← Back
Editing: conntrack.rst
.. LINENO 2 .. SPDX-License-Identifier: GPL-2.0 .. NOTE: This document was auto-generated. .. _netlink-conntrack: ========================================== Family ``conntrack`` netlink specification ========================================== .. contents:: :depth: 3 ------- Summary ------- Netfilter connection tracking subsystem over nfnetlink ---------- Operations ---------- .. LINENO 554 .. _conntrack-operation-get: get === get / dump entries :attribute-set: :ref:`conntrack-attribute-set-conntrack-attrs` :fixed-header: :ref:`conntrack-definition-nfgenmsg` :do: .. LINENO 559 **request** :attributes: [``tuple-orig``, ``tuple-reply``, ``zone``] **reply** :attributes: [``tuple-orig``, ``tuple-reply``, ``status``, ``protoinfo``, ``help``, ``nat-src``, ``nat-dst``, ``timeout``, ``mark``, ``counters-orig``, ``counters-reply``, ``use``, ``id``, ``nat-dst``, ``tuple-master``, ``seq-adj-orig``, ``seq-adj-reply``, ``zone``, ``secctx``, ``labels``, ``synproxy``] :dump: .. LINENO 590 **request** :attributes: [``mark``, ``filter``, ``status``, ``zone``] **reply** :attributes: [``tuple-orig``, ``tuple-reply``, ``status``, ``protoinfo``, ``help``, ``nat-src``, ``nat-dst``, ``timeout``, ``mark``, ``counters-orig``, ``counters-reply``, ``use``, ``id``, ``nat-dst``, ``tuple-master``, ``seq-adj-orig``, ``seq-adj-reply``, ``zone``, ``secctx``, ``labels``, ``synproxy``] .. LINENO 622 .. _conntrack-operation-get-stats: get-stats ========= dump pcpu conntrack stats :attribute-set: :ref:`conntrack-attribute-set-conntrack-stats-attrs` :fixed-header: :ref:`conntrack-definition-nfgenmsg` :dump: .. LINENO 627 **request** **reply** :attributes: [``searched``, ``found``, ``insert``, ``insert-failed``, ``drop``, ``early-drop``, ``error``, ``search-restart``, ``clash-resolve``, ``chain-toolong``] ----------- Definitions ----------- .. LINENO 11 .. _conntrack-definition-nfgenmsg: nfgenmsg ======== :type: struct :members: :nfgen-family (``u8``): :version (``u8``): :res-id (``u16``): .. LINENO 25 .. _conntrack-definition-nf-ct-tcp-flags-mask: nf-ct-tcp-flags-mask ==================== :type: struct :members: :flags (``u8``): :mask (``u8``): .. LINENO 39 .. _conntrack-definition-nf-ct-tcp-flags: nf-ct-tcp-flags =============== :type: flags :entries: - ``window-scale`` - ``sack-perm`` - ``close-init`` - ``be-liberal`` - ``unacked`` - ``maxack`` - ``challenge-ack`` - ``simultaneous-open`` .. LINENO 51 .. _conntrack-definition-nf-ct-tcp-state: nf-ct-tcp-state =============== :type: enum :entries: - ``none`` - ``syn-sent`` - ``syn-recv`` - ``established`` - ``fin-wait`` - ``close-wait`` - ``last-ack`` - ``time-wait`` - ``close`` - ``syn-sent2`` - ``max`` - ``ignore`` - ``retrans`` - ``unack`` - ``timeout-max`` .. LINENO 70 .. _conntrack-definition-nf-ct-sctp-state: nf-ct-sctp-state ================ :type: enum :entries: - ``none`` - ``cloned`` - ``cookie-wait`` - ``cookie-echoed`` - ``established`` - ``shutdown-sent`` - ``shutdown-received`` - ``shutdown-ack-sent`` - ``shutdown-heartbeat-sent`` .. LINENO 83 .. _conntrack-definition-nf-ct-status: nf-ct-status ============ :type: flags :entries: - ``expected`` - ``seen-reply`` - ``assured`` - ``confirmed`` - ``src-nat`` - ``dst-nat`` - ``seq-adj`` - ``src-nat-done`` - ``dst-nat-done`` - ``dying`` - ``fixed-timeout`` - ``template`` - ``nat-clash`` - ``helper`` - ``offload`` - ``hw-offload`` -------------- Attribute sets -------------- .. _conntrack-attribute-set-counter-attrs: counter-attrs ============= .. LINENO 108 packets (``u64``) ~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 112 bytes (``u64``) ~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 116 packets-old (``u32``) ~~~~~~~~~~~~~~~~~~~~~ .. LINENO 119 bytes-old (``u32``) ~~~~~~~~~~~~~~~~~~~ .. LINENO 122 pad (``pad``) ~~~~~~~~~~~~~ .. _conntrack-attribute-set-tuple-proto-attrs: tuple-proto-attrs ================= .. LINENO 128 proto-num (``u8``) ~~~~~~~~~~~~~~~~~~ :doc: l4 protocol number .. LINENO 132 proto-src-port (``u16``) ~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: l4 source port .. LINENO 137 proto-dst-port (``u16``) ~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: l4 source port .. LINENO 142 proto-icmp-id (``u16``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: l4 icmp id .. LINENO 147 proto-icmp-type (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 150 proto-icmp-code (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 153 proto-icmpv6-id (``u16``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: l4 icmp id .. LINENO 158 proto-icmpv6-type (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 161 proto-icmpv6-code (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~~~ .. _conntrack-attribute-set-tuple-ip-attrs: tuple-ip-attrs ============== .. LINENO 167 ip-v4-src (``u32``) ~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :display-hint: ipv4 :doc: ipv4 source address .. LINENO 173 ip-v4-dst (``u32``) ~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :display-hint: ipv4 :doc: ipv4 destination address .. LINENO 179 ip-v6-src (``binary``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :display-hint: ipv6 :doc: ipv6 source address .. LINENO 187 ip-v6-dst (``binary``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :display-hint: ipv6 :doc: ipv6 destination address .. _conntrack-attribute-set-tuple-attrs: tuple-attrs =========== .. LINENO 198 tuple-ip (``nest``) ~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-ip-attrs` :doc: conntrack l3 information .. LINENO 203 tuple-proto (``nest``) ~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-proto-attrs` :doc: conntrack l4 information .. LINENO 208 tuple-zone (``u16``) ~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: conntrack zone id .. _conntrack-attribute-set-protoinfo-tcp-attrs: protoinfo-tcp-attrs =================== .. LINENO 216 tcp-state (``u8``) ~~~~~~~~~~~~~~~~~~ :enum: :ref:`conntrack-definition-nf-ct-tcp-state` :doc: tcp connection state .. LINENO 221 tcp-wscale-original (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ :doc: window scaling factor in original direction .. LINENO 225 tcp-wscale-reply (``u8``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :doc: window scaling factor in reply direction .. LINENO 229 tcp-flags-original (``binary``) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ :struct: :ref:`conntrack-definition-nf-ct-tcp-flags-mask` .. LINENO 233 tcp-flags-reply (``binary``) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ :struct: :ref:`conntrack-definition-nf-ct-tcp-flags-mask` .. _conntrack-attribute-set-protoinfo-dccp-attrs: protoinfo-dccp-attrs ==================== .. LINENO 240 dccp-state (``u8``) ~~~~~~~~~~~~~~~~~~~ :doc: dccp connection state .. LINENO 244 dccp-role (``u8``) ~~~~~~~~~~~~~~~~~~ .. LINENO 247 dccp-handshake-seq (``u64``) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 251 dccp-pad (``pad``) ~~~~~~~~~~~~~~~~~~ .. _conntrack-attribute-set-protoinfo-sctp-attrs: protoinfo-sctp-attrs ==================== .. LINENO 257 sctp-state (``u8``) ~~~~~~~~~~~~~~~~~~~ :doc: sctp connection state :enum: :ref:`conntrack-definition-nf-ct-sctp-state` .. LINENO 262 vtag-original (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 266 vtag-reply (``u32``) ~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. _conntrack-attribute-set-protoinfo-attrs: protoinfo-attrs =============== .. LINENO 273 protoinfo-tcp (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-protoinfo-tcp-attrs` :doc: conntrack tcp state information .. LINENO 278 protoinfo-dccp (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-protoinfo-dccp-attrs` :doc: conntrack dccp state information .. LINENO 283 protoinfo-sctp (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-protoinfo-sctp-attrs` :doc: conntrack sctp state information .. _conntrack-attribute-set-help-attrs: help-attrs ========== .. LINENO 291 help-name (``string``) ~~~~~~~~~~~~~~~~~~~~~~ :doc: helper name .. _conntrack-attribute-set-nat-proto-attrs: nat-proto-attrs =============== .. LINENO 298 nat-port-min (``u16``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 302 nat-port-max (``u16``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. _conntrack-attribute-set-nat-attrs: nat-attrs ========= .. LINENO 309 nat-v4-minip (``u32``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 313 nat-v4-maxip (``u32``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 317 nat-v6-minip (``binary``) ~~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 320 nat-v6-maxip (``binary``) ~~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 323 nat-proto (``nest``) ~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-nat-proto-attrs` .. _conntrack-attribute-set-seqadj-attrs: seqadj-attrs ============ .. LINENO 330 correction-pos (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 334 offset-before (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 338 offset-after (``u32``) ~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. _conntrack-attribute-set-secctx-attrs: secctx-attrs ============ .. LINENO 345 secctx-name (``string``) ~~~~~~~~~~~~~~~~~~~~~~~~ .. _conntrack-attribute-set-synproxy-attrs: synproxy-attrs ============== .. LINENO 351 isn (``u32``) ~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 355 its (``u32``) ~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 359 tsoff (``u32``) ~~~~~~~~~~~~~~~ :byte-order: big-endian .. _conntrack-attribute-set-conntrack-attrs: conntrack-attrs =============== .. LINENO 366 tuple-orig (``nest``) ~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs` :doc: conntrack l3+l4 protocol information, original direction .. LINENO 371 tuple-reply (``nest``) ~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs` :doc: conntrack l3+l4 protocol information, reply direction .. LINENO 376 status (``u32``) ~~~~~~~~~~~~~~~~ :byte-order: big-endian :enum: :ref:`conntrack-definition-nf-ct-status` :enum-as-flags: True :doc: conntrack flag bits .. LINENO 383 protoinfo (``nest``) ~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-protoinfo-attrs` .. LINENO 387 help (``nest``) ~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-help-attrs` .. LINENO 391 nat-src (``nest``) ~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-nat-attrs` .. LINENO 395 timeout (``u32``) ~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 399 mark (``u32``) ~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 403 counters-orig (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-counter-attrs` .. LINENO 407 counters-reply (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-counter-attrs` .. LINENO 411 use (``u32``) ~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 415 id (``u32``) ~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 419 nat-dst (``nest``) ~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-nat-attrs` .. LINENO 423 tuple-master (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs` .. LINENO 427 seq-adj-orig (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-seqadj-attrs` .. LINENO 431 seq-adj-reply (``nest``) ~~~~~~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-seqadj-attrs` .. LINENO 435 secmark (``binary``) ~~~~~~~~~~~~~~~~~~~~ :doc: obsolete .. LINENO 439 zone (``u16``) ~~~~~~~~~~~~~~ :byte-order: big-endian :doc: conntrack zone id .. LINENO 444 secctx (``nest``) ~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-secctx-attrs` .. LINENO 448 timestamp (``u64``) ~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 452 mark-mask (``u32``) ~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 456 labels (``binary``) ~~~~~~~~~~~~~~~~~~~ .. LINENO 459 labels mask (``binary``) ~~~~~~~~~~~~~~~~~~~~~~~~ .. LINENO 462 synproxy (``nest``) ~~~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-synproxy-attrs` .. LINENO 466 filter (``nest``) ~~~~~~~~~~~~~~~~~ :nested-attributes: :ref:`conntrack-attribute-set-tuple-attrs` .. LINENO 470 status-mask (``u32``) ~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :enum: :ref:`conntrack-definition-nf-ct-status` :enum-as-flags: True :doc: conntrack flag bits to change .. LINENO 477 timestamp-event (``u64``) ~~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. _conntrack-attribute-set-conntrack-stats-attrs: conntrack-stats-attrs ===================== .. LINENO 484 searched (``u32``) ~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 489 found (``u32``) ~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 493 new (``u32``) ~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 498 invalid (``u32``) ~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 503 ignore (``u32``) ~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 508 delete (``u32``) ~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 513 delete-list (``u32``) ~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian :doc: obsolete .. LINENO 518 insert (``u32``) ~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 522 insert-failed (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 526 drop (``u32``) ~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 530 early-drop (``u32``) ~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 534 error (``u32``) ~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 538 search-restart (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 542 clash-resolve (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian .. LINENO 546 chain-toolong (``u32``) ~~~~~~~~~~~~~~~~~~~~~~~ :byte-order: big-endian
Save File
Cancel