diff options
| author | Florian Westphal <fw@strlen.de> | 2020-12-10 14:43:23 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-12-12 11:44:42 +0100 |
| commit | 86d21fc7474563cb5d054ff001d8ad7b69206717 (patch) | |
| tree | 764484f42898dea88f33e2063f6dd23b383deaa4 /net/netfilter/nft_dynset.c | |
| parent | 04295878beac396dae47ba93141cae0d9386e7ef (diff) | |
netfilter: ctnetlink: add timeout and protoinfo to destroy events
DESTROY events do not include the remaining timeout.
Add the timeout if the entry was removed explicitly. This can happen
when a conntrack gets deleted prematurely, e.g. due to a tcp reset,
module removal, netdev notifier (nat/masquerade device went down),
ctnetlink and so on.
Add the protocol state too for the destroy message to check for abnormal
state on connection termination.
Joint work with Pablo.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_dynset.c')
0 files changed, 0 insertions, 0 deletions