conntrack: Connection close event?

[Eric Leblond]

Hi,

Le mercredi 22 août 2007 à 20:01 +0200, Cedrix a écrit :
> Hi,
> 
> this is my first request. I checked google, nf-faqs and conntrack-homepage 
> without sufficient results for this problem:
> 
> In Short: I need to know when a connection (TCP or UDP) gets closed. I want 
> to use conntrack, because I can track UDP more easily.

The result of "conntrack -E -e DESTROY" is what you want. You can thus
look at the code to build what you want.

You can also look at NuFW (http://www.nufw.org/) which handle conntrack
destroy event. The concerned source code is browsable here:
http://software.inl.fr/trac/trac.cgi/browser/mirror/edenwall/nufw/trunk/nufw/src/nufw/conntrack.c

Hope this help,
--
Eric Leblond