NAT_DONE_BIT), IPS_NAT_DONE_MASK = (IPS_DST_NAT_DONE \| IPS_SRC_NAT_DONE), IPS_DYING_BIT = 9, IPS_DYING = (1 << IPS_DYING_BIT), IPS_FIXED_TIMEOUT_BIT = 10, IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT), IPS_TEMPLATE_BIT = 11, IPS_TEMPLATE = (1 << IPS_TEMPLATE_BIT), IPS_UNTRACKED_BIT = 12, IPS_UNTRACKED = (1 << IPS_UNTRACKED_BIT), IPS_EXPECTED_BIT = 0, IPS_EXPECTED = (1 << IPS_EXPECTED_BIT), IPS_SEEN_REPLY_BIT = 1, IPS_SEEN_REPLY = (1 << IPS_SEEN_REPLY_BIT), IPS_ASSURED_BIT = 2, IPS_ASSURED = (1 << IPS_ASSURED_BIT), IPS_CONFIRMED_BIT = 3, IPS_CONFIRMED = (1 << IPS_CONFIRMED_BIT), IPS_SRC_NAT_BIT = 4, IPS_SRC_NAT = (1 << IPS_SRC_NAT_BIT), IPS_DST_NAT_BIT = 5, IPS_DST_NAT = (1 << IPS_DST_NAT_BIT), IPS_NAT_MASK = (IPS_DST_NAT \| IPS_SRC_NAT), IPS_SEQ_ADJUST_BIT = 6, IPS_SEQ_ADJUST = (1 << IPS_SEQ_ADJUST_BIT), IPS_SRC_NAT_DONE_BIT = 7, IPS_SRC_NAT_DONE = (1 << IPS_SRC_NAT_DONE_BIT), IPS_DST_NAT_DONE_BIT = 8, IPS_DST_NAT_DONE = (1 << IPS_DST_NAT_DONE_BIT), IPS_NAT_DONE_MASK = (IPS_DST_NAT_DONE \| IPS_SRC_NAT_DONE), IPS_DYING_BIT = 9, IPS_DYING = (1 << IPS_DYING_BIT), IPS_FIXED_TIMEOUT_BIT = 10, IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT), IPS_TEMPLATE_BIT = 11, IPS_TEMPLATE = (1 << IPS_TEMPLATE_BIT), IPS_UNTRACKED_BIT = 12, IPS_UNTRACKED = (1 << IPS_UNTRACKED_BIT), IPS_EXPECTED_BIT = 0, IPS_EXPECTED = (1 << IPS_EXPECTED_BIT), IPS_SEEN_REPLY_BIT = 1, IPS_SEEN_REPLY = (1 << IPS_SEEN_REPLY_BIT), IPS_ASSURED_BIT = 2, IPS_ASSURED = (1 << IPS_ASSURED_BIT), IPS_CONFIRMED_BIT = 3, IPS_CONFIRMED = (1 << IPS_CONFIRMED_BIT), IPS_SRC_NAT_BIT = 4, IPS_SRC_NAT = (1 << IPS_SRC_NAT_BIT), IPS_DST_NAT_BIT = 5, IPS_DST_NAT = (1 << IPS_DST_NAT_BIT), IPS_NAT_MASK = (IPS_DST_NAT \| IPS_SRC_NAT), IPS_SEQ_ADJUST_BIT = 6, IPS_SEQ_ADJUST = (1 << IPS_SEQ_ADJUST_BIT), IPS_SRC_NAT_DONE_BIT = 7, IPS_SRC_NAT_DONE = (1 << IPS_SRC_NAT_DONE_BIT), IPS_DST_NAT_DONE_BIT = 8, IPS_DST_NAT_DONE = (1 << IPS_DST_NAT_DONE_BIT), IPS_NAT_DONE_MASK = (IPS_DST_NAT_DONE \| IPS_SRC_NAT_DONE), IPS_DYING_BIT = 9, IPS_DYING = (1 << IPS_DYING_BIT), IPS_FIXED_TIMEOUT_BIT = 10, IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT) }

Functions
struct nfct_handle *	nfct_open (u_int8_t, unsigned)
	nfct_open - open a ctnetlink handler More...

struct nfct_handle *	nfct_open_nfnl (struct nfnl_handle *nfnlh, u_int8_t subsys_id, unsigned int subscriptions)

int	nfct_close (struct nfct_handle *cth)
	nfct_close - close a ctnetlink handler More...

int	nfct_fd (struct nfct_handle *cth)
	nfct_fd - get the Netlink file descriptor of one existing ctnetlink handler More...

const struct nfnl_handle *	nfct_nfnlh (struct nfct_handle *cth)

struct nf_conntrack *	nfct_new (void)
	nfct_conntrack_new - allocate a new conntrack More...

void	nfct_destroy (struct nf_conntrack *ct)
	nf_conntrack_destroy - release a conntrack object More...

struct nf_conntrack *	nfct_clone (const struct nf_conntrack *ct)
	nfct_clone - clone a conntrack object More...

