Family conntrack
netlink specification¶
Operations¶
get¶
get / dump entries
- attribute-set
- fixed-header
- do
- request
- attributes
[
tuple-orig
,tuple-reply
,zone
]
- reply
- attributes
[
tuple-orig
,tuple-reply
,status
,protoinfo
,help
,nat-src
,nat-dst
,timeout
,mark
,counter-orig
,counter-reply
,use
,id
,nat-dst
,tuple-master
,seq-adj-orig
,seq-adj-reply
,zone
,secctx
,labels
,synproxy
]
- dump
- request
- attributes
[
nfgen-family
,mark
,filter
,status
,zone
]
- reply
- attributes
[
tuple-orig
,tuple-reply
,status
,protoinfo
,help
,nat-src
,nat-dst
,timeout
,mark
,counter-orig
,counter-reply
,use
,id
,nat-dst
,tuple-master
,seq-adj-orig
,seq-adj-reply
,zone
,secctx
,labels
,synproxy
]
Definitions¶
nf-ct-tcp-flags-mask¶
- type
struct
- members
- flags (
u8
) - mask (
u8
)
- flags (
nf-ct-tcp-flags¶
- type
flags
- entries
window-scale
sack-perm
close-init
be-liberal
unacked
maxack
challenge-ack
simultaneous-open
nf-ct-tcp-state¶
- type
enum
- entries
none
syn-sent
syn-recv
established
fin-wait
close-wait
last-ack
time-wait
close
syn-sent2
max
ignore
retrans
unack
timeout-max
nf-ct-sctp-state¶
- type
enum
- entries
none
cloned
cookie-wait
cookie-echoed
established
shutdown-sent
shutdown-received
shutdown-ack-sent
shutdown-heartbeat-sent
nf-ct-status¶
- type
flags
- entries
expected
seen-reply
assured
confirmed
src-nat
dst-nat
seq-adj
src-nat-done
dst-nat-done
dying
fixed-timeout
template
nat-clash
helper
offload
hw-offload
Attribute sets¶
counter-attrs¶
packets (u64
)¶
- byte-order
big-endian
bytes (u64
)¶
- byte-order
big-endian
packets-old (u32
)¶
bytes-old (u32
)¶
pad (pad
)¶
tuple-proto-attrs¶
proto-num (u8
)¶
- doc
l4 protocol number
proto-src-port (u16
)¶
- byte-order
big-endian
- doc
l4 source port
proto-dst-port (u16
)¶
- byte-order
big-endian
- doc
l4 source port
proto-icmp-id (u16
)¶
- byte-order
big-endian
- doc
l4 icmp id
proto-icmp-type (u8
)¶
proto-icmp-code (u8
)¶
proto-icmpv6-id (u16
)¶
- byte-order
big-endian
- doc
l4 icmp id
proto-icmpv6-type (u8
)¶
proto-icmpv6-code (u8
)¶
tuple-ip-attrs¶
ip-v4-src (u32
)¶
- byte-order
big-endian
- display-hint
ipv4
- doc
ipv4 source address
ip-v4-dst (u32
)¶
- byte-order
big-endian
- display-hint
ipv4
- doc
ipv4 destination address
ip-v6-src (binary
)¶
- byte-order
big-endian
- display-hint
ipv6
- doc
ipv6 source address
ip-v6-dst (binary
)¶
- byte-order
big-endian
- display-hint
ipv6
- doc
ipv6 destination address
tuple-attrs¶
tuple-ip (nest
)¶
- nested-attributes
- doc
conntrack l3 information
tuple-proto (nest
)¶
- nested-attributes
- doc
conntrack l4 information
tuple-zone (u16
)¶
- byte-order
big-endian
- doc
conntrack zone id
protoinfo-tcp-attrs¶
tcp-state (u8
)¶
- enum
- doc
tcp connection state
tcp-wscale-original (u8
)¶
- doc
window scaling factor in original direction
tcp-wscale-reply (u8
)¶
- doc
window scaling factor in reply direction
tcp-flags-original (binary
)¶
- struct
tcp-flags-reply (binary
)¶
- struct
protoinfo-dccp-attrs¶
dccp-state (u8
)¶
- doc
dccp connection state
dccp-role (u8
)¶
dccp-handshake-seq (u64
)¶
- byte-order
big-endian
