conntrackd: fix filtering of dump output if internal cache is disabled

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 3 insertions, 0 deletions

diff --git a/src/internal_bypass.c b/src/internal_bypass.c
index 4caaf4f..1e1478f 100644
--- a/src/internal_bypass.c
+++ b/src/internal_bypass.c
@@ -31,6 +31,9 @@ static int dump_cb(enum nf_conntrack_msg_type type,
 	char buf[1024];
 	int size, *fd = data;
 
+	if (ct_filter_conntrack(ct, 1))
+		return NFCT_CB_CONTINUE;
+
 	size = nfct_snprintf(buf, 1024, ct, NFCT_T_UNKNOWN, NFCT_O_DEFAULT, 0);
 	if (size < 1024) {
 		buf[size] = '\n';