	__attribute__ ((deprecated)) size_t nfct_sizeof(const struct nf_conntrack *ct)

int	nfct_setobjopt (struct nf_conntrack *ct, unsigned int option)
	nfct_setobjopt - set a certain option for a conntrack object More...

int	nfct_getobjopt (const struct nf_conntrack *ct, unsigned int option)
	nfct_getobjopt - get a certain option for a conntrack object More...

int	nfct_callback_register (struct nfct_handle h, enum nf_conntrack_msg_type type, int(cb)(enum nf_conntrack_msg_type type, struct nf_conntrack ct, void data), void *data)
	nf_callback_register - register a callback More...

void	nfct_callback_unregister (struct nfct_handle *h)
	nfct_callback_unregister - unregister a callback More...

int	nfct_callback_register2 (struct nfct_handle h, enum nf_conntrack_msg_type type, int(cb)(const struct nlmsghdr nlh, enum nf_conntrack_msg_type type, struct nf_conntrack ct, void data), void data)
	nf_callback_register2 - register a callback More...

void	nfct_callback_unregister2 (struct nfct_handle *h)
	nfct_callback_unregister2 - unregister a callback More...

struct nfct_bitmask *	nfct_bitmask_new (unsigned int maxbit)
	nfct_bitmask_new - allocate a new bitmask More...

struct nfct_bitmask *	nfct_bitmask_clone (const struct nfct_bitmask *)

unsigned int	nfct_bitmask_maxbit (const struct nfct_bitmask *)

void	nfct_bitmask_set_bit (struct nfct_bitmask *, unsigned int bit)

int	nfct_bitmask_test_bit (const struct nfct_bitmask *, unsigned int bit)

void	nfct_bitmask_unset_bit (struct nfct_bitmask *, unsigned int bit)

void	nfct_bitmask_destroy (struct nfct_bitmask *)

void	nfct_bitmask_clear (struct nfct_bitmask *)

bool	nfct_bitmask_equal (const struct nfct_bitmask , const struct nfct_bitmask )

struct nfct_labelmap *	nfct_labelmap_new (const char *mapfile)
	nfct_labelmap_new - create a new label map More...

void	nfct_labelmap_destroy (struct nfct_labelmap *map)
	nfct_labelmap_destroy - destroy nfct_labelmap object More...

const char *	nfct_labelmap_get_name (struct nfct_labelmap *m, unsigned int bit)
	nfct_labelmap_get_name - get name of the label bit More...

int	nfct_labelmap_get_bit (struct nfct_labelmap m, const char name)
	nfct_labelmap_get_bit - get bit associated with the name More...

void	nfct_set_attr (struct nf_conntrack ct, const enum nf_conntrack_attr type, const void value)
	nfct_set_attr - set the value of a certain conntrack attribute More...

void	nfct_set_attr_u8 (struct nf_conntrack *ct, const enum nf_conntrack_attr type, u_int8_t value)
	nfct_set_attr_u8 - set the value of a certain conntrack attribute More...

void	nfct_set_attr_u16 (struct nf_conntrack *ct, const enum nf_conntrack_attr type, u_int16_t value)
	nfct_set_attr_u16 - set the value of a certain conntrack attribute More...

void	nfct_set_attr_u32 (struct nf_conntrack *ct, const enum nf_conntrack_attr type, u_int32_t value)
	nfct_set_attr_u32 - set the value of a certain conntrack attribute More...

void	nfct_set_attr_u64 (struct nf_conntrack *ct, const enum nf_conntrack_attr type, u_int64_t value)
	nfct_set_attr_u64 - set the value of a certain conntrack attribute More...

void	nfct_set_attr_l (struct nf_conntrack ct, const enum nf_conntrack_attr type, const void value, size_t len)
	nfct_set_attr_l - set the value of a certain conntrack attribute More...

const void *	nfct_get_attr (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_get_attr - get a conntrack attribute More...

u_int8_t	nfct_get_attr_u8 (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_get_attr_u8 - get attribute of unsigned 8-bits long More...

u_int16_t	nfct_get_attr_u16 (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_get_attr_u16 - get attribute of unsigned 16-bits long More...

u_int32_t	nfct_get_attr_u32 (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_get_attr_u32 - get attribute of unsigned 32-bits long More...

u_int64_t	nfct_get_attr_u64 (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_get_attr_u64 - get attribute of unsigned 32-bits long More...

int	nfct_attr_is_set (const struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_attr_is_set - check if a certain attribute is set More...

int	nfct_attr_is_set_array (const struct nf_conntrack ct, const enum nf_conntrack_attr type_array, int size)
	nfct_attr_is_set_array - check if an array of attribute types is set More...

int	nfct_attr_unset (struct nf_conntrack *ct, const enum nf_conntrack_attr type)
	nfct_attr_unset - unset a certain attribute More...

void	nfct_set_attr_grp (struct nf_conntrack ct, const enum nf_conntrack_attr_grp type, const void value)
	nfct_set_attr_grp - set a group of attributes More...

int	nfct_get_attr_grp (const struct nf_conntrack ct, const enum nf_conntrack_attr_grp type, void data)
	nfct_get_attr_grp - get an attribute group More...

int	nfct_attr_grp_is_set (const struct nf_conntrack *ct, const enum nf_conntrack_attr_grp type)
	nfct_attr_grp_is_set - check if an attribute group is set More...

int	nfct_attr_grp_unset (struct nf_conntrack *ct, const enum nf_conntrack_attr_grp type)
	nfct_attr_grp_unset - unset an attribute group More...

int	nfct_snprintf (char buf, unsigned int size, const struct nf_conntrack ct, const unsigned int msg_type, const unsigned int out_type, const unsigned int out_flags)
	nfct_snprintf - print a conntrack object to a buffer More...

int	nfct_snprintf_labels (char buf, unsigned int size, const struct nf_conntrack ct, const unsigned int msg_type, const unsigned int out_type, const unsigned int out_flags, struct nfct_labelmap *map)
	nfct_snprintf_labels - print a bitmask object to a buffer including labels More...

int	nfct_compare (const struct nf_conntrack ct1, const struct nf_conntrack ct2)
	nfct_compare - compare two conntrack objects More...

int	nfct_cmp (const struct nf_conntrack ct1, const struct nf_conntrack ct2, unsigned int flags)
	nfct_cmp - compare two conntrack objects More...

int	nfct_query (struct nfct_handle h, const enum nf_conntrack_query query, const void data)
	nfct_query - send a query to ctnetlink and handle the reply More...

