diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-02-20 19:41:45 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-02-20 19:45:01 +0100 |
| commit | 293e7eff59e0bfc4401d620b6d38e096fc0e3b04 (patch) | |
| tree | 1091434f110fb606083b8e5040bf31398e43c091 /conntrack.8 | |
| parent | e0dac21ed02e3ac312e6e70674dc540553b2b9e2 (diff) | |
conntrack: add -o userspace option to tag user-triggered events
The following command:
# conntrack -E -o userspace &
# conntrack -F
[DESTROY] tcp 6 src=122.127.186.172 dst=192.168.10.195 sport=443 dport=48232 packets=56 bytes=5313 src=192.168.10.195 dst=122.127.186.172 sport=48232 dport=443 packets=49 bytes=5174 [ASSURED] [USERSPACE]
prints the [USERSPACE] tag at the end of the event, this tells users if
this event has been triggered by process, eg. via conntrack command
invocation.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'conntrack.8')
| -rw-r--r-- | conntrack.8 | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/conntrack.8 b/conntrack.8 index e069dfe..3c1e960 100644 --- a/conntrack.8 +++ b/conntrack.8 @@ -109,13 +109,14 @@ Show the in-kernel connection tracking system statistics. Atomically zero counters after reading them. This option is only valid in combination with the "\-L, \-\-dump" command options. .TP -.BI "-o, --output [extended,xml,timestamp,id,ktimestamp,labels] " +.BI "-o, --output [extended,xml,timestamp,id,ktimestamp,labels,userspace] " Display output in a certain format. With the extended output option, this tool displays the layer 3 information. With ktimestamp, it displays the in-kernel timestamp available since 2.6.38 (you can enable it via the \fBsysctl(8)\fP key \fBnet.netfilter.nf_conntrack_timestamp\fP). The labels output option tells \fBconntrack\fP to show the names of connection tracking labels that might be present. +The userspace output options tells if the event has been triggered by a process. .TP .BI "-e, --event-mask " "[ALL|NEW|UPDATES|DESTROY][,...]" Set the bitmask of events that are to be generated by the in-kernel ctnetlink |