From c2136262802f31cb19267dacf0c0fdecdea4ae16 Mon Sep 17 00:00:00 2001 From: Romain Bellan Date: Wed, 29 Jan 2020 10:47:18 +0100 Subject: Adding NFCT_FILTER_DUMP_TUPLE in filter_dump_attr, using kernel CTA_FILTER API Following kernel side new conntrack filtering API, this patch implements userspace part. This patch: * Update headers to get new flag value from kernel * Use a conntrack struct to configure filtering * Set netlink flags according to values set in conntrack struct Signed-off-by: Romain Bellan Signed-off-by: Florent Fourcot Signed-off-by: Florian Westphal --- src/conntrack/api.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/conntrack/api.c') diff --git a/src/conntrack/api.c b/src/conntrack/api.c index 7f72d07..d27bad2 100644 --- a/src/conntrack/api.c +++ b/src/conntrack/api.c @@ -850,7 +850,7 @@ __build_query_ct(struct nfnl_subsys_handle *ssh, case NFCT_Q_DUMP_FILTER: nfct_fill_hdr(req, IPCTNL_MSG_CT_GET, NLM_F_DUMP, AF_UNSPEC, NFNETLINK_V0); - __build_filter_dump(req, size, data); + assert(__build_filter_dump(req, size, data) == 0); break; case NFCT_Q_DUMP_FILTER_RESET: nfct_fill_hdr(req, IPCTNL_MSG_CT_GET_CTRZERO, NLM_F_DUMP, -- cgit v1.2.3