[netfilter-cvslog] r6799 - in trunk/conntrack-tools: . examples
examples/cli
pablo at netfilter.org
pablo at netfilter.org
Tue Apr 17 03:13:55 CEST 2007
Author: pablo at netfilter.org
Date: 2007-04-17 03:13:54 +0200 (Tue, 17 Apr 2007)
New Revision: 6799
Added:
trunk/conntrack-tools/examples/cli/
trunk/conntrack-tools/examples/cli/test.sh
Removed:
trunk/conntrack-tools/test.sh
Log:
move test.sh into examples/
Copied: trunk/conntrack-tools/examples/cli/test.sh (from rev 6798, trunk/conntrack-tools/test.sh)
===================================================================
--- trunk/conntrack-tools/examples/cli/test.sh (rev 0)
+++ trunk/conntrack-tools/examples/cli/test.sh 2007-04-17 01:13:54 UTC (rev 6799)
@@ -0,0 +1,110 @@
+CONNTRACK=conntrack
+
+SRC=1.1.1.1
+DST=2.2.2.2
+SPORT=2005
+DPORT=21
+
+case $1 in
+ dump)
+ echo "Dumping conntrack table"
+ $CONNTRACK -L
+ ;;
+ flush)
+ echo "Flushing conntrack table"
+ $CONNTRACK -F
+ ;;
+ new)
+ echo "creating a new conntrack"
+ $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
+ --reply-src $DST --reply-dst $SRC -p tcp \
+ --orig-port-src $SPORT --orig-port-dst $DPORT \
+ --reply-port-src $DPORT --reply-port-dst $SPORT \
+ --state LISTEN -u SEEN_REPLY -t 50
+ ;;
+ new-simple)
+ echo "creating a new conntrack (simplified)"
+ $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
+ -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
+ --state LISTEN -u SEEN_REPLY -t 50
+ ;;
+ new-nat)
+ echo "creating a new conntrack (NAT)"
+ $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
+ -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
+ --state LISTEN -u SEEN_REPLY,SRC_NAT -t 50 -a 8.8.8.8
+ ;;
+ get)
+ echo "getting a conntrack"
+ $CONNTRACK -G --orig-src $SRC --orig-dst $DST \
+ -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
+ --reply-port-src $DPORT --reply-port-dst $SPORT
+ ;;
+ change)
+ echo "change a conntrack"
+ $CONNTRACK -U --orig-src $SRC --orig-dst $DST \
+ --reply-src $DST --reply-dst $SRC -p tcp \
+ --orig-port-src $SPORT --orig-port-dst $DPORT \
+ --reply-port-src $DPORT --reply-port-dst $SPORT \
+ --state TIME_WAIT -u ASSURED,SEEN_REPLY -t 500
+ ;;
+ delete)
+ $CONNTRACK -D --orig-src $SRC --orig-dst $DST \
+ -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT
+ ;;
+ output)
+ proc=$(cat /proc/net/ip_conntrack | wc -l)
+ netl=$($CONNTRACK -L | wc -l)
+ count=$(cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count)
+ if [ $proc -ne $netl ]; then
+ echo "proc is $proc and netl is $netl and count is $count"
+ else
+ if [ $proc -ne $count ]; then
+ echo "proc is $proc and netl is $netl and count is $count"
+ else
+ echo "now $proc"
+ fi
+ fi
+ ;;
+ dump-expect)
+ $CONNTRACK -L expect
+ ;;
+ flush-expect)
+ $CONNTRACK -F expect
+ ;;
+ create-expect)
+ # requires modprobe ip_conntrack_ftp
+ $CONNTRACK -I expect --orig-src $SRC --orig-dst $DST \
+ --tuple-src 4.4.4.4 --tuple-dst 5.5.5.5 \
+ --mask-src 255.255.255.0 --mask-dst 255.255.255.255 \
+ -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
+ -t 200 --tuple-port-src 10 --tuple-port-dst 300 \
+ --mask-port-src 10 --mask-port-dst 300
+ ;;
+ get-expect)
+ $CONNTRACK -G expect --orig-src 4.4.4.4 --orig-dst 5.5.5.5 \
+ --p tcp --orig-port-src 0 --orig-port-dst 0 \
+ --mask-port-src 10 --mask-port-dst 11
+ ;;
+ delete-expect)
+ $CONNTRACK -D expect --orig-src 4.4.4.4 \
+ --orig-dst 5.5.5.5 -p tcp --orig-port-src 0 \
+ --orig-port-dst 0 --mask-port-src 10 --mask-port-dst 11
+ ;;
+ *)
+ echo "Usage: $0 [dump"
+ echo " |new"
+ echo " |new-simple"
+ echo " |new-nat"
