From 5f823f8fd90dc77b4256fc6cc296834cbe5c0f21 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 2 Aug 2021 11:12:29 +0200 Subject: src: add support for status dump filter This tells kernel to suppress conntrack entries that do not match the status bits/bitmask filter. This is useful to e.g. only list entries that are not assured (value 0, mask == ASSUED) or entries that only saw one-way traffic (value 0, mask == SEEN_REPLY). Signed-off-by: Florian Westphal --- include/internal/object.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include/internal') diff --git a/include/internal/object.h b/include/internal/object.h index 3f6904f..75ffdbe 100644 --- a/include/internal/object.h +++ b/include/internal/object.h @@ -287,6 +287,7 @@ struct nfct_filter { struct nfct_filter_dump { struct nfct_filter_dump_mark mark; + struct nfct_filter_dump_mark status; uint8_t l3num; uint32_t set; }; -- cgit v1.2.3