diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2008-11-18 11:56:20 +0100 |
|---|---|---|
| committer |   Patrick McHardy <kaber@trash.net> | 2008-11-18 11:56:20 +0100 |
| commit | 19abb7b090a6bce88d4e9b2914a0367f4f684432 (patch) | |
| tree | 3603eafaf214ef1ab200c6e5d6d05318512a3bd6 /include/net/netfilter/nf_conntrack_expect.h | |
| parent | netfilter: ctnetlink: helper modules load-on-demand support (diff) | |
| download | wireguard-linux-19abb7b090a6bce88d4e9b2914a0367f4f684432.tar.xz wireguard-linux-19abb7b090a6bce88d4e9b2914a0367f4f684432.zip | |
netfilter: ctnetlink: deliver events for conntracks changed from userspace
As for now, the creation and update of conntracks via ctnetlink do not
propagate an event to userspace. This can result in inconsistent situations
if several userspace processes modify the connection tracking table by means
of ctnetlink at the same time. Specifically, using the conntrack command
line tool and conntrackd at the same time can trigger unconsistencies.
This patch also modifies the event cache infrastructure to pass the
process PID and the ECHO flag to nfnetlink_send() to report back
to userspace if the process that triggered the change needs so.
Based on a suggestion from Patrick McHardy.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'include/net/netfilter/nf_conntrack_expect.h')
| -rw-r--r-- | include/net/netfilter/nf_conntrack_expect.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/net/netfilter/nf_conntrack_expect.h b/include/net/netfilter/nf_conntrack_expect.h index 37a7fc1164b0..ab17a159ac66 100644 --- a/include/net/netfilter/nf_conntrack_expect.h +++ b/include/net/netfilter/nf_conntrack_expect.h @@ -100,6 +100,8 @@ void nf_ct_expect_init(struct nf_conntrack_expect *, unsigned int, u_int8_t, u_int8_t, const __be16 *, const __be16 *); void nf_ct_expect_put(struct nf_conntrack_expect *exp); int nf_ct_expect_related(struct nf_conntrack_expect *expect); +int nf_ct_expect_related_report(struct nf_conntrack_expect *expect, + u32 pid, int report); #endif /*_NF_CONNTRACK_EXPECT_H*/ |