int	nfct_send (struct nfct_handle h, const enum nf_conntrack_query query, const void data)
	nfct_send - send a query to ctnetlink More...

int	nfct_catch (struct nfct_handle *h)
	nfct_catch - catch events More...

void	nfct_copy (struct nf_conntrack dest, const struct nf_conntrack source, unsigned int flags)
	nfct_copy - copy part of one source object to another More...

void	nfct_copy_attr (struct nf_conntrack ct1, const struct nf_conntrack ct2, const enum nf_conntrack_attr type)
	nfct_copy_attr - copy an attribute of one source object to another More...

struct nfct_filter *	nfct_filter_create (void)
	nfct_filter_create - create a filter More...

void	nfct_filter_destroy (struct nfct_filter *filter)
	nfct_filter_destroy - destroy a filter More...

void	nfct_filter_add_attr (struct nfct_filter filter, const enum nfct_filter_attr attr, const void value)
	nfct_filter_add_attr - add a filter attribute of the filter object More...

void	nfct_filter_add_attr_u32 (struct nfct_filter *filter, const enum nfct_filter_attr attr, const u_int32_t value)
	nfct_filter_add_attr_u32 - add an u32 filter attribute of the filter object More...

int	nfct_filter_set_logic (struct nfct_filter *filter, const enum nfct_filter_attr attr, const enum nfct_filter_logic logic)
	nfct_filter_set_logic - set the filter logic for an attribute type More...

int	nfct_filter_attach (int fd, struct nfct_filter *filter)
	nfct_filter_attach - attach a filter to a socket descriptor More...

int	nfct_filter_detach (int fd)
	nfct_filter_detach - detach an existing filter More...

struct nfct_filter_dump *	nfct_filter_dump_create (void)
	nfct_filter_dump_create - create a dump filter More...

void	nfct_filter_dump_destroy (struct nfct_filter_dump *filter)
	nfct_filter_dump_destroy - destroy a dump filter More...

void	nfct_filter_dump_set_attr (struct nfct_filter_dump filter_dump, const enum nfct_filter_dump_attr type, const void data)
	nfct_filter_dump_attr_set - set filter attribute More...

void	nfct_filter_dump_set_attr_u8 (struct nfct_filter_dump *filter_dump, const enum nfct_filter_dump_attr type, u_int8_t data)
	nfct_filter_dump_attr_set_u8 - set u8 dump filter attribute More...

int	nfct_nlmsg_build (struct nlmsghdr nlh, const struct nf_conntrack ct)

int	nfct_nlmsg_parse (const struct nlmsghdr nlh, struct nf_conntrack ct)

int	nfct_payload_parse (const void payload, size_t payload_len, uint16_t l3num, struct nf_conntrack ct)

struct nf_expect *	nfexp_new (void)
	nfexp_new - allocate a new expectation More...

void	nfexp_destroy (struct nf_expect *exp)
	nfexp_destroy - release an expectation object More...

struct nf_expect *	nfexp_clone (const struct nf_expect *exp)
	nfexp_clone - clone a expectation object More...

size_t	nfexp_sizeof (const struct nf_expect *exp)
	nfexp_sizeof - return the size in bytes of a certain expect object More...

size_t	nfexp_maxsize (void)
	nfexp_maxsize - return the maximum size in bytes of a expect object More...

int	nfexp_callback_register (struct nfct_handle h, enum nf_conntrack_msg_type type, int(cb)(enum nf_conntrack_msg_type type, struct nf_expect exp, void data), void *data)
	nfexp_callback_register - register a callback More...

void	nfexp_callback_unregister (struct nfct_handle *h)
	nfexp_callback_unregister - unregister a callback More...

int	nfexp_callback_register2 (struct nfct_handle h, enum nf_conntrack_msg_type type, int(cb)(const struct nlmsghdr nlh, enum nf_conntrack_msg_type type, struct nf_expect exp, void data), void data)
	nfexp_callback_register2 - register a callback More...

void	nfexp_callback_unregister2 (struct nfct_handle *h)
	nfexp_callback_unregister2 - unregister a callback More...

void	nfexp_set_attr (struct nf_expect exp, const enum nf_expect_attr type, const void value)
	nfexp_set_attr - set the value of a certain expect attribute More...

void	nfexp_set_attr_u8 (struct nf_expect *exp, const enum nf_expect_attr type, u_int8_t value)
	nfexp_set_attr_u8 - set the value of a certain expect attribute More...

void	nfexp_set_attr_u16 (struct nf_expect *exp, const enum nf_expect_attr type, u_int16_t value)
	nfexp_set_attr_u16 - set the value of a certain expect attribute More...

void	nfexp_set_attr_u32 (struct nf_expect *exp, const enum nf_expect_attr type, u_int32_t value)
	nfexp_set_attr_u32 - set the value of a certain expect attribute More...

const void *	nfexp_get_attr (const struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_get_attr - get an expect attribute More...

u_int8_t	nfexp_get_attr_u8 (const struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_get_attr_u8 - get attribute of unsigned 8-bits long More...

u_int16_t	nfexp_get_attr_u16 (const struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_get_attr_u16 - get attribute of unsigned 16-bits long More...

u_int32_t	nfexp_get_attr_u32 (const struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_get_attr_u32 - get attribute of unsigned 32-bits long More...

int	nfexp_attr_is_set (const struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_attr_is_set - check if a certain attribute is set More...

int	nfexp_attr_unset (struct nf_expect *exp, const enum nf_expect_attr type)
	nfexp_attr_unset - unset a certain attribute More...

int	nfexp_query (struct nfct_handle h, const enum nf_conntrack_query qt, const void data)
	nfexp_query - send a query to ctnetlink More...

