New libnetfilter_conntrack API: why two values of layer 3/4?

Victor Stinner victor.stinner at inl.fr
Fri Dec 29 18:06:57 CET 2006


Hi,

In new libnetfilter_conntrack API, I see:

ATTR_ORIG_L3PROTO = 15
ATTR_REPL_L3PROTO = 16
ATTR_ORIG_L4PROTO = 17
ATTR_REPL_L4PROTO = 18

Is it possible to change layer 3 protocol with NAT? or layer4? If not, one 
constant will be enough ;-)

And for counters, are they 32 or 64 bits?

ATTR_ORIG_COUNTER_PACKETS = 26
ATTR_REPL_COUNTER_PACKETS = 27
ATTR_ORIG_COUNTER_BYTES = 28
ATTR_REPL_COUNTER_BYTES = 29

32 bits (2 GB) sounds small with a gigabyte interface or long uptime (old 
connection).

Haypo



More information about the netfilter-devel mailing list