dccp-pad (pad
)¶
protoinfo-sctp-attrs¶
sctp-state (u8
)¶
- doc
sctp connection state
- enum
vtag-original (u32
)¶
- byte-order
big-endian
vtag-reply (u32
)¶
- byte-order
big-endian
protoinfo-attrs¶
protoinfo-tcp (nest
)¶
- nested-attributes
- doc
conntrack tcp state information
protoinfo-dccp (nest
)¶
- nested-attributes
- doc
conntrack dccp state information
protoinfo-sctp (nest
)¶
- nested-attributes
- doc
conntrack sctp state information
help-attrs¶
help-name (string
)¶
- doc
helper name
nat-proto-attrs¶
nat-port-min (u16
)¶
- byte-order
big-endian
nat-port-max (u16
)¶
- byte-order
big-endian
nat-attrs¶
nat-v4-minip (u32
)¶
- byte-order
big-endian
nat-v4-maxip (u32
)¶
- byte-order
big-endian
nat-v6-minip (binary
)¶
nat-v6-maxip (binary
)¶
nat-proto (nest
)¶
- nested-attributes
seqadj-attrs¶
correction-pos (u32
)¶
- byte-order
big-endian
offset-before (u32
)¶
- byte-order
big-endian
offset-after (u32
)¶
- byte-order
big-endian
secctx-attrs¶
secctx-name (string
)¶
synproxy-attrs¶
isn (u32
)¶
- byte-order
big-endian
its (u32
)¶
- byte-order
big-endian
tsoff (u32
)¶
- byte-order
big-endian
conntrack-attrs¶
tuple-orig (nest
)¶
- nested-attributes
- doc
conntrack l3+l4 protocol information, original direction
tuple-reply (nest
)¶
- nested-attributes
- doc
conntrack l3+l4 protocol information, reply direction
status (u32
)¶
- byte-order
big-endian
- enum
- enum-as-flags
True
- doc
conntrack flag bits
protoinfo (nest
)¶
- nested-attributes
help (nest
)¶
- nested-attributes
timeout (u32
)¶
- byte-order
big-endian
mark (u32
)¶
- byte-order
big-endian
counters-orig (nest
)¶
- nested-attributes
counters-reply (nest
)¶
- nested-attributes
use (u32
)¶
- byte-order
big-endian
id (u32
)¶
- byte-order
big-endian
tuple-master (nest
)¶
- nested-attributes
seq-adj-orig (nest
)¶
- nested-attributes
seq-adj-reply (nest
)¶
- nested-attributes
secmark (binary
)¶
- doc
obsolete
zone (u16
)¶
- byte-order
big-endian
- doc
conntrack zone id
secctx (nest
)¶
- nested-attributes
timestamp (u64
)¶
- byte-order
big-endian
mark-mask (u32
)¶
- byte-order
big-endian
labels (binary
)¶
labels mask (binary
)¶
synproxy (nest
)¶
- nested-attributes
filter (nest
)¶
- nested-attributes
status-mask (u32
)¶
- byte-order
big-endian
- enum
- enum-as-flags
True
- doc
conntrack flag bits to change
timestamp-event (u64
)¶
- byte-order
big-endian
conntrack-stats-attrs¶
searched (u32
)¶
- byte-order
big-endian
- doc
obsolete
found (u32
)¶
- byte-order
big-endian
new (u32
)¶
- byte-order
big-endian
- doc
obsolete
invalid (u32
)¶
- byte-order
big-endian
- doc
obsolete
ignore (u32
)¶
- byte-order
big-endian
- doc
obsolete
delete (u32
)¶
- byte-order
big-endian
- doc
obsolete
delete-list (u32
)¶
- byte-order
big-endian
- doc
obsolete
insert (u32
)¶
- byte-order
big-endian
insert-failed (u32
)¶
- byte-order
big-endian
drop (u32
)¶
- byte-order
big-endian
early-drop (u32
)¶
- byte-order
big-endian
error (u32
)¶
- byte-order
big-endian
search-restart (u32
)¶
- byte-order
big-endian
clash-resolve (u32
)¶
- byte-order
big-endian
chain-toolong (u32
)¶
- byte-order
big-endian