| # SPDX-License-Identifier: ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) | |
| --- | |
| name: conntrack | |
| protocol: netlink-raw | |
| protonum: 12 | |
| doc: >- | |
| Netfilter connection tracking subsystem over nfnetlink | |
| definitions: | |
| - | |
| name: nfgenmsg | |
| type: struct | |
| members: | |
| - | |
| name: nfgen-family | |
| type: u8 | |
| - | |
| name: version | |
| type: u8 | |
| - | |
| name: res-id | |
| byte-order: big-endian | |
| type: u16 | |
| - | |
| name: nf-ct-tcp-flags-mask | |
| type: struct | |
| members: | |
| - | |
| name: flags | |
| type: u8 | |
| enum: nf-ct-tcp-flags | |
| enum-as-flags: true | |
| - | |
| name: mask | |
| type: u8 | |
| enum: nf-ct-tcp-flags | |
| enum-as-flags: true | |
| - | |
| name: nf-ct-tcp-flags | |
| type: flags | |
| entries: | |
| - window-scale | |
| - sack-perm | |
| - close-init | |
| - be-liberal | |
| - unacked | |
| - maxack | |
| - challenge-ack | |
| - simultaneous-open | |
| - | |
| name: nf-ct-tcp-state | |
| type: enum | |
| entries: | |
| - none | |
| - syn-sent | |
| - syn-recv | |
| - established | |
| - fin-wait | |
| - close-wait | |
| - last-ack | |
| - time-wait | |
| - close | |
| - syn-sent2 | |
| - max | |
| - ignore | |
| - retrans | |
| - unack | |
| - timeout-max | |
| - | |
| name: nf-ct-sctp-state | |
| type: enum | |
| entries: | |
| - none | |
| - cloned | |
| - cookie-wait | |
| - cookie-echoed | |
| - established | |
| - shutdown-sent | |
| - shutdown-received | |
| - shutdown-ack-sent | |
| - shutdown-heartbeat-sent | |
| - | |
| name: nf-ct-status | |
| type: flags | |
| entries: | |
| - expected | |
| - seen-reply | |
| - assured | |
| - confirmed | |
| - src-nat | |
| - dst-nat | |
| - seq-adj | |
| - src-nat-done | |
| - dst-nat-done | |
| - dying | |
| - fixed-timeout | |
| - template | |
| - nat-clash | |
| - helper | |
| - offload | |
| - hw-offload | |
| attribute-sets: | |
| - | |
| name: counter-attrs | |
| attributes: | |
| - | |
| name: packets | |
| type: u64 | |
| byte-order: big-endian | |
| - | |
| name: bytes | |
| type: u64 | |
| byte-order: big-endian | |
| - | |
| name: packets-old | |
| type: u32 | |
| - | |
| name: bytes-old | |
| type: u32 | |
| - | |
| name: pad | |
| type: pad | |
| - | |
| name: tuple-proto-attrs | |
| attributes: | |
| - | |
| name: proto-num | |
| type: u8 | |
| doc: l4 protocol number | |
| - | |
| name: proto-src-port | |
| type: u16 | |
| byte-order: big-endian | |
| doc: l4 source port | |
| - | |
| name: proto-dst-port | |
| type: u16 | |
| byte-order: big-endian | |
| doc: l4 source port | |
| - | |
| name: proto-icmp-id | |
| type: u16 | |
| byte-order: big-endian | |
| doc: l4 icmp id | |
| - | |
| name: proto-icmp-type | |
| type: u8 | |
| - | |
| name: proto-icmp-code | |
| type: u8 | |
| - | |
| name: proto-icmpv6-id | |
| type: u16 | |
| byte-order: big-endian | |
| doc: l4 icmp id | |
| - | |
| name: proto-icmpv6-type | |
| type: u8 | |
| - | |
| name: proto-icmpv6-code | |
| type: u8 | |
| - | |
| name: tuple-ip-attrs | |
| attributes: | |
| - | |
| name: ip-v4-src | |
| type: u32 | |
| byte-order: big-endian | |
| display-hint: ipv4 | |
| doc: ipv4 source address | |
| - | |
| name: ip-v4-dst | |
| type: u32 | |
| byte-order: big-endian | |
| display-hint: ipv4 | |
| doc: ipv4 destination address | |
| - | |
| name: ip-v6-src | |
| type: binary | |
| checks: | |
| min-len: 16 | |
| byte-order: big-endian | |
| display-hint: ipv6 | |
| doc: ipv6 source address | |
| - | |
| name: ip-v6-dst | |
| type: binary | |
| checks: | |
| min-len: 16 | |
| byte-order: big-endian | |
| display-hint: ipv6 | |
| doc: ipv6 destination address | |
| - | |
| name: tuple-attrs | |
| attributes: | |
| - | |
| name: tuple-ip | |
| type: nest | |
| nested-attributes: tuple-ip-attrs | |
| doc: conntrack l3 information | |
| - | |
| name: tuple-proto | |
| type: nest | |
| nested-attributes: tuple-proto-attrs | |
| doc: conntrack l4 information | |
| - | |
| name: tuple-zone | |
| type: u16 | |
| byte-order: big-endian | |
| doc: conntrack zone id | |
| - | |
| name: protoinfo-tcp-attrs | |
| attributes: | |
| - | |
| name: tcp-state | |
| type: u8 | |
