From 16010f777b090b293a00072d8368e94418cc99f8 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Sat, 2 Aug 2008 18:59:36 +0200 Subject: conntrackd: add -t option to shorten conntrack timeouts This patch adds the new option `-t' for conntrackd. This option shortens the value of the timeout for the cached entries that lives in the kernel. This option is particularly useful to remove the zombie established entries that remain in kernel if the user tests the platform by forcing the takeover from one to another node several times. We currently use the value of CommitTimeout which is sane for it. Adding a new option does not seem to add more flexibility IMO. Once we get the patches to notify user changes via ctnetlink and the netlink flag NLM_F_ECHO works, we may directly invoke a massive purge of the entries, however, such solution would still need evaluation. Signed-off-by: Pablo Neira Ayuso --- include/cache.h | 1 + include/conntrackd.h | 1 + 2 files changed, 2 insertions(+) (limited to 'include') diff --git a/include/cache.h b/include/cache.h index ba8d3aa..45c3b7e 100644 --- a/include/cache.h +++ b/include/cache.h @@ -97,5 +97,6 @@ void cache_dump(struct cache *c, int fd, int type); void cache_commit(struct cache *c); void cache_flush(struct cache *c); void cache_bulk(struct cache *c); +void cache_reset_timers(struct cache *c); #endif diff --git a/include/conntrackd.h b/include/conntrackd.h index d2c8931..2f0d7e5 100644 --- a/include/conntrackd.h +++ b/include/conntrackd.h @@ -24,6 +24,7 @@ #define REQUEST_DUMP 23 /* request dump */ #define DUMP_INT_XML 24 /* dump internal cache in XML */ #define DUMP_EXT_XML 25 /* dump external cache in XML */ +#define RESET_TIMERS 26 /* reset kernel timers */ #define DEFAULT_CONFIGFILE "/etc/conntrackd/conntrackd.conf" #define DEFAULT_LOCKFILE "/var/lock/conntrackd.lock" -- cgit v1.2.3