From 8ee6d3dd791e01872695f708e73d734219b8fea9 Mon Sep 17 00:00:00 2001 From: "/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org" Date: Wed, 16 Apr 2008 14:46:17 +0000 Subject: - bump version to 0.0.92 - recover the ID support - add support for timeout comparison - ignore set operation for counters and use attributes - fix broken status comparison - statify several __snprintf functions --- src/conntrack/api.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) (limited to 'src/conntrack/api.c') diff --git a/src/conntrack/api.c b/src/conntrack/api.c index bd6a154..7d82d4d 100644 --- a/src/conntrack/api.c +++ b/src/conntrack/api.c @@ -697,10 +697,18 @@ int nfct_compare(const struct nf_conntrack *ct1, * * - NFCT_CMP_ALL: full comparison of both objects * - NFCT_CMP_ORIG: it only compares the source and destination address; - * source and destination ports; and the layer 3 and 4 protocol numbers - * of the original direction. + * source and destination ports; the layer 3 and 4 protocol numbers + * of the original direction; and the id (if present). * - NFCT_CMP_REPL: like NFCT_CMP_REPL but it compares the flow * information that goes in the reply direction. + * - NFCT_CMP_TIMEOUT_EQ: timeout(ct1) == timeout(ct2) + * - NFCT_CMP_TIMEOUT_GT: timeout(ct1) > timeout(ct2) + * - NFCT_CMP_TIMEOUT_LT: timeout(ct1) < timeout(ct2) + * - NFCT_CMP_TIMEOUT_GE: timeout(ct1) >= timeout(ct2) + * - NFCT_CMP_TIMEOUT_LE: timeout(ct1) <= timeout(ct2) + * + * The default status bits comparison consists of the following operation: + * status(ct1) & status(ct2) == status(ct1). * * If both conntrack object are equal, this function returns 1, otherwise * 0 is returned. -- cgit v1.2.3