int	nfexp_snprintf (char buf, unsigned int size, const struct nf_expect exp, const unsigned int msg_type, const unsigned int out_type, const unsigned int out_flags)
	nfexp_snprintf - print a conntrack object to a buffer More...

int	nfexp_cmp (const struct nf_expect exp1, const struct nf_expect exp2, unsigned int flags)
	nfexp_cmp - compare two expectation objects More...

int	nfexp_send (struct nfct_handle h, const enum nf_conntrack_query qt, const void data)
	nfexp_send - send a query to ctnetlink More...

int	nfexp_catch (struct nfct_handle *h)
	nfexp_catch - catch events More...

int	nfexp_nlmsg_build (struct nlmsghdr nlh, const struct nf_expect exp)

int	nfexp_nlmsg_parse (const struct nlmsghdr nlh, struct nf_expect exp)

Variables
void *	req

void size_t	size

void size_t u_int16_t	type

void size_t u_int16_t u_int16_t	flags

void size_t u_int16_t u_int16_t const struct nf_conntrack *	ct

const struct nlmsghdr *	nlh

enum nf_conntrack_query query const void *	data

void size_t u_int16_t u_int16_t const struct nf_expect *	exp

enum nf_conntrack_query qt const void void *	buffer

Macro Definition Documentation

#define IP_CT_TCP_FLAG_BE_LIBERAL 0x08

Referenced by nl_create_conntrack(), and nl_update_conntrack().

#define IP_CT_TCP_FLAG_CLOSE_INIT 0x04

Referenced by nl_create_conntrack(), and nl_update_conntrack().

#define IP_CT_TCP_FLAG_SACK_PERM 0x02

Referenced by nl_create_conntrack(), and nl_update_conntrack().

#define IP_CT_TCP_FLAG_WINDOW_SCALE 0x01

Referenced by nl_create_conntrack(), and nl_update_conntrack().

#define NF_CT_EXPECT_INACTIVE 0x2

#define NF_CT_EXPECT_PERMANENT 0x1

#define NF_CT_EXPECT_USERSPACE 0x4

#define NFCT_ALL_CT_GROUPS (NF_NETLINK_CONNTRACK_NEW|NF_NETLINK_CONNTRACK_UPDATE|NF_NETLINK_CONNTRACK_DESTROY)

Referenced by main().

#define NFCT_DIR_MAX NFCT_DIR_REPLY+1

#define NFCT_DIR_ORIGINAL 0

#define NFCT_DIR_REPLY 1

#define NFCT_GOPT_MAX (__NFCT_GOPT_MAX - 1)

Referenced by __getobjopt(), and nfct_getobjopt().

#define NFCT_HELPER_NAME_MAX 16

Referenced by exp_filter_add(), and nfexp_nlmsg_parse().

#define NFCT_SOPT_MAX (__NFCT_SOPT_MAX - 1)

Referenced by __setobjopt(), and nfct_setobjopt().

Enumeration Type Documentation

anonymous enum

Enumerator
CONNTRACK
EXPECT

anonymous enum

Enumerator
NFCT_SOPT_UNDO_SNAT
NFCT_SOPT_UNDO_DNAT
NFCT_SOPT_UNDO_SPAT
NFCT_SOPT_UNDO_DPAT
NFCT_SOPT_SETUP_ORIGINAL
NFCT_SOPT_SETUP_REPLY
__NFCT_SOPT_MAX

anonymous enum

Enumerator
NFCT_GOPT_IS_SNAT
NFCT_GOPT_IS_DNAT
NFCT_GOPT_IS_SPAT
NFCT_GOPT_IS_DPAT
__NFCT_GOPT_MAX

anonymous enum

Enumerator
NFCT_CB_FAILURE
NFCT_CB_STOP
NFCT_CB_CONTINUE
NFCT_CB_STOLEN

anonymous enum

Enumerator
NFCT_O_PLAIN
NFCT_O_DEFAULT
NFCT_O_XML
NFCT_O_MAX

anonymous enum

Enumerator
NFCT_OF_SHOW_LAYER3_BIT
NFCT_OF_SHOW_LAYER3
NFCT_OF_TIME_BIT
NFCT_OF_TIME
NFCT_OF_ID_BIT
NFCT_OF_ID
NFCT_OF_TIMESTAMP_BIT
NFCT_OF_TIMESTAMP

anonymous enum

Enumerator
NFCT_CMP_ALL
NFCT_CMP_ORIG
NFCT_CMP_REPL
NFCT_CMP_TIMEOUT_EQ
NFCT_CMP_TIMEOUT_GT
NFCT_CMP_TIMEOUT_GE
NFCT_CMP_TIMEOUT_LT
NFCT_CMP_TIMEOUT_LE
NFCT_CMP_MASK
NFCT_CMP_STRICT