| enum: nf-ct-tcp-state | |
| doc: tcp connection state | |
| - | |
| name: tcp-wscale-original | |
| type: u8 | |
| doc: window scaling factor in original direction | |
| - | |
| name: tcp-wscale-reply | |
| type: u8 | |
| doc: window scaling factor in reply direction | |
| - | |
| name: tcp-flags-original | |
| type: binary | |
| struct: nf-ct-tcp-flags-mask | |
| - | |
| name: tcp-flags-reply | |
| type: binary | |
| struct: nf-ct-tcp-flags-mask | |
| - | |
| name: protoinfo-dccp-attrs | |
| attributes: | |
| - | |
| name: dccp-state | |
| type: u8 | |
| doc: dccp connection state | |
| - | |
| name: dccp-role | |
| type: u8 | |
| - | |
| name: dccp-handshake-seq | |
| type: u64 | |
| byte-order: big-endian | |
| - | |
| name: dccp-pad | |
| type: pad | |
| - | |
| name: protoinfo-sctp-attrs | |
| attributes: | |
| - | |
| name: sctp-state | |
| type: u8 | |
| doc: sctp connection state | |
| enum: nf-ct-sctp-state | |
| - | |
| name: vtag-original | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: vtag-reply | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: protoinfo-attrs | |
| attributes: | |
| - | |
| name: protoinfo-tcp | |
| type: nest | |
| nested-attributes: protoinfo-tcp-attrs | |
| doc: conntrack tcp state information | |
| - | |
| name: protoinfo-dccp | |
| type: nest | |
| nested-attributes: protoinfo-dccp-attrs | |
| doc: conntrack dccp state information | |
| - | |
| name: protoinfo-sctp | |
| type: nest | |
| nested-attributes: protoinfo-sctp-attrs | |
| doc: conntrack sctp state information | |
| - | |
| name: help-attrs | |
| attributes: | |
| - | |
| name: help-name | |
| type: string | |
| doc: helper name | |
| - | |
| name: nat-proto-attrs | |
| attributes: | |
| - | |
| name: nat-port-min | |
| type: u16 | |
| byte-order: big-endian | |
| - | |
| name: nat-port-max | |
| type: u16 | |
| byte-order: big-endian | |
| - | |
| name: nat-attrs | |
| attributes: | |
| - | |
| name: nat-v4-minip | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: nat-v4-maxip | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: nat-v6-minip | |
| type: binary | |
| - | |
| name: nat-v6-maxip | |
| type: binary | |
| - | |
| name: nat-proto | |
| type: nest | |
| nested-attributes: nat-proto-attrs | |
| - | |
| name: seqadj-attrs | |
| attributes: | |
| - | |
| name: correction-pos | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: offset-before | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: offset-after | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: secctx-attrs | |
| attributes: | |
| - | |
| name: secctx-name | |
| type: string | |
| - | |
| name: synproxy-attrs | |
| attributes: | |
| - | |
| name: isn | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: its | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: tsoff | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: filter-attrs | |
| attributes: | |
| - | |
| name: orig-flags | |
| type: u32 | |
| doc: bitmask of tuple fields to filter on, original direction | |
| - | |
| name: reply-flags | |
| type: u32 | |
| doc: bitmask of tuple fields to filter on, reply direction | |
| - | |
| name: conntrack-attrs | |
| attributes: | |
| - | |
| name: tuple-orig | |
| type: nest | |
| nested-attributes: tuple-attrs | |
| doc: conntrack l3+l4 protocol information, original direction | |
| - | |
| name: tuple-reply | |
| type: nest | |
| nested-attributes: tuple-attrs | |
| doc: conntrack l3+l4 protocol information, reply direction | |
| - | |
| name: status | |
| type: u32 | |
| byte-order: big-endian | |
| enum: nf-ct-status | |
| enum-as-flags: true | |
| doc: conntrack flag bits | |
| - | |
| name: protoinfo | |
| type: nest | |
| nested-attributes: protoinfo-attrs | |
| - | |
| name: help | |
| type: nest | |
| nested-attributes: help-attrs | |
| - | |
| name: nat-src | |
| type: nest | |
| nested-attributes: nat-attrs | |
| - | |
| name: timeout | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: mark | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: counters-orig | |
| type: nest | |
| nested-attributes: counter-attrs | |
| - | |
| name: counters-reply | |
| type: nest | |
| nested-attributes: counter-attrs | |
