[NEW TARGET] target for modifying conntrack timeout value

Richard richard at o-matrix.org
Sun Jan 2 20:42:13 CET 2005


> > >
> > ok, I changed the code to this,
> > +	/* To refresh the expire timer value of a conntrack,
> > +	 * linux 2.6.9 kernel starts using ip_ct_refresh_acct(),
> > +	 * while older ones use ip_ct_refresh()
> > +	 */
> > +#ifdef ip_ct_refresh_acct
> > +	ip_ct_refresh_acct(ct, 0, NULL, new_expires);
> > +#else
> > +	ip_ct_refresh(ct, new_expires);
> > +#endif
> 
> Did you actually verify this works?
> 
> I don't see ip_ct_refresh_acct defined as a macro, only a forward decl.
> Forward decls don't count because ifdef operates on the preprocessor
level.
> You'll need another way to test (netfilter version, kernel version, etc.)
> 
I tried the following and it worked on 2.4.25, so I assume that the above
code works. And both versions compile without a problem.

#ifdef ip_ct_refresh
        ip_ct_refresh(ct, new_expires);
#else
        ip_ct_refresh_acct(ct, 0, NULL, new_expires);
#endif

Richard





More information about the netfilter-devel mailing list