anonymous enum

Enumerator
NFCT_CP_ALL
NFCT_CP_ORIG
NFCT_CP_REPL
NFCT_CP_META
NFCT_CP_OVERRIDE

enum ip_conntrack_status

Enumerator
IPS_EXPECTED_BIT
IPS_EXPECTED
IPS_SEEN_REPLY_BIT
IPS_SEEN_REPLY
IPS_ASSURED_BIT
IPS_ASSURED
IPS_CONFIRMED_BIT
IPS_CONFIRMED
IPS_SRC_NAT_BIT
IPS_SRC_NAT
IPS_DST_NAT_BIT
IPS_DST_NAT
IPS_NAT_MASK
IPS_SEQ_ADJUST_BIT
IPS_SEQ_ADJUST
IPS_SRC_NAT_DONE_BIT
IPS_SRC_NAT_DONE
IPS_DST_NAT_DONE_BIT
IPS_DST_NAT_DONE
IPS_NAT_DONE_MASK
IPS_DYING_BIT
IPS_DYING
IPS_FIXED_TIMEOUT_BIT
IPS_FIXED_TIMEOUT
IPS_TEMPLATE_BIT
IPS_TEMPLATE
IPS_UNTRACKED_BIT
IPS_UNTRACKED
IPS_EXPECTED_BIT
IPS_EXPECTED
IPS_SEEN_REPLY_BIT
IPS_SEEN_REPLY
IPS_ASSURED_BIT
IPS_ASSURED
IPS_CONFIRMED_BIT
IPS_CONFIRMED
IPS_SRC_NAT_BIT
IPS_SRC_NAT
IPS_DST_NAT_BIT
IPS_DST_NAT
IPS_NAT_MASK
IPS_SEQ_ADJUST_BIT
IPS_SEQ_ADJUST
IPS_SRC_NAT_DONE_BIT
IPS_SRC_NAT_DONE
IPS_DST_NAT_DONE_BIT
IPS_DST_NAT_DONE
IPS_NAT_DONE_MASK
IPS_DYING_BIT
IPS_DYING
IPS_FIXED_TIMEOUT_BIT
IPS_FIXED_TIMEOUT
IPS_TEMPLATE_BIT
IPS_TEMPLATE
IPS_UNTRACKED_BIT
IPS_UNTRACKED
IPS_EXPECTED_BIT
IPS_EXPECTED
IPS_SEEN_REPLY_BIT
IPS_SEEN_REPLY
IPS_ASSURED_BIT
IPS_ASSURED
IPS_CONFIRMED_BIT
IPS_CONFIRMED
IPS_SRC_NAT_BIT
IPS_SRC_NAT
IPS_DST_NAT_BIT
IPS_DST_NAT
IPS_NAT_MASK
IPS_SEQ_ADJUST_BIT
IPS_SEQ_ADJUST
IPS_SRC_NAT_DONE_BIT
IPS_SRC_NAT_DONE
IPS_DST_NAT_DONE_BIT
IPS_DST_NAT_DONE
IPS_NAT_DONE_MASK
IPS_DYING_BIT
IPS_DYING
IPS_FIXED_TIMEOUT_BIT
IPS_FIXED_TIMEOUT

enum nf_conntrack_attr

Enumerator
ATTR_ORIG_IPV4_SRC
ATTR_IPV4_SRC
ATTR_ORIG_IPV4_DST
ATTR_IPV4_DST
ATTR_REPL_IPV4_SRC
ATTR_REPL_IPV4_DST
ATTR_ORIG_IPV6_SRC
ATTR_IPV6_SRC
ATTR_ORIG_IPV6_DST
ATTR_IPV6_DST
ATTR_REPL_IPV6_SRC
ATTR_REPL_IPV6_DST
ATTR_ORIG_PORT_SRC
ATTR_PORT_SRC
ATTR_ORIG_PORT_DST
ATTR_PORT_DST
ATTR_REPL_PORT_SRC
ATTR_REPL_PORT_DST
ATTR_ICMP_TYPE
ATTR_ICMP_CODE
ATTR_ICMP_ID
ATTR_ORIG_L3PROTO
ATTR_L3PROTO
ATTR_REPL_L3PROTO
ATTR_ORIG_L4PROTO
ATTR_L4PROTO
ATTR_REPL_L4PROTO
ATTR_TCP_STATE
ATTR_SNAT_IPV4
ATTR_DNAT_IPV4
ATTR_SNAT_PORT
ATTR_DNAT_PORT
ATTR_TIMEOUT
ATTR_MARK
ATTR_ORIG_COUNTER_PACKETS
ATTR_REPL_COUNTER_PACKETS
ATTR_ORIG_COUNTER_BYTES
ATTR_REPL_COUNTER_BYTES
ATTR_USE
ATTR_ID
ATTR_STATUS
ATTR_TCP_FLAGS_ORIG
ATTR_TCP_FLAGS_REPL
ATTR_TCP_MASK_ORIG
ATTR_TCP_MASK_REPL
ATTR_MASTER_IPV4_SRC
ATTR_MASTER_IPV4_DST
ATTR_MASTER_IPV6_SRC
ATTR_MASTER_IPV6_DST
ATTR_MASTER_PORT_SRC
ATTR_MASTER_PORT_DST
ATTR_MASTER_L3PROTO
ATTR_MASTER_L4PROTO
ATTR_SECMARK
ATTR_ORIG_NAT_SEQ_CORRECTION_POS
ATTR_ORIG_NAT_SEQ_OFFSET_BEFORE
ATTR_ORIG_NAT_SEQ_OFFSET_AFTER
ATTR_REPL_NAT_SEQ_CORRECTION_POS
ATTR_REPL_NAT_SEQ_OFFSET_BEFORE
ATTR_REPL_NAT_SEQ_OFFSET_AFTER
ATTR_SCTP_STATE
ATTR_SCTP_VTAG_ORIG
ATTR_SCTP_VTAG_REPL
ATTR_HELPER_NAME
ATTR_DCCP_STATE
ATTR_DCCP_ROLE
ATTR_DCCP_HANDSHAKE_SEQ
ATTR_TCP_WSCALE_ORIG
ATTR_TCP_WSCALE_REPL
ATTR_ZONE
ATTR_SECCTX
ATTR_TIMESTAMP_START
ATTR_TIMESTAMP_STOP
ATTR_HELPER_INFO
ATTR_CONNLABELS
ATTR_CONNLABELS_MASK
ATTR_MAX