+ echo " |get"
+ echo " |change"
+ echo " |delete"
+ echo " |output"
+ echo " |flush"
+ echo " |dump-expect"
+ echo " |flush-expect"
+ echo " |create-expect"
+ echo " |get-expect"
+ echo " |delete-expect]"
+ ;;
+esac
Deleted: trunk/conntrack-tools/test.sh
===================================================================
--- trunk/conntrack-tools/test.sh 2007-04-17 01:03:51 UTC (rev 6798)
+++ trunk/conntrack-tools/test.sh 2007-04-17 01:13:54 UTC (rev 6799)
@@ -1,110 +0,0 @@
-CONNTRACK=conntrack
-
-SRC=1.1.1.1
-DST=2.2.2.2
-SPORT=2005
-DPORT=21
-
-case $1 in
- dump)
- echo "Dumping conntrack table"
- $CONNTRACK -L
- ;;
- flush)
- echo "Flushing conntrack table"
- $CONNTRACK -F
- ;;
- new)
- echo "creating a new conntrack"
- $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
- --reply-src $DST --reply-dst $SRC -p tcp \
- --orig-port-src $SPORT --orig-port-dst $DPORT \
- --reply-port-src $DPORT --reply-port-dst $SPORT \
- --state LISTEN -u SEEN_REPLY -t 50
- ;;
- new-simple)
- echo "creating a new conntrack (simplified)"
- $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
- -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
- --state LISTEN -u SEEN_REPLY -t 50
- ;;
- new-nat)
- echo "creating a new conntrack (NAT)"
- $CONNTRACK -I --orig-src $SRC --orig-dst $DST \
- -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
- --state LISTEN -u SEEN_REPLY,SRC_NAT -t 50 -a 8.8.8.8
- ;;
- get)
- echo "getting a conntrack"
- $CONNTRACK -G --orig-src $SRC --orig-dst $DST \
- -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
- --reply-port-src $DPORT --reply-port-dst $SPORT
- ;;
- change)
- echo "change a conntrack"
- $CONNTRACK -U --orig-src $SRC --orig-dst $DST \
- --reply-src $DST --reply-dst $SRC -p tcp \
- --orig-port-src $SPORT --orig-port-dst $DPORT \
- --reply-port-src $DPORT --reply-port-dst $SPORT \
- --state TIME_WAIT -u ASSURED,SEEN_REPLY -t 500
- ;;
- delete)
- $CONNTRACK -D --orig-src $SRC --orig-dst $DST \
- -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT
- ;;
- output)
- proc=$(cat /proc/net/ip_conntrack | wc -l)
- netl=$($CONNTRACK -L | wc -l)
- count=$(cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count)
- if [ $proc -ne $netl ]; then
- echo "proc is $proc and netl is $netl and count is $count"
- else
- if [ $proc -ne $count ]; then
- echo "proc is $proc and netl is $netl and count is $count"
- else
- echo "now $proc"
- fi
- fi
- ;;
- dump-expect)
- $CONNTRACK -L expect
- ;;
- flush-expect)
- $CONNTRACK -F expect
- ;;
- create-expect)
- # requires modprobe ip_conntrack_ftp
- $CONNTRACK -I expect --orig-src $SRC --orig-dst $DST \
- --tuple-src 4.4.4.4 --tuple-dst 5.5.5.5 \
- --mask-src 255.255.255.0 --mask-dst 255.255.255.255 \
- -p tcp --orig-port-src $SPORT --orig-port-dst $DPORT \
- -t 200 --tuple-port-src 10 --tuple-port-dst 300 \
- --mask-port-src 10 --mask-port-dst 300
- ;;
- get-expect)
- $CONNTRACK -G expect --orig-src 4.4.4.4 --orig-dst 5.5.5.5 \
- --p tcp --orig-port-src 0 --orig-port-dst 0 \
- --mask-port-src 10 --mask-port-dst 11
- ;;
- delete-expect)
- $CONNTRACK -D expect --orig-src 4.4.4.4 \
- --orig-dst 5.5.5.5 -p tcp --orig-port-src 0 \
- --orig-port-dst 0 --mask-port-src 10 --mask-port-dst 11
- ;;
- *)
- echo "Usage: $0 [dump"
- echo " |new"
- echo " |new-simple"
- echo " |new-nat"
- echo " |get"
- echo " |change"
- echo " |delete"
- echo " |output"
- echo " |flush"
- echo " |dump-expect"
- echo " |flush-expect"
- echo " |create-expect"
- echo " |get-expect"
- echo " |delete-expect]"
- ;;
-esac
More information about the netfilter-cvslog
mailing list