]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ctnetlink: support kernel-space dump filtering by ctmark
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 24 Feb 2012 14:41:50 +0000 (14:41 +0000)
committerDavid S. Miller <davem@davemloft.net>
Sun, 26 Feb 2012 19:12:33 +0000 (14:12 -0500)
commita4d31f5cc0e25cc0e8baa93daa1e0ffa88d1d4a4
treee76d440e2966f778d7e0f911b7b0a53c93196ba3
parentfde87ec52bda382d37fb7f9da50aecd2cc6e19ff
netfilter: ctnetlink: support kernel-space dump filtering by ctmark

This patch adds CTA_MARK_MASK which, together with CTA_MARK, allows
you to selectively send conntrack entries to user-space by
returning those that match mark & mask.

With this, we can save cycles in the building and the parsing of
the entries that may be later on filtered out in user-space by using
the ctmark & mask.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/netfilter/nfnetlink_conntrack.h
net/netfilter/nf_conntrack_netlink.c