enum nf_conntrack_attr_grp

Enumerator
ATTR_GRP_ORIG_IPV4
ATTR_GRP_REPL_IPV4
ATTR_GRP_ORIG_IPV6
ATTR_GRP_REPL_IPV6
ATTR_GRP_ORIG_PORT
ATTR_GRP_REPL_PORT
ATTR_GRP_ICMP
ATTR_GRP_MASTER_IPV4
ATTR_GRP_MASTER_IPV6
ATTR_GRP_MASTER_PORT
ATTR_GRP_ORIG_COUNTERS
ATTR_GRP_REPL_COUNTERS
ATTR_GRP_ORIG_ADDR_SRC
ATTR_GRP_ORIG_ADDR_DST
ATTR_GRP_REPL_ADDR_SRC
ATTR_GRP_REPL_ADDR_DST
ATTR_GRP_MAX

enum nf_conntrack_msg_type

Enumerator
NFCT_T_UNKNOWN
NFCT_T_NEW_BIT
NFCT_T_NEW
NFCT_T_UPDATE_BIT
NFCT_T_UPDATE
NFCT_T_DESTROY_BIT
NFCT_T_DESTROY
NFCT_T_ALL
NFCT_T_ERROR_BIT
NFCT_T_ERROR

enum nf_conntrack_query

Enumerator
NFCT_Q_CREATE
NFCT_Q_UPDATE
NFCT_Q_DESTROY
NFCT_Q_GET
NFCT_Q_FLUSH
NFCT_Q_DUMP
NFCT_Q_DUMP_RESET
NFCT_Q_CREATE_UPDATE
NFCT_Q_DUMP_FILTER
NFCT_Q_DUMP_FILTER_RESET

enum nf_expect_attr

Enumerator
ATTR_EXP_MASTER
ATTR_EXP_EXPECTED
ATTR_EXP_MASK
ATTR_EXP_TIMEOUT
ATTR_EXP_ZONE
ATTR_EXP_FLAGS
ATTR_EXP_HELPER_NAME
ATTR_EXP_CLASS
ATTR_EXP_NAT_TUPLE
ATTR_EXP_NAT_DIR
ATTR_EXP_FN
ATTR_EXP_MAX

enum nfct_filter_attr

Enumerator
NFCT_FILTER_L4PROTO
NFCT_FILTER_L4PROTO_STATE
NFCT_FILTER_SRC_IPV4
NFCT_FILTER_DST_IPV4
NFCT_FILTER_SRC_IPV6
NFCT_FILTER_DST_IPV6
NFCT_FILTER_MAX

enum nfct_filter_dump_attr

Enumerator
NFCT_FILTER_DUMP_MARK
NFCT_FILTER_DUMP_L3NUM
NFCT_FILTER_DUMP_MAX

enum nfct_filter_logic

Enumerator
NFCT_FILTER_LOGIC_POSITIVE
NFCT_FILTER_LOGIC_NEGATIVE
NFCT_FILTER_LOGIC_MAX

Function Documentation

__attribute__ ( (deprecated) ) const

void nfct_bitmask_clear ( struct nfct_bitmask * )

References nfct_bitmask::bits, bytes, and nfct_bitmask::words.

struct nfct_bitmask* nfct_bitmask_clone ( const struct nfct_bitmask * )

References nfct_bitmask::bits, bytes, and nfct_bitmask::words.

void nfct_bitmask_destroy ( struct nfct_bitmask * )

Referenced by nfct_destroy().

Here is the caller graph for this function:

bool nfct_bitmask_equal	(	const struct nfct_bitmask *	,
		const struct nfct_bitmask *
	)

References nfct_bitmask::bits, and nfct_bitmask::words.

unsigned int nfct_bitmask_maxbit ( const struct nfct_bitmask * )

References nfct_bitmask::words.

Referenced by __snprintf_connlabels().

Here is the caller graph for this function:

struct nfct_bitmask* nfct_bitmask_new ( unsigned int max )

nfct_bitmask_new - allocate a new bitmask

Parameters

max	highest valid bit that can be set/unset.

In case of success, this function returns a valid pointer to a memory blob, otherwise NULL is returned and errno is set appropiately.

References nfct_bitmask::bits, bytes, DIV_ROUND_UP, NULL, and nfct_bitmask::words.

Referenced by main().

Here is the caller graph for this function:

void nfct_bitmask_set_bit	(	struct nfct_bitmask *	,
		unsigned int	bit
	)

References nfct_bitmask::bits, and nfct_bitmask::words.

int nfct_bitmask_test_bit	(	const struct nfct_bitmask *	,
		unsigned int	bit
	)

References nfct_bitmask::bits, and nfct_bitmask::words.

Referenced by __snprintf_connlabels().

Here is the caller graph for this function:

void nfct_bitmask_unset_bit	(	struct nfct_bitmask *	,
		unsigned int	bit
	)

References nfct_bitmask::bits, and nfct_bitmask::words.

int nfct_nlmsg_build	(	struct nlmsghdr *	nlh,
		const struct nf_conntrack *	ct
	)