| - | |
| name: use | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: id | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: nat-dst | |
| type: nest | |
| nested-attributes: nat-attrs | |
| - | |
| name: tuple-master | |
| type: nest | |
| nested-attributes: tuple-attrs | |
| - | |
| name: seq-adj-orig | |
| type: nest | |
| nested-attributes: seqadj-attrs | |
| - | |
| name: seq-adj-reply | |
| type: nest | |
| nested-attributes: seqadj-attrs | |
| - | |
| name: secmark | |
| type: binary | |
| doc: obsolete | |
| - | |
| name: zone | |
| type: u16 | |
| byte-order: big-endian | |
| doc: conntrack zone id | |
| - | |
| name: secctx | |
| type: nest | |
| nested-attributes: secctx-attrs | |
| - | |
| name: timestamp | |
| type: u64 | |
| byte-order: big-endian | |
| - | |
| name: mark-mask | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: labels | |
| type: binary | |
| - | |
| name: labels-mask | |
| type: binary | |
| - | |
| name: synproxy | |
| type: nest | |
| nested-attributes: synproxy-attrs | |
| - | |
| name: filter | |
| type: nest | |
| nested-attributes: filter-attrs | |
| - | |
| name: status-mask | |
| type: u32 | |
| byte-order: big-endian | |
| enum: nf-ct-status | |
| enum-as-flags: true | |
| doc: conntrack flag bits to change | |
| - | |
| name: timestamp-event | |
| type: u64 | |
| byte-order: big-endian | |
| - | |
| name: conntrack-stats-attrs | |
| attributes: | |
| - | |
| name: searched | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: found | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: new | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: invalid | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: ignore | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: delete | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: delete-list | |
| type: u32 | |
| byte-order: big-endian | |
| doc: obsolete | |
| - | |
| name: insert | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: insert-failed | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: drop | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: early-drop | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: error | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: search-restart | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: clash-resolve | |
| type: u32 | |
| byte-order: big-endian | |
| - | |
| name: chain-toolong | |
| type: u32 | |
| byte-order: big-endian | |
| operations: | |
| enum-model: directional | |
| list: | |
| - | |
| name: get | |
| doc: get / dump entries | |
| attribute-set: conntrack-attrs | |
| fixed-header: nfgenmsg | |
| do: | |
| request: | |
| value: 0x101 | |
| attributes: | |
| - tuple-orig | |
| - tuple-reply | |
| - zone | |
| reply: | |
| value: 0x100 | |
| attributes: | |
| - tuple-orig | |
| - tuple-reply | |
| - status | |
| - protoinfo | |
| - help | |
| - nat-src | |
| - nat-dst | |
| - timeout | |
| - mark | |
| - counters-orig | |
| - counters-reply | |
| - use | |
| - id | |
| - nat-dst | |
| - tuple-master | |
| - seq-adj-orig | |
| - seq-adj-reply | |
| - zone | |
| - secctx | |
| - labels | |
| - synproxy | |
| dump: | |
| request: | |
| value: 0x101 | |
| attributes: | |
| - tuple-orig | |
| - tuple-reply | |
| - status | |
| - mark | |
| - zone | |
| - mark-mask | |
| - filter | |
| - status-mask | |
| reply: | |
| value: 0x100 | |
| attributes: | |
| - tuple-orig | |
| - tuple-reply | |
| - status | |
| - protoinfo | |
| - help | |
| - nat-src | |
| - nat-dst | |
| - timeout | |
| - mark | |
| - counters-orig | |
| - counters-reply | |
| - use | |
| - id | |
| - nat-dst | |
| - tuple-master | |
| - seq-adj-orig | |
| - seq-adj-reply | |
| - zone | |
| - secctx | |
| - labels | |
| - synproxy | |
| - | |
| name: get-stats | |
| doc: dump pcpu conntrack stats | |
| attribute-set: conntrack-stats-attrs | |
| fixed-header: nfgenmsg | |
| dump: | |
| request: | |
| value: 0x104 | |
| reply: | |
| value: 0x104 | |
| attributes: | |
| - searched | |
| - found | |
| - insert | |
| - insert-failed | |
| - drop | |
| - early-drop | |
| - error | |
| - search-restart | |
| - clash-resolve | |
| - chain-toolong |