#include #include #include #include #include int main() { int ret; struct nfct_handle *h; struct nf_conntrack *ct; ct = nfct_new(); if (!ct) { perror("nfct_new"); return 0; } nfct_set_attr_u8(ct, ATTR_ORIG_L3PROTO, AF_INET); nfct_set_attr_u32(ct, ATTR_ORIG_IPV4_SRC, inet_addr("1.1.1.1")); nfct_set_attr_u32(ct, ATTR_ORIG_IPV4_DST, inet_addr("2.2.2.2")); nfct_set_attr_u8(ct, ATTR_ORIG_L4PROTO, IPPROTO_TCP); nfct_set_attr_u16(ct, ATTR_ORIG_PORT_SRC, htons(20)); nfct_set_attr_u16(ct, ATTR_ORIG_PORT_DST, htons(10)); nfct_set_attr_u8(ct, ATTR_REPL_L3PROTO, AF_INET); nfct_set_attr_u32(ct, ATTR_REPL_IPV4_SRC, inet_addr("2.2.2.2")); nfct_set_attr_u32(ct, ATTR_REPL_IPV4_DST, inet_addr("1.1.1.1")); nfct_set_attr_u8(ct, ATTR_REPL_L4PROTO, IPPROTO_TCP); nfct_set_attr_u16(ct, ATTR_REPL_PORT_SRC, htons(10)); nfct_set_attr_u16(ct, ATTR_REPL_PORT_DST, htons(20)); nfct_set_attr_u8(ct, ATTR_TCP_STATE, TCP_CONNTRACK_LISTEN); nfct_set_attr_u32(ct, ATTR_TIMEOUT, 100); h = nfct_open(CONNTRACK, 0); if (!h) { perror("nfct_open"); return -1; } ret = nfct_query(h, NFCT_Q_CREATE, ct); printf("TEST: create conntrack (%d)(%s)\n", ret, strerror(errno)); if (ret == -1) exit(EXIT_FAILURE); nfct_close(h); }