summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2017-03-15 14:49:00 +0100
committerFlorian Westphal <fw@strlen.de>2017-03-16 10:09:03 +0100
commitc6afbf1f1be3dfc3cc1224c077fb40f242fef504 (patch)
tree8d48cb7ca3ff080482770ff334b530f223913203
parent4b89c0cb0883f638ff1abbc2ff47c43cdc26aac5 (diff)
src: ct eventmask support
Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--include/linux/netfilter/nf_tables.h2
-rw-r--r--src/expr/ct.c3
2 files changed, 4 insertions, 1 deletions
diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h
index 8f38426..683f6f8 100644
--- a/include/linux/netfilter/nf_tables.h
+++ b/include/linux/netfilter/nf_tables.h
@@ -901,6 +901,7 @@ enum nft_rt_attributes {
* @NFT_CT_BYTES: conntrack bytes
* @NFT_CT_AVGPKT: conntrack average bytes per packet
* @NFT_CT_ZONE: conntrack zone
+ * @NFT_CT_EVENTMASK: ctnetlink events to be generated for this conntrack
*/
enum nft_ct_keys {
NFT_CT_STATE,
@@ -921,6 +922,7 @@ enum nft_ct_keys {
NFT_CT_BYTES,
NFT_CT_AVGPKT,
NFT_CT_ZONE,
+ NFT_CT_EVENTMASK,
};
/**
diff --git a/src/expr/ct.c b/src/expr/ct.c
index cdd08e9..0fba0d6 100644
--- a/src/expr/ct.c
+++ b/src/expr/ct.c
@@ -32,7 +32,7 @@ struct nftnl_expr_ct {
#define IP_CT_DIR_REPLY 1
#ifndef NFT_CT_MAX
-#define NFT_CT_MAX (NFT_CT_ZONE + 1)
+#define NFT_CT_MAX (NFT_CT_EVENTMASK + 1)
#endif
static int
@@ -171,6 +171,7 @@ static const char *ctkey2str_array[NFT_CT_MAX] = {
[NFT_CT_BYTES] = "bytes",
[NFT_CT_AVGPKT] = "avgpkt",
[NFT_CT_ZONE] = "zone",
+ [NFT_CT_EVENTMASK] = "eventmask",
};
static const char *ctkey2str(uint32_t ctkey)