| commit | 97aae0df1de4d7dd80905fb067e28b032a132995 | [log] [tgz] |
|---|---|---|
| author | Liping Zhang <zlpnobody@gmail.com> | Sat Apr 01 20:31:32 2017 +0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Sat Apr 08 23:52:15 2017 +0200 |
| tree | 4f2cd924d078bd98a45535f33634874a444c21ec | |
| parent | 2638fd0f92d4397884fd991d8f4925cb3f081901 [diff] |
netfilter: ctnetlink: using bit to represent the ct event Otherwise, creating a new conntrack via nfnetlink: # conntrack -I -p udp -s 1.1.1.1 -d 2.2.2.2 -t 10 --sport 10 --dport 20 will emit the wrong ct events(where UPDATE should be NEW): # conntrack -E [UPDATE] udp 17 10 src=1.1.1.1 dst=2.2.2.2 sport=10 dport=20 [UNREPLIED] src=2.2.2.2 dst=1.1.1.1 sport=20 dport=10 mark=0 Signed-off-by: Liping Zhang <zlpnobody@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>