diff options
| author | Florian Westphal <fw@strlen.de> | 2025-05-22 15:51:15 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2025-07-04 10:34:39 +0200 |
| commit | 56e37303ed30a4f9b73ec1f90b53da7dda645748 (patch) | |
| tree | 76bcf65358a469fce8a9763a34ad0caa8a6bf45d /include | |
| parent | 81d19bc4a52cd0d4ec976c19d2320e102553c315 (diff) | |
trace: add support for TRACE_CT information
Decode direction/id/state/status information.
This will be used by 'nftables monitor trace' to print a packets
conntrack state.
Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/libnftnl/trace.h | 4 | ||||
| -rw-r--r-- | include/linux/netfilter/nf_tables.h | 8 |
2 files changed, 12 insertions, 0 deletions
diff --git a/include/libnftnl/trace.h b/include/libnftnl/trace.h index 18ab0c3..5d66b50 100644 --- a/include/libnftnl/trace.h +++ b/include/libnftnl/trace.h @@ -28,6 +28,10 @@ enum nftnl_trace_attr { NFTNL_TRACE_VERDICT, NFTNL_TRACE_NFPROTO, NFTNL_TRACE_POLICY, + NFTNL_TRACE_CT_DIRECTION, + NFTNL_TRACE_CT_ID, + NFTNL_TRACE_CT_STATE, + NFTNL_TRACE_CT_STATUS, __NFTNL_TRACE_MAX, }; #define NFTNL_TRACE_MAX (__NFTNL_TRACE_MAX - 1) diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h index 7d6bc19..2beb30b 100644 --- a/include/linux/netfilter/nf_tables.h +++ b/include/linux/netfilter/nf_tables.h @@ -1841,6 +1841,10 @@ enum nft_xfrm_keys { * @NFTA_TRACE_MARK: nfmark (NLA_U32) * @NFTA_TRACE_NFPROTO: nf protocol processed (NLA_U32) * @NFTA_TRACE_POLICY: policy that decided fate of packet (NLA_U32) + * @NFTA_TRACE_CT_ID: conntrack id (NLA_U32) + * @NFTA_TRACE_CT_DIRECTION: packets direction (NLA_U8) + * @NFTA_TRACE_CT_STATUS: conntrack status (NLA_U32) + * @NFTA_TRACE_CT_STATE: packet state (new, established, ...) (NLA_U32) */ enum nft_trace_attributes { NFTA_TRACE_UNSPEC, @@ -1861,6 +1865,10 @@ enum nft_trace_attributes { NFTA_TRACE_NFPROTO, NFTA_TRACE_POLICY, NFTA_TRACE_PAD, + NFTA_TRACE_CT_ID, + NFTA_TRACE_CT_DIRECTION, + NFTA_TRACE_CT_STATUS, + NFTA_TRACE_CT_STATE, __NFTA_TRACE_MAX }; #define NFTA_TRACE_MAX (__NFTA_TRACE_MAX - 1) |