ct: add zone support

Add Patrick's zone support for libnetfilter_conntrack.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 10 insertions, 0 deletions

diff --git a/src/conntrack/compare.c b/src/conntrack/compare.c
index ba3fdf8..134cefd 100644
--- a/src/conntrack/compare.c
+++ b/src/conntrack/compare.c
@@ -360,6 +360,14 @@ cmp_dccp_state(const struct nf_conntrack *ct1,
 	return (ct1->protoinfo.dccp.state == ct2->protoinfo.dccp.state);
 }
 
+static int 
+cmp_zone(const struct nf_conntrack *ct1,
+	 const struct nf_conntrack *ct2,
+	 unsigned int flags)
+{
+	return (ct1->zone == ct2->zone);
+}
+
 static int cmp_meta(const struct nf_conntrack *ct1,
 		    const struct nf_conntrack *ct2,
 		    unsigned int flags)
@@ -378,6 +386,8 @@ static int cmp_meta(const struct nf_conntrack *ct1,
 		return 0;
 	if (!__cmp(ATTR_DCCP_STATE, ct1, ct2, flags, cmp_dccp_state))
 		return 0;
+	if (!__cmp(ATTR_ZONE, ct1, ct2, flags, cmp_zone))
+		return 0;
 
 	return 1;
 }