Notification of new/destroyed connection
Kerry Ó Cuanacháin
kerry.ocuanachain at googlemail.com
Thu Jul 12 10:00:37 CEST 2007
Following on from the discussion on CT lifecycle events, if one takes
a scenario whereby a newly created connection is subsequently
NF_DROP'd by a filter rule, is it exclusively a timer/timeout which
results in that same connection being destroyed?
Is there any event driven mechanism to inform conntrack that the
packet has been filtered?
Similarly, is there an way to identify the reason for IPCT_DESTROY
from the event raised?
More information about the netfilter-devel