From 931dc2d4c9195ab50974ce8af1a14053f2ebdc84 Mon Sep 17 00:00:00 2001 From: Felix Huettner Date: Tue, 5 Dec 2023 09:35:03 +0000 Subject: dump: support filtering by zone based on a kernel side extension of the conntrack api, this patch brings this extension to userspace. When dumping the conntrack table we can now filter based on the conntrack zone directly in kernel space. If the kernel does not yet support this feature this filtering is ignored. Signed-off-by: Felix Huettner Signed-off-by: Pablo Neira Ayuso --- include/internal/object.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include/internal') diff --git a/include/internal/object.h b/include/internal/object.h index 4cac4f1..8854ef2 100644 --- a/include/internal/object.h +++ b/include/internal/object.h @@ -293,6 +293,7 @@ struct nfct_filter_dump { struct nfct_filter_dump_mark status; uint8_t l3num; uint32_t set; + uint16_t zone; }; /* -- cgit v1.2.3