References __DIR_ORIG, __DIR_REPL, ATTR_CONNLABELS, ATTR_DNAT_IPV4, ATTR_DNAT_PORT, ATTR_HELPER_NAME, ATTR_ICMP_CODE, ATTR_ICMP_ID, ATTR_ICMP_TYPE, ATTR_MARK, ATTR_MASTER_IPV4_DST, ATTR_MASTER_IPV4_SRC, ATTR_MASTER_IPV6_DST, ATTR_MASTER_IPV6_SRC, ATTR_MASTER_L3PROTO, ATTR_MASTER_L4PROTO, ATTR_MASTER_PORT_DST, ATTR_MASTER_PORT_SRC, ATTR_ORIG_IPV4_DST, ATTR_ORIG_IPV4_SRC, ATTR_ORIG_IPV6_DST, ATTR_ORIG_IPV6_SRC, ATTR_ORIG_L3PROTO, ATTR_ORIG_L4PROTO, ATTR_ORIG_NAT_SEQ_CORRECTION_POS, ATTR_ORIG_NAT_SEQ_OFFSET_AFTER, ATTR_ORIG_NAT_SEQ_OFFSET_BEFORE, ATTR_ORIG_PORT_DST, ATTR_ORIG_PORT_SRC, ATTR_REPL_IPV4_DST, ATTR_REPL_IPV4_SRC, ATTR_REPL_IPV6_DST, ATTR_REPL_IPV6_SRC, ATTR_REPL_L3PROTO, ATTR_REPL_L4PROTO, ATTR_REPL_NAT_SEQ_CORRECTION_POS, ATTR_REPL_NAT_SEQ_OFFSET_AFTER, ATTR_REPL_NAT_SEQ_OFFSET_BEFORE, ATTR_REPL_PORT_DST, ATTR_REPL_PORT_SRC, ATTR_SECMARK, ATTR_SNAT_IPV4, ATTR_SNAT_PORT, ATTR_STATUS, ATTR_TIMEOUT, ATTR_ZONE, CTA_TUPLE_MASTER, CTA_TUPLE_ORIG, CTA_TUPLE_REPLY, nf_conntrack::head, nf_conntrack::master, nfct_build_tuple(), nfct_tuple_head::orig, nf_conntrack::repl, and nfct_tuple_head::set.

Here is the call graph for this function:

int nfct_nlmsg_parse	(	const struct nlmsghdr *	nlh,
		struct nf_conntrack *	ct
	)

References mnl_nlmsg_get_payload(), mnl_nlmsg_get_payload_len(), nfct_payload_parse(), and nfgenmsg::nfgen_family.

Referenced by author_destroy(), author_new(), author_update(), and debug_nfct_cb().

Here is the call graph for this function:

Here is the caller graph for this function:

struct nfct_handle* nfct_open_nfnl	(	struct nfnl_handle *	nfnlh,
		u_int8_t	subsys_id,
		unsigned int	subscriptions
	)

References IPCTNL_MSG_EXP_MAX, IPCTNL_MSG_MAX, nfnl_subsys_close(), NFNL_SUBSYS_CTNETLINK, NFNL_SUBSYS_CTNETLINK_EXP, nfnl_subsys_open(), nfct_handle::nfnlh, nfct_handle::nfnlssh_ct, nfct_handle::nfnlssh_exp, and NULL.

Referenced by nfct_open().

Here is the call graph for this function:

Here is the caller graph for this function:

int nfct_payload_parse	(	const void *	payload,
		size_t	payload_len,
		uint16_t	l3num,
		struct nf_conntrack *	ct
	)

References __DIR_MASTER, __DIR_ORIG, __DIR_REPL, ATTR_ID, ATTR_MARK, ATTR_MASTER_L3PROTO, ATTR_ORIG_L3PROTO, ATTR_REPL_L3PROTO, ATTR_SECMARK, ATTR_STATUS, ATTR_TIMEOUT, ATTR_USE, ATTR_ZONE, CTA_COUNTERS_ORIG, CTA_COUNTERS_REPLY, CTA_HELP, CTA_ID, CTA_LABELS, CTA_MARK, CTA_MAX, CTA_NAT_SEQ_ADJ_ORIG, CTA_NAT_SEQ_ADJ_REPLY, CTA_PROTOINFO, CTA_SECCTX, CTA_SECMARK, CTA_STATUS, CTA_TIMEOUT, CTA_TIMESTAMP, CTA_TUPLE_MASTER, CTA_TUPLE_ORIG, CTA_TUPLE_REPLY, CTA_USE, CTA_ZONE, nf_conntrack::head, nf_conntrack::id, __nfct_tuple::l3protonum, nf_conntrack::mark, nf_conntrack::master, mnl_attr_get_u16(), mnl_attr_get_u32(), mnl_attr_parse_payload(), nfct_parse_tuple(), nfct_tuple_head::orig, nf_conntrack::repl, nf_conntrack::secmark, nfct_tuple_head::set, nf_conntrack::status, nf_conntrack::timeout, nf_conntrack::use, and nf_conntrack::zone.

Referenced by nfct_nlmsg_parse().

Here is the call graph for this function:

Here is the caller graph for this function:

int nfexp_nlmsg_build	(	struct nlmsghdr *	nlh,
		const struct nf_expect *	exp
	)

int nfexp_nlmsg_parse	(	const struct nlmsghdr *	nlh,
		struct nf_expect *	exp
	)

Variable Documentation

enum nf_conntrack_query qt const void void* buffer

Referenced by do_command(), get16_and_mask(), getlength_and_mask(), ip6tables_restore_main(), ipset_debug_msg(), iptables_restore_main(), and iptables_xml_main().

const struct nlmsghdr struct nf_conntrack* ct

enum nf_conntrack_query qt const void * data

Referenced by __callback(), cmd_alloc(), constant_expr_join(), do_alarm_run(), dump_entry(), fork_process_delete(), fork_process_new(), init_alarm(), ipset_cmd(), ipset_parse_after(), ipset_parse_before(), ipset_parse_comment(), ipset_parse_family(), ipset_parse_iface(), ipset_parse_ip4_net6(), ipset_parse_ip4_single6(), ipset_parse_name_compat(), ipset_parse_netmask(), ipset_parse_proto_port(), ipset_parse_skbmark(), ipset_parse_skbprio(), ipset_parse_tcp_udp_port(), ipset_type_check(), main(), mnl_nlmsg_fprintf(), mpz_export_data(), mpz_switch_byteorder(), msgb_burp(), msgb_put(), netlink_delinearize_rule(), nfct_callback_register(), nfct_callback_register2(), nfct_get_attr_grp(), nfct_set_attr_grp(), nfct_timeout_policy_attr_set_u32(), nfexp_callback_register(), nfexp_callback_register2(), nflog_callback_register(), nflog_snprintf_xml(), nfnl_nft_bitwise_set_mask(), nfnl_nft_bitwise_set_xor(), nfnl_nft_chain_set_name(), nfnl_nft_chain_set_table(), nfnl_nft_cmp_set_data(), nfnl_nft_data_alloc(), nfnl_nft_data_parse(), nfnl_nft_immediate_set_data(), nfnl_nft_rule_set_chain(), nfnl_nft_rule_set_table(), nfnl_nft_set_set_name(), nfnl_nft_set_set_table(), nfnl_nft_setelem_set_data(), nfnl_nft_table_set_name(), nfnl_nft_verdict_alloc(), nfq_create_queue(), nfq_snprintf_xml(), nft_fd_setup(), nft_parse_bitwise(), nft_parse_cmp(), nft_parse_immediate(), nft_parse_target(), nft_rule_expr_get_u16(), nft_rule_expr_get_u32(), nft_rule_expr_get_u64(), nft_rule_expr_get_u8(), nft_ruleset_attr_set(), nl_data_alloc(), nl_object_clone(), nlmsg_attrdata(), pktb_mangle(), read_evfd(), register_fd(), rtnl_ematch_parse(), TC_GET_TARGET(), tcp_client_set_data(), ulogd_init_timer(), and write_evfd().

const struct nlmsghdr struct nf_expect* exp

void size_t u_int16_t u_int16_t flags

const struct nlmsghdr * nlh

Referenced by genlmsg_len(), genlmsg_put(), ipq_set_verdict(), ipset_commit(), ipset_debug_msg(), ipulog_get_packet(), main(), mnl_chain_dump(), mnl_genid_get(), mnl_nft_chain_add(), mnl_nft_chain_batch_add(), mnl_nft_chain_batch_del(), mnl_nft_chain_delete(), mnl_nft_chain_dump(), mnl_nft_chain_get(), mnl_nft_rule_add(), mnl_nft_rule_batch_add(), mnl_nft_rule_batch_del(), mnl_nft_rule_delete(), mnl_nft_rule_dump(), mnl_nft_set_add(), mnl_nft_set_batch_add(), mnl_nft_set_batch_del(), mnl_nft_set_delete(), mnl_nft_set_dump(), mnl_nft_set_get(), mnl_nft_setelem_add(), mnl_nft_setelem_batch_add(), mnl_nft_setelem_batch_del(), mnl_nft_setelem_delete(), mnl_nft_setelem_get(), mnl_nft_table_add(), mnl_nft_table_batch_add(), mnl_nft_table_batch_del(), mnl_nft_table_delete(), mnl_nft_table_dump(), mnl_nft_table_get(), mnl_nlmsg_put_header(), mnl_rule_dump(), mnl_set_dump(), mnl_setelem_get(), mnl_table_dump(), nfacct_nlmsg_build_hdr(), nfct_helper_nlmsg_build_hdr(), nfct_timeout_nlmsg_build_hdr(), nfnl_get_msg_first(), nfnl_get_msg_next(), nfnl_iterator_create(), nfnlmsg_put(), nft_chain_add(), nft_chain_user_add(), nft_chain_user_rename(), nft_chain_zero_counters(), nft_compatible_revision(), nft_nlmsg_build_hdr(), nft_table_add(), nl_auto_complete(), and nlmsg_put().

void * req

Referenced by ipq_set_mode(), and rtnl_dump_type().

enum nf_conntrack_query qt const void void unsigned int size

void size_t u_int16_t type

Referenced by __attribute__(), __callback(), cache_create(), concat_type_alloc(), ct_filter_set_logic(), datatype_lookup(), datatype_lookup_byname(), expr_basetype(), exthdr_expr_alloc(), exthdr_init_raw(), fork_process_new(), ipset_cache_add(), ipset_errcode(), ipset_parse_elem(), ipset_parse_typename(), ipset_print_elem(), ipset_print_type(), ipset_type_add(), mnl_attr_nest_start(), mnl_attr_put(), mnl_attr_validate(), monitor_alloc(), nethdr_set(), nfct_callback_register(), nfct_callback_register2(), nfct_copy_attr(), nfct_filter_add_attr(), nfct_filter_dump_set_attr(), nfct_filter_set_logic(), nfct_get_attr(), nfct_get_attr_grp(), nfct_set_attr_grp(), nfct_set_attr_l(), nfct_timeout_attr_set(), nfct_timeout_attr_unset(), nfct_timeout_policy_attr_set_u32(), nfct_timeout_policy_attr_unset(), nfexp_callback_register(), nfexp_callback_register2(), nfexp_get_attr(), nfexp_set_attr(), nfnl_addattr_l(), nfnl_build_nfa_iovec(), nfnl_callback_unregister(), nfnl_check_attributes(), nfnl_ct_set_icmp_type(), nfnl_nfa_addattr_l(), nfnl_nft_exthdr_set_type(), nfnl_nft_nat_set_type(), nfnl_nft_set_set_datatype(), nfnl_nft_set_set_keytype(), nft_compatible_revision(), nft_data_reg_json_parse(), nft_data_reg_xml_parse(), nft_get_value(), nft_nlmsg_build_hdr(), nft_rule_append(), nft_rule_expr_is_set(), nft_rule_expr_set(), nl_cb_set(), nla_parse(), nssocket(), origin_find(), parse_commandline(), payload_expr_alloc(), payload_gen_dependency(), queue_node_init(), rtnl_dump_type(), rtnl_neigh_set_type(), rtnl_route_set_type(), rtnl_rule_set_action(), stack_item_alloc(), and symbol_expr_alloc().

Data Structures

Macros

Enumerations

Functions

Variables

Macro Definition Documentation

Enumeration Type Documentation

Function Documentation

Variable Documentation