path: root/nfct.8
diff options
authorPablo Neira Ayuso <>2015-08-21 19:18:38 +0200
committerPablo Neira Ayuso <>2015-08-26 20:43:55 +0200
commitdd73ceecdbe87b6ecf9e96643cd5326e520d7a1c (patch)
treec4c3a7b933dde6bd9094abad606a9435256e383d /nfct.8
parent1c36d487cda8d1bed799b4daa28c44aa7198bb31 (diff)
nfct: Update syntax to specify command before subsystem
This patch gets the nfct syntax in sync with nft so it looks like this: nfct <add|delete|...> object ... instead of: nfct object <add|delete|...> ... This patch retains backward compatibility so you can still use the old syntax. The manpage and tests have been also updated to promote the adoption of this syntax. We should have little existing clients of this tool as we can only use this to configure the cttimeout and cthelper infrastructures. Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'nfct.8')
1 files changed, 20 insertions, 16 deletions
diff --git a/nfct.8 b/nfct.8
index 6f5190a..863fe12 100644
--- a/nfct.8
+++ b/nfct.8
@@ -3,12 +3,26 @@
.\" Man page written by Pablo Neira Ayuso <> (Feb 2012)
-nfct \- command line tool to interact with the connection tracking system
+nfct \- command line tool to configure with the connection tracking system
-.BR "nfct subsystem command [parameters]"
+.BR "nfct command subsystem [parameters]"
.B nfct
-is the command line tool that allows you Netfilter's manipulate Connection Tracking System.
+is the command line tool that allows to configure the Connection Tracking
+.BI "list "
+List the existing objects.
+.BI "add "
+Add new object.
+.BI "delete "
+Delete an object.
+.BI "get "
+Get an existing object.
By the time this manpage has been written, the supported subsystem are
.B timeout
@@ -16,24 +30,14 @@ By the time this manpage has been written, the supported subsystem are
.BI "timeout "
The timeout subsystem allows you to define fine-grain timeout policies.
+.BI "helper "
+The helper subsystem allows you to configure userspace helpers.
.BI "version "
Displays the version information.
.BI "help "
Displays the help message.
-.BI "list "
-List the existing timeout policies.
-.BI "add "
-Add new timeout policy.
-.BI "delete "
-Delete timeout policy.
-.BI "get "
-Get existing timeout policy.
.B nfct timeout add test-tcp inet tcp established 100 close 10